Benjamin Rodes
|
94a0420040
|
Updated getResultExpr to getResultNode. Added strlcat. Added tests.
|
2023-11-29 16:03:41 -05:00 |
|
Mathias Vorreiter Pedersen
|
e47ad274ea
|
C++: Add Schack's tests.
|
2023-11-28 14:32:21 +00:00 |
|
Mathias Vorreiter Pedersen
|
fb6329fbc1
|
C++: Fix test annotation
|
2023-11-28 14:27:15 +00:00 |
|
Mathias Vorreiter Pedersen
|
1771d77c23
|
C++: Accept test changes.
|
2023-11-28 14:27:15 +00:00 |
|
Mathias Vorreiter Pedersen
|
1753a7e146
|
C++: Add tests.
|
2023-11-28 14:27:15 +00:00 |
|
Mathias Vorreiter Pedersen
|
2b36ba33f0
|
C++: Add support for 'data' in the query.
|
2023-11-28 12:57:59 +00:00 |
|
Alex Eyers-Taylor
|
3e9aeac004
|
CPP: Fix sscanf false positives in older linux repos
|
2023-11-28 12:07:05 +00:00 |
|
Mathias Vorreiter Pedersen
|
7b8d164692
|
C++: Add more good test cases.
|
2023-11-28 11:58:33 +00:00 |
|
Mathias Vorreiter Pedersen
|
62c432f3c7
|
C++: Tabs -> Spaces.
|
2023-11-28 11:52:17 +00:00 |
|
Mathias Vorreiter Pedersen
|
e10caa68f6
|
C++: Add tests.
|
2023-11-28 09:06:24 +00:00 |
|
Mathias Vorreiter Pedersen
|
e94cde9b4b
|
C++: Move the use-after-free tests to subdirectory.
|
2023-11-28 09:06:24 +00:00 |
|
Mathias Vorreiter Pedersen
|
204acbacc5
|
C++: Add a new query for detecting calls to 'c_str' on temporary objects.
|
2023-11-28 09:06:24 +00:00 |
|
Jeroen Ketema
|
c02a732632
|
C++: Remove DefaultTaintTracking library
|
2023-11-24 18:35:19 +01:00 |
|
Alex Eyers-Taylor
|
1c012548d4
|
CPP: Add tests for incorrect check scanf
|
2023-11-24 16:58:11 +00:00 |
|
Alex Eyers-Taylor
|
12e24a2b44
|
CPP: Exclude incorrect scanf checks from missing scanf checks
|
2023-11-24 16:57:59 +00:00 |
|
Jeroen Ketema
|
ee35bfb290
|
C++: Do not use isReturnValue in getenv, gets, and fgets models
|
2023-11-24 16:38:15 +01:00 |
|
Alex Eyers-Taylor
|
f48e8b6062
|
CPP: Add query for detecteing incorrect error checking for scanf
|
2023-11-24 14:53:10 +00:00 |
|
Mathias Vorreiter Pedersen
|
e438671846
|
Merge pull request #14896 from MathiasVP/no-dtt-in-user-controlled-bypass
C++: Rewrite `cpp/user-controlled-bypass` away from `DefaultTaintTracking`
|
2023-11-24 14:43:10 +00:00 |
|
Mathias Vorreiter Pedersen
|
6b48b3643e
|
Merge branch 'main' into no-dtt-in-user-controlled-bypass
|
2023-11-24 12:50:45 +00:00 |
|
Mathias Vorreiter Pedersen
|
2681617f28
|
C++: Undo the workaround in 'cpp/tainted-permissions-check'.
|
2023-11-24 10:56:11 +00:00 |
|
Mathias Vorreiter Pedersen
|
5604fd7d80
|
C++: Rewrite 'cpp/user-controlled-bypass' away from 'DefaultTaintTracking'.
|
2023-11-23 17:35:54 +00:00 |
|
Mathias Vorreiter Pedersen
|
97319854e2
|
C++: Accept test changes.
|
2023-11-23 16:53:57 +00:00 |
|
Mathias Vorreiter Pedersen
|
98bf748e64
|
C++: Accept test changes.
|
2023-11-23 16:53:57 +00:00 |
|
Mathias Vorreiter Pedersen
|
257d94be20
|
Merge pull request #14886 from jketema/rewrite-tainted-condition
C++: Rewrite `cpp/tainted-permissions-check` to not use `DefaultTaintTracking`
|
2023-11-23 16:18:03 +00:00 |
|
Mathias Vorreiter Pedersen
|
149fb7bbc2
|
Merge pull request #14881 from MathiasVP/no-dtt-in-user-controlled-null-termination-tainted
C++: Rewrite `cpp/user-controlled-null-termination-tainted` away from `DefaultTaintTracking`
|
2023-11-23 14:41:33 +00:00 |
|
Mathias Vorreiter Pedersen
|
401a378598
|
C++: Accept test changes.
