6899 Commits

Author	SHA1	Message	Date
Mathias Vorreiter Pedersen	3295d5cb9f	C++: Add more QLDoc.	2024-03-06 21:17:57 -08:00
Mathias Vorreiter Pedersen	cd57cd0d8a	C++: Add qhelp reference.	2024-03-06 21:15:27 -08:00
Mathias Vorreiter Pedersen	6dc0fa515d	C++: Add change note.	2024-03-06 21:11:36 -08:00
Mathias Vorreiter Pedersen	8ae6fa5366	C++: Add a new query 'cpp/type-confusion' for detecting type confusion vulnerabilities.	2024-03-06 21:11:32 -08:00
github-actions[bot]	dc9092c9ec	Post-release preparation for codeql-cli-2.16.4	2024-03-06 22:19:33 +00:00
github-actions[bot]	2f058ffb4d	Release preparation for version 2.16.4	2024-03-06 20:56:51 +00:00
Angela P Wen	ce31f8641a	Revert "Release preparation for version 2.16.4"	2024-03-06 12:07:33 -08:00
github-actions[bot]	661e68dab5	Release preparation for version 2.16.4	2024-03-05 18:13:58 +00:00
Angela P Wen	967963a653	Revert "Release preparation for version 2.16.4"	2024-03-05 08:53:33 -08:00
github-actions[bot]	a67218a027	Release preparation for version 2.16.4	2024-03-04 17:42:08 +00:00
Mathias Vorreiter Pedersen	4e913592fa	Merge branch 'main' into cpp-non-constant-format-as-path-query	2024-03-01 09:26:00 +00:00
Mathias Vorreiter Pedersen	1466f11a92	C++: Add change note.	2024-02-29 18:39:59 +00:00
Mathias Vorreiter Pedersen	0bf29f0a62	Merge branch 'main' into model-experiments	2024-02-22 15:05:53 +00:00
Ben Rodes	47f94e2ebe	Merge branch 'main' into cpp-non-constant-format-as-path-query	2024-02-22 06:24:18 -08:00
Benjamin Rodes	8d35db0fe6	Making argv filter positional.	2024-02-21 12:25:35 -05:00
github-actions[bot]	37f8fa3413	Post-release preparation for codeql-cli-2.16.3	2024-02-20 16:50:47 +00:00
github-actions[bot]	6d061fbc35	Release preparation for version 2.16.3	2024-02-20 14:26:23 +00:00
Mathias Vorreiter Pedersen	b927968e88	Merge pull request #15516 from microsoft/51-2cppnon-constant-format-alter-not-const-source ... C++: Change sources in `NonConstantFormat.ql`	2024-02-17 00:01:58 +01:00
Benjamin Rodes	639642fb67	Formatting.	2024-02-16 11:19:02 -05:00
Benjamin Rodes	0410ed734b	Adding exclusion for main's argv (I believe this and other changes were accidentally removed in prior merge with other non-const branches)	2024-02-16 11:18:06 -05:00
Benjamin Rodes	9f3dd6300f	Fixing query to use path graph.	2024-02-16 11:11:48 -05:00
Benjamin Rodes	aa7c677e13	Merge branch '51-2cppnon-constant-format-alter-not-const-source' into cpp-non-constant-format-as-path-query ... # Conflicts: # cpp/ql/src/Likely Bugs/Format/NonConstantFormat.ql	2024-02-16 10:49:05 -05:00
Benjamin Rodes	c38376a264	Merge branch '51-2cppnon-constant-format-alter-not-const-source' of https://github.com/microsoft/codeql into 51-2cppnon-constant-format-alter-not-const-source	2024-02-16 10:42:04 -05:00
Mathias Vorreiter Pedersen	096073d295	C++: Add change note.	2024-02-16 16:29:34 +01:00
Benjamin Rodes	93f2e856af	Formatting update.	2024-02-16 10:28:14 -05:00
Benjamin Rodes	4a9b2d5027	Comment change.	2024-02-16 10:18:07 -05:00
