Commit Graph

976 Commits

Author SHA1 Message Date
copilot-swe-agent[bot]
4be7ff07c3 Convert ReDoS query tests to inline test expectations 2026-07-17 18:27:51 +00:00
copilot-swe-agent[bot]
1c810ede03 Replace non-ASCII characters (em/en dash, arrow) with ASCII equivalents in regex files 2026-07-17 17:32:30 +00:00
copilot-swe-agent[bot]
96951956fb Fix "modelled" -> "modeled" spelling in regex PR files 2026-07-17 14:39:10 +00:00
copilot-swe-agent[bot]
8b12f32dff Add BRE query test coverage and change note; regenerate .expected 2026-07-17 13:51:06 +00:00
copilot-swe-agent[bot]
bc5cecf7d4 Add end-to-end ERE ReDoS query tests 2026-07-17 13:17:57 +00:00
copilot-swe-agent[bot]
e0cc6795dc Add isBacktrackingEngine gate excluding awk/grep/egrep from C++ ReDoS queries 2026-07-17 12:06:30 +00:00
copilot-swe-agent[bot]
d9f380d446 POSIX bracket soundness: opaque punct/cntrl/print/graph; non-recursive gate; adversarial tests 2026-07-17 10:18:17 +00:00
copilot-swe-agent[bot]
c1103b9b02 Fix C++ ECMAScript regex parser: recognize POSIX bracket sub-expressions; document multiline 2026-07-17 09:52:02 +00:00
copilot-swe-agent[bot]
00672d61c9 Expand cpp/polynomial-redos test coverage (Phase 3 follow-up) 2026-07-16 14:12:03 +00:00
copilot-swe-agent[bot]
8a8590c50c Expand C++ ReDoS test coverage (Phase 4 follow-up) 2026-07-16 13:53:28 +00:00
copilot-swe-agent[bot]
d6c76aa261 Fix cpp/redos test: swap non-exponential (a|ab)* for (a*)* and populate expected 2026-07-16 13:32:37 +00:00
copilot-swe-agent[bot]
47969aece8 Add cpp/redos exponential ReDoS query (Phase 4) 2026-07-16 13:06:20 +00:00
copilot-swe-agent[bot]
84d7a2b585 Add cpp/polynomial-redos query (Phase 3) 2026-07-16 12:49:15 +00:00
Owen Mansel-Chan
19745e13b5 Fix some lines with // $ ... // $ MISSING:
Note that when a line is marked `// BAD [NOT DETECTED]` but actually has
an alert, I assume that the `[NOT DETECTED]` is outdated and should be
deleted.
2026-07-07 20:48:39 +01:00
Owen Mansel-Chan
9d9590623d Address review comments 2026-07-07 20:48:36 +01:00
Owen Mansel-Chan
fa16728522 Fix comments in one test 2026-07-07 12:06:43 +01:00
Owen Mansel-Chan
76d8ae8694 Add MISSING: tag 2026-07-07 10:59:21 +01:00
Owen Mansel-Chan
843ac7c6b0 Add SPURIOUS: tags 2026-07-07 10:54:11 +01:00
Owen Mansel-Chan
a2c5d4c818 C++: Convert qlref tests to inline expectations 2026-07-07 09:49:50 +01:00
Mathias Vorreiter Pedersen
caaed72288 C++: Hide summary nodes that should be hidden and accept test changes. 2026-06-29 18:30:03 +01:00
Mathias Vorreiter Pedersen
4396e66f35 C++: Fix FP by providing an implementation of 'hasSocketInput'. 2026-05-15 21:12:34 +01:00
Mathias Vorreiter Pedersen
eda33adafd C++: Add FP. 2026-05-15 21:07:45 +01:00
Owen Mansel-Chan
de4fe6d25c Use inline expectations for query test 2026-03-26 15:27:17 +00:00
Owen Mansel-Chan
64a52ba07f Update test that uses zmq models 2026-03-26 14:53:33 +00:00
Geoffrey White
92c9a8e146 Update cpp/ql/test/query-tests/Security/CWE/CWE-468/semmle/SuspiciousAddWithSizeof/buildless.cpp 2026-03-19 13:51:03 +00:00
Geoffrey White
0f794b57ed C++: Fix the issue. 2026-03-19 13:16:16 +00:00
Geoffrey White
2e987f8d78 C++: Add test cases emulating cpp/suspicious-add-sizeof in buildless mode. 2026-03-19 13:00:58 +00:00
Mingjie Shen
25a46a82ba C++: Use appropriate sizeof in CWE-119 memcpy tests
Signed-off-by: Mingjie Shen <shen497@purdue.edu>
2025-11-27 05:15:51 +00:00
Mingjie Shen
b293dfe3a6 C++: Fix CWE-119 memcpy tests
sizeof(pointer) only gives the pointer size, not the buffer
size, so use explicit 10/20 lengths in tests.cpp and update
OverflowBuffer.expected to accept the resulting memcpy diagnostics.

