10 Pull requests merged by 7 people

• C++: Add more MaD summaries

  #19753 merged Jun 13, 2025

• C++: Add support to __leave

  #19734 merged Jun 13, 2025

• Rust: Disambiguate some method calls based on argument types

  #19749 merged Jun 13, 2025

• Rust: Temporarily disable type information to flow into operands

  #19755 merged Jun 13, 2025

• Rust: Type inference for macro expressions

  #19751 merged Jun 13, 2025

• Java: Update the CFG for assert statements to make them proper guards.

  #19733 merged Jun 13, 2025

• Python: Modernize iter not returning self query

  #19554 merged Jun 13, 2025

• JS: Promote js/template-syntax-in-string-literal to the Code Quality suite.

  #19726 merged Jun 13, 2025

• Rust: Model String -> str implicit conversion in type inference

  #19737 merged Jun 13, 2025

• Rust: Use hasImplementation in path resolution

  #19745 merged Jun 13, 2025

16 Pull requests opened by 8 people

• Add CI workflow to check overlay annotations

  #19747 opened Jun 13, 2025

• Rust: regenerate models

  #19748 opened Jun 13, 2025

• JS: remove `encodeURI` from sanitizer list of request forgery

  #19750 opened Jun 13, 2025

• Rust: Type inference for `for` loops and array expressions

  #19754 opened Jun 13, 2025

• Rust: Type inference uses defaults for type parameters

  #19756 opened Jun 13, 2025

• Actions: mass-enable diff-informed queries phase 2 - `getASelected{Source,Sink}Location() { none() }`

  #19757 opened Jun 13, 2025

• C#: mass-enable diff-informed queries phase 2 - `getASelected{Source,Sink}Location() { none() }`

  #19758 opened Jun 13, 2025

• C++: mass-enable diff-informed queries phase 2 - `getASelected{Source,Sink}Location() { none() }`

  #19759 opened Jun 13, 2025

• Go: mass-enable diff-informed queries phase 2 - `getASelected{Source,Sink}Location() { none() }`

  #19760 opened Jun 13, 2025

• Swift: mass-enable diff-informed queries phase 2 - `getASelected{Source,Sink}Location() { none() }`

  #19761 opened Jun 13, 2025

• Improve TypeORM model

  #19762 opened Jun 13, 2025

• Go: Update tags for high precision quality queries

  #19763 opened Jun 13, 2025

• CI: fix python version

  #19765 opened Jun 13, 2025

• Add lodash GroupBy as taint step

  #19768 opened Jun 13, 2025

• Improve NestJS sources and dependency injection

  #19769 opened Jun 14, 2025

• Improve data flow in the `async` package

  #19770 opened Jun 15, 2025

3 Issues closed by 3 people

• Use After Free: Tracking alias

  #18791 closed Jun 13, 2025

• False positive

  #19766 closed Jun 13, 2025

• C/C++: `Gotostmt` also matches `__leave` keyword

  #19666 closed Jun 13, 2025

3 Issues opened by 3 people

• Support for `.slnx` Solution Format Not Yet Implemented

  #19767 opened Jun 13, 2025

• Add support for Oracle Call Interface (OCI) to C/C++ coverage

  #19764 opened Jun 13, 2025

• Taint step for the Gradio framework

  #19752 opened Jun 13, 2025

19 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• Quantum: Add OpenSSL signature models

  #19705 commented on Jun 15, 2025 • 21 new comments

• C++: Use SEH exception edges in IR and generate SEH exception edges for calls in `__try` blocks

  #19746 commented on Jun 13, 2025 • 2 new comments

• Rust: New query rust/access-after-lifetime-ended

  #19702 commented on Jun 13, 2025 • 2 new comments

• Python: Modernize the init-calls-subclass query

  #19709 commented on Jun 13, 2025 • 1 new comment

• MaD generator: use `--threads=0` and 2GB per thread for `--ram` by default

  #19744 commented on Jun 13, 2025 • 0 new comments

• Enhance `cpp/overflow-calculated` - detect out-of-bounds write caused by passing the buffer size in bytes (using sizeof) instead of the number of elements to wcsftime, allowing the function to overrun the allocated buffer.

  #19722 commented on Jun 13, 2025 • 0 new comments

• Ruby: generate overlay discard predicates

  #19719 commented on Jun 13, 2025 • 0 new comments

• Fixes in cpp/global-use-before-init

  #19676 commented on Jun 13, 2025 • 0 new comments

• C++: mass enable diff-informed data flow

  #19663 commented on Jun 13, 2025 • 0 new comments

• Swift: mass enable diff-informed data flow

  #19662 commented on Jun 13, 2025 • 0 new comments

• C#: mass enable diff-informed data flow

  #19661 commented on Jun 13, 2025 • 0 new comments

• Go: mass enable diff-informed data flow

  #19660 commented on Jun 13, 2025 • 0 new comments

• Actions: mass enable diff-informed data flow

  #19659 commented on Jun 13, 2025 • 0 new comments

• Rust: Fix type inference for library parameters

  #19658 commented on Jun 15, 2025 • 0 new comments

• Python: Improve performance of FileNotClosed query by using basic block reachability

  #19641 commented on Jun 13, 2025 • 0 new comments

• JS: Deprecate type extraction

  #19640 commented on Jun 13, 2025 • 0 new comments

• Rust: upgrade `rust-analyzer` to 0.0.287

  #19524 commented on Jun 13, 2025 • 0 new comments

• Rust: update docs

  #19280 commented on Jun 13, 2025 • 0 new comments

• Rust: Make `SummarizedCallable` extend `Function` instead of `string`

  #19268 commented on Jun 15, 2025 • 0 new comments