Mathias Vorreiter Pedersen
2345907a52
C++: Reintroduce the 'cannotContainString' optimization that was removed in #15516 .
2024-03-11 18:49:03 +00:00
Mathias Vorreiter Pedersen
f97b6e2848
C++: Stop conflating pointers and indirections in the query.
2024-03-11 18:48:19 +00:00
Mathias Vorreiter Pedersen
32e532ff3c
C++: Some cleanup to avoid conflating the case of a function returning something as a return value, and a function updating one of its arguments.
2024-03-11 18:42:42 +00:00
Henry Mercer
c325ff8a23
Mark lines of code queries as telemetry queries
...
The new file coverage metrics are available in all supported GHES
versions. This PR tags lines of code queries as telemetry queries. Lines
of code information will still be available in the SARIF file, but it
will no longer be displayed in the logging output of the CLI.
The one exception is the metric queries for Java/Kotlin that provides
separate lines of code information for Java and Kotlin. I've kept these
since separate file coverage information for languages like Java and
Kotlin is only available for GHES 3.12 and later.
2024-03-11 16:40:31 +00:00
Mathias Vorreiter Pedersen
7b0df57d7a
C++: Remove the two configurations that depend on flow state to speed up performance on ChakraCore.
2024-03-11 13:56:22 +00:00
Geoffrey White
026a13b4db
C++: Change Node/Node0.getEnclosingCallable back to returning Declaration.
2024-03-11 12:22:55 +00:00
Tom Hvitved
da66281fef
Sync files
2024-03-11 13:02:04 +01:00
Geoffrey White
4bc272da73
C++: Doc correction and TODOs for interpretOutput, interpretInput.
2024-03-11 10:16:46 +00:00
Geoffrey White
e8d0f1fa3e
C++: Comments.
2024-03-08 18:25:01 +00:00
Mathias Vorreiter Pedersen
761f6d3a7e
C++: Disable field flow from the 'cpp/type-confusion' query to fix performance on ChakraCore.
2024-03-07 15:24:04 -08:00
Mathias Vorreiter Pedersen
a548316747
C++: Accept test changes.
2024-03-07 13:55:31 -08:00
Mathias Vorreiter Pedersen
4f9bdca4f0
C++: Optimize.
2024-03-07 13:08:26 -08:00
Mathias Vorreiter Pedersen
cedbfbe7ea
C++: Use a more generous definition of compatible types.
2024-03-07 10:50:20 -08:00
Mathias Vorreiter Pedersen
9e77b89885
Update TypeConfusion.qhelp
...
Co-authored-by: hubwriter <hubwriter@github.com >
2024-03-07 08:33:49 -08:00
Mathias Vorreiter Pedersen
b876117ecc
C++: Add more QLDoc.
2024-03-06 22:25:04 -08:00
Mathias Vorreiter Pedersen
01fc7432cb
C++: Add more tests.
2024-03-06 22:17:33 -08:00
Mathias Vorreiter Pedersen
bf84f3a936
C++: Add FN.
2024-03-06 21:19:17 -08:00
Mathias Vorreiter Pedersen
3295d5cb9f
C++: Add more QLDoc.
2024-03-06 21:17:57 -08:00
Mathias Vorreiter Pedersen
fc9919a5b6
C++: Add a test that exercise the 'last field' check.
2024-03-06 21:17:55 -08:00
Mathias Vorreiter Pedersen
c2db5f490e
C++: Add more FNs and FPs to show examples of where the 'successor typing' strategy fails.
2024-03-06 21:16:51 -08:00
Mathias Vorreiter Pedersen
cd57cd0d8a
C++: Add qhelp reference.
2024-03-06 21:15:27 -08:00
Mathias Vorreiter Pedersen
cf4c8eb517
C++: Add more tests.
2024-03-06 21:15:25 -08:00
Mathias Vorreiter Pedersen
6dc0fa515d
C++: Add change note.
