Mathias Vorreiter Pedersen
7b0df57d7a
C++: Remove the two configurations that depend on flow state to speed up performance on ChakraCore.
2024-03-11 13:56:22 +00:00
Mathias Vorreiter Pedersen
a548316747
C++: Accept test changes.
2024-03-07 13:55:31 -08:00
Mathias Vorreiter Pedersen
01fc7432cb
C++: Add more tests.
2024-03-06 22:17:33 -08:00
Mathias Vorreiter Pedersen
bf84f3a936
C++: Add FN.
2024-03-06 21:19:17 -08:00
Mathias Vorreiter Pedersen
fc9919a5b6
C++: Add a test that exercise the 'last field' check.
2024-03-06 21:17:55 -08:00
Mathias Vorreiter Pedersen
c2db5f490e
C++: Add more FNs and FPs to show examples of where the 'successor typing' strategy fails.
2024-03-06 21:16:51 -08:00
Mathias Vorreiter Pedersen
cf4c8eb517
C++: Add more tests.
2024-03-06 21:15:25 -08:00
Mathias Vorreiter Pedersen
8ae6fa5366
C++: Add a new query 'cpp/type-confusion' for detecting type confusion vulnerabilities.
2024-03-06 21:11:32 -08:00
Mathias Vorreiter Pedersen
4e913592fa
Merge branch 'main' into cpp-non-constant-format-as-path-query
2024-03-01 09:26:00 +00:00
Mathias Vorreiter Pedersen
2eb8d13439
C++: Accept test changes.
2024-03-01 09:25:25 +00:00
Mathias Vorreiter Pedersen
0bf29f0a62
Merge branch 'main' into model-experiments
2024-02-22 15:05:53 +00:00
Ben Rodes
47f94e2ebe
Merge branch 'main' into cpp-non-constant-format-as-path-query
2024-02-22 06:24:18 -08:00
Mathias Vorreiter Pedersen
b927968e88
Merge pull request #15516 from microsoft/51-2cppnon-constant-format-alter-not-const-source
...
C++: Change sources in `NonConstantFormat.ql`
2024-02-17 00:01:58 +01:00
Benjamin Rodes
aa7c677e13
Merge branch '51-2cppnon-constant-format-alter-not-const-source' into cpp-non-constant-format-as-path-query
...
# Conflicts:
# cpp/ql/src/Likely Bugs/Format/NonConstantFormat.ql
2024-02-16 10:49:05 -05:00
Mathias Vorreiter Pedersen
7c22146f46
C++: Accept query test changes.
2024-02-16 16:33:44 +01:00
Mathias Vorreiter Pedersen
be54a41593
C++: Accept query test changes.
2024-02-16 15:01:50 +01:00
Benjamin Rodes
d6b0746b30
The non-constant format query is now a path query. Minor changes to the output alert to be more precise on what is being alerted. Minor changes to the query itself to avoid redundancies with argv.
2024-02-15 12:14:52 -05:00
Benjamin Rodes
9e50fc6893
Updating tests to account for removing const char* heuristic.
2024-02-15 09:54:03 -05:00
Benjamin Rodes
caf2ee27fa
Adding false negative tests for future work.
2024-02-15 09:43:26 -05:00
Anders Schack-Mulligen
7eb5e1833d
C++: Add empty provenance column to expected files.
2024-02-09 11:32:08 +01:00
Benjamin Rodes
9fc2405681
Updating non-const source logic and associated tests and expected files.
2024-02-07 13:54:56 -05:00
Benjamin Rodes
80bf38d8cc
Initial working draft of non-const source refactor.
2024-02-06 14:20:01 -05:00
Benjamin Rodes
9577c35d85
Incremental update to NonConstantFormat.ql
2024-02-02 16:06:59 -05:00
Mathias Vorreiter Pedersen
6f5ed9ad3b
C++: Accept test changes.
2024-02-01 20:15:15 +00:00
Mathias Vorreiter Pedersen
4b5a203b46
Merge pull request #15463 from microsoft/42-false-positive-cpp-uninitializedlocal
...
