hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-28 18:25:24 +02:00
Code Issues Packages Projects Releases Wiki Activity

CPP: More test cases for ArithmeticWithExtremeValues.

Browse Source
This commit is contained in:
Geoffrey White
2019-06-26 15:38:23 +01:00
parent f8655b1664
commit a7fb2e1261
2 changed files with 42 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
cpp/ql/test/query-tests/Security/CWE/CWE-190/semmle/extreme/ArithmeticWithExtremeValues.expected
View File

@@ -6,3 +6,5 @@
| test.c:63:3:63:5 | sc8 | $@ flows to here and is used in arithmetic, potentially causing an underflow. | test.c:62:9:62:16 | - ... | Extreme value |
| test.c:75:3:75:5 | sc1 | $@ flows to here and is used in arithmetic, potentially causing an overflow. | test.c:74:9:74:16 | 127 | Extreme value |
| test.c:76:3:76:5 | sc1 | $@ flows to here and is used in arithmetic, potentially causing an overflow. | test.c:74:9:74:16 | 127 | Extreme value |
| test.c:114:9:114:9 | x | $@ flows to here and is used in arithmetic, potentially causing an overflow. | test.c:108:17:108:23 | 2147483647 | Extreme value |
| test.c:124:9:124:9 | x | $@ flows to here and is used in arithmetic, potentially causing an overflow. | test.c:118:17:118:23 | 2147483647 | Extreme value |

40
cpp/ql/test/query-tests/Security/CWE/CWE-190/semmle/extreme/test.c
View File

@@ -83,3 +83,43 @@ void test_negatives() {
sc5 = -1;
sc5 += CHAR_MIN; // BAD [NOT DETECTED]
}
void test_guards1(int cond) {
int x = cond ? INT_MAX : 0;
// ...
if (x > 128) return;
return x + 1; // GOOD
}
void test_guards2(int cond) {
int x = cond ? INT_MAX : 0;
// ...
if (x < 128) return;
return x + 1; // BAD [NOT DETECTED]
}
void test_guards3(int cond) {
int x = cond ? INT_MAX : 0;
// ...
if (x != 0) return;
return x + 1; // GOOD [FALSE POSITIVE]
}
void test_guards4(int cond) {
int x = cond ? INT_MAX : 0;
// ...
if (x == 0) return;
return x + 1; // BAD
}