Mathias Vorreiter Pedersen
|
6a7b2e4aa4
|
C++: Add failing test.
|
2023-10-16 10:47:45 +01:00 |
|
Jeroen Ketema
|
d56a9f0781
|
Merge pull request #14424 from jketema/rewrite-cgi-xss
C++: Rewrite `cpp/cgi-xss` to not use default taint tracking
|
2023-10-13 17:57:04 +02:00 |
|
Mathias Vorreiter Pedersen
|
496f190d70
|
C++: Accept test changes.
|
2023-10-10 16:45:31 +01:00 |
|
Jeroen Ketema
|
3b777c2764
|
C++: Rewrite cpp/cgi-xss to not use default taint tracking
Also add a test that demonstrates that we need to look at inidrect expressions
and not direct ones.
|
2023-10-10 11:56:39 +02:00 |
|
Jeroen Ketema
|
6ff8e06ace
|
Revert "C++: Rewrite cpp/cgi-xss to not use default taint tracking"
This reverts commit b6132d2a0f.
|
2023-10-09 16:30:21 +02:00 |
|
Jeroen Ketema
|
b6132d2a0f
|
C++: Rewrite cpp/cgi-xss to not use default taint tracking
|
2023-10-06 16:11:13 +02:00 |
|
Mathias Vorreiter Pedersen
|
eb3f1967a5
|
Merge pull request #14365 from MathiasVP/disable-flow-through-pointer-arith-for-size
C++: Disable size-flow through pointer arithmetics in `cpp/invalid-pointer-deref`
|
2023-10-06 10:14:31 +02:00 |
|
Henry Mercer
|
f3847b3f51
|
Merge branch 'main' into henrymercer/rc-3.11-mergeback
|
2023-10-03 16:30:23 +01:00 |
|
Mathias Vorreiter Pedersen
|
9a139ea903
|
C++: Accept test changes.
|
2023-10-03 15:58:35 +02:00 |
|
Alex Eyers-Taylor
|
2860c0c0d4
|
CPP: Move test into correct file.
|
2023-09-27 18:42:26 +01:00 |
|
Alex Eyers-Taylor
|
d0849311a6
|
CPP: Fix use after free FPs by elimnatiing freeing nodes rather than freeing expressions.
|
2023-09-20 18:47:57 +01:00 |
|
Alex Eyers-Taylor
|
9de6230bbf
|
CPP: Add use after free false positive example.
|
2023-09-20 18:34:47 +01:00 |
|
Mathias Vorreiter Pedersen
|
7ef5971337
|
C++: Use 'size_t' explicitly in test.
|
2023-09-19 13:58:08 +01:00 |
|
Mathias Vorreiter Pedersen
|
9b35202d21
|
Merge pull request #14249 from MathiasVP/fix-malloc-decl-in-test
C++: Fix the declaration of `malloc` in test
|
2023-09-19 13:53:23 +01:00 |
|
Mathias Vorreiter Pedersen
|
fda52a568d
|
C++: Accept test changes.
|
2023-09-18 17:55:25 +01:00 |
|
Mathias Vorreiter Pedersen
|
8a2d4852c6
|
C++: Add another testcase.
|
2023-09-18 16:48:03 +01:00 |
|
Mathias Vorreiter Pedersen
|
bc0b2e5318
|
C++: Fix the return type and parameter type of 'malloc' in test.
|
2023-09-18 16:40:46 +01:00 |
|
Mathias Vorreiter Pedersen
|
05080924de
|
C++: Don't use converted expressions in 'LeapYear.qll'.
|
2023-09-12 19:48:52 +01:00 |
|
Mathias Vorreiter Pedersen
|
b03054b1ed
|
C++: Make sure some instruction also gives back the 'ParenthesisExpr's.
|
2023-09-12 19:46:42 +01:00 |
|
Mathias Vorreiter Pedersen
|
71fe6f5d4b
|
C++: Use fully converted expressions in 'cpp/use-after-free' and 'cpp/double-free'.
|
2023-09-12 19:28:57 +01:00 |
|
Henning Makholm
|
bac175e881
|
C++ tests: fix output of bug-stricken test
The expected output was incorrect and the result of an evaluator bug.
This change should go together with the internal PR that fixes this bug.
|
2023-09-12 16:28:59 +02:00 |
|
Mathias Vorreiter Pedersen
|
ff28f45058
|
C++: Accept test changes.
|
2023-09-12 10:28:46 +01:00 |
|
Mathias Vorreiter Pedersen
|
becb469477
|
Merge branch 'main' into deduplicate-dataflow-results-take-3
|
2023-09-11 09:55:11 +01:00 |
|
Mathias Vorreiter Pedersen
|
9f89c63771
|
C++: Accept test changes.
