Mathias Vorreiter Pedersen
|
9a841636dc
|
C++: Fix false positive
|
2020-01-07 13:22:07 +01:00 |
|
Mathias Vorreiter Pedersen
|
faa9d83567
|
C++: Add testcase demonstrating false positive
|
2020-01-07 13:18:38 +01:00 |
|
Mathias Vorreiter Pedersen
|
bdd0589223
|
C++: Fix false positive
|
2020-01-07 13:16:47 +01:00 |
|
Mathias Vorreiter Pedersen
|
428e357488
|
C++: Add testcase demonstrating false positive
|
2020-01-07 11:41:48 +01:00 |
|
Mathias Vorreiter Pedersen
|
9ed1510a8c
|
C++: Improved query precision using SimpleRangeAnalysis
|
2020-01-06 14:16:52 +01:00 |
|
Mathias Vorreiter Pedersen
|
e926966e73
|
C++: Added more tests
|
2020-01-03 14:08:12 +01:00 |
|
Mathias Vorreiter Pedersen
|
cea78879b2
|
C++: Rename variables in tests to reflect their types
|
2020-01-03 14:07:19 +01:00 |
|
Mathias Vorreiter Pedersen
|
7dbb191531
|
C++: Improve query precision
|
2020-01-02 15:53:22 +01:00 |
|
Mathias Vorreiter Pedersen
|
cfb839a8f9
|
C++: Add test demonstrating the false positive
|
2020-01-02 15:48:01 +01:00 |
|
Jonas Jensen
|
939979ddef
|
Merge branch 'master' into overflowcalc
|
2019-12-19 14:12:00 +01:00 |
|
Mathias Vorreiter Pedersen
|
30822f1d98
|
C++: Alert suppresion through single-line /* */ style comments
|
2019-12-19 09:10:09 +01:00 |
|
Geoffrey White
|
0da826f0c3
|
Merge branch 'master' into overflowcalc
|
2019-12-16 13:48:38 +00:00 |
|
Jonas Jensen
|
b1745f588c
|
Merge pull request #2402 from geoffw0/nospace
CPP: Make NoSpaceForZeroTerminator.ql more conservative.
|
2019-11-26 13:36:05 +01:00 |
|
Jonas Jensen
|
8f3998915b
|
Merge pull request #2376 from geoffw0/qhelpms2
CPP: Recommendations and examples for TlsSettingsMisconfiguration.qhelp and UseOfDeprecatedHardCodedProtocol.qhelp
|
2019-11-25 08:17:32 +01:00 |
|
Geoffrey White
|
e274e01432
|
CPP: More consistency.
|
2019-11-22 16:08:00 +00:00 |
|
Geoffrey White
|
8fc59ebac4
|
CPP: I believe these BUG labels were incorrect.
|
2019-11-22 16:07:59 +00:00 |
|
Geoffrey White
|
a1b603e73c
|
CPP: Add the examples to the test.
|
2019-11-22 16:07:59 +00:00 |
|
Geoffrey White
|
3895a7e1f0
|
CPP: Queries: Improve NoSpaceForZeroTerminator query.
|
2019-11-22 15:27:08 +00:00 |
|
Geoffrey White
|
3c9432d7b7
|
CPP: Queries: Improve OverflowCalculated query.
|
2019-11-22 15:19:00 +00:00 |
|
Geoffrey White
|
5f798314d1
|
CPP: Tests: NoSpaceForZeroTerminator test cases for calloc and realloc.
|
2019-11-22 15:18:59 +00:00 |
|
Geoffrey White
|
a2c0532a84
|
CPP: Tests: CWE-120 test cases for calloc, realloc and new.
|
2019-11-22 15:16:32 +00:00 |
|
Geoffrey White
|
d67ea4d768
|
CPP: Tests: AV Rule 79 test cases for calloc, realloc and new.
|
2019-11-22 15:16:32 +00:00 |
|
Geoffrey White
|
7190dd2ef4
|
CPP: Tests: Rearrange a test prior to changes.
|
2019-11-22 15:16:32 +00:00 |
|
Geoffrey White
|
bbe6a1aa76
|
CPP: Additional test case.
|
2019-11-22 15:13:05 +00:00 |
|
Geoffrey White
|
676e8a2c2e
|
Merge pull request #2399 from jbj/ExprHasNoEffect-templates
C++: Suppress ExprHasNoEffect on template code
|
2019-11-21 18:01:41 +00:00 |
|
Geoffrey White
|
e6ea705ff2
|
CPP: Switch from a blacklist to whitelist approach for determining null termination.