Signed-off-by: Mingjie Shen <shen497@purdue.edu>
2025-11-19 22:06:06 +00:00
Jeroen Ketema
352610d651 C++: Add GOOD annotation 2025-09-12 10:29:27 +02:00
Jeroen Ketema
2bc035cfcf C++: Update test results after extractor changes 2025-09-11 10:31:01 +02:00
Jeroen Ketema
d224f85b24 C++: Add uninitialized variable FP test 2025-09-11 10:31:00 +02:00
Jeroen Ketema
6b580ac12d C++: Update expected test results 2025-08-29 10:57:03 +02:00
Jeroen Ketema
a145e52faf C++: Add uninitialized local test 2025-08-29 10:55:10 +02:00
Nora Dimitrijević
43e99d0872 [TEST] C++: CleartextSqliteDatabase: add new test 2025-08-15 12:00:26 +02:00
Mathias Vorreiter Pedersen
39f5e33dea C++: Accept more test changes. 2025-08-13 17:46:06 +02:00
Jeroen Ketema
f9f99a043c Merge pull request #20126 from MathiasVP/fix-missing-global-flow
C++: Fix missing global variable flow
2025-08-11 11:54:35 +02:00
Mathias Vorreiter Pedersen
0c9d14f417 C++: Accept test changes. 2025-08-08 15:14:09 +01:00
Mathias Vorreiter Pedersen
26be9839df C++: Add FP. 2025-08-08 15:10:40 +01:00
Mathias Vorreiter Pedersen
fca49dde92 C++: Accept test changes. 2025-08-02 16:43:19 +01:00
Mathias Vorreiter Pedersen
1189665970 C++: Add barriers to 'cpp/overrun-write'. 2025-07-22 18:35:56 +01:00
Mathias Vorreiter Pedersen
e0eadc75dd C++: Remove the ad-hoc code for keeping track of increments/decrements on pointers in the 'cpp/overrun-write' query. 2025-07-22 18:35:31 +01:00
Mathias Vorreiter Pedersen
92a730c9ac C++: Add a false positive. 2025-07-22 18:35:21 +01:00
Mathias Vorreiter Pedersen
1d36405084 C++: Accept path changes. 2025-07-14 15:47:06 +01:00
Jeroen Ketema
399967b507 C++: Do not alert on unreachable code in cpp/incorrect-string-type-conversion 2025-07-10 11:49:12 +02:00
Jeroen Ketema
2907861075 C++: Add cpp/incorrect-string-type-conversion test with unreachable code 2025-07-10 11:48:53 +02:00
Jeroen Ketema
acc06fab20 C++: Convert cpp/incorrect-string-type-conversion test to inline expectations 2025-07-10 11:48:18 +02:00
Jeroen Ketema
0996e6083e C++: Pretty print MaD ids in test output 2025-06-26 23:38:32 +02:00
Geoffrey White
c2b317783f C++: Fix for SQL query. 2025-06-24 09:29:46 +01:00
Eric Bickle
32464a8995 C++: Support SQL Injection sinks for Oracle Call Interface (OCI) 2025-06-20 06:05:24 -07:00