|
2023-09-08 17:07:26 +01:00 |
|
Alex Eyers-Taylor
|
404145dd1b
|
CPP: Update tests
|
2023-09-07 13:42:31 +01:00 |
|
Mathias Vorreiter Pedersen
|
2bed77de09
|
Merge branch 'main' into deduplicate-dataflow-results-take-3
|
2023-09-06 14:12:36 +01:00 |
|
Alex Eyers-Taylor
|
3db384ddc3
|
CPP: Handle globals flowing into "UnreacheachedInstruction"
|
2023-09-05 11:50:32 +01:00 |
|
Mathias Vorreiter Pedersen
|
f1c4fa2345
|
C++: When we generate a string for the node we avoid multiple results by only using the 0'th result from the 'asExpr' predicate. However, when we want to convert between nodes and expressions we don't care about which one we get.
|
2023-09-01 14:04:52 +01:00 |
|
Mathias Vorreiter Pedersen
|
d2bb73ba1f
|
C++: Use the index to to get the 'most converted' and 'least converted' instruction in a bunch of places.
|
2023-09-01 13:47:06 +01:00 |
|
Mathias Vorreiter Pedersen
|
16d62186c0
|
C++: Use this new predicate everywhere we need to convert an instruction to an expression.
|
2023-09-01 13:32:25 +01:00 |
|
Mathias Vorreiter Pedersen
|
f5509da4bb
|
Merge pull request #14038 from alexet/delete-ir
CPP: Add delete/delete[] calls to the IR.
|
2023-08-31 09:22:34 +01:00 |
|
Mathias Vorreiter Pedersen
|
b092da485d
|
C++: Accept more test changes.
|
2023-08-30 11:26:40 +01:00 |
|
Mathias Vorreiter Pedersen
|
e4a11b86d9
|
Merge branch 'main' into reuse-even-more-nodes
|
2023-08-29 15:08:30 +01:00 |
|
Alex Eyers-Taylor
|
8b1b1618c4
|
CPP: Add tests for false positive in memory vulnerability queries.
|
2023-08-29 11:17:44 +01:00 |
|
Alex Eyers-Taylor
|
689fda43ed
|
CPP: Add delete/delete[] calls to the IR.
|
2023-08-29 11:17:43 +01:00 |
|
Mathias Vorreiter Pedersen
|
d14ad92dbd
|
Merge pull request #14006 from MathiasVP/promote-invalid-pointer-deref-out-of-experimental
C++: Promote `cpp/invalid-pointer-deref` out of experimental
|
2023-08-29 09:38:56 +01:00 |
|
Mathias Vorreiter Pedersen
|
bb1712b489
|
Merge branch 'main' into reuse-even-more-nodes
|
2023-08-26 18:08:58 +01:00 |
|
Mathias Vorreiter Pedersen
|
104416cc59
|
C++: Accept test changes.
|
2023-08-25 16:40:06 +01:00 |
|
Mathias Vorreiter Pedersen
|
759f939edd
|
C++: Add false positive.
|
2023-08-25 16:38:48 +01:00 |
|
Mathias Vorreiter Pedersen
|
b948ed9045
|
C++: Accept test changes and add a few non-field flow tests to make up for the fact that we're no longer using field flow in the query.
|
2023-08-25 15:18:15 +01:00 |
|
Alex Eyers-Taylor
|
9f8fbf8a1a
|
CPP: Update tests for argv change
|
2023-08-25 13:05:10 +01:00 |
|
Alex Eyers-Taylor
|
7d99d61662
|
CPP: Convert SQL tainted to IR dataflow.
|
2023-08-23 13:39:29 +01:00 |
|
Jeroen Ketema
|
6566b91355
|
C++: Add indication that the test result is good
|
2023-08-22 16:38:46 +02:00 |
|
Jeroen Ketema
|
1e8daff02a
|
C++: Add cpp/non-constant-format test
|
2023-08-22 16:23:47 +02:00 |
|
Mathias Vorreiter Pedersen
|
50190efe1c
|
C++: Don't limit instruction and operand reuse to those cases where we have a result for 'isUseImpl'.
|
2023-08-21 12:51:00 +01:00 |
|
Mathias Vorreiter Pedersen
|
4daabdae2b
|
C++: Promote 'cpp/invalid-pointer-deref' out of experimental.
|
2023-08-21 10:23:22 +01:00 |
|
Jonas Jensen
|
a002f59f58
|
C++: Undo BadlyBoundedWrite change from #13929
This rolls back the query change, ensuring that there is no need for a
change note.
|
2023-08-18 13:48:58 +02:00 |
|
Jonas Jensen
|
cd1f196848
|
C++: Accept regression in test after evaluator fix
|
2023-08-18 13:30:20 +02:00 |
|
Jeroen Ketema
|
e04d30a676
|
C++: Update expected test changes due to the line in test2.cpp having shifted
|
2023-08-09 15:50:07 +02:00 |
|
Jeroen Ketema
|
d0e7354a1b
|
C++: Only consider the maximum buffer size for badly bounded write
|
2023-08-09 12:30:00 +02:00 |
|