Mathias Vorreiter Pedersen
decede51dc
C++: Use the new predicate in 'ScanfChecks.qll'.
2024-03-18 16:07:57 +00:00
Mathias Vorreiter Pedersen
44045d3eed
C++: Add guards logic for constant comparisons.
2024-03-18 16:07:57 +00:00
Mathias Vorreiter Pedersen
a21eea4ee0
C++: Generalize more predicates from booleans to abstract values.
2024-03-18 16:07:57 +00:00
Mathias Vorreiter Pedersen
b944f3b411
C++: Fix FP.
2024-03-18 15:57:20 +00:00
Mathias Vorreiter Pedersen
e373341f62
C++: Add more tests.
2024-03-18 15:57:17 +00:00
Mathias Vorreiter Pedersen
668239f355
C++: Convert tabs to spaces.
2024-03-18 15:16:10 +00:00
Mathias Vorreiter Pedersen
bd0969b87b
C++: Add change note.
2024-03-18 15:04:19 +00:00
Mathias Vorreiter Pedersen
4a55b6fbdf
C++: Make 'cpp/uninitialized-local' a path-problem query.
2024-03-18 15:02:33 +00:00
github-actions[bot]
aebe9f6992
Post-release preparation for codeql-cli-2.16.5
2024-03-18 12:16:26 +00:00
Mathias Vorreiter Pedersen
7b6accd33a
Update cpp/ql/src/experimental/Security/CWE/CWE-416/IteratorToExpiredContainer.ql
...
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com >
2024-03-18 12:01:51 +00:00
Mathias Vorreiter Pedersen
457d71d7bc
Update cpp/ql/src/experimental/Security/CWE/CWE-416/IteratorToExpiredContainer.ql
...
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com >
2024-03-18 12:01:44 +00:00
Mathias Vorreiter Pedersen
575af1a5f9
Merge branch 'main' into experimental-surprising-lifetimes-for-range-based-for-loop
2024-03-18 11:11:32 +00:00
Mathias Vorreiter Pedersen
1d12e0c9d9
Merge pull request #15941 from MathiasVP/ir-guards-from-switch-statements
...
C++: Handle `switch` statements in the guards library
2024-03-18 11:07:10 +00:00
Mathias Vorreiter Pedersen
0be329dbdc
C++: Delete duplicated code.
2024-03-18 10:33:40 +00:00
github-actions[bot]
0a6243d07b
Release preparation for version 2.16.5
2024-03-18 10:14:07 +00:00
Mathias Vorreiter Pedersen
51db2b0bc4
C++: Convert tabs to spaces in ir.cpp.
2024-03-18 10:11:37 +00:00
Mathias Vorreiter Pedersen
e23e3d7fb4
C++: Run tests without the extractor and analysis changes.
2024-03-15 17:35:47 +00:00
Mathias Vorreiter Pedersen
a8718f99a1
C++: Add qhelp for 'cpp/iterator-to-expired-container'.
2024-03-15 17:35:47 +00:00
Mathias Vorreiter Pedersen
3a8db49573
C++: Add tests for 'cpp/iterator-to-expired-container'.
...
NOTE: This is with the yet-to-be-merged changes to the extractor and IR generation.
2024-03-15 17:35:17 +00:00
Mathias Vorreiter Pedersen
f4f417c3f9
C++: Fix QLoc.
2024-03-15 17:19:36 +00:00
Mathias Vorreiter Pedersen
b5e59492bf
C++: Add change note.
2024-03-15 17:17:05 +00:00
Mathias Vorreiter Pedersen
fb218150e1
C++: Change the testcase so that it outputs the controlling values for switch statements as well.
2024-03-15 17:05:42 +00:00
Mathias Vorreiter Pedersen
07ebbb0591
C++: Accept test changes.
2024-03-15 17:04:27 +00:00
Mathias Vorreiter Pedersen
34decd3cf1
C++: Add more general public predicates to work with abstract values.
2024-03-15 17:03:45 +00:00
Mathias Vorreiter Pedersen
f4eb5f5a2d
C++: Convert 'getBranchSuccessor' to use abstract values.
2024-03-15 17:03:45 +00:00
Mathias Vorreiter Pedersen
b7292fbc67
C++: Introduce 'AbstractValue' similar to what C# has.
2024-03-15 17:03:45 +00:00
Mathias Vorreiter Pedersen
2af68d37d0
C++: Include 'SwitchInstruction's as 'IRGuardCondition's.
