Mathias Vorreiter Pedersen
|
dc96d55943
|
Merge pull request #8888 from geoffw0/xxe2
C++: Add support for createLSParser to the CWE-611 XXE query.
|
2022-04-27 16:24:27 +01:00 |
|
Geoffrey White
|
6ada1bd05b
|
C++: Match createLSParser more precisely.
|
2022-04-27 11:51:17 +01:00 |
|
Geoffrey White
|
7ce040f331
|
Merge pull request #8736 from geoffw0/xxe
C++: New query for CWE-611 / XML External Entity Expansion (XXE)
|
2022-04-26 17:21:06 +01:00 |
|
Jeroen Ketema
|
a546e6e01c
|
C++: Update test to run with C++14
The test uses an `auto` return type without a trailing return type, which is
a C++14 feature.
|
2022-04-25 21:13:24 +02:00 |
|
Jeroen Ketema
|
97d4a12fb2
|
C++: Add non-returning function test case using __builtin_expect
|
2022-04-22 17:10:54 +02:00 |
|
Geoffrey White
|
d859a91a14
|
C++: Add support for createLSParser.
|
2022-04-22 12:24:01 +01:00 |
|
Geoffrey White
|
79aba67036
|
Merge branch 'main' into xxe
|
2022-04-22 11:50:41 +01:00 |
|
Geoffrey White
|
3326fd5400
|
C++: Update test .expected.
|
2022-04-19 13:43:17 +01:00 |
|
Geoffrey White
|
27b6b99cd0
|
C++: Correct and improve some comments and naming.
|
2022-04-13 18:34:15 +01:00 |
|
Geoffrey White
|
be0df1662c
|
C++: Rename the query file.
|
2022-04-13 13:20:02 +01:00 |
|
Geoffrey White
|
8d1e8e9ecb
|
C++: Flow states and transformers.
|
2022-04-08 17:19:18 +01:00 |
|
Geoffrey White
|
3aaa058308
|
C++: Get the simplest part of the query working, disable the rest for now, fix metadata, formatting etc.
|
2022-04-07 19:01:30 +01:00 |
|
Geoffrey White
|
9a0880f516
|
C++: Clean up the tests, make them a bit more realistic, and add many more test cases.
|
2022-04-07 19:00:30 +01:00 |
|
Geoffrey White
|
e2eda65fe1
|
C++: Rename test, add .expected.
|
2022-04-07 18:59:51 +01:00 |
|
Robert Marsh
|
3a35a40062
|
WIP: start on CWE-611 tests
|
2022-04-06 12:55:56 +01:00 |
|
Jeroen Ketema
|
d19504fca2
|
C++: Add cpp/unused-local-variable test case with switch initializer
This is similar to the test case with the `if` initializer, and we should
not forget about it once we support `if` initialization.
|
2022-04-05 18:27:53 +02:00 |
|
Geoffrey White
|
04b8306f06
|
C++: Add some more patterns.
|
2022-04-04 16:57:00 +01:00 |
|
Geoffrey White
|
d42ee7d279
|
C++: Extend tests.
|
2022-04-04 16:46:56 +01:00 |
|
Geoffrey White
|
b296b0150a
|
C++: Some enhancements to SensitiveExprs.qll as well, inspired by csharp.
|
2022-03-31 10:24:17 +01:00 |
|
Geoffrey White
|
146318dbc1
|
Merge pull request #8580 from geoffw0/privdata
C++: Port PrivateData.qll from C# and use it in cpp/cleartext-transmission
|
2022-03-31 10:12:46 +01:00 |
|
Geoffrey White
|
cf5c6baadd
|
C++: More test cases for salary.
|
2022-03-29 15:05:27 +01:00 |
|
Geoffrey White
|
b94ade3bdd
|
C++: Improve the regexps.
|
2022-03-29 10:03:58 +01:00 |
|
Geoffrey White
|
18f80eb3e3
|
C++: Loosen a few constraints slightly.
|
2022-03-28 11:16:57 +01:00 |
|
Geoffrey White
|
3fed7bf6d0
|
C++: Extend cpp/cleartext-transmission using PrivateData.qll.
|
2022-03-28 11:16:56 +01:00 |
|
Geoffrey White
|
bb272003b4
|
C++: More test cases.
