Repository navigation
Releases: peter-villadsen/codeql-ada
Releases · peter-villadsen/codeql-ada
Release list
v0.3.0
Full Changelog: v0.2.0...v0.3.0
v0.2.0
The first release meant for people other than its author.
Rebuild your databases: a database built with 0.1.0 cannot be read by 0.2.0.
What changes in your results:
- Far fewer false positives. On the five-project test corpus, results fell from 11,520 to about 2,200, nearly all of the difference false positives (precision check).
- New query
ada/command-line-injection: command-line input reaching the command run byGNAT.OS_Lib.Spawn,GNAT.Expector Csystem/popen/exec*, across subprograms. - Messages name the code (
Free_All,... = ...) instead of AST classes.
For query writers: Java-style classes (Subprogram, Parameter, Call, Type, Variable, Package), data flow and taint tracking, and tested examples in docs/query-writing.md.
Full details: CHANGELOG.md. Linux x86_64 and WSL only.
Full Changelog: v0.1.0...v0.2.0
v0.1.0
Full Changelog: https://github.com/peter-villadsen/codeql-ada/commits/v0.1.0