2596 Commits

Author	SHA1	Message	Date
Tom Hvitved	e45edcc159	Merge pull request #11674 from hvitved/dataflow/param-context ... Data flow: Track callable in flow-through pruning	2022-12-16 09:25:15 +01:00
Tom Hvitved	f8571dd0b6	Data flow: Work around functionality-induced misoptimization	2022-12-15 15:29:14 +01:00
Tom Hvitved	6eda042229	Data flow: Sync files	2022-12-15 15:29:13 +01:00
Geoffrey White	e7ea0d7ee9	C++: Attempt to clarify the way Allocation.qll and Deallocation.qll should be used.	2022-12-15 13:05:56 +00:00
Mathias Vorreiter Pedersen	73b93be313	C++: Prevent non-termination in 'getTypeImpl' when a iterator defines itself as 'value_type'.	2022-12-15 11:55:25 +00:00
Mathias Vorreiter Pedersen	526b913f7d	C++: Fix join orders.	2022-12-15 11:55:25 +00:00
Mathias Vorreiter Pedersen	f94ca0e087	C++: Add implicit defs and uses for iterators' underlying containers.	2022-12-15 11:55:21 +00:00
Mathias Vorreiter Pedersen	78b7e12b87	C++: Make 'DefImpl' and 'useImpl' abstract.	2022-12-15 11:54:32 +00:00
Mathias Vorreiter Pedersen	5d417d7a69	C++: Implement an 'Indirection' subtype for iterators.	2022-12-15 11:54:32 +00:00
Mathias Vorreiter Pedersen	ef110e77ff	C++: Remove an unnecessary predicate from the 'Indirection' class.	2022-12-15 11:54:32 +00:00
Mathias Vorreiter Pedersen	22b04af0fa	Merge pull request #11658 from MathiasVP/uncertain-writes ... C++: Flow through uncertain writes	2022-12-14 15:26:28 +00:00
Jeroen Ketema	bb256514c0	Merge remote-tracking branch 'upstream/main' into mathiasvp/replace-ast-with-ir-use-usedataflow	2022-12-14 15:52:20 +01:00
Erik Krogh Kristensen	7615668f92	Merge pull request #11662 from erik-krogh/c-useInstanceOf ... Swift/C++: Use instanceof in more places	2022-12-14 14:30:21 +01:00
Jeroen Ketema	c18cfa7a7a	C++: Fix itemization in QLDoc	2022-12-14 13:46:07 +01:00
Jeroen Ketema	3be0b3e6c7	C++: Recognize indirect argv accesses as flow sources for use-use dataflow ... This fixes the test regression on `cpp/command-line-injection`.	2022-12-13 16:18:17 +01:00
Tom Hvitved	bc58cbec8c	C++: Implement ContentApprox	2022-12-13 09:53:01 +01:00
Tom Hvitved	0c2eee2a72	Data flow: Sync files	2022-12-13 09:52:55 +01:00
erik-krogh	698e05f85a	Swift/C++: Use instanceof in more places	2022-12-12 16:58:13 +01:00
Mathias Vorreiter Pedersen	ad522651ec	C++: Flow through uncertain writes.	2022-12-12 10:54:26 +00:00
Jeroen Ketema	b2091e8632	Merge branch 'main' into mathiasvp/replace-ast-with-ir-use-usedataflow	2022-12-12 11:40:36 +01:00
Jeroen Ketema	cb1dacfef1	C++: Fix QL-for-QL warnings	2022-12-12 11:23:29 +01:00
Jeroen Ketema	d5acd310ce	Merge pull request #11644 from jketema/lower-case-flow-source-description ... C++: Make all flow source descriptions start with a lower case letter	2022-12-10 20:23:14 +01:00
Mathias Vorreiter Pedersen	9f9ffef697	C++: Make the Node IPA type private.	2022-12-10 14:51:21 +00:00
Mathias Vorreiter Pedersen	de70cbfee9	C++: Change caching for dataflow.	2022-12-09 23:30:47 +00:00