|
2022-03-28 10:54:54 +01:00 |
|
Geoffrey White
|
9f3fd57534
|
Merge branch 'main' into cwe497b
|
2022-03-25 11:57:30 +00:00 |
|
Jeroen Ketema
|
8b4c42dd07
|
C++: Add cpp/command-line-injection test using a wrapper macro
|
2022-03-21 11:19:54 +01:00 |
|
Jeroen Ketema
|
f8198c3123
|
C++: Use flow states in cpp/command-line-injection
|
2022-03-18 20:06:45 +01:00 |
|
Jeroen Ketema
|
d37ef1b5ca
|
C++: Add command line injection test that currently results in a false positive
|
2022-03-18 16:12:09 +01:00 |
|
Jeroen Ketema
|
459870ac1e
|
C++: Add additional command line injection tests
|
2022-03-18 13:42:27 +01:00 |
|
Geoffrey White
|
95a63a69a5
|
Merge branch 'main' into cwe497b
|
2022-03-16 11:09:46 +00:00 |
|
Jeroen Ketema
|
1a1c34e1be
|
C++: Handle C11 _Noreturn in DefaultOptions
|
2022-03-15 23:21:14 +01:00 |
|
Geoffrey White
|
92d748e006
|
C++: Fix ODR/dbcheck issue in test.
|
2022-03-15 20:00:19 +00:00 |
|
Geoffrey White
|
28315df405
|
Merge branch 'main' into cwe497b
|
2022-03-15 11:23:00 +00:00 |
|
Geoffrey White
|
d1b04b4e07
|
C++: Use asDefiningArgument() where appropriate.
|
2022-03-14 17:53:47 +00:00 |
|
Mathias Vorreiter Pedersen
|
3c17d90e3b
|
C++: Accept test changes.
|
2022-03-11 09:30:44 +00:00 |
|
Mathias Vorreiter Pedersen
|
272e096190
|
Merge branch 'main' into use-taint-configuration-in-three-more-queries
|
2022-03-11 09:24:03 +00:00 |
|
Mathias Vorreiter Pedersen
|
dfb20f7721
|
Merge pull request #8368 from MathiasVP/add-must-flow-lib
C++: Factor must-flow predicates out of two queries
|
2022-03-09 17:07:23 +00:00 |
|
Mathias Vorreiter Pedersen
|
f2676968f0
|
C++: Actally convert 'cpp/overflow-destination' to a path-problem query.
|
2022-03-09 13:49:52 +00:00 |
|
Mathias Vorreiter Pedersen
|
8a8fb692a3
|
C++: Use a 'TaintTracking::Configuration' for 'cpp/uncontrolled-allocation-size'.
|
2022-03-09 12:09:32 +00:00 |
|
Mathias Vorreiter Pedersen
|
2328898b19
|
C++: Use a 'TaintTracking::Configuration' for 'cpp/unclear-array-index-validation'.
|
2022-03-09 12:09:27 +00:00 |
|
Mathias Vorreiter Pedersen
|
69417e150a
|
C++: Address review comments.
|
2022-03-08 13:15:02 +00:00 |
|
Mathias Vorreiter Pedersen
|
7106fe35aa
|
C++: Accept test changes. This is just a change in the names of the path nodes. These names are actually better as they don't refer to the name of IR instructions.
|
2022-03-08 11:40:56 +00:00 |
|
Mathias Vorreiter Pedersen
|
624795cbbf
|
Merge pull request #8059 from rdmarsh2/rdmarsh2/cpp/insufficient-key-strength
C++: new query for insufficient key strength
|
2022-03-04 17:11:44 +00:00 |
|
Robert Marsh
|
280fdbfc1b
|
C++: accept test output from perf improvement
The last commit removed some source nodes from the dataflow graph, which
changed the test expectations slightly. No result changes occurred.
|
2022-03-04 11:39:10 -05:00 |
|
Mathias Vorreiter Pedersen
|
9a91e66714
|
Merge pull request #8321 from MathiasVP/improve-using-expired-address-query
C++: More TPs from `cpp/using-expired-stack-address`
|
2022-03-04 12:07:55 +00:00 |
|
Mathias Vorreiter Pedersen
|
bf10456bf5
|
C++: Add a path explanation to the 'cpp/using-expired-stack-address' query.
|
2022-03-03 13:55:00 +00:00 |
|
Mathias Vorreiter Pedersen
|
9df923a7c8
|
C++: Catch more true positives by stepping into calls in the 'cpp/using-expired-stack-address' query.
|
2022-03-03 13:53:09 +00:00 |
|
Geoffrey White
|
88b7a085b0
|
C++: Make the bulk of test cases in tests.cpp more relevant.
|
2022-03-03 10:40:17 +00:00 |
|
Geoffrey White
|
07b4bf7023
|
C++: Use the same trick as in ExposedSystemData to catch a few more results.
|
2022-03-03 10:33:39 +00:00 |
|