Monkey-patch the standard library?

[vlkl-sap]

Hi,
Are there any options to replace/override a class definition within the CodeQL standard library? We would like to change/remove some sanitizer definitions.

Thanks!

[jketema]

This can't be easily done, and you'll need to either have a modified copy of the queries/libraries around, which is be slow because it most likely requires a lot of query recompilation, or create your own bundle. Some inspiration for the latter can be found here: https://github.com/advanced-security/codeql-bundle. You might also want to check whether the customizations discussed there could be of use to you. Note that we don't offer support on any of this. If you need support then you will need to contact our expert services team: https://github.com/services.

[vlkl-sap]

Thanks. We do build own custom bundle. I was wondering if we could add something to Customizations.qll to achieve the goal above. We would like to avoid recompiling everything, though.

[jketema]

If you use Customizations.qll, you'll still need to build your own bundle.

Whether what you want can be achieved with Customizations.qll will depend on the specific language and query your interested in. However, removing stuff is generally not accounted for.