Conversation
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
Contributor
There was a problem hiding this comment.
Copilot review overview
🟡 Changes recommended
External Go gotos targeting an inner stacked label still fail to connect to their destination.
Review effort: Balanced
Findings: 1
Open (1)
What changed in this PR
Generalizes shared CFG abrupt completions to carry resolved jump targets, enabling precise Go and C# goto handling.
Changes:
- Adds resolved
JumpTargetsupport to the shared CFG. - Implements target resolution for Go and C#.
- Adds Go regression coverage and updates other language integrations.
| File | Description |
|---|---|
shared/controlflow/codeql/controlflow/ControlFlowGraph.qll |
Adds targeted abrupt-completion propagation. |
go/ql/lib/semmle/go/controlflow/ControlFlowGraphImpl.qll |
Resolves Go goto destinations. |
go/ql/test/library-tests/semmle/go/controlflow/GotoTarget/GotoTarget.ql |
Queries goto target reachability. |
go/ql/test/library-tests/semmle/go/controlflow/GotoTarget/GotoTarget.expected |
Records expected test results. |
go/ql/test/library-tests/semmle/go/controlflow/GotoTarget/gotos.go |
Supplies stacked-label test cases. |
csharp/ql/lib/semmle/code/csharp/controlflow/ControlFlowGraph.qll |
Resolves label, case, and default gotos. |
java/ql/lib/semmle/code/java/ControlFlowGraph.qll |
Implements the extended shared interface. |
python/ql/lib/semmle/python/controlflow/internal/AstNodeImpl.qll |
Implements the extended shared interface. |
ruby/ql/lib/codeql/ruby/controlflow/ControlFlowGraph.qll |
Implements the extended shared interface. |
unified/ql/lib/codeql/unified/internal/ControlFlowGraph.qll |
Implements the extended shared interface. |
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
owen-mc
force-pushed
the
shared/cfg/goto-targets
branch
2 times, most recently
from
September 28, 2026 23:43
ba548eb to
86ead25
Compare
owen-mc
force-pushed
the
shared/cfg/goto-targets
branch
from
September 29, 2026 08:42
86ead25 to
832228f
Compare
owen-mc
force-pushed
the
shared/cfg/goto-targets
branch
from
September 30, 2026 15:27
832228f to
22dea67
Compare
owen-mc
changed the title
| l = n.(Go::GotoStmt).getLabel() | ||
| } | ||
|
|
||
| private predicate hasLabelOrEnclosingLabel(Ast::AstNode n, Label l) { |
owen-mc
changed the title
owen-mc
force-pushed
the
shared/cfg/goto-targets
branch
from
September 30, 2026 15:56
8e98770 to
e7d3ae3
Compare
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Model labeled statements in the shared CFG AST signature and handle label propagation centrally:
breakandcontinue;LabeledStmtnodes;The Go adapter now exposes direct labels only. Java uses the same shared handling for labeled breaks and continues. Other shared-CFG adapters implement the new AST signature.
Tests
The Go test checks immediate CFG successors without pre-filtering targets by label name. It covers stacked sibling labels, nested sibling labels, self-loops, and jumps to enclosing stacked labels. Go consistency queries are also enabled for the test.