Mathias Vorreiter Pedersen
5a7cb8f25a
C++: Fix duplication on reference dereference expressions.
2023-11-16 10:52:35 +00:00
Mathias Vorreiter Pedersen
5c0fb2030d
C++: Move change note.
2023-11-16 09:57:08 +00:00
Mathias Vorreiter Pedersen
ec63099c54
C++: Add change note.
2023-11-15 11:57:09 +00:00
Anders Schack-Mulligen
bf6cfd3bef
Rangeanalysis: Simplify api.
2023-11-13 10:35:44 +01:00
Anders Schack-Mulligen
30aefabb2a
Rangeanalysis: Rename predicate.
2023-11-13 10:35:44 +01:00
Anders Schack-Mulligen
27e6173bb7
C++: Remove SemSsaExplicitUpdate.getSourceExpr.
2023-11-13 10:35:43 +01:00
Anders Schack-Mulligen
3a73faf061
Rangeanalysis: Remove unused getAlternateType predicates.
2023-11-13 10:35:43 +01:00
Anders Schack-Mulligen
00549e36ed
Merge pull request #14742 from aschackmull/rangeanalysis/share-util-3
...
Java/C++/Rangeanalysis: Share more range analysis utility predicates.
2023-11-13 10:19:41 +01:00
Mathias Vorreiter Pedersen
01a074c146
Merge pull request #14749 from MathiasVP/less-code-duplication
2023-11-10 19:45:56 +00:00
Jeroen Ketema
3a62628938
Merge pull request #14735 from jketema/strl
...
C++: Add models for `strlcpy` and `strlcat`
2023-11-10 17:51:59 +01:00
Mathias Vorreiter Pedersen
9062fb666a
C++: Move a couple of predicates to 'Node0Impl'.
2023-11-10 16:26:03 +00:00
Jeroen Ketema
b48d483eba
C++: Add change note
2023-11-10 17:25:19 +01:00
Mathias Vorreiter Pedersen
2ceb4cffbc
Merge pull request #14736 from MathiasVP/fix-global-indirect-flow
...
C++: Fix indirect global-variable flow
2023-11-10 14:25:23 +00:00
Jeroen Ketema
c71bdce2d0
Merge pull request #14744 from jketema/fgets
...
C++: Fix `hasRemoteFlowSource` for `fgets`
2023-11-10 14:03:40 +01:00
Jeroen Ketema
617d950a25
Apply suggestions from code review
...
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com >
2023-11-10 13:55:39 +01:00
Jeroen Ketema
1c87875049
C++: Drop the size return value of strlcat from hasTaintFlow
2023-11-10 13:15:57 +01:00
Jeroen Ketema
5e21a5d284
C++: Fix flow for return values of strlcat and strlcpy
2023-11-10 12:28:48 +01:00
Jeroen Ketema
ba51b65d84
C++: Fix hasRemoteFlowSource for fgets
...
Also add the test that exposed this. Note that the test would only have started
failing after `cpp/uncontrolled-process-operation` with the rewrite of the
query away from default taint tracking, which has not happened yet.
2023-11-10 11:56:23 +01:00
Jeroen Ketema
e4c8406365
C++: Split strlcat off in a separate model
2023-11-10 10:11:57 +01:00
Mathias Vorreiter Pedersen
b858a284c9
Merge pull request #14726 from microsoft/28-strsafe-library-updates2
2023-11-09 21:39:10 +00:00
Mathias Vorreiter Pedersen
eb1024c79b
C++: Improve (and simplify) 'toString's.
2023-11-09 20:27:23 +00:00
Mathias Vorreiter Pedersen
86e791980c
C++: Simplify 'isGlobalUse' and 'isGlobalDefImpl'.
2023-11-09 20:27:23 +00:00
Mathias Vorreiter Pedersen
9762313500
C++: Implement jumpStep using the indirection instead of index.
2023-11-09 20:27:23 +00:00
Mathias Vorreiter Pedersen
95bb70f577
C++: Also add a 'getIndirection' on 'GlobalDef' as well. This will be useful in the next commit.
2023-11-09 20:25:29 +00:00
Benjamin Rodes
5e140021fb
Removed non-ascii characters.
2023-11-09 15:24:58 -05:00
Mathias Vorreiter Pedersen
fd26ae18bf
C++: Obtain the SSA variable of a 'GlobalUse' using the indirection instead of the index (like we do for non-global uses as well).