2024-03-06 21:11:36 -08:00
Mathias Vorreiter Pedersen
8ae6fa5366
C++: Add a new query 'cpp/type-confusion' for detecting type confusion vulnerabilities.
2024-03-06 21:11:32 -08:00
Mathias Vorreiter Pedersen
4c9876b008
C++: Accept test changes.
2024-03-06 18:18:36 -08:00
Mathias Vorreiter Pedersen
cf162aa412
C++: Add an explicit definition of the address of an IRVariable.
2024-03-06 18:18:33 -08:00
Mathias Vorreiter Pedersen
84797b9091
C++: Refactor the address out of 'DefImpl' and into a new abstract class 'OperandBasedDef'.
2024-03-06 18:15:52 -08:00
Mathias Vorreiter Pedersen
cc754858c6
C++: Add a testcase with missing flow out of the address of 'a' and to the argument of 'sink'.
2024-03-06 18:15:49 -08:00
Mathias Vorreiter Pedersen
a60afef923
C++: Add a local flow test file for IR dataflow.
2024-03-06 18:10:08 -08:00
github-actions[bot]
dc9092c9ec
Post-release preparation for codeql-cli-2.16.4
2024-03-06 22:19:33 +00:00
github-actions[bot]
2f058ffb4d
Release preparation for version 2.16.4
2024-03-06 20:56:51 +00:00
Angela P Wen
ce31f8641a
Revert "Release preparation for version 2.16.4"
2024-03-06 12:07:33 -08:00
Geoffrey White
23fd3f62ac
C++: Add models-as-data case to allowParameterReturnInSelf.
2024-03-06 16:12:46 +00:00
Geoffrey White
18d9573b6a
C++: Add summaryLocalStep as well.
2024-03-06 16:12:46 +00:00
Geoffrey White
8c0f02ac4b
C++: Add summary jumpStep, readStep, storeStep.
2024-03-06 14:51:48 +00:00
Jeroen Ketema
66d2a8499d
Merge pull request #15816 from MathiasVP/remove-ssa-pruning-stage
...
C++: Remove the pruning stage from dataflow SSA
2024-03-06 11:04:05 +01:00
Jeroen Ketema
6972f9b31d
C++: Update syntax-zoo expected test results
2024-03-06 09:34:47 +01:00
Robert Marsh
fbbd57b34f
C++: Suppress epxr destructors in preparation for temporaries
2024-03-05 21:12:12 +00:00
Mathias Vorreiter Pedersen
f400228037
C++: Remove the pruning stage from SSA.
2024-03-05 12:55:55 -08:00
github-actions[bot]
661e68dab5
Release preparation for version 2.16.4
2024-03-05 18:13:58 +00:00
Geoffrey White
3657269d3e
C++: Autoformat.
2024-03-05 17:35:05 +00:00
Geoffrey White
d1fc700735
C++: Fill out some QLDoc.
2024-03-05 17:34:48 +00:00
Geoffrey White
7675f153ce
C++: Add SummaryOutNode class.
2024-03-05 17:32:54 +00:00
Angela P Wen
967963a653
Revert "Release preparation for version 2.16.4"
2024-03-05 08:53:33 -08:00
Robert Marsh
28e1e3a13a
C++: remove skeleton for IR destructors on expressions
2024-03-04 21:54:18 +00:00
github-actions[bot]
a67218a027
Release preparation for version 2.16.4
2024-03-04 17:42:08 +00:00
Geoffrey White
d1a2048134
C++: Add SummaryPostUpdateNode class.
2024-03-01 16:03:37 +00:00
Geoffrey White
340a17dd74
C++: Attempt to QLDoc OutNode better.
2024-03-01 16:03:37 +00:00
Geoffrey White
dbf0b98791
C++: Add some test cases involving function pointers.
2024-03-01 15:56:44 +00:00
Geoffrey White
f649939d78
C++: Allow flow through (previously missing) summary taint steps.
2024-03-01 15:56:44 +00:00
