6899 Commits

Author	SHA1	Message	Date
Jeroen Ketema	d56a9f0781	Merge pull request #14424 from jketema/rewrite-cgi-xss ... C++: Rewrite `cpp/cgi-xss` to not use default taint tracking	2023-10-13 17:57:04 +02:00
Jeroen Ketema	61676277e8	C++: Fix barrier in cpp/cgi-xss	2023-10-13 14:05:47 +02:00
Tony Torralba	0cea3f8531	Remove library annotations	2023-10-13 12:46:56 +02:00
Mathias Vorreiter Pedersen	64fa6c8bbd	C++: Remove the hacky flow state since this is no longer needed after #13717.	2023-10-12 13:58:36 +01:00
Henry Mercer	1a370bfbbe	Merge pull request #14443 from github/post-release-prep/codeql-cli-2.15.0 ... Post-release preparation for codeql-cli-2.15.0	2023-10-11 17:39:04 +01:00
github-actions[bot]	ae6af17c74	Post-release preparation for codeql-cli-2.15.0	2023-10-11 14:19:20 +00:00
Jeroen Ketema	3b777c2764	C++: Rewrite cpp/cgi-xss to not use default taint tracking ... Also add a test that demonstrates that we need to look at inidrect expressions and not direct ones.	2023-10-10 11:56:39 +02:00
Jeroen Ketema	6ff8e06ace	Revert "C++: Rewrite cpp/cgi-xss to not use default taint tracking" ... This reverts commit b6132d2a0f.	2023-10-09 16:30:21 +02:00
Jeroen Ketema	b6132d2a0f	C++: Rewrite cpp/cgi-xss to not use default taint tracking	2023-10-06 16:11:13 +02:00
github-actions[bot]	9fe993bec3	Release preparation for version 2.15.0	2023-10-04 14:15:27 +00:00
Rasmus Wriedt Larsen	9c02b4f21c	Merge pull request #14289 from microsoft/jb1/16-cryptography-models-libraries-and-queries-migration ... 16 cryptography models libraries and queries migration	2023-10-04 12:27:59 +02:00
Josh Brown	ad86e576a4	autoformat	2023-10-03 13:40:17 -07:00
Josh Brown	b683a3caf8	Merge branch 'main' into jb1/16-cryptography-models-libraries-and-queries-migration	2023-10-04 07:24:29 +11:00
Henry Mercer	da92da2204	Bump minor versions of packs we regularly release	2023-10-03 16:31:23 +01:00
Henry Mercer	f3847b3f51	Merge branch 'main' into henrymercer/rc-3.11-mergeback	2023-10-03 16:30:23 +01:00
Mathias Vorreiter Pedersen	b6ed9ccfda	C++: Add change notes.	2023-10-03 09:33:40 +02:00
Mathias Vorreiter Pedersen	7084dc1a88	C++: Promote 'cpp/use-after-free' and 'cpp/double-free' to Code Scanning.	2023-10-03 09:22:47 +02:00
Alex Eyers-Taylor	6b0ae0f312	CPP: Remove unned argument from use-after-free	2023-09-28 17:53:32 +01:00
Benjamin Rodes	25203db4e7	Removing 'security' tags from all queries.	2023-09-27 12:43:51 -04:00
Benjamin Rodes	c0c2ae544b	Updating weak elliptic curve sample queries.	2023-09-21 12:12:16 -07:00
Benjamin Rodes	50db4fd63e	Moved Cpp into sub directory 'cryptography' instead of crypto. Added python models, inventory, and example alerts.	2023-09-21 12:12:15 -07:00
Benjamin Rodes	fe22dc45b1	Moving inventory queries into a new subdirectory structure for new_models and old_models.	2023-09-21 12:12:15 -07:00
Benjamin Rodes	6d7ac8de28	Adding example alerts	2023-09-21 12:12:15 -07:00
Benjamin Rodes	4c9cc5a21f	Adding inventory queries.	2023-09-21 12:12:15 -07:00
Alex Eyers-Taylor	d0849311a6	CPP: Fix use after free FPs by elimnatiing freeing nodes rather than freeing expressions.	2023-09-20 18:47:57 +01:00
github-actions[bot]	3acf5244b0	Post-release preparation for codeql-cli-2.14.6	2023-09-20 10:25:10 +00:00
github-actions[bot]	0a3670727f	Release preparation for version 2.14.6	2023-09-19 11:40:30 +00:00