Jeroen Ketema	9dc2614012	C++: Make all flow source descriptions start with a lower case letter ... In every context where we use the description a lower case letter makes more sense.	2022-12-09 23:18:58 +01:00
Jeroen Ketema	331fab5ac0	C++: Generalize the ArgvSource flow source ... This matches `isUserInput` and handles cases where `argv` has a different name, which is allowed.	2022-12-09 23:12:31 +01:00
Mathias Vorreiter Pedersen	52bf39bcf9	C++: Use a 'fastTC' instead of '*' to improve performance.	2022-12-09 14:21:09 +00:00
Mathias Vorreiter Pedersen	a3285653ae	C++: Prevent an expression to stepping to itself.	2022-12-09 14:20:27 +00:00
Jeroen Ketema	aabbafd2bf	C++: Fix QL-for-QL warning	2022-12-08 19:33:11 +01:00
Jeroen Ketema	ec0ce56269	C++: Model getaddrinfo as flow source	2022-12-08 19:20:11 +01:00
Robert Marsh	f235b991db	Merge pull request #11374 from MathiasVP/indirect-outnodes-are-post-update-nodes ... C++: Field flow through reference-returning functions	2022-12-08 10:46:19 -05:00
Jeroen Ketema	8f9a73ee09	C++: Address review comments	2022-12-08 16:14:12 +01:00
Jeroen Ketema	f35b7f8fe8	C++: Model scanf and fscanf as flow sources	2022-12-08 15:22:41 +01:00
Mathias Vorreiter Pedersen	f814ce7f10	Merge branch 'mathiasvp/replace-ast-with-ir-use-usedataflow' into refactor-isdef-isuse	2022-12-08 13:25:20 +00:00
Mathias Vorreiter Pedersen	4fd6ac5657	Merge branch 'main' into mathiasvp/replace-ast-with-ir-use-usedataflow	2022-12-08 13:10:18 +00:00
Mathias Vorreiter Pedersen	6897b20722	Merge pull request #11601 from MathiasVP/keep-std-string-iterator	2022-12-08 12:59:33 +00:00
Mathias Vorreiter Pedersen	36d0903733	C++: Simplify 'getSourceVariable'.	2022-12-08 12:29:15 +00:00
Jeroen Ketema	a6bc9fd10f	Merge pull request #11591 from jketema/getenv ... C++: Model `secure_getenv` and `_wgetenv` as local flow sources	2022-12-08 10:44:28 +01:00
Mathias Vorreiter Pedersen	9f85175ee1	C++: Fix blowup in 'stripPointer'.	2022-12-07 22:35:37 +00:00
Mathias Vorreiter Pedersen	5ae3228928	C++: Fix TODO.	2022-12-07 22:34:10 +00:00
Mathias Vorreiter Pedersen	68f0997d87	C++: Generalize loads and stores.	2022-12-07 22:34:10 +00:00
Mathias Vorreiter Pedersen	589f7bdbcc	C++: Introduce BaseSourceVariableInstruction.	2022-12-07 22:34:03 +00:00
Mathias Vorreiter Pedersen	54c12cd715	C++: Reintroduce 'StdBasicStringIterator'.	2022-12-07 18:21:52 +00:00
Jeroen Ketema	01d8ad98f6	C++: Model secure_getenv and _wgetenv as local flow sources	2022-12-07 13:37:12 +01:00
Jeroen Ketema	b5147bbfb0	C++: Deprecate DefaultTaintTracking and TaintTrackingImpl	2022-12-06 17:45:16 +01:00
Mathias Vorreiter Pedersen	e71fbb1def	Merge pull request #11541 from MathiasVP/add-node0 ... C++: Introduce a pre-SSA `DataFlow::Node` class	2022-12-06 13:28:39 +00:00
Tom Hvitved	52f3a48638	Data flow: Sync files	2022-12-05 12:57:27 +01:00
Mathias Vorreiter Pedersen	c563ed3635	Merge branch 'main' into mathiasvp/replace-ast-with-ir-use-usedataflow	2022-12-05 10:27:55 +00:00
Mathias Vorreiter Pedersen	43adfe8893	C++: Fix QLDoc.	2022-12-02 11:30:46 +00:00
Mathias Vorreiter Pedersen	cef7224739	C++: Make QL-for-QL happy.	2022-12-02 10:12:25 +00:00