hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-05 05:35:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

Add files via upload

Browse Source
This commit is contained in:
ihsinme
2022-02-25 11:20:23 +03:00
committed by GitHub
parent 74f8145970
commit ffdca61f9a
3 changed files with 28 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
cpp/ql/test/experimental/query-tests/Security/CWE/CWE-190/DangerousUseOfTransformationAfterOperation/DangerousUseOfTransformationAfterOperation.expected Normal file
View File

@@ -0,0 +1,4 @@
| test.cpp:9:8:9:12 | ... * ... | possible signed overflow followed by offset of the pointer out of bounds |
| test.cpp:13:24:13:28 | ... * ... | this transformation is applied after multiplication |
| test.cpp:16:28:16:32 | ... * ... | this transformation is applied after multiplication |
| test.cpp:19:22:19:26 | ... * ... | this transformation is applied after multiplication |

1
cpp/ql/test/experimental/query-tests/Security/CWE/CWE-190/DangerousUseOfTransformationAfterOperation/DangerousUseOfTransformationAfterOperation.qlref Normal file
View File

@@ -0,0 +1 @@
experimental/Security/CWE/CWE-190/DangerousUseOfTransformationAfterOperation.ql

23
cpp/ql/test/experimental/query-tests/Security/CWE/CWE-190/DangerousUseOfTransformationAfterOperation/test.cpp Normal file
View File

@@ -0,0 +1,23 @@
void testCall (unsigned long);
void functionWork() {
unsigned long aL;
char aA[10],*aP;
unsigned char aUC;
int aI;
unsigned int aUI;
aI = (aUI*8)/10; // GOOD
aI = aUI*8; // BAD
aP = aA+aI;
aI = (int)aUI*8; // GOOD
aL = (unsigned long)(aI*aI); // BAD
aL = ((unsigned long)aI*aI); // GOOD
testCall((unsigned long)(aI*aI)); // BAD
testCall(((unsigned long)aI*aI)); // GOOD
if((unsigned long)(aI*aI) > aL) // BAD
return;
if(((unsigned long)aI*aI) > aL) // GOOD
return;
}