Benjamin Rodes	5b0a3dcdbe	Accidental removal of an and.	2024-02-16 10:15:21 -05:00
Benjamin Rodes	95ebbb1bbd	Ql alterations for cleanup as part of merge suggestions.	2024-02-16 10:13:50 -05:00
Ben Rodes	1fb7f089ca	Update cpp/ql/src/Likely Bugs/Format/NonConstantFormat.ql ... Co-authored-by: Mathias Vorreiter Pedersen <mathiasvp@github.com>	2024-02-16 10:06:34 -05:00
Mathias Vorreiter Pedersen	497592a4d4	C++: Add change note.	2024-02-16 13:36:25 +01:00
Benjamin Rodes	d6b0746b30	The non-constant format query is now a path query. Minor changes to the output alert to be more precise on what is being alerted. Minor changes to the query itself to avoid redundancies with argv.	2024-02-15 12:14:52 -05:00
Benjamin Rodes	caf2ee27fa	Adding false negative tests for future work.	2024-02-15 09:43:26 -05:00
Benjamin Rodes	5c508553f3	Efficiency improvement (force a better join order)	2024-02-13 09:42:08 -08:00
Benjamin Rodes	091416131b	Removing 'const' specifier filtering after discussions with the team. We will test if this causes undesirable cases in DCA and then choose which approach is best.	2024-02-12 09:38:00 -05:00
Benjamin Rodes	d4bc2ceb37	Minor efficiency improvements and comments.	2024-02-08 10:11:50 -05:00
Dave Bartolomeo	92bd550c55	Merge pull request #15531 from github/post-release-prep/codeql-cli-2.16.2 ... Post-release preparation for codeql-cli-2.16.2	2024-02-08 05:58:17 -08:00
Benjamin Rodes	f12a1ecdf2	Simplifying the query.	2024-02-07 14:15:16 -05:00
Benjamin Rodes	9fc2405681	Updating non-const source logic and associated tests and expected files.	2024-02-07 13:54:56 -05:00
Mathias Vorreiter Pedersen	950b5f2235	C++: Block flow out of 'gettext' in 'cpp/non-constant-format'. (#52)	2024-02-07 09:10:12 -05:00
github-actions[bot]	b5139078d0	Post-release preparation for codeql-cli-2.16.2	2024-02-06 19:22:35 +00:00
Benjamin Rodes	80bf38d8cc	Initial working draft of non-const source refactor.	2024-02-06 14:20:01 -05:00
Benjamin Rodes	5e5fea8ef3	Merge branch '50-model-gettext-family-of-string-operations' into 51-2cppnon-constant-format-alter-not-const-source	2024-02-06 12:47:08 -05:00
Ben Rodes	0023291903	Update cpp/ql/src/change-notes/2024-02-05-gettext-dataflows.md ... Co-authored-by: Mathias Vorreiter Pedersen <mathiasvp@github.com>	2024-02-06 09:12:25 -05:00
Mathias Vorreiter Pedersen	33cefabe27	Update cpp/ql/src/CHANGELOG.md	2024-02-06 11:05:22 +00:00
Mathias Vorreiter Pedersen	6c1e3b1ba6	Update cpp/ql/src/change-notes/released/0.9.4.md	2024-02-06 11:02:15 +00:00
Benjamin Rodes	256554df06	Added change log	2024-02-05 13:04:16 -05:00
github-actions[bot]	c1b35fbf47	Release preparation for version 2.16.2	2024-02-05 17:58:57 +00:00
Ben Rodes	e47df5c7bc	Update NonConstantFormat.ql ... Removed dead comment	2024-02-05 09:39:05 -05:00
Benjamin Rodes	e8587d060d	Removing comments and formatting.	2024-02-02 16:23:14 -05:00
Benjamin Rodes	9577c35d85	Incremental update to NonConstantFormat.ql	2024-02-02 16:06:59 -05:00