|
2023-11-23 14:12:16 +00:00 |
|
Jeroen Ketema
|
7834626e26
|
C++: Rewrite cpp/tainted-permissions-check to not use DefaultTaintTracking
|
2023-11-23 14:52:53 +01:00 |
|
Jeroen Ketema
|
1fbe23228e
|
C++: Update test to reflect updated test results
|
2023-11-22 16:49:13 +01:00 |
|
Jeroen Ketema
|
bb1945f899
|
C++: Rewrite cpp/tainted-format-string away from DefaultTaintTracking
|
2023-11-22 16:49:13 +01:00 |
|
Mathias Vorreiter Pedersen
|
640e2f56d5
|
C++: Accept test changes.
|
2023-11-22 15:43:24 +00:00 |
|
Mathias Vorreiter Pedersen
|
a80dbc5200
|
C++: Accept test changes.
|
2023-11-21 17:50:11 +00:00 |
|
Mathias Vorreiter Pedersen
|
dcba8e5408
|
C++: Fix global variable flow for array types.
|
2023-11-20 12:15:55 +00:00 |
|
Mathias Vorreiter Pedersen
|
8039e117ba
|
C++: Add more global-variable flow tests.
|
2023-11-20 12:15:52 +00:00 |
|
Mathias Vorreiter Pedersen
|
a10f94af81
|
Merge pull request #14810 from MathiasVP/fix-ref-deref-duplication
C++: Fix dataflow duplication from `ReferenceDereference` expressions
|
2023-11-16 16:10:07 +00:00 |
|
Mathias Vorreiter Pedersen
|
c5d2866948
|
Merge pull request #14812 from MathiasVP/no-dtt-in-Integer-overflow-tainted
C++: Convert `cpp/integer-overflow-tainted` away from DefaultTaintTracking
|
2023-11-16 15:24:13 +00:00 |
|
Mathias Vorreiter Pedersen
|
da2215e7e5
|
C++: Accept test changes.
|
2023-11-16 13:54:13 +00:00 |
|
Mathias Vorreiter Pedersen
|
30f0b8ab2b
|
Merge pull request #14808 from jketema/jketema/del-fmt-global
C++: Delete `cpp/tainted-format-string-through-global`
|
2023-11-16 13:44:21 +00:00 |
|
Mathias Vorreiter Pedersen
|
5a7cb8f25a
|
C++: Fix duplication on reference dereference expressions.
|
2023-11-16 10:52:35 +00:00 |
|
Mathias Vorreiter Pedersen
|
799873113f
|
C++: Add a test that demonstrates reference dereference duplication.
|
2023-11-16 10:52:14 +00:00 |
|
Mathias Vorreiter Pedersen
|
f8feb84958
|
C++: Accept test changes from refactoring QL files.
|
2023-11-16 10:52:10 +00:00 |
|
Mathias Vorreiter Pedersen
|
6a1504b91c
|
C++: Slightly refactor test QL files so that we can add a test which tests the nodes being selected.
|
2023-11-16 10:50:56 +00:00 |
|
Jeroen Ketema
|
afe318edbe
|
C++: Delete cpp/tainted-format-string-through-global
|
2023-11-16 10:52:05 +01:00 |
|
Mathias Vorreiter Pedersen
|
4d4ca6b948
|
Merge pull request #14794 from MathiasVP/catch-more-return-stack-allocated-memory
C++: Catch more returns of stack-allocated memory
|
2023-11-15 19:23:24 +00:00 |
|
Jeroen Ketema
|
46e6e72593
|
C++: Address review comments
|
2023-11-15 14:57:53 +01:00 |
|
Jeroen Ketema
|
92c18960c5
|
C++: Rewrite cpp/uncontrolled-process-operation to not use DefaultTaintTracking
|
2023-11-15 14:57:53 +01:00 |
|
Mathias Vorreiter Pedersen
|
2b8b5cf1b8
|
C++: Accept test changes.
|
2023-11-15 11:52:14 +00:00 |
|
Mathias Vorreiter Pedersen
|
118d50236f
|
C++: Add failing tests.
|
2023-11-15 11:48:37 +00:00 |
|
Mathias Vorreiter Pedersen
|
1623bba18a
|
Merge branch 'main' into no-dtt-in-tainted-arithmetic
|
2023-11-14 13:35:15 +00:00 |
|
Mathias Vorreiter Pedersen
|
c950e26b3e
|
C++: Rewrite 'cpp/cpp/tainted-arithmetic' away from DefaultTaintTracking.
|
2023-11-14 12:19:12 +00:00 |
|
Mathias Vorreiter Pedersen
|
967bbbc1a7
|
C++: Block flow out of sinks that are qualifiers. This removes the new result duplication and keeps the new result.
|
2023-11-14 09:29:47 +00:00 |
|