Skip to content

Conversation

michaelnebel
Copy link
Contributor

@michaelnebel michaelnebel commented Sep 3, 2025

Fix some Ql4Ql violations based on the following checks

  • ql/field-only-used-in-charpred
  • ql/could-be-cast
  • ql/counting-to-zero
  • ql/dataflow-module-naming-convention
  • ql/if-with-none
  • ql/missing-parameter-qldoc
  • ql/misspelling

@github-actions github-actions bot added the C++ label Sep 3, 2025
@michaelnebel michaelnebel changed the title C++: Fix some Ql4Ql violations. C++: Fix some Ql4Ql violations (crypto). Sep 3, 2025
@michaelnebel michaelnebel marked this pull request as ready for review September 3, 2025 06:16
@michaelnebel michaelnebel requested a review from a team as a code owner September 3, 2025 06:16
@Copilot Copilot AI review requested due to automatic review settings September 3, 2025 06:16
Copy link
Contributor

@Copilot Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR fixes various Ql4Ql violations across multiple CodeQL library files in the C++ experimental cryptography module. The changes address code quality issues including parameter documentation, spelling corrections, naming conventions, and module naming improvements.

Key changes include:

  • Fixed spelling errors in comments ("postive" → "positive", "deafult" → "default")
  • Corrected parameter name in documentation ("onExpr" → "inExpr")
  • Renamed module to follow naming conventions (added "Config" suffix)

Reviewed Changes

Copilot reviewed 5 out of 5 changed files in this pull request and generated no comments.

Show a summary per file
File Description
PassthroughFunction.qll Fixed parameter name in documentation comment
DataBuilders.qll Corrected spelling error in comment
CryptoFunction.qll Corrected spelling error in comment
OpenSSL.qll Renamed module to follow naming conventions
CryptoArtifact.qll Fixed spelling error in comment

@@ -652,14 +652,14 @@
* Trace from EVP_PKEY_CTX* at algorithm sink to keygen,
* users can then extrapolatae the matching algorithm from the alg sink to the keygen
*/
module EVP_PKEY_CTX_Ptr_Source_to_KeyGenOperationWithNoSize implements DataFlow::ConfigSig {
module EVP_PKEY_CTX_Ptr_Source_to_KeyGenOperationWithNoSizeConfig implements DataFlow::ConfigSig {

Check warning

Code scanning / CodeQL

Acronyms should be PascalCase/camelCase. Warning

Acronyms in EVP_PKEY_CTX_Ptr_Source_to_KeyGenOperationWithNoSizeConfig should be PascalCase/camelCase.
Copy link
Contributor

@jketema jketema left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I had a brief chat with @bdrodes, whose also working on this code. This is fine from their perspective.

@jketema jketema merged commit af82da5 into github:main Sep 4, 2025
14 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants