Mathias Vorreiter Pedersen
|
c2b1da0010
|
C++: Add FP testcase with an 'new' that has a 'std::nothrow&' parameter, but not a 'noexcept' specifier. This case was previously not reported because of the 'noexcept' specifier, and apparently the 'std::nothrow' case was broken all along.
|
2021-08-11 15:38:03 +02:00 |
|
Mathias Vorreiter Pedersen
|
89ce25f247
|
Merge pull request #6083 from ihsinme/ihsinme-patch-275
CPP: Add query for CWE-783 Operator Precedence Logic Error When Use Bitwise Or Logical Operations
|
2021-08-11 14:40:09 +02:00 |
|
ihsinme
|
6d24047626
|
Update OperatorPrecedenceLogicErrorWhenUseBitwiseOrLogicalOperations.ql
|
2021-08-11 14:34:20 +03:00 |
|
Jordy Zomer
|
a3bacc76f1
|
Update cpp/ql/src/experimental/Security/CWE/CWE-787/UnsignedToSignedPointerArith.ql
Co-authored-by: intrigus-lgtm <60750685+intrigus-lgtm@users.noreply.github.com>
|
2021-08-05 23:31:12 +02:00 |
|
Jordy Zomer
|
cf40d0ae4d
|
Fix a typo unsiged -> unsigned
|
2021-08-05 16:40:49 +02:00 |
|
Jordy Zomer
|
489ac04f86
|
Remove author tag
|
2021-08-05 12:34:31 +02:00 |
|
Jordy Zomer
|
19bb8e8c17
|
Make requested changes
|
2021-08-03 21:54:04 +02:00 |
|
Geoffrey White
|
e679eac008
|
C++: Rename test directories to match the test names, where possible.
|
2021-08-03 18:43:02 +01:00 |
|
Jordy Zomer
|
e07516585a
|
cpp: Add query to detect unsigned integer to signed integer conversions used in pointer arithmetics
|
2021-08-03 19:08:47 +02:00 |
|
Mathias Vorreiter Pedersen
|
8ce6335383
|
Merge pull request #6372 from geoffw0/uncontrolledarith
|
2021-08-03 17:53:39 +02:00 |
|
Geoffrey White
|
54253bc2eb
|
C++: Resurrect underflow detection, but only on unsigned types.
|
2021-08-03 15:02:39 +01:00 |
|
Geoffrey White
|
23ba7dcf9c
|
Merge pull request #6141 from ihsinme/ihsinme-patch-276
CPP: Add a query to find incorrectly used exceptions. 2
|
2021-08-03 14:46:39 +01:00 |
|
ihsinme
|
a1755b0b53
|
Update OperatorPrecedenceLogicErrorWhenUseBitwiseOrLogicalOperations.ql
|
2021-08-03 15:42:59 +03:00 |
|
ihsinme
|
e5c30c2edf
|
Update OperatorPrecedenceLogicErrorWhenUseBitwiseOrLogicalOperations.ql
|
2021-08-03 15:29:51 +03:00 |
|
ihsinme
|
4f09545f24
|
Update OperatorPrecedenceLogicErrorWhenUseBitwiseOrLogicalOperations.ql
|
2021-08-03 15:12:39 +03:00 |
|
ihsinme
|
15e76d1a98
|
Update cpp/ql/src/experimental/Security/CWE/CWE-783/OperatorPrecedenceLogicErrorWhenUseBitwiseOrLogicalOperations.ql
Co-authored-by: Mathias Vorreiter Pedersen <mathiasvp@github.com>
|
2021-08-03 15:11:22 +03:00 |
|
Mathias Vorreiter Pedersen
|
43044cd475
|
Merge pull request #6081 from ihsinme/ihsinme-patch-273
CPP: Add a query to find incorrectly used switch
|
2021-08-03 13:16:45 +02:00 |
|
Geoffrey White
|
904db788ec
|
Merge branch 'main' into impropnull
|
2021-08-02 15:00:12 +01:00 |
|
Mathias Vorreiter Pedersen
|
bbbbeda7c3
|
Merge pull request #6385 from MathiasVP/more-FieldConfiguration-sources
C++: Fix missing local flow in AST dataflow
|
2021-08-02 15:22:07 +02:00 |
|
ihsinme
|
375a60194b
|
Update OperatorPrecedenceLogicErrorWhenUseBitwiseOrLogicalOperations.ql
|
2021-08-01 16:44:54 +03:00 |
|
ihsinme
|
14b4e08ce9
|
Update OperatorPrecedenceLogicErrorWhenUseBitwiseOrLogicalOperations.expected
|
2021-08-01 16:43:56 +03:00 |
|
ihsinme
|
36131ee16a
|
Update test.cpp
|
2021-08-01 16:43:05 +03:00 |
|
ihsinme
|
098773dd10
|
Update FindIncorrectlyUsedSwitch.ql
|
2021-08-01 15:04:30 +03:00 |
|
ihsinme
|
80eb4907c0
|
Update FindIncorrectlyUsedSwitch.expected
|
2021-08-01 15:03:30 +03:00 |
|
ihsinme
|
5c71a7c024
|
Update test.c
|
2021-08-01 15:02:41 +03:00 |
|
Geoffrey White
|
417edab126
|
C++: Simplify out the 'effect' string.
