Mathias Vorreiter Pedersen
d25c24b64d
C++: Reduce code duplication by moving shared code into a module.
2023-11-16 10:52:46 +00:00
Mathias Vorreiter Pedersen
5a7cb8f25a
C++: Fix duplication on reference dereference expressions.
2023-11-16 10:52:35 +00:00
Mathias Vorreiter Pedersen
799873113f
C++: Add a test that demonstrates reference dereference duplication.
2023-11-16 10:52:14 +00:00
Mathias Vorreiter Pedersen
f8feb84958
C++: Accept test changes from refactoring QL files.
2023-11-16 10:52:10 +00:00
Mathias Vorreiter Pedersen
6a1504b91c
C++: Slightly refactor test QL files so that we can add a test which tests the nodes being selected.
2023-11-16 10:50:56 +00:00
Mathias Vorreiter Pedersen
5c0fb2030d
C++: Move change note.
2023-11-16 09:57:08 +00:00
Jeroen Ketema
2eb67549e6
C++: Tweak change note slightly
2023-11-16 10:56:47 +01:00
Jeroen Ketema
afe318edbe
C++: Delete cpp/tainted-format-string-through-global
2023-11-16 10:52:05 +01:00
Mathias Vorreiter Pedersen
4d4ca6b948
Merge pull request #14794 from MathiasVP/catch-more-return-stack-allocated-memory
...
C++: Catch more returns of stack-allocated memory
2023-11-15 19:23:24 +00:00
Jeroen Ketema
46e6e72593
C++: Address review comments
2023-11-15 14:57:53 +01:00
Jeroen Ketema
92c18960c5
C++: Rewrite cpp/uncontrolled-process-operation to not use DefaultTaintTracking
2023-11-15 14:57:53 +01:00
Mathias Vorreiter Pedersen
bae7e10e46
C++: Also add MSVC-related 'alloca'-like functions.
2023-11-15 12:07:17 +00:00
Mathias Vorreiter Pedersen
ec63099c54
C++: Add change note.
2023-11-15 11:57:09 +00:00
Mathias Vorreiter Pedersen
2b8b5cf1b8
C++: Accept test changes.
2023-11-15 11:52:14 +00:00
Mathias Vorreiter Pedersen
6730f57d5c
C++: Also flag up 'alloca' and friends.
2023-11-15 11:51:57 +00:00
Mathias Vorreiter Pedersen
118d50236f
C++: Add failing tests.
2023-11-15 11:48:37 +00:00
Mathias Vorreiter Pedersen
1623bba18a
Merge branch 'main' into no-dtt-in-tainted-arithmetic
2023-11-14 13:35:15 +00:00
Mathias Vorreiter Pedersen
c950e26b3e
C++: Rewrite 'cpp/cpp/tainted-arithmetic' away from DefaultTaintTracking.
2023-11-14 12:19:12 +00:00
Mathias Vorreiter Pedersen
f22d87b7c7
Merge pull request #14771 from MathiasVP/fix-missing-unbounded-write-results
...
C++: Fix missing results in `cpp/unbounded-write`
2023-11-14 12:03:13 +00:00
Mathias Vorreiter Pedersen
967bbbc1a7
C++: Block flow out of sinks that are qualifiers. This removes the new result duplication and keeps the new result.
2023-11-14 09:29:47 +00:00
Tamás Vajk
28a5a1d507
Merge pull request #14760 from tamasvajk/apple-silicon-check
...
C#: Change IsARM to Apple silicon check
2023-11-14 10:27:42 +01:00
Mathias Vorreiter Pedersen
c73e6f1fa8
C++: Accept more test changes.
2023-11-13 16:51:07 +00:00
Mathias Vorreiter Pedersen
9aafbfce13
C++: Fix test annotation.
2023-11-13 16:17:18 +00:00
Mathias Vorreiter Pedersen
cc6268339b
C++: Fix failing test and accept test cases.
2023-11-13 15:57:22 +00:00
Mathias Vorreiter Pedersen
834b07e6ad
C++: Add failing tests.
2023-11-13 15:54:41 +00:00
Mathias Vorreiter Pedersen
eb263e747f
C++: Make sure the test terminates.