False positive fix for cpp/uninitialized-local
2024-01-31 09:31:31 +00:00
Mathias Vorreiter Pedersen
78d5d9a7ab
Merge pull request #15448 from microsoft/false_positive_cpp_incorrect_string_type_conversion
...
cpp/incorrect-string-type-conversion false positive fixes
2024-01-30 09:37:01 +00:00
Benjamin Rodes
13cf555cee
False positive fix for cpp/uninitialized-local
2024-01-29 13:21:05 -05:00
Mathias Vorreiter Pedersen
ea79a84c2e
C++: Accept test changes.
2024-01-29 16:24:44 +00:00
Mathias Vorreiter Pedersen
7e29141196
C++: Add FP test.
2024-01-29 16:23:37 +00:00
Mathias Vorreiter Pedersen
a5794509ec
C++: Accept test changes.
2024-01-29 11:33:14 +00:00
Mathias Vorreiter Pedersen
3a66fd7175
C++: Add FP test.
2024-01-29 10:59:38 +00:00
Benjamin Rodes
b7648bcf27
Adding test cases.
2024-01-26 15:19:07 -05:00
Geoffrey White
b125d2c9ab
Merge branch 'main' into cppfiles
2024-01-26 16:47:48 +00:00
Benjamin Rodes
2181fcf284
Updating .expected to account for new free/deallocation sources.
2024-01-22 10:36:24 -05:00
Geoffrey White
5127542677
C++: Rename the query file.
2024-01-19 16:31:34 +00:00
Geoffrey White
4691bf2cb5
C++: Be more optimistic about successfully scanned files.
2024-01-19 15:55:54 +00:00
Geoffrey White
2eba3db1cb
C++: Add a test for SuccessfullyExtractedFiles.ql and friends.
2024-01-19 15:50:28 +00:00
Mathias Vorreiter Pedersen
39dafd6f6a
C++: Suggestions to #15343 ( #39 )
...
* C++: Change the interface of 'FlowAfterFree' so that the module it takes
a single module as a parameter.
* C++: Add another predicate to the module signature.
* C++: Convert the use-after-free and double-free libraries to use new interface.
* C++: Accept test changes.
2024-01-17 11:02:46 -05:00
Benjamin Rodes
9a0e2e57ba
Updating .expected
2024-01-16 13:18:25 -05:00
Paolo Tranquilli
0bfeadbf1f
C++: add .def to exception to test
2024-01-09 15:30:27 +01:00
Mathias Vorreiter Pedersen
44124158c4
Merge pull request #15078 from alexet/unique-pointer-temporary
...
CPP: Add query for detecting invalid uses of temporary unique pointers.
2023-12-20 11:16:01 +01:00
Mathias Vorreiter Pedersen
82b9f1b31c
C++: Accept test changes.
2023-12-15 14:57:31 +00:00
Alex Eyers-Taylor
49e1467581
CPP: Fix handling of ternary operators in tempory queries and add tests.
2023-12-15 11:03:23 +00:00
Jeroen Ketema
2065ecff66
C++: Only consider the maximum buffer size for badly bounded write
2023-12-15 10:46:13 +01:00
Mathias Vorreiter Pedersen
0c100eb122
C++: Accept test changes.
2023-12-14 14:44:58 +00:00
Alex Eyers-Taylor
e9bc5a54ea
CPP: Add query for detecting invalid uses of temporary unique pointers.
2023-12-12 16:22:20 +00:00
Mathias Vorreiter Pedersen
3dea467dcc
Merge pull request #15047 from MathiasVP/add-puns-for-addresses-of-arguments
...
C++: Add `PostUpdateNode`s for addresses of outgoing arguments
2023-12-12 13:55:13 +00:00
Alexander Eyers-Taylor
e87b3911dc
Merge pull request #14910 from alexet/incorrect-scanf
...
CPP: Add query for detecteing incorrect error checking for scanf
2023-12-12 11:57:17 +00:00
Mathias Vorreiter Pedersen
a6104ad878
C++: Fix test annotations.
2023-12-12 11:06:18 +00:00
Mathias Vorreiter Pedersen
90b06c2046
C++: Switch the source of use-after-free and double-free to be post-update nodes.
2023-12-08 14:41:29 +00:00
