1887 Commits

Author	SHA1	Message	Date
Geoffrey White	33164c8a43	Merge branch 'main' into mad	2024-04-02 16:14:53 +01:00
Mathias Vorreiter Pedersen	352e7de07d	C++: Accept test changes.	2024-04-02 10:43:10 +01:00
Geoffrey White	fa26b55452	C++: Add models-as-data models for ZMQ networking library + wiring.	2024-03-28 21:50:07 +00:00
Geoffrey White	891f05c5ae	C++: Add a test for simple sinks involving ZMQ networking library.	2024-03-28 21:50:07 +00:00
Jeroen Ketema	3f0ce98ccb	C++: Add destructor test cases for AV Rule 114	2024-03-22 10:25:47 +01:00
Mathias Vorreiter Pedersen	0ef8c7d87f	C++: Accept test changes.	2024-03-20 18:05:14 +00:00
Mathias Vorreiter Pedersen	14aff5c94c	C++: Convert 'cpp/missing-check-scanf' to a path-problem query.	2024-03-20 14:54:53 +00:00
Mathias Vorreiter Pedersen	4a55b6fbdf	C++: Make 'cpp/uninitialized-local' a path-problem query.	2024-03-18 15:02:33 +00:00
Mathias Vorreiter Pedersen	2fc0922b29	Merge branch 'main' into bring-back-type-barriers-in-non-constant-format	2024-03-13 22:46:35 +00:00
Mathias Vorreiter Pedersen	d1c253b519	C++: Accept test changes.	2024-03-13 22:41:32 +00:00
Mathias Vorreiter Pedersen	3ea39a2553	C++: Add some query tests.	2024-03-13 11:39:34 +00:00
Mathias Vorreiter Pedersen	ab6e2f9364	C++: Accept test regression.	2024-03-12 15:04:49 +00:00
Mathias Vorreiter Pedersen	1a42e55095	Merge pull request #15820 from MathiasVP/add-type-confusion-query ... C++: Add a new query for detecting type confusion vulnerabilities	2024-03-12 10:29:22 +00:00
Mathias Vorreiter Pedersen	f97b6e2848	C++: Stop conflating pointers and indirections in the query.	2024-03-11 18:48:19 +00:00
Mathias Vorreiter Pedersen	7b0df57d7a	C++: Remove the two configurations that depend on flow state to speed up performance on ChakraCore.	2024-03-11 13:56:22 +00:00
Mathias Vorreiter Pedersen	a548316747	C++: Accept test changes.	2024-03-07 13:55:31 -08:00
Mathias Vorreiter Pedersen	01fc7432cb	C++: Add more tests.	2024-03-06 22:17:33 -08:00
Mathias Vorreiter Pedersen	bf84f3a936	C++: Add FN.	2024-03-06 21:19:17 -08:00
Mathias Vorreiter Pedersen	fc9919a5b6	C++: Add a test that exercise the 'last field' check.	2024-03-06 21:17:55 -08:00
Mathias Vorreiter Pedersen	c2db5f490e	C++: Add more FNs and FPs to show examples of where the 'successor typing' strategy fails.	2024-03-06 21:16:51 -08:00
Mathias Vorreiter Pedersen	cf4c8eb517	C++: Add more tests.	2024-03-06 21:15:25 -08:00
Mathias Vorreiter Pedersen	8ae6fa5366	C++: Add a new query 'cpp/type-confusion' for detecting type confusion vulnerabilities.	2024-03-06 21:11:32 -08:00
Mathias Vorreiter Pedersen	4e913592fa	Merge branch 'main' into cpp-non-constant-format-as-path-query	2024-03-01 09:26:00 +00:00
Mathias Vorreiter Pedersen	2eb8d13439	C++: Accept test changes.	2024-03-01 09:25:25 +00:00
Mathias Vorreiter Pedersen	0bf29f0a62	Merge branch 'main' into model-experiments	2024-02-22 15:05:53 +00:00
Ben Rodes	47f94e2ebe	Merge branch 'main' into cpp-non-constant-format-as-path-query	2024-02-22 06:24:18 -08:00
