7071 Commits

Author	SHA1	Message	Date
Mathias Vorreiter Pedersen	cc6268339b	C++: Fix failing test and accept test cases.	2023-11-13 15:57:22 +00:00
Mathias Vorreiter Pedersen	7048190929	Update cpp/ql/src/Security/CWE/CWE-120/UnboundedWrite.ql ... Co-authored-by: Jeroen Ketema <93738568+jketema@users.noreply.github.com>	2023-11-09 12:39:10 +00:00
Mathias Vorreiter Pedersen	38bd893c81	Merge branch 'main' into no-dtt-in-unbounded-write	2023-11-08 15:06:59 +00:00
Mathias Vorreiter Pedersen	e90803a81c	C++: Rewrite 'cpp/unbounded-write' away from DefaultTaintTracking.	2023-11-08 14:57:04 +00:00
Mathias Vorreiter Pedersen	6669cf805f	C++: Add change note.	2023-11-07 09:32:07 +00:00
Mathias Vorreiter Pedersen	022c9eb3cd	C++: Add a barrier feature to 'MustFlow'.	2023-11-07 09:23:42 +00:00
Mathias Vorreiter Pedersen	1dc08941f8	C++: Use 'MustFlow' in 'cpp/uninitialized-local'.	2023-11-07 09:23:41 +00:00
Mathias Vorreiter Pedersen	679d64f0e8	Merge pull request #14647 from microsoft/24-odbc-model-instantiation-upstream2 ... C++: Adding a model implementation for ODBC.	2023-11-02 19:42:27 +00:00
Mathias Vorreiter Pedersen	37a536baf9	Merge pull request #14650 from jketema/invalid-experimental ... C++: Drop `experimental` tag from `cpp/invalid-pointer-deref`	2023-10-31 20:14:25 +01:00
Jeroen Ketema	3478890090	C++: Drop experimental tag from cpp/invalid-pointer-deref	2023-10-31 19:46:22 +01:00
Mathias Vorreiter Pedersen	b79a5fee14	Merge pull request #14637 from MathiasVP/dataflow-for-realloc ... C++: Add a taint model for `realloc`	2023-10-31 18:24:04 +01:00
Benjamin Rodes	b9ac038de2	Moving change log.	2023-10-31 09:21:01 -07:00
Benjamin Rodes	07ded4278f	Change log	2023-10-31 09:14:47 -07:00
Mathias Vorreiter Pedersen	4a1bf95a87	C++: Expose a public memset model and use it in the exposure queries.	2023-10-31 11:17:51 +00:00
github-actions[bot]	2b939fdf08	Post-release preparation for codeql-cli-2.15.2	2023-10-30 16:06:51 +00:00
github-actions[bot]	4641990021	Release preparation for version 2.15.2	2023-10-30 11:05:53 +00:00
github-actions[bot]	8dcd8b9e5b	Post-release preparation for codeql-cli-2.15.1	2023-10-17 20:24:00 +00:00
github-actions[bot]	3b3c036626	Release preparation for version 2.15.1	2023-10-16 17:49:39 +00:00
Mathias Vorreiter Pedersen	ba27a0d515	Update cpp/ql/src/change-notes/2023-10-16-redundant-null-check-simple.md ... Co-authored-by: Jeroen Ketema <93738568+jketema@users.noreply.github.com>	2023-10-16 12:48:53 +02:00
Mathias Vorreiter Pedersen	32d82380f1	C++: Add change note.	2023-10-16 11:08:27 +01:00
Mathias Vorreiter Pedersen	20c3984872	C++: Add the 'security' tag and add a 'security-severity' rating to 'cpp/redundant-null-check-simple'.	2023-10-16 09:54:36 +01:00
Tony Torralba	ae8e237f2c	Merge pull request #14494 from atorralba/atorralba/remove-library ... Java/C/C#: Remove library annotations	2023-10-16 09:01:40 +02:00
Jeroen Ketema	d56a9f0781	Merge pull request #14424 from jketema/rewrite-cgi-xss ... C++: Rewrite `cpp/cgi-xss` to not use default taint tracking	2023-10-13 17:57:04 +02:00
Jeroen Ketema	61676277e8	C++: Fix barrier in cpp/cgi-xss	2023-10-13 14:05:47 +02:00
