1855 Commits

Author	SHA1	Message	Date
Geoffrey White	397efd1648	C++: Split off the createLSParser tests into their own file.	2022-04-29 10:35:33 +01:00
Geoffrey White	b02519bf0b	C++: Make the createLSParser test a bit closer to real life.	2022-04-29 10:33:47 +01:00
Geoffrey White	a1542322e2	C++: Add test cases for SAX2XMLReader.	2022-04-29 10:33:46 +01:00
Geoffrey White	7fb1069d69	C++: Use GVN on the values passed into set* functions.	2022-04-29 10:09:52 +01:00
Geoffrey White	2ccd5a5531	C++: Add support for SAXParser in the query.	2022-04-28 16:13:21 +01:00
Geoffrey White	4e2344c488	C++: Add test cases for SAXParser.	2022-04-28 16:11:08 +01:00
Mathias Vorreiter Pedersen	dc96d55943	Merge pull request #8888 from geoffw0/xxe2 ... C++: Add support for createLSParser to the CWE-611 XXE query.	2022-04-27 16:24:27 +01:00
Geoffrey White	6ada1bd05b	C++: Match createLSParser more precisely.	2022-04-27 11:51:17 +01:00
Geoffrey White	7ce040f331	Merge pull request #8736 from geoffw0/xxe ... C++: New query for CWE-611 / XML External Entity Expansion (XXE)	2022-04-26 17:21:06 +01:00
Jeroen Ketema	a546e6e01c	C++: Update test to run with C++14 ... The test uses an `auto` return type without a trailing return type, which is a C++14 feature.	2022-04-25 21:13:24 +02:00
Jeroen Ketema	97d4a12fb2	C++: Add non-returning function test case using __builtin_expect	2022-04-22 17:10:54 +02:00
Geoffrey White	d859a91a14	C++: Add support for createLSParser.	2022-04-22 12:24:01 +01:00
Geoffrey White	79aba67036	Merge branch 'main' into xxe	2022-04-22 11:50:41 +01:00
Geoffrey White	3326fd5400	C++: Update test .expected.	2022-04-19 13:43:17 +01:00
Geoffrey White	27b6b99cd0	C++: Correct and improve some comments and naming.	2022-04-13 18:34:15 +01:00
Geoffrey White	be0df1662c	C++: Rename the query file.	2022-04-13 13:20:02 +01:00
Geoffrey White	8d1e8e9ecb	C++: Flow states and transformers.	2022-04-08 17:19:18 +01:00
Geoffrey White	3aaa058308	C++: Get the simplest part of the query working, disable the rest for now, fix metadata, formatting etc.	2022-04-07 19:01:30 +01:00
Geoffrey White	9a0880f516	C++: Clean up the tests, make them a bit more realistic, and add many more test cases.	2022-04-07 19:00:30 +01:00
Geoffrey White	e2eda65fe1	C++: Rename test, add .expected.	2022-04-07 18:59:51 +01:00
Robert Marsh	3a35a40062	WIP: start on CWE-611 tests	2022-04-06 12:55:56 +01:00
Jeroen Ketema	d19504fca2	C++: Add cpp/unused-local-variable test case with switch initializer ... This is similar to the test case with the `if` initializer, and we should not forget about it once we support `if` initialization.	2022-04-05 18:27:53 +02:00
Geoffrey White	04b8306f06	C++: Add some more patterns.	2022-04-04 16:57:00 +01:00
Geoffrey White	d42ee7d279	C++: Extend tests.	2022-04-04 16:46:56 +01:00
Geoffrey White	b296b0150a	C++: Some enhancements to SensitiveExprs.qll as well, inspired by csharp.	2022-03-31 10:24:17 +01:00
Geoffrey White	146318dbc1	Merge pull request #8580 from geoffw0/privdata ... C++: Port PrivateData.qll from C# and use it in cpp/cleartext-transmission	2022-03-31 10:12:46 +01:00
Geoffrey White	cf5c6baadd	C++: More test cases for salary.	2022-03-29 15:05:27 +01:00
Geoffrey White	b94ade3bdd	C++: Improve the regexps.	2022-03-29 10:03:58 +01:00
Geoffrey White	18f80eb3e3	C++: Loosen a few constraints slightly.	2022-03-28 11:16:57 +01:00
Geoffrey White	3fed7bf6d0	C++: Extend cpp/cleartext-transmission using PrivateData.qll.	2022-03-28 11:16:56 +01:00
Geoffrey White	bb272003b4	C++: More test cases.	2022-03-28 10:54:54 +01:00
Geoffrey White	9f3fd57534	Merge branch 'main' into cwe497b	2022-03-25 11:57:30 +00:00
Jeroen Ketema	8b4c42dd07	C++: Add cpp/command-line-injection test using a wrapper macro	2022-03-21 11:19:54 +01:00
Jeroen Ketema	f8198c3123	C++: Use flow states in cpp/command-line-injection	2022-03-18 20:06:45 +01:00
Jeroen Ketema	d37ef1b5ca	C++: Add command line injection test that currently results in a false positive	2022-03-18 16:12:09 +01:00
Jeroen Ketema	459870ac1e	C++: Add additional command line injection tests	2022-03-18 13:42:27 +01:00
Geoffrey White	95a63a69a5	Merge branch 'main' into cwe497b	2022-03-16 11:09:46 +00:00
Jeroen Ketema	1a1c34e1be	C++: Handle C11 _Noreturn in DefaultOptions	2022-03-15 23:21:14 +01:00
Geoffrey White	92d748e006	C++: Fix ODR/dbcheck issue in test.	2022-03-15 20:00:19 +00:00
Geoffrey White	28315df405	Merge branch 'main' into cwe497b	2022-03-15 11:23:00 +00:00
Geoffrey White	d1b04b4e07	C++: Use asDefiningArgument() where appropriate.	2022-03-14 17:53:47 +00:00
Mathias Vorreiter Pedersen	3c17d90e3b	C++: Accept test changes.	2022-03-11 09:30:44 +00:00
Mathias Vorreiter Pedersen	272e096190	Merge branch 'main' into use-taint-configuration-in-three-more-queries	2022-03-11 09:24:03 +00:00
Mathias Vorreiter Pedersen	dfb20f7721	Merge pull request #8368 from MathiasVP/add-must-flow-lib ... C++: Factor must-flow predicates out of two queries	2022-03-09 17:07:23 +00:00
Mathias Vorreiter Pedersen	f2676968f0	C++: Actally convert 'cpp/overflow-destination' to a path-problem query.	2022-03-09 13:49:52 +00:00
Mathias Vorreiter Pedersen	8a8fb692a3	C++: Use a 'TaintTracking::Configuration' for 'cpp/uncontrolled-allocation-size'.	2022-03-09 12:09:32 +00:00
Mathias Vorreiter Pedersen	2328898b19	C++: Use a 'TaintTracking::Configuration' for 'cpp/unclear-array-index-validation'.	2022-03-09 12:09:27 +00:00
Mathias Vorreiter Pedersen	69417e150a	C++: Address review comments.	2022-03-08 13:15:02 +00:00
Mathias Vorreiter Pedersen	7106fe35aa	C++: Accept test changes. This is just a change in the names of the path nodes. These names are actually better as they don't refer to the name of IR instructions.	2022-03-08 11:40:56 +00:00
Mathias Vorreiter Pedersen	624795cbbf	Merge pull request #8059 from rdmarsh2/rdmarsh2/cpp/insufficient-key-strength ... C++: new query for insufficient key strength	2022-03-04 17:11:44 +00:00