3715 Commits

Author	SHA1	Message	Date
Jeroen Ketema	331fab5ac0	C++: Generalize the ArgvSource flow source ... This matches `isUserInput` and handles cases where `argv` has a different name, which is allowed.	2022-12-09 23:12:31 +01:00
Mathias Vorreiter Pedersen	52bf39bcf9	C++: Use a 'fastTC' instead of '*' to improve performance.	2022-12-09 14:21:09 +00:00
Mathias Vorreiter Pedersen	a3285653ae	C++: Prevent an expression to stepping to itself.	2022-12-09 14:20:27 +00:00
Jeroen Ketema	2095f11b8c	C++: Add change note	2022-12-08 23:35:32 +01:00
Jeroen Ketema	aabbafd2bf	C++: Fix QL-for-QL warning	2022-12-08 19:33:11 +01:00
Jeroen Ketema	ec0ce56269	C++: Model getaddrinfo as flow source	2022-12-08 19:20:11 +01:00
Robert Marsh	f235b991db	Merge pull request #11374 from MathiasVP/indirect-outnodes-are-post-update-nodes ... C++: Field flow through reference-returning functions	2022-12-08 10:46:19 -05:00
Jeroen Ketema	8f9a73ee09	C++: Address review comments	2022-12-08 16:14:12 +01:00
Jeroen Ketema	33fa76f911	C++: Add change note	2022-12-08 15:22:42 +01:00
Jeroen Ketema	f35b7f8fe8	C++: Model scanf and fscanf as flow sources	2022-12-08 15:22:41 +01:00
Mathias Vorreiter Pedersen	f814ce7f10	Merge branch 'mathiasvp/replace-ast-with-ir-use-usedataflow' into refactor-isdef-isuse	2022-12-08 13:25:20 +00:00
Mathias Vorreiter Pedersen	4fd6ac5657	Merge branch 'main' into mathiasvp/replace-ast-with-ir-use-usedataflow	2022-12-08 13:10:18 +00:00
Mathias Vorreiter Pedersen	6897b20722	Merge pull request #11601 from MathiasVP/keep-std-string-iterator	2022-12-08 12:59:33 +00:00
Mathias Vorreiter Pedersen	36d0903733	C++: Simplify 'getSourceVariable'.	2022-12-08 12:29:15 +00:00
Chris Smowton	49bc524fd0	Merge remote-tracking branch 'origin/rc/3.8' into smowton/admin/merge-rc38-into-main	2022-12-08 11:12:30 +00:00
Jeroen Ketema	a6bc9fd10f	Merge pull request #11591 from jketema/getenv ... C++: Model `secure_getenv` and `_wgetenv` as local flow sources	2022-12-08 10:44:28 +01:00
Jeroen Ketema	fc49ede33d	C++: Add change note	2022-12-08 09:44:23 +01:00
Mathias Vorreiter Pedersen	9f85175ee1	C++: Fix blowup in 'stripPointer'.	2022-12-07 22:35:37 +00:00
Mathias Vorreiter Pedersen	5ae3228928	C++: Fix TODO.	2022-12-07 22:34:10 +00:00
Mathias Vorreiter Pedersen	68f0997d87	C++: Generalize loads and stores.	2022-12-07 22:34:10 +00:00
Mathias Vorreiter Pedersen	589f7bdbcc	C++: Introduce BaseSourceVariableInstruction.	2022-12-07 22:34:03 +00:00
Mathias Vorreiter Pedersen	54c12cd715	C++: Reintroduce 'StdBasicStringIterator'.	2022-12-07 18:21:52 +00:00
Jeroen Ketema	01d8ad98f6	C++: Model secure_getenv and _wgetenv as local flow sources	2022-12-07 13:37:12 +01:00
Jeroen Ketema	b5147bbfb0	C++: Deprecate DefaultTaintTracking and TaintTrackingImpl	2022-12-06 17:45:16 +01:00
Mathias Vorreiter Pedersen	e71fbb1def	Merge pull request #11541 from MathiasVP/add-node0 ... C++: Introduce a pre-SSA `DataFlow::Node` class	2022-12-06 13:28:39 +00:00