|
2021-07-29 15:44:53 +01:00 |
|
Geoffrey White
|
7f621bc737
|
C++: Repair the tests that use subtraction so that the thing they're testing is preserved, and add two new explicit tests of behaviour on subtraction.
|
2021-07-29 15:36:43 +01:00 |
|
Geoffrey White
|
13823df5a1
|
C++: Remove underflow detection.
|
2021-07-29 15:22:18 +01:00 |
|
Geoffrey White
|
9e0411238b
|
C++: Add some more test cases.
|
2021-07-29 15:15:26 +01:00 |
|
Mathias Vorreiter Pedersen
|
bbb38fd2aa
|
C++: Accept more test changes.
|
2021-07-29 15:49:50 +02:00 |
|
Alexandre Boulgakov
|
e55bd4fb64
|
C++: Allow querying virtual, override, and final declaration specifiers.
|
2021-07-29 14:02:03 +01:00 |
|
Mathias Vorreiter Pedersen
|
41d233f086
|
C++: Make the 'definition by reference'-node in 'foo(a.b);' a source in the 'FieldConfiguration' configuration.
|
2021-07-29 14:49:59 +02:00 |
|
Mathias Vorreiter Pedersen
|
a082172422
|
C++: Add testcase demonstrating missing local flow out of fields that are defined by reference.
|
2021-07-29 14:46:32 +02:00 |
|
Geoffrey White
|
ae35ae10e6
|
C++: Fix readlink FPs.
|
2021-07-28 17:45:18 +01:00 |
|
ihsinme
|
2d5a263799
|
Update FindIncorrectlyUsedExceptions.ql
|
2021-07-28 18:46:49 +03:00 |
|
Geoffrey White
|
c2ef58d29d
|
C++: Support 'readlinkat'.
|
2021-07-28 16:15:28 +01:00 |
|
Geoffrey White
|
358d89f3ce
|
C++: Add tests.
|
2021-07-28 16:15:16 +01:00 |
|
Geoffrey White
|
5ac6b38380
|
C++: Change note.
|
2021-07-27 14:27:16 +01:00 |
|
Geoffrey White
|
e7842b9625
|
C++: Autoformat.
|
2021-07-27 14:19:30 +01:00 |
|
Geoffrey White
|
00f6f668cc
|
C++: Don't report underflowing multiplication.
|
2021-07-27 14:02:40 +01:00 |
|
Geoffrey White
|
40f0658e8a
|
C++: Exclude unintended results on pointers.
|
2021-07-27 13:39:20 +01:00 |
|
Geoffrey White
|
503c5c9e33
|
C++: Add more test cases.
|
2021-07-27 13:38:00 +01:00 |
|
Robert Marsh
|
b6200e5b23
|
Merge pull request #6369 from geoffw0/toctou3
C++: Increase cpp/toctou-race-condition query precision.
|
2021-07-26 13:16:28 -07:00 |
|
Robert Marsh
|
fbb3f2e506
|
Merge pull request #6273 from geoffw0/cleartext-storage-file
C++: Improve the CleartextFileWrite query
|
2021-07-26 12:46:51 -07:00 |
|
Geoffrey White
|
f65c5cfb70
|
C++: Increase query precision.
|
2021-07-26 15:15:12 +01:00 |
|
Robert Marsh
|
0e9d36b922
|
Merge pull request #6335 from geoffw0/toctou2
C++: Improvements to the cpp/toctou-race-condition query
|
2021-07-22 12:49:32 -07:00 |
|
Geoffrey White
|
d9682aa440
|
C++: Autoformat.
|
2021-07-22 18:32:40 +01:00 |
|
Geoffrey White
|
e9b96adf24
|
C++: Exclude results formatted with a character other than %s.
|
2021-07-22 17:40:32 +01:00 |
|
Geoffrey White
|
f8fed263e6
|
C++: Exclude results that are used as file names.
|
2021-07-22 17:40:25 +01:00 |
|
Geoffrey White
|
1d582182b0
|
C++: Exclude 'path'.
|
2021-07-22 15:49:30 +01:00 |
|