AlexDenisov	ff7ff6dcfa	Merge pull request #14201 from MathiasVP/add-ast-consistency-query ... C++: Add AST consistency query	2023-09-14 16:34:20 +02:00
Mathias Vorreiter Pedersen	177fcacf38	Merge pull request #14134 from MathiasVP/add-surprising-lifetimes-to-experimental ... C++: Copy the Coding Standards' use-after-lifetime-ended query to Experimental	2023-09-13 13:06:18 +01:00
Mathias Vorreiter Pedersen	0cd4e32ed8	C++: Add AST consistency query.	2023-09-13 12:15:40 +01:00
Mathias Vorreiter Pedersen	af51a0a9ca	C++: Respond to review comments.	2023-09-13 11:43:12 +01:00
Mathias Vorreiter Pedersen	81d20be1ee	Update cpp/ql/src/experimental/Security/CWE/CWE-416/UseAfterExpiredLifetime.qhelp ... Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com>	2023-09-13 11:37:32 +01:00
Mathias Vorreiter Pedersen	05080924de	C++: Don't use converted expressions in 'LeapYear.qll'.	2023-09-12 19:48:52 +01:00
Mathias Vorreiter Pedersen	71fe6f5d4b	C++: Use fully converted expressions in 'cpp/use-after-free' and 'cpp/double-free'.	2023-09-12 19:28:57 +01:00
Mathias Vorreiter Pedersen	becb469477	Merge branch 'main' into deduplicate-dataflow-results-take-3	2023-09-11 09:55:11 +01:00
github-actions[bot]	d699880c86	Post-release preparation for codeql-cli-2.14.4	2023-09-08 21:17:52 +00:00
Alex Eyers-Taylor	e208a7aed6	CPP: Add change notes for the non-returning function improvements.	2023-09-08 11:26:27 +01:00
Mathias Vorreiter Pedersen	b22199982e	C++: Add change note.	2023-09-06 13:08:21 +01:00
Mathias Vorreiter Pedersen	3eb2da4c03	C++: No need to remove duplications manually.	2023-09-06 09:29:11 +01:00
github-actions[bot]	abf2b12b1c	Release preparation for version 2.14.4	2023-09-05 16:56:14 +00:00
Mathias Vorreiter Pedersen	1232120d42	C++: Naively copy the 'surprising lifetimes' query from Coding Standards and add required metadata.	2023-09-04 16:21:28 +01:00
Mathias Vorreiter Pedersen	20f501d1c7	C++: Change queries to use 'asExpr' instead of 'asConvertedExpr'.	2023-09-01 15:01:32 +01:00
Mathias Vorreiter Pedersen	d14ad92dbd	Merge pull request #14006 from MathiasVP/promote-invalid-pointer-deref-out-of-experimental ... C++: Promote `cpp/invalid-pointer-deref` out of experimental	2023-08-29 09:38:56 +01:00
Mathias Vorreiter Pedersen	f3a77c6006	Merge pull request #14060 from MathiasVP/fix-compare-where-assign-meant-fp ... C++: Fix FP in `cpp/compare-where-assign-meant`	2023-08-29 09:38:39 +01:00
Mathias Vorreiter Pedersen	dbdb433957	Merge pull request #14058 from alexet/delete-or-delete-array ... CPP: Add parent class for delete and delete[]	2023-08-29 09:38:07 +01:00
Dave Bartolomeo	3343b78015	Merge pull request #14074 from github/post-release-prep/codeql-cli-2.14.3 ... Post-release preparation for codeql-cli-2.14.3	2023-08-28 13:34:10 -04:00
github-actions[bot]	3eba77421a	Post-release preparation for codeql-cli-2.14.3	2023-08-28 15:53:49 +00:00
Mathias Vorreiter Pedersen	9542646a5d	C++: Add change note.	2023-08-25 16:45:53 +01:00
Mathias Vorreiter Pedersen	cb2f7b0f95	C++: Exclude results in macro expansions from 'cpp/compare-where-assign-meant'.	2023-08-25 16:39:47 +01:00
Mathias Vorreiter Pedersen	89b91ec5c8	C++: Disable field flow from the 'cpp/invalid-pointer-deref' query.	2023-08-25 15:01:37 +01:00