Tom Hvitved	52f3a48638	Data flow: Sync files	2022-12-05 12:57:27 +01:00
Mathias Vorreiter Pedersen	c563ed3635	Merge branch 'main' into mathiasvp/replace-ast-with-ir-use-usedataflow	2022-12-05 10:27:55 +00:00
github-actions[bot]	5e35785fd0	Post-release preparation for codeql-cli-2.11.5	2022-12-02 11:37:44 +00:00
Mathias Vorreiter Pedersen	43adfe8893	C++: Fix QLDoc.	2022-12-02 11:30:46 +00:00
Mathias Vorreiter Pedersen	cef7224739	C++: Make QL-for-QL happy.	2022-12-02 10:12:25 +00:00
Mathias Vorreiter Pedersen	a245977075	C++: Change iterator models.	2022-12-02 10:11:20 +00:00
Mathias Vorreiter Pedersen	145dea0e9b	C++: Introduce a node class that exists before computing SSA.	2022-12-02 10:04:52 +00:00
github-actions[bot]	31ab22e3a0	Release preparation for version 2.11.5	2022-12-01 20:05:14 +00:00
Owen Mansel-Chan	55c4643b20	Dataflow: Sync.	2022-11-30 11:00:07 +00:00
Arthur Baars	cf7ebe2fa8	Merge pull request #11471 from github/rc/3.8 ... Merge rc/3.8 into main	2022-11-29 12:57:34 +01:00
Jeroen Ketema	2ef13d1df7	Merge remote-tracking branch 'upstream/main' into mathiasvp/replace-ast-with-ir-use-usedataflow	2022-11-29 10:43:01 +01:00
Tom Hvitved	f3dca95958	Merge pull request #11087 from hvitved/dataflow/summary-ctx ... Data flow: Add summary/return context to pruning stages 2-4	2022-11-29 10:36:53 +01:00
Felicity Chapman	59b6d657cc	Apply suggestions from code review ... Co-authored-by: hubwriter <hubwriter@github.com>	2022-11-28 15:45:05 +01:00
Felicity Chapman	b5f849463b	Update QL library references	2022-11-28 15:26:24 +01:00
Tom Hvitved	cde05e1190	Data flow: Sync files	2022-11-28 12:11:38 +01:00
Jeroen Ketema	223eeb6921	C++: Fix upper bound detection in default taint flow	2022-11-24 14:38:36 +01:00
Erik Krogh Kristensen	1eec067474	Merge pull request #11294 from erik-krogh/fileDoc ... QL: improve the "this block-comment should have been a QLDoc"-query	2022-11-23 22:23:36 +01:00
Mathias Vorreiter Pedersen	349c5cd800	Merge pull request #11254 from MathiasVP/fix-ssa-flow ... C++: Fix spurious reference flow	2022-11-23 09:52:28 +00:00
Mathias Vorreiter Pedersen	623372238d	C++: Better support for flow-through.	2022-11-22 13:54:44 +00:00
Jeroen Ketema	cfb8f282d1	Merge pull request #11369 from jketema/fun-typo ... C++: Fix typo flagged up by QL-for-QL	2022-11-22 12:34:54 +01:00
Jeroen Ketema	6a68e7936f	C++: Fix typo flagged up by QL-for-QL	2022-11-22 11:53:11 +01:00
Mathias Vorreiter Pedersen	98285393fe	Merge pull request #11357 from MathiasVP/ignore-more-instructions ... C++: Ignore more instructions in dataflow	2022-11-22 10:47:51 +00:00
Jeroen Ketema	4731f9222c	Merge remote-tracking branch 'upstream/main' into mathiasvp/replace-ast-with-ir-use-usedataflow	2022-11-22 10:53:24 +01:00
Mathias Vorreiter Pedersen	320b5ca01a	C++: Ignore more instructions for dataflow.	2022-11-21 21:39:19 +00:00
Mathias Vorreiter Pedersen	fc3d6a1847	Merge branch 'replace-ast-with-ir-use-usedataflow' into fix-ssa-flow	2022-11-21 20:57:24 +00:00