2023-11-09 20:20:27 +00:00
Mathias Vorreiter Pedersen
bb5a78d3f1
C++: Factor the IPA body of 'TGlobalUse' and 'TGlobalDef' out into predicates.
2023-11-09 20:17:47 +00:00
Anders Schack-Mulligen
657c29f409
Java/C++: Share valueFlowStep.
2023-11-09 20:24:28 +01:00
Benjamin Rodes
8674139de6
Change log file name change
2023-11-09 13:24:14 -05:00
Jeroen Ketema
a051a57e00
Update cpp/ql/lib/semmle/code/cpp/models/implementations/Strcat.qll
...
Co-authored-by: Mathias Vorreiter Pedersen <mathiasvp@github.com >
2023-11-09 17:48:45 +01:00
Jeroen Ketema
0b91310357
C++: Add models for strlcpy and strlcat
2023-11-09 17:21:37 +01:00
Anders Schack-Mulligen
b8e7e1d15e
Java/C++: Share ssaUpdateStep.
2023-11-09 16:02:44 +01:00
Anders Schack-Mulligen
daffae020b
Java/C++: Share eqFlowCond.
2023-11-09 16:00:46 +01:00
Anders Schack-Mulligen
abe0bb70ac
C++: Fix operand ssa variables for range analysis.
2023-11-09 12:26:53 +01:00
Ben Rodes
79dcb4b48c
Update cpp/ql/lib/change-notes/2023-11-8-strsafe-models.md
...
Co-authored-by: Mathias Vorreiter Pedersen <mathiasvp@github.com >
2023-11-08 12:37:55 -05:00
Benjamin Rodes
bdae2af0e2
Adding missing strsafe sprintf variants.
2023-11-08 12:20:53 -05:00
Benjamin Rodes
c3ff181198
Adding change log
2023-11-08 12:20:04 -05:00
Anders Schack-Mulligen
1f4cd74a1c
Java/C++: Move SsaReadPosition to shared qlpack.
2023-11-08 12:11:17 +01:00
Mathias Vorreiter Pedersen
ab64d9a9d6
Merge pull request #14713 from MathiasVP/no-gvn-as-ssa-in-range-analysis
...
C++: Don't use GVN as SSAVariable in new range analysis
2023-11-08 09:28:15 +00:00
Anders Schack-Mulligen
45ae4ed362
Merge pull request #14711 from aschackmull/shared/rangeutil-share2
...
Java/C++/RangeAnalysis: Move a couple of utility predicates to shared qlpack
2023-11-08 08:33:12 +01:00
Mathias Vorreiter Pedersen
a8eed6bd7e
Merge pull request #14704 from MathiasVP/fix-uninitialized-local
...
C++: IR'ify `cpp/uninitialized-local` and fix FPs
2023-11-07 22:45:34 +00:00
Mathias Vorreiter Pedersen
91b29eee53
C++: Don't use GVN as an SSAVariable in range analysis.
2023-11-07 14:52:50 +00:00
Mathias Vorreiter Pedersen
a04830b8b2
Merge pull request #14697 from MathiasVP/range-analysis-simplify-conversions
...
C++: Simplify the definition of `SemExpr` for range analysis
2023-11-07 14:52:09 +00:00
Anders Schack-Mulligen
12cba7909b
Java/C++: Move range util guard-controls predicates to shared pack.
2023-11-07 15:14:34 +01:00
Anders Schack-Mulligen
f2ca52d951
Java/C++: Move range util backEdge predicate to shared pack.
2023-11-07 15:14:34 +01:00
Mathias Vorreiter Pedersen
0fd4d4a114
C++: Add QLDoc.
2023-11-07 09:29:34 +00:00
Mathias Vorreiter Pedersen
022c9eb3cd
C++: Add a barrier feature to 'MustFlow'.
2023-11-07 09:23:42 +00:00
Mathias Vorreiter Pedersen
6bf2d47321
C++: Allow source = sink in 'MustFlow'.
2023-11-07 09:23:42 +00:00
Mathias Vorreiter Pedersen
a17cd9bc1c
Merge pull request #14667 from MathiasVP/more-function-input-and-output-ipa-numbers
...
C++: Allocate more `FunctionInput` and `FunctionOutput`s
2023-11-07 08:57:31 +00:00
Mathias Vorreiter Pedersen
d38fa13299
C++: Remove more uses of 'getConverted' and 'getUnconverted'.
2023-11-06 16:11:55 +00:00
