Ben Rodes
1fb7f089ca
Update cpp/ql/src/Likely Bugs/Format/NonConstantFormat.ql
...
Co-authored-by: Mathias Vorreiter Pedersen <mathiasvp@github.com >
2024-02-16 10:06:34 -05:00
Mathias Vorreiter Pedersen
497592a4d4
C++: Add change note.
2024-02-16 13:36:25 +01:00
Benjamin Rodes
d6b0746b30
The non-constant format query is now a path query. Minor changes to the output alert to be more precise on what is being alerted. Minor changes to the query itself to avoid redundancies with argv.
2024-02-15 12:14:52 -05:00
Benjamin Rodes
caf2ee27fa
Adding false negative tests for future work.
2024-02-15 09:43:26 -05:00
Benjamin Rodes
5c508553f3
Efficiency improvement (force a better join order)
2024-02-13 09:42:08 -08:00
Benjamin Rodes
091416131b
Removing 'const' specifier filtering after discussions with the team. We will test if this causes undesirable cases in DCA and then choose which approach is best.
2024-02-12 09:38:00 -05:00
Benjamin Rodes
d4bc2ceb37
Minor efficiency improvements and comments.
2024-02-08 10:11:50 -05:00
Dave Bartolomeo
92bd550c55
Merge pull request #15531 from github/post-release-prep/codeql-cli-2.16.2
...
Post-release preparation for codeql-cli-2.16.2
2024-02-08 05:58:17 -08:00
Benjamin Rodes
f12a1ecdf2
Simplifying the query.
2024-02-07 14:15:16 -05:00
Benjamin Rodes
9fc2405681
Updating non-const source logic and associated tests and expected files.
2024-02-07 13:54:56 -05:00
Mathias Vorreiter Pedersen
950b5f2235
C++: Block flow out of 'gettext' in 'cpp/non-constant-format'. ( #52 )
2024-02-07 09:10:12 -05:00
github-actions[bot]
b5139078d0
Post-release preparation for codeql-cli-2.16.2
2024-02-06 19:22:35 +00:00
Benjamin Rodes
80bf38d8cc
Initial working draft of non-const source refactor.
2024-02-06 14:20:01 -05:00
Benjamin Rodes
5e5fea8ef3
Merge branch '50-model-gettext-family-of-string-operations' into 51-2cppnon-constant-format-alter-not-const-source
2024-02-06 12:47:08 -05:00
Ben Rodes
0023291903
Update cpp/ql/src/change-notes/2024-02-05-gettext-dataflows.md
...
Co-authored-by: Mathias Vorreiter Pedersen <mathiasvp@github.com >
2024-02-06 09:12:25 -05:00
Mathias Vorreiter Pedersen
33cefabe27
Update cpp/ql/src/CHANGELOG.md
2024-02-06 11:05:22 +00:00
Mathias Vorreiter Pedersen
6c1e3b1ba6
Update cpp/ql/src/change-notes/released/0.9.4.md
2024-02-06 11:02:15 +00:00
Benjamin Rodes
256554df06
Added change log
2024-02-05 13:04:16 -05:00
github-actions[bot]
c1b35fbf47
Release preparation for version 2.16.2
2024-02-05 17:58:57 +00:00
Ben Rodes
e47df5c7bc
Update NonConstantFormat.ql
...
Removed dead comment
2024-02-05 09:39:05 -05:00
Benjamin Rodes
e8587d060d
Removing comments and formatting.
2024-02-02 16:23:14 -05:00
Benjamin Rodes
9577c35d85
Incremental update to NonConstantFormat.ql
2024-02-02 16:06:59 -05:00
Mathias Vorreiter Pedersen
4b5a203b46
Merge pull request #15463 from microsoft/42-false-positive-cpp-uninitializedlocal
...
False positive fix for cpp/uninitialized-local
2024-01-31 09:31:31 +00:00
Benjamin Rodes
1a044fbbde
Merge branch '42-false-positive-cpp-uninitializedlocal' of https://github.com/microsoft/codeql into 42-false-positive-cpp-uninitializedlocal
2024-01-30 09:22:51 -05:00
Benjamin Rodes
f58f77de82
PR change suggestions.