Tony Torralba	0cea3f8531	Remove library annotations	2023-10-13 12:46:56 +02:00
Mathias Vorreiter Pedersen	64fa6c8bbd	C++: Remove the hacky flow state since this is no longer needed after #13717.	2023-10-12 13:58:36 +01:00
Henry Mercer	1a370bfbbe	Merge pull request #14443 from github/post-release-prep/codeql-cli-2.15.0 ... Post-release preparation for codeql-cli-2.15.0	2023-10-11 17:39:04 +01:00
github-actions[bot]	ae6af17c74	Post-release preparation for codeql-cli-2.15.0	2023-10-11 14:19:20 +00:00
Jeroen Ketema	3b777c2764	C++: Rewrite cpp/cgi-xss to not use default taint tracking ... Also add a test that demonstrates that we need to look at inidrect expressions and not direct ones.	2023-10-10 11:56:39 +02:00
Jeroen Ketema	6ff8e06ace	Revert "C++: Rewrite cpp/cgi-xss to not use default taint tracking" ... This reverts commit b6132d2a0f.	2023-10-09 16:30:21 +02:00
Jeroen Ketema	b6132d2a0f	C++: Rewrite cpp/cgi-xss to not use default taint tracking	2023-10-06 16:11:13 +02:00
github-actions[bot]	9fe993bec3	Release preparation for version 2.15.0	2023-10-04 14:15:27 +00:00
Rasmus Wriedt Larsen	9c02b4f21c	Merge pull request #14289 from microsoft/jb1/16-cryptography-models-libraries-and-queries-migration ... 16 cryptography models libraries and queries migration	2023-10-04 12:27:59 +02:00
Josh Brown	ad86e576a4	autoformat	2023-10-03 13:40:17 -07:00
Josh Brown	b683a3caf8	Merge branch 'main' into jb1/16-cryptography-models-libraries-and-queries-migration	2023-10-04 07:24:29 +11:00
Henry Mercer	da92da2204	Bump minor versions of packs we regularly release	2023-10-03 16:31:23 +01:00
Henry Mercer	f3847b3f51	Merge branch 'main' into henrymercer/rc-3.11-mergeback	2023-10-03 16:30:23 +01:00
Mathias Vorreiter Pedersen	b6ed9ccfda	C++: Add change notes.	2023-10-03 09:33:40 +02:00
Mathias Vorreiter Pedersen	7084dc1a88	C++: Promote 'cpp/use-after-free' and 'cpp/double-free' to Code Scanning.	2023-10-03 09:22:47 +02:00
Alex Eyers-Taylor	6b0ae0f312	CPP: Remove unned argument from use-after-free	2023-09-28 17:53:32 +01:00
Benjamin Rodes	25203db4e7	Removing 'security' tags from all queries.	2023-09-27 12:43:51 -04:00
Benjamin Rodes	c0c2ae544b	Updating weak elliptic curve sample queries.	2023-09-21 12:12:16 -07:00
Benjamin Rodes	50db4fd63e	Moved Cpp into sub directory 'cryptography' instead of crypto. Added python models, inventory, and example alerts.	2023-09-21 12:12:15 -07:00
Benjamin Rodes	fe22dc45b1	Moving inventory queries into a new subdirectory structure for new_models and old_models.	2023-09-21 12:12:15 -07:00
Benjamin Rodes	6d7ac8de28	Adding example alerts	2023-09-21 12:12:15 -07:00
Benjamin Rodes	4c9cc5a21f	Adding inventory queries.	2023-09-21 12:12:15 -07:00
Alex Eyers-Taylor	d0849311a6	CPP: Fix use after free FPs by elimnatiing freeing nodes rather than freeing expressions.	2023-09-20 18:47:57 +01:00
github-actions[bot]	3acf5244b0	Post-release preparation for codeql-cli-2.14.6	2023-09-20 10:25:10 +00:00
github-actions[bot]	0a3670727f	Release preparation for version 2.14.6	2023-09-19 11:40:30 +00:00
AlexDenisov	ff7ff6dcfa	Merge pull request #14201 from MathiasVP/add-ast-consistency-query ... C++: Add AST consistency query	2023-09-14 16:34:20 +02:00