Mathias Vorreiter Pedersen
3e53f3bd13
C++: Flow out of phi inputs to the phi node.
2024-06-04 17:19:47 +01:00
Mathias Vorreiter Pedersen
e04c75df24
C++: Introduce a new phi input dataflow node.
2024-06-04 17:19:46 +01:00
Mathias Vorreiter Pedersen
888a831a5c
C++: Use 'ssaDefReachesReadExt' instead of 'ssaDefReachesRead'.
2024-06-04 17:19:45 +01:00
Mathias Vorreiter Pedersen
556dc282d2
C++: Use 'phiHasInputFromBlockExt' instead of 'phiHasInputFromBlock'.
2024-06-04 17:19:43 +01:00
Mathias Vorreiter Pedersen
ceccc9294c
C++: Add a testcase that failed during development.
2024-06-04 17:19:41 +01:00
Mathias Vorreiter Pedersen
a9af28ede0
C++: Drive-by fix. This is not needed anymore after #16345
2024-06-04 17:19:40 +01:00
Mathias Vorreiter Pedersen
43c7ac36d9
C++: Add a test with spurious flow.
2024-06-04 17:19:36 +01:00
Owen Mansel-Chan
3fb5ad2a0d
Cover all params in QLDoc of modelCoverage
2024-06-04 17:06:00 +01:00
Geoffrey White
38c47a4b11
C++: Add change notes.
2024-06-04 10:47:25 +01:00
Geoffrey White
79e9198b20
C++: An empty models-as-data namespace / type is not 'dubious' in CPP.
2024-06-04 10:21:06 +01:00
Geoffrey White
f479649727
C++: Add Boost::Asio models.
2024-06-04 10:21:05 +01:00
Geoffrey White
7e5b7346c0
C++: Add flow test cases for Boost::Asio.
2024-06-04 10:21:05 +01:00
Geoffrey White
8a5b5d220a
C++: Add source/sink test cases for Boost::Asio.
2024-06-04 10:21:05 +01:00
Jeroen Ketema
66077dc38d
C++: Ignore gets'es with incorrect parameter counts
2024-06-04 11:15:07 +02:00
Geoffrey White
94413c8c2e
C++: Implement YML extension models.
2024-06-03 13:49:38 +01:00
Geoffrey White
34130d50d3
C++: Add library tests for YML extension models.
2024-06-03 13:49:26 +01:00
Cornelius Riemenschneider
60b5317c5f
C++: Move to new packaging rules.
2024-05-30 14:25:15 +02:00
github-actions[bot]
906b65d09c
Post-release preparation for codeql-cli-2.17.4
2024-05-28 18:02:25 +00:00
github-actions[bot]
33b4ae8bbb
Release preparation for version 2.17.4
2024-05-28 15:44:32 +00:00
Jeroen Ketema
174f212d4e
Merge pull request #16589 from rvermeulen/rvermeulen/update-nospaceforzeroterminator-qlhelp
...
Rewrite recommendations for the query `cpp/no-space-for-terminator`
2024-05-28 09:52:20 +02:00
Jeroen Ketema
c57c027f70
C++: Make the padding test independent of the predefined_macros file
...
The padding test is the only test that currently depends on the contents
of the `predefined_macros` flile that we ship with CodeQL for use with the
CodeQL tests. Explicitly specifying `__x86_64` makes the test independent of
the contents of the file.
2024-05-27 14:21:10 +02:00
Anders Schack-Mulligen
8085460e4a
C++/Shared: Fix join order issues.
2024-05-27 11:01:52 +02:00
Anders Schack-Mulligen
5c635e982e
C++/C#/Java: Update expected output.
2024-05-27 11:01:52 +02:00
Anders Schack-Mulligen
1432519cc2
Dataflow: Add totalorder predicates to all languages.
2024-05-27 11:01:52 +02:00
Anders Schack-Mulligen
bc8ca1af86
Dataflow: Introduce NodeRegions for use in isUnreachableInCall.
2024-05-27 11:01:51 +02:00
Remco Vermeulen
6df4c8964b
Rewrite recommendations
...
- Replace segmentation fault with crash that is platform agnostic (I think segmentation fault is not really a thing on Windows).
- Replace security vulnerability with malicious code execution. This provides a range of issues, because a crash (previously segmentation fault) could also be considered a security vulnerability. Namely a DOS.