2024-03-15 17:03:45 +00:00
Mathias Vorreiter Pedersen
704f1fad46
C++: Add switches as testcases for guard conditions.
2024-03-15 17:02:32 +00:00
Mathias Vorreiter Pedersen
23cf99734a
C++: Add a new experimental query ' cpp/iterator-to-expired-container'.
2024-03-15 14:29:29 +00:00
Mathias Vorreiter Pedersen
f7c29e6bfb
C++: Expose some previously private classes from our models so they can be used in queries.
2024-03-15 14:21:39 +00:00
Mathias Vorreiter Pedersen
19c9ea7e20
C++: Implement alias and side effect models for iterators.
2024-03-15 12:13:43 +00:00
Mathias Vorreiter Pedersen
a51fe4a00e
C++: Make the vector and iterator classes in 'ir.cpp' more realistic. This matches the one we use for dataflow tests.
2024-03-15 12:10:48 +00:00
Mathias Vorreiter Pedersen
7fdea27d33
C++: Rename 'IndirectTemporaryExpr' to 'IndirectOperandExprNode'.
2024-03-14 11:46:15 +00:00
Mathias Vorreiter Pedersen
9aefdca7a7
Merge pull request #15875 from MathiasVP/bring-back-type-barriers-in-non-constant-format
...
C++: Clean up `cpp/non-constant-format`
2024-03-14 10:51:23 +00:00
Geoffrey White
19cc620f18
C++: Effect of 'Fix dataflow node <> expression problem on prvalues' from main.
2024-03-14 09:47:38 +00:00
Geoffrey White
f208594067
Merge branch 'main' into mad
2024-03-14 09:44:45 +00:00
Mathias Vorreiter Pedersen
dacf7d73d9
Merge pull request #15918 from MathiasVP/fix-as-expr-for-temps
...
C++: Fix dataflow node <> expression problem on prvalues
2024-03-14 09:38:46 +00:00
Mathias Vorreiter Pedersen
a24432bacc
Update cpp/ql/lib/semmle/code/cpp/ir/dataflow/internal/DataFlowUtil.qll
2024-03-14 09:23:33 +00:00
Mathias Vorreiter Pedersen
c375497fa5
Update cpp/ql/lib/semmle/code/cpp/ir/dataflow/internal/DataFlowUtil.qll
2024-03-14 09:16:04 +00:00
Mathias Vorreiter Pedersen
a839c92979
C++: Fix mapping issue between dataflow nodes and expressions when the expression is a prvalue.
2024-03-13 22:59:09 +00:00
Mathias Vorreiter Pedersen
2fc0922b29
Merge branch 'main' into bring-back-type-barriers-in-non-constant-format
2024-03-13 22:46:35 +00:00
Mathias Vorreiter Pedersen
d1c253b519
C++: Accept test changes.
2024-03-13 22:41:32 +00:00
Mathias Vorreiter Pedersen
61597f5ac7
C++: This commit does two things:
...
1. It fixes a logic error in the cannotContainString predicate.
2. It reverts the changes to the `isSource` predicate that required the external
function to be within the source root.
The change to `isSource` was meant to fix the a performance problem that occurred
because of the logic error in the cannotContainString predicate. However, now that
the logic error is fixed this is no longer necessary 🎉
2024-03-13 22:40:06 +00:00
Jeroen Ketema
866a3934d4
C++: suppress destructors with reuse expressions until proper support is added
2024-03-13 20:17:00 +01:00
Jeroen Ketema
67b3670d06
Merge pull request #15901 from jketema/destructors11
...
C++: Introduce re-use expressions in the database scheme
2024-03-13 18:27:28 +01:00
Geoffrey White
8d3fc735ea
C++: Fix compilation issue in UseAfterFree.qll.
2024-03-13 17:03:00 +00:00
Geoffrey White
f52b6e0449
C++: Add more test cases for taint through qualifier fields.
2024-03-13 16:20:12 +00:00
Geoffrey White
6019a38266
C++: Add more test cases for indirection (4).
2024-03-13 16:20:08 +00:00
Geoffrey White
23da0c16c7
C++: Add more test cases for indirection (3).
2024-03-13 16:20:04 +00:00
Geoffrey White
7c4927c2e3
C++: Add more test cases for indirection (2).
2024-03-13 16:19:58 +00:00
