Josh Brown
|
ad86e576a4
|
autoformat
|
2023-10-03 13:40:17 -07:00 |
|
Josh Brown
|
b683a3caf8
|
Merge branch 'main' into jb1/16-cryptography-models-libraries-and-queries-migration
|
2023-10-04 07:24:29 +11:00 |
|
Henry Mercer
|
da92da2204
|
Bump minor versions of packs we regularly release
|
2023-10-03 16:31:23 +01:00 |
|
Henry Mercer
|
f3847b3f51
|
Merge branch 'main' into henrymercer/rc-3.11-mergeback
|
2023-10-03 16:30:23 +01:00 |
|
Mathias Vorreiter Pedersen
|
9a139ea903
|
C++: Accept test changes.
|
2023-10-03 15:58:35 +02:00 |
|
Mathias Vorreiter Pedersen
|
57d3f3f482
|
C++: Actually propagate the 'isBarrier1' or 'isBarrier2' predicates to the dataflow configurations.
|
2023-10-03 15:58:24 +02:00 |
|
Mathias Vorreiter Pedersen
|
9df5e43fae
|
C++: Block flow through indirect flow through pointer-arithmetic instructions when following flow for the allocation size.
|
2023-10-03 15:31:50 +02:00 |
|
Mathias Vorreiter Pedersen
|
b6ed9ccfda
|
C++: Add change notes.
|
2023-10-03 09:33:40 +02:00 |
|
Mathias Vorreiter Pedersen
|
7084dc1a88
|
C++: Promote 'cpp/use-after-free' and 'cpp/double-free' to Code Scanning.
|
2023-10-03 09:22:47 +02:00 |
|
Mathias Vorreiter Pedersen
|
5632dd5e46
|
Merge pull request #14275 from alexet/fix-use-after-free-fp
CPP: Fix some use after free FPs.
|
2023-10-03 09:16:42 +02:00 |
|
Alex Eyers-Taylor
|
6b0ae0f312
|
CPP: Remove unned argument from use-after-free
|
2023-09-28 17:53:32 +01:00 |
|
Asger F
|
0d96ed8aee
|
Merge pull request #14305 from asgerf/shared/flow-state-inout-barriers
Shared: add in/out barriers with flow state
|
2023-09-28 11:07:23 +02:00 |
|
Anders Schack-Mulligen
|
2548939849
|
C++: Use shared FileSystem library.
|
2023-09-28 08:58:55 +02:00 |
|
Alex Eyers-Taylor
|
2860c0c0d4
|
CPP: Move test into correct file.
|
2023-09-27 18:42:26 +01:00 |
|
Benjamin Rodes
|
25203db4e7
|
Removing 'security' tags from all queries.
|
2023-09-27 12:43:51 -04:00 |
|
Asger F
|
d501856519
|
Update DataFlowImpl.qll copies
|
2023-09-25 10:05:29 +02:00 |
|
Anders Schack-Mulligen
|
ae278fcad7
|
C++: Fix import conflict.
|
2023-09-22 15:06:21 +02:00 |
|
Anders Schack-Mulligen
|
66da997b7b
|
Dataflow: Make use of defaults for language-specific hooks.
|
2023-09-22 14:54:22 +02:00 |
|
Benjamin Rodes
|
c0c2ae544b
|
Updating weak elliptic curve sample queries.
|
2023-09-21 12:12:16 -07:00 |
|
Benjamin Rodes
|
50db4fd63e
|
Moved Cpp into sub directory 'cryptography' instead of crypto. Added python models, inventory, and example alerts.
|
2023-09-21 12:12:15 -07:00 |
|
Benjamin Rodes
|
7560db66fa
|
incorrect import path
|
2023-09-21 12:12:15 -07:00 |
|
Benjamin Rodes
|
fe22dc45b1
|
Moving inventory queries into a new subdirectory structure for new_models and old_models.
|
2023-09-21 12:12:15 -07:00 |
|
Benjamin Rodes
|
6d7ac8de28
|
Adding example alerts
|
2023-09-21 12:12:15 -07:00 |
|
Benjamin Rodes
|
4c9cc5a21f
|
Adding inventory queries.
|
2023-09-21 12:12:15 -07:00 |
|
Benjamin Rodes
|
7256faa7eb
|
Added modeling infrastructure
|
2023-09-21 12:12:15 -07:00 |
|
Anders Schack-Mulligen
|
13f7daf71e
|
Merge pull request #13982 from aschackmull/dataflow/typeflow-calledge-pruning
Dataflow: Add type-based call-edge pruning.
|
2023-09-21 13:33:08 +02:00 |
|
Alex Eyers-Taylor
|
d0849311a6
|
CPP: Fix use after free FPs by elimnatiing freeing nodes rather than freeing expressions.