- Removed the additional note on stack allocated arrays which seem confusing because we are always talking about buffers allocated on the heap.
2024-05-24 16:10:42 -07:00
Dave Bartolomeo
613ccaac1d
Add change note to all v1.0.0 packs
2024-05-23 13:01:22 -04:00
Dave Bartolomeo
ffe4c8c87b
Update all pack versions to 1.0.0
2024-05-22 13:39:08 -04:00
Mathias Vorreiter Pedersen
3f66b635a4
Merge pull request #16562 from aschackmull/dataflow/update-qltest-expected
...
Dataflow: Fix qltests following https://github.com/github/codeql/pull/16511
2024-05-22 16:16:04 +01:00
Mathias Vorreiter Pedersen
769d9317c7
C++: Avoid a CP between 'getExpr(node)' and 'this' in 'LoopWithAlloca'.
2024-05-22 15:15:40 +01:00
Mathias Vorreiter Pedersen
1a0d66b339
Merge pull request #16557 from MathiasVP/fix-unique-pointer-query-fp
...
C++: Fix `cpp/use-of-unique-pointer-after-lifetime-ends` FP
2024-05-22 15:09:54 +01:00
Anders Schack-Mulligen
e7f24318cd
C++: Accept qltest .expected file changes.
2024-05-22 15:36:30 +02:00
Anders Schack-Mulligen
f977a4206a
C++: Accept qltest .expected file changes (interesting).
2024-05-22 15:35:28 +02:00
Mathias Vorreiter Pedersen
9907f0f827
C++: Exclude a cast to any integral type.
2024-05-22 13:42:07 +01:00
Mathias Vorreiter Pedersen
09357e15b4
Merge pull request #16533 from MathiasVP/better-negation-guards-in-c
...
C++: Make `IRGuardCondition` handle `p` in `if(p)` and `if(!p)` better in C programs
2024-05-22 13:02:06 +01:00
Mathias Vorreiter Pedersen
00a940fd58
Merge pull request #16524 from catenacyber/deref-null-result
...
Adds another rule for null deref
2024-05-22 12:37:39 +01:00
Mathias Vorreiter Pedersen
4b02f88089
C++: Add change note.
2024-05-22 12:37:08 +01:00
Mathias Vorreiter Pedersen
af81698fa8
C++: Fix FP and accept test changes.
2024-05-22 12:34:09 +01:00
Mathias Vorreiter Pedersen
91f860ba4f
C++: Add 'cpp/use-of-unique-pointer-after-lifetime-ends' FP.
2024-05-22 12:33:34 +01:00
Mathias Vorreiter Pedersen
eda815789b
Update cpp/ql/src/experimental/Likely Bugs/DerefNullResult.ql
2024-05-22 11:21:04 +01:00
Philippe Antoine
ab4b823c2e
fixup unique assignment
2024-05-21 22:10:00 +02:00
Rasmus Wriedt Larsen
2451a6d3f6
Accept .expected changes
2024-05-21 14:47:42 +02:00
Tom Hvitved
454687d583
Data flow: Synthesize parameter return nodes
2024-05-21 14:47:42 +02:00
Jeroen Ketema
c8fec336ce
C++: Fix typo in cpp/network-to-host-function-as-array-bound
2024-05-21 10:29:17 +02:00
Jeroen Ketema
1a60c01723
C++: Add memcmp test for cpp/network-to-host-function-as-array-bound
2024-05-21 10:27:38 +02:00
Mathias Vorreiter Pedersen
5893e38567
C++: Accept test changes.
2024-05-20 22:28:17 +01:00
Mathias Vorreiter Pedersen
0a550bb919
C++: Support 'if(!p)' for C programs in IRGuards.
2024-05-20 22:28:17 +01:00
Philippe Antoine
8ace9da14a
fixup dataflow path and formatting
2024-05-20 21:31:47 +02:00
Mathias Vorreiter Pedersen
398b90a15d
C++: Rename a few predicates.
2024-05-20 17:15:20 +01:00
Geoffrey White
13a7d9acb6
Merge pull request #16528 from geoffw0/docfix2
...
C++: Update an instance of the name 'Semmle' in a doc page.
2024-05-20 15:07:42 +01:00