Mathias Vorreiter Pedersen	b927968e88	Merge pull request #15516 from microsoft/51-2cppnon-constant-format-alter-not-const-source ... C++: Change sources in `NonConstantFormat.ql`	2024-02-17 00:01:58 +01:00
Benjamin Rodes	aa7c677e13	Merge branch '51-2cppnon-constant-format-alter-not-const-source' into cpp-non-constant-format-as-path-query ... # Conflicts: # cpp/ql/src/Likely Bugs/Format/NonConstantFormat.ql	2024-02-16 10:49:05 -05:00
Mathias Vorreiter Pedersen	7c22146f46	C++: Accept query test changes.	2024-02-16 16:33:44 +01:00
Mathias Vorreiter Pedersen	be54a41593	C++: Accept query test changes.	2024-02-16 15:01:50 +01:00
Benjamin Rodes	d6b0746b30	The non-constant format query is now a path query. Minor changes to the output alert to be more precise on what is being alerted. Minor changes to the query itself to avoid redundancies with argv.	2024-02-15 12:14:52 -05:00
Benjamin Rodes	9e50fc6893	Updating tests to account for removing const char* heuristic.	2024-02-15 09:54:03 -05:00
Benjamin Rodes	caf2ee27fa	Adding false negative tests for future work.	2024-02-15 09:43:26 -05:00
Anders Schack-Mulligen	7eb5e1833d	C++: Add empty provenance column to expected files.	2024-02-09 11:32:08 +01:00
Benjamin Rodes	9fc2405681	Updating non-const source logic and associated tests and expected files.	2024-02-07 13:54:56 -05:00
Benjamin Rodes	80bf38d8cc	Initial working draft of non-const source refactor.	2024-02-06 14:20:01 -05:00
Benjamin Rodes	9577c35d85	Incremental update to NonConstantFormat.ql	2024-02-02 16:06:59 -05:00
Mathias Vorreiter Pedersen	6f5ed9ad3b	C++: Accept test changes.	2024-02-01 20:15:15 +00:00
Mathias Vorreiter Pedersen	4b5a203b46	Merge pull request #15463 from microsoft/42-false-positive-cpp-uninitializedlocal ... False positive fix for cpp/uninitialized-local	2024-01-31 09:31:31 +00:00
Mathias Vorreiter Pedersen	78d5d9a7ab	Merge pull request #15448 from microsoft/false_positive_cpp_incorrect_string_type_conversion ... cpp/incorrect-string-type-conversion false positive fixes	2024-01-30 09:37:01 +00:00
Benjamin Rodes	13cf555cee	False positive fix for cpp/uninitialized-local	2024-01-29 13:21:05 -05:00
Mathias Vorreiter Pedersen	ea79a84c2e	C++: Accept test changes.	2024-01-29 16:24:44 +00:00
Mathias Vorreiter Pedersen	7e29141196	C++: Add FP test.	2024-01-29 16:23:37 +00:00
Mathias Vorreiter Pedersen	a5794509ec	C++: Accept test changes.	2024-01-29 11:33:14 +00:00
Mathias Vorreiter Pedersen	3a66fd7175	C++: Add FP test.	2024-01-29 10:59:38 +00:00
Benjamin Rodes	b7648bcf27	Adding test cases.	2024-01-26 15:19:07 -05:00
Geoffrey White	b125d2c9ab	Merge branch 'main' into cppfiles	2024-01-26 16:47:48 +00:00
Benjamin Rodes	2181fcf284	Updating .expected to account for new free/deallocation sources.	2024-01-22 10:36:24 -05:00
Geoffrey White	5127542677	C++: Rename the query file.	2024-01-19 16:31:34 +00:00
Geoffrey White	4691bf2cb5	C++: Be more optimistic about successfully scanned files.	2024-01-19 15:55:54 +00:00