2024-01-30 09:22:22 -05:00
Ben Rodes
8c04bbfb57
Update cpp/ql/src/change-notes/2024-01-29-uninitialized-local-false-positive.md
...
Co-authored-by: Mathias Vorreiter Pedersen <mathiasvp@github.com >
2024-01-30 09:19:49 -05:00
Mathias Vorreiter Pedersen
78d5d9a7ab
Merge pull request #15448 from microsoft/false_positive_cpp_incorrect_string_type_conversion
...
cpp/incorrect-string-type-conversion false positive fixes
2024-01-30 09:37:01 +00:00
Benjamin Rodes
13cf555cee
False positive fix for cpp/uninitialized-local
2024-01-29 13:21:05 -05:00
Mathias Vorreiter Pedersen
5024df9c4e
C++: Add change note.
2024-01-29 16:30:55 +00:00
Mathias Vorreiter Pedersen
ebd1595fbe
C++: Fix FP by concluding that a less-than-zero check also implies a not-equal-to-EOF check.
2024-01-29 16:24:36 +00:00
Ben Rodes
308a3b533f
Update cpp/ql/src/change-notes/2024-01-29-false_positive_incorrect_string_type_conversion.md
...
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com >
2024-01-29 09:35:59 -05:00
Benjamin Rodes
6f17c432d9
Change log
2024-01-29 09:19:39 -05:00
Mathias Vorreiter Pedersen
044d94c580
C++: Add change note
2024-01-29 13:47:17 +00:00
Mathias Vorreiter Pedersen
41f44f598a
C++: Explicitly check that a check for EOF isn't present.
2024-01-29 11:33:14 +00:00
Ben Rodes
f79846467e
Update cpp/ql/src/Security/CWE/CWE-704/WcharCharConversion.ql
...
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com >
2024-01-26 15:25:08 -05:00
Benjamin Rodes
562221f48e
False positive fix.
2024-01-26 13:27:14 -05:00
Geoffrey White
b125d2c9ab
Merge branch 'main' into cppfiles
2024-01-26 16:47:48 +00:00
github-actions[bot]
d0b74c00fe
Post-release preparation for codeql-cli-2.16.1
2024-01-23 23:02:29 +00:00
github-actions[bot]
7ef611e6dc
Release preparation for version 2.16.1
2024-01-23 19:45:16 +00:00
Mathias Vorreiter Pedersen
145b5a30bd
Merge pull request #15343 from microsoft/38-cpp-generalize-use-after-free-libraries
...
Generalization of FlowAfterFree
2024-01-23 16:49:29 +00:00
Benjamin Rodes
da10e6ca5b
Moving FlowAfterFree and UseAfterFree.qll as a general purpose lib.
2024-01-22 11:18:03 -05:00
erik-krogh
8be7eadace
delete outdated deprecations
2024-01-22 09:11:35 +01:00
Geoffrey White
5127542677
C++: Rename the query file.
2024-01-19 16:31:34 +00:00
Geoffrey White
01ee61e5ea
C++: Change note.
2024-01-19 15:56:54 +00:00
Geoffrey White
4691bf2cb5
C++: Be more optimistic about successfully scanned files.
2024-01-19 15:55:54 +00:00
Benjamin Rodes
833ef9d6d6
Further reorg of libraries and predicates to allow for more reusable and consistent libraries.
2024-01-18 11:17:24 -05:00
Benjamin Rodes
967526b285
Separating out use after free logic into a library and a ql so the query can be expanded easily.
2024-01-18 10:59:17 -05:00
Ben Rodes
67e43ecc44
Merge branch 'main' into 38-cpp-generalize-use-after-free-libraries
2024-01-17 08:05:41 -08:00
Mathias Vorreiter Pedersen
39dafd6f6a
C++: Suggestions to #15343 ( #39 )
...
* C++: Change the interface of 'FlowAfterFree' so that the module it takes
a single module as a parameter.
* C++: Add another predicate to the module signature.
* C++: Convert the use-after-free and double-free libraries to use new interface.
* C++: Accept test changes.
2024-01-17 11:02:46 -05:00
Benjamin Rodes
a0ef7955b1
Updating FlowAfterFree to not enforce dominance of source/sink. DoubleFree and UseAfterFree queries now enforce dominance.
2024-01-16 13:15:36 -05:00
