hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-20 18:56:32 +01:00
Code Issues Packages Projects Releases Wiki Activity

CPP: Extend coverage.

Browse Source
This commit is contained in:
Geoffrey White
2019-04-04 16:31:02 +01:00
parent a1e503f428
commit a437e6c103
3 changed files with 14 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
cpp/ql/src/Security/CWE/CWE-676/PotentiallyDangerousFunction.ql
View File

@@ -12,9 +12,14 @@
import cpp import cpp
predicate potentiallyDangerousFunction(Function f, string message) { predicate potentiallyDangerousFunction(Function f, string message) {
( exists(string name | name = f.getQualifiedName() |
f.getQualifiedName() = "gmtime" and (
message = "Call to gmtime is potentially dangerous" name = "gmtime" or
name = "localtime" or
name = "ctime" or
name = "asctime"
) and
message = "Call to " + name + " is potentially dangerous"
) or ( ) or (
f.getQualifiedName() = "gets" and f.getQualifiedName() = "gets" and
message = "gets does not guard against buffer overflow" message = "gets does not guard against buffer overflow"

3
cpp/ql/test/query-tests/Security/CWE/CWE-676/semmle/PotentiallyDangerousFunction/PotentiallyDangerousFunction.expected
View File

@@ -1,3 +1,6 @@
| test.c:31:22:31:27 | call to gmtime | Call to gmtime is potentially dangerous | | test.c:31:22:31:27 | call to gmtime | Call to gmtime is potentially dangerous |
| test.c:42:2:42:5 | call to gets | gets does not guard against buffer overflow | | test.c:42:2:42:5 | call to gets | gets does not guard against buffer overflow |
| test.c:43:6:43:9 | call to gets | gets does not guard against buffer overflow | | test.c:43:6:43:9 | call to gets | gets does not guard against buffer overflow |
| test.c:48:19:48:27 | call to localtime | Call to localtime is potentially dangerous |
| test.c:49:22:49:26 | call to ctime | Call to ctime is potentially dangerous |
| test.c:50:23:50:29 | call to asctime | Call to asctime is potentially dangerous |

6
cpp/ql/test/query-tests/Security/CWE/CWE-676/semmle/PotentiallyDangerousFunction/test.c
View File

@@ -45,7 +45,7 @@ void testGets() {
void testTime() void testTime()
{ {
struct tm *now = localtime(time(NULL)); // BAD: localtime uses shared state [NOT DETECTED] struct tm *now = localtime(time(NULL)); // BAD: localtime uses shared state
char *time_string = ctime(time(NULL)); // BAD: localtime uses shared state [NOT DETECTED] char *time_string = ctime(time(NULL)); // BAD: localtime uses shared state
char *time_string2 = asctime(now); // BAD: localtime uses shared state [NOT DETECTED] char *time_string2 = asctime(now); // BAD: localtime uses shared state
} }