|
2023-09-20 18:47:57 +01:00 |
|
Alex Eyers-Taylor
|
9de6230bbf
|
CPP: Add use after free false positive example.
|
2023-09-20 18:34:47 +01:00 |
|
github-actions[bot]
|
3acf5244b0
|
Post-release preparation for codeql-cli-2.14.6
|
2023-09-20 10:25:10 +00:00 |
|
Mathias Vorreiter Pedersen
|
22d66b6d81
|
Update cpp/ql/lib/semmle/code/cpp/ir/dataflow/internal/DataFlowUtil.qll
|
2023-09-20 09:56:10 +01:00 |
|
Mathias Vorreiter Pedersen
|
fb1ce2ab70
|
C++: Lift 'getParameter' to 'ParameterNode'.
|
2023-09-20 09:51:35 +01:00 |
|
Geoffrey White
|
a3579f6e38
|
Merge branch 'main' into typos
|
2023-09-19 16:44:13 +01:00 |
|
Geoffrey White
|
8a0e202b63
|
CPP: Fix typos.
|
2023-09-19 15:18:03 +01:00 |
|
Mathias Vorreiter Pedersen
|
7ef5971337
|
C++: Use 'size_t' explicitly in test.
|
2023-09-19 13:58:08 +01:00 |
|
Mathias Vorreiter Pedersen
|
9b35202d21
|
Merge pull request #14249 from MathiasVP/fix-malloc-decl-in-test
C++: Fix the declaration of `malloc` in test
|
2023-09-19 13:53:23 +01:00 |
|
github-actions[bot]
|
0a3670727f
|
Release preparation for version 2.14.6
|
2023-09-19 11:40:30 +00:00 |
|
Mathias Vorreiter Pedersen
|
8906a37989
|
Merge pull request #14250 from MathiasVP/reduce-dataflow-duplication-for-allocations
C++: Reduce dataflow duplication for allocations
|
2023-09-19 11:18:20 +01:00 |
|
Alexander Eyers-Taylor
|
1f4a5301cd
|
Merge pull request #14242 from alexet/simplify-ir-guards
CPP: Simplify some code in IRGuards.
|
2023-09-19 10:35:09 +01:00 |
|
Mathias Vorreiter Pedersen
|
fda52a568d
|
C++: Accept test changes.
|
2023-09-18 17:55:25 +01:00 |
|
Mathias Vorreiter Pedersen
|
d2e66a1186
|
C++: Ignore addresses of 'InitializeDynamicAllocationInstruction' in 'unique' when converting between instructions and expression in dataflow.
|
2023-09-18 17:55:19 +01:00 |
|
Mathias Vorreiter Pedersen
|
8a2d4852c6
|
C++: Add another testcase.
|
2023-09-18 16:48:03 +01:00 |
|
Mathias Vorreiter Pedersen
|
bc0b2e5318
|
C++: Fix the return type and parameter type of 'malloc' in test.
|
2023-09-18 16:40:46 +01:00 |
|
Mathias Vorreiter Pedersen
|
0e9f5f6b8e
|
C++: Accept test changes.
|
2023-09-18 11:46:19 +01:00 |
|
Mathias Vorreiter Pedersen
|
38b100531b
|
C++: Only add conversion when necessary.
|
2023-09-18 11:46:11 +01:00 |
|
Mathias Vorreiter Pedersen
|
53561b7883
|
C++: Add tests for sized allocation without a need for a synthesized conversion.
|
2023-09-18 11:45:18 +01:00 |
|
Alex Eyers-Taylor
|
c7ccfac938
|
CPP: Simplify some code in IRGuards.
|
2023-09-18 10:51:48 +01:00 |
|
Mathias Vorreiter Pedersen
|
734a91db9c
|
Merge pull request #14237 from MathiasVP/range-analysis-perf
C++: Fix order of non-linear join in range analysis
|
2023-09-18 10:38:19 +01:00 |
|
Mathias Vorreiter Pedersen
|
46b15fa6f2
|
C++: Fix join of non-linear joins.
|
2023-09-16 01:33:16 +01:00 |
|
Mathias Vorreiter Pedersen
|
cdf5872eb3
|
Merge pull request #14217 from alexet/is-trivial-built-in
CPP:Make __is_trivial a builtin operation.
|
2023-09-15 16:01:25 +01:00 |
|
Mathias Vorreiter Pedersen
|
6c7833f28c
|
Merge pull request #14223 from MathiasVP/add-explicit-dereferenced-by-operation-base-case-predicate
C++: Add a `directDereferencedByOperation` predicate
|
2023-09-15 10:19:26 +01:00 |
|