|
2019-11-20 15:34:38 +00:00 |
|
Geoffrey White
|
fbd9d9bdab
|
CPP: Add a test case involving the std::string constructor.
|
2019-11-20 15:20:21 +00:00 |
|
Geoffrey White
|
6fc9cc5952
|
CPP: Add a test case using 'new'.
|
2019-11-20 14:27:19 +00:00 |
|
Geoffrey White
|
57c7a87af9
|
CPP: Add tests with different proof of zero-termination.
|
2019-11-20 14:27:19 +00:00 |
|
Geoffrey White
|
3c9fe91581
|
CPP: Add proof of zero-termination to tests.
|
2019-11-20 14:27:19 +00:00 |
|
Jonas Jensen
|
b325427d29
|
C++: Suppress ExprHasNoEffect on template code
|
2019-11-20 15:12:25 +01:00 |
|
Jonas Jensen
|
4dafa16572
|
C++: Fix FP on unevaluated code
This fixes false positives on tenzir/vast.
|
2019-11-20 10:42:36 +01:00 |
|
Jonas Jensen
|
a1af96e521
|
C++: Reproduce a reported FP
|
2019-11-19 16:17:49 +01:00 |
|
Geoffrey White
|
7408726f41
|
Merge pull request #2312 from jbj/pointer-wraparound-query
C++: New query: Pointer overflow check
|
2019-11-14 16:13:04 +00:00 |
|
Jonas Jensen
|
81d06e2ce6
|
C++: Update annotation in test file
|
2019-11-13 16:58:25 +01:00 |
|
Jonas Jensen
|
db33053422
|
C++: Add test for macro exclusions
|
2019-11-13 14:21:29 +01:00 |
|
Jonas Jensen
|
d2009c53dc
|
C++: Support GCC flags making ptr overflow defined
|
2019-11-13 14:07:33 +01:00 |
|
Jonas Jensen
|
463bf964a9
|
C++: Test showing FP with -fno-strict-overflow
|
2019-11-13 14:07:33 +01:00 |
|
Jonas Jensen
|
8ed991759c
|
C++: Rename PointerWrapAround to PointerOverflow
Overflow was the terminology I found for this in the C standard (C11
6.5.6-8).
|
2019-11-13 14:06:58 +01:00 |
|
Jonas Jensen
|
bd08c64933
|
C++: Apply my own review comments from #2218
|
2019-11-13 14:05:23 +01:00 |
|
Geoffrey White
|
db26b85fa3
|
CPP: Fix test (I missed a file in the move).
|
2019-11-12 18:25:20 +00:00 |
|
Geoffrey White
|
60c7cb38e8
|
CPP: Relocate the test as well.
|
2019-11-12 09:55:22 +00:00 |
|
Geoffrey White
|
dff490e658
|
CPP: Remove the 'boostorg' subdirectory (these queries could be extended to support other libraries, as their names and descriptions already suggest).
|
2019-11-12 09:55:22 +00:00 |
|
Geoffrey White
|
806703b929
|
CPP: Relocate the test as well.
|
2019-11-12 09:54:55 +00:00 |
|
Geoffrey White
|
2b9428df32
|
CPP: Remove the 'Buffer Overflow' subdirectory (we have many buffer overflow queries, putting one in a special directory will only create confusion).
|
2019-11-12 09:54:46 +00:00 |
|
Geoffrey White
|
b917264770
|
CPP: Rename NtohlArrayNoBoundOpenSource.ql -> NtohlArrayNoBound.ql (I believe the 'OpenSource' part is a remnant from the way the contributor organizes their queries).
|
2019-11-12 09:53:59 +00:00 |
|
Jonas Jensen
|
18cc539c8d
|
Merge branch 'master' into pointer-wraparound-query
|
2019-11-12 10:22:46 +01:00 |
|
Jonas Jensen
|
c36b73f09c
|
Merge pull request #2232 from geoffw0/formatsymbols
CPP: Fully support n$ in format strings
|
2019-11-12 09:43:20 +01:00 |
|
Jonas Jensen
|
ec79bfacf8
|
Merge pull request #2249 from geoffw0/tlsperf
CPP: TlsSettingsMisconfiguration.ql performance and cleanup
|
2019-11-11 16:47:53 +01:00 |
|
Geoffrey White
|
dff21e02db
|
CPP: Fully support positional arguments.
|
2019-11-11 15:27:23 +00:00 |
|