2023-11-13 15:25:48 +00:00
Mathias Vorreiter Pedersen
bc576f658e
C++: Add a test that fails because of a non-terminating test that dominates this one.
2023-11-13 15:24:56 +00:00
Tamas Vajk
b455b2c1a6
C#: Change IsARM to Apple silicon check
2023-11-13 13:20:13 +01:00
Anders Schack-Mulligen
bf6cfd3bef
Rangeanalysis: Simplify api.
2023-11-13 10:35:44 +01:00
Anders Schack-Mulligen
30aefabb2a
Rangeanalysis: Rename predicate.
2023-11-13 10:35:44 +01:00
Anders Schack-Mulligen
27e6173bb7
C++: Remove SemSsaExplicitUpdate.getSourceExpr.
2023-11-13 10:35:43 +01:00
Anders Schack-Mulligen
3a73faf061
Rangeanalysis: Remove unused getAlternateType predicates.
2023-11-13 10:35:43 +01:00
Anders Schack-Mulligen
00549e36ed
Merge pull request #14742 from aschackmull/rangeanalysis/share-util-3
...
Java/C++/Rangeanalysis: Share more range analysis utility predicates.
2023-11-13 10:19:41 +01:00
Mathias Vorreiter Pedersen
01a074c146
Merge pull request #14749 from MathiasVP/less-code-duplication
2023-11-10 19:45:56 +00:00
Jeroen Ketema
3a62628938
Merge pull request #14735 from jketema/strl
...
C++: Add models for `strlcpy` and `strlcat`
2023-11-10 17:51:59 +01:00
Mathias Vorreiter Pedersen
9062fb666a
C++: Move a couple of predicates to 'Node0Impl'.
2023-11-10 16:26:03 +00:00
Jeroen Ketema
b48d483eba
C++: Add change note
2023-11-10 17:25:19 +01:00
Mathias Vorreiter Pedersen
18c0bcec0b
Merge pull request #14669 from MathiasVP/no-dtt-in-unbounded-write
...
C++: Rewrite `cpp/unbounded-write` away from `DefaultTaintTracking`
2023-11-10 15:08:42 +00:00
Mathias Vorreiter Pedersen
2ceb4cffbc
Merge pull request #14736 from MathiasVP/fix-global-indirect-flow
...
C++: Fix indirect global-variable flow
2023-11-10 14:25:23 +00:00
Jeroen Ketema
c71bdce2d0
Merge pull request #14744 from jketema/fgets
...
C++: Fix `hasRemoteFlowSource` for `fgets`
2023-11-10 14:03:40 +01:00
Mathias Vorreiter Pedersen
4f6b6b4a6f
Merge branch 'main' into no-dtt-in-unbounded-write
2023-11-10 12:57:42 +00:00
Jeroen Ketema
617d950a25
Apply suggestions from code review
...
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com >
2023-11-10 13:55:39 +01:00
Jeroen Ketema
1c87875049
C++: Drop the size return value of strlcat from hasTaintFlow
2023-11-10 13:15:57 +01:00
Jeroen Ketema
5e21a5d284
C++: Fix flow for return values of strlcat and strlcpy
2023-11-10 12:28:48 +01:00
Jeroen Ketema
ba51b65d84
C++: Fix hasRemoteFlowSource for fgets
...
Also add the test that exposed this. Note that the test would only have started
failing after `cpp/uncontrolled-process-operation` with the rewrite of the
query away from default taint tracking, which has not happened yet.
2023-11-10 11:56:23 +01:00
Jeroen Ketema
e4c8406365
C++: Split strlcat off in a separate model
2023-11-10 10:11:57 +01:00
Mathias Vorreiter Pedersen
b858a284c9
Merge pull request #14726 from microsoft/28-strsafe-library-updates2
2023-11-09 21:39:10 +00:00
Mathias Vorreiter Pedersen
39b9d2ea83
C++: Accept test changes.
2023-11-09 20:28:55 +00:00
Mathias Vorreiter Pedersen
eb1024c79b
C++: Improve (and simplify) 'toString's.
2023-11-09 20:27:23 +00:00
Mathias Vorreiter Pedersen
86e791980c
C++: Simplify 'isGlobalUse' and 'isGlobalDefImpl'.
2023-11-09 20:27:23 +00:00
