ihsinme
2b4296feb1
Update MemoryLeakOnFailedCallToRealloc.ql
2021-01-28 13:38:26 +03:00
Mathias Vorreiter Pedersen
2c70106d2d
Merge pull request #5009 from ihsinme/ihsinme-patch-219
...
CPP: add query for CWE-788 Access of memory location after the end of a buffer using strncat.
2021-01-28 11:10:30 +01:00
Mathias Vorreiter Pedersen
7affbfc6cb
C++: Add tests.
2021-01-28 10:57:39 +01:00
Mathias Vorreiter Pedersen
6255662114
C++: Add two new model implementation classes.
2021-01-28 10:57:30 +01:00
Jonas Jensen
69ce24d4b8
Merge pull request #5035 from MathiasVP/implied-deref-flow
...
C++: Implied dataflow models
2021-01-28 09:35:58 +01:00
Mathias Vorreiter Pedersen
24f76f9a17
C++: Accept test changes.
2021-01-27 21:57:12 +01:00
Mathias Vorreiter Pedersen
c90dc62cc4
C++: Autoformat.
2021-01-27 18:57:09 +01:00
Mathias Vorreiter Pedersen
aec18e7123
C++: Add mempcpy to MemcpyFunction model class.
2021-01-27 18:12:32 +01:00
Mathias Vorreiter Pedersen
5aff5c3254
C++: Add AliasFunction model to MemcpyFunction.
2021-01-27 18:12:02 +01:00
Mathias Vorreiter Pedersen
066f83630d
C++: bcopy can never be in the std namespace.
2021-01-27 18:07:14 +01:00
Ian Lynagh
307bef0ec3
C++: decltypes may have multiple expressions
2021-01-27 16:06:42 +00:00
Mathias Vorreiter Pedersen
52e2a69db9
C++: Accept test changes.
2021-01-27 16:56:37 +01:00
Mathias Vorreiter Pedersen
32b5c7fe06
C++: Model implied dataflow
2021-01-27 16:53:21 +01:00
Geoffrey White
a4d7bfbb2b
Merge pull request #5031 from MathiasVP/remove-linear-scan-of-functions-2
...
C++: Remove more linear scans
2021-01-27 14:29:27 +00:00
ihsinme
bdfdcbd673
Update WrongInDetectingAndHandlingMemoryAllocationErrors.ql
2021-01-27 15:48:18 +03:00
Mathias Vorreiter Pedersen
c61dec1dff
C++: Remove more linear scans.
2021-01-27 13:17:47 +01:00
ihsinme
16d058f498
Update WrongInDetectingAndHandlingMemoryAllocationErrors.ql
2021-01-27 15:06:57 +03:00
ihsinme
5d163b4c15
Update WrongInDetectingAndHandlingMemoryAllocationErrors.qhelp
2021-01-27 15:05:58 +03:00
ihsinme
25de82c78c
Apply suggestions from code review
...
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com >
2021-01-27 15:05:01 +03:00
ihsinme
bec0064396
Update test.cpp
2021-01-27 14:54:47 +03:00
ihsinme
8737c1442b
Update WrongInDetectingAndHandlingMemoryAllocationErrors.cpp
2021-01-27 14:48:23 +03:00
ihsinme
19b7d46099
Update test.c
2021-01-27 14:06:53 +03:00
Mathias Vorreiter Pedersen
3604557e62
C++: Remove linear scan in isSVariant.
2021-01-27 11:47:45 +01:00
ihsinme
68eba11dbf
Update AccessOfMemoryLocationAfterEndOfBufferUsingStrncat.ql
2021-01-27 13:16:56 +03:00
ihsinme
aebf7bdff4
Update test.c
2021-01-27 13:12:48 +03:00
ihsinme
885d26805f
Update AccessOfMemoryLocationAfterEndOfBufferUsingStrlen.expected
2021-01-27 12:47:51 +03:00
ihsinme
9a85b761a1
Update test.c
2021-01-27 12:46:10 +03:00
Anders Schack-Mulligen
0381190a30
Merge pull request #5021 from hmakholm/qlpack-test
...
Add "tests" fields to test qlpacks
2021-01-27 09:23:35 +01:00
Robert Marsh
8919e5546b
C++ Use dontcare instead of one-use exists
...
Co-authored-by: Mathias Vorreiter Pedersen <mathiasvp@github.com >
2021-01-26 14:12:49 -08:00
ihsinme
5d5cd4fde5
Update AccessOfMemoryLocationAfterEndOfBufferUsingStrncat.ql
2021-01-27 00:10:04 +03:00
ihsinme
f074564dc1
Apply suggestions from code review
...
Co-authored-by: Mathias Vorreiter Pedersen <mathiasvp@github.com >
2021-01-27 00:00:18 +03:00
ihsinme
636fe73f40
Update AccessOfMemoryLocationAfterEndOfBufferUsingStrlen.ql
2021-01-26 23:52:18 +03:00
ihsinme
fc9d219057
Update AccessOfMemoryLocationAfterEndOfBufferUsingStrlen.ql
2021-01-26 23:50:54 +03:00
ihsinme
de0bbc8826
Apply suggestions from code review
...
Co-authored-by: Mathias Vorreiter Pedersen <mathiasvp@github.com >
2021-01-26 23:47:07 +03:00
Henning Makholm
54f00de3e0
Add "tests" fields to test qlpacks
...
This will allow `codeql resolve tests --ignore-dubious-cases`
(and thus the VSCode extension) to recognize all `.ql` files in those
packs as test cases, even if they don't have accompanying `.expected`
files.
CLI versions prior to 2.1.0 will choke on this, but it's almost 10
months since that came out.
2021-01-26 18:15:22 +01:00
Mathias Vorreiter Pedersen
04a3c3d29c
Merge pull request #4953 from ihsinme/ihsinme-patch-207
...
CPP: Add query for CWE-14 compiler removal of code to clear buffers.
2021-01-26 18:13:18 +01:00
Mathias Vorreiter Pedersen
416aa49d99
C++: Capitalize alert message.
2021-01-26 17:24:03 +01:00
Remco Vermeulen
1834403148
Replace HTTP entity
...
The code formatting operator correctly translate to HTTP entities.
2021-01-26 14:14:42 +01:00
Remco Vermeulen
8c09032d1d
Correct access specifier
...
Co-authored-by: Mathias Vorreiter Pedersen <mathiasvp@github.com >
2021-01-26 13:23:43 +01:00
Remco Vermeulen
932ee968e0
Correct pointer to data member example
...
The class `PointerToMemberType` is preceded by an example that doesn't define the variable `c` used to access a data member.
2021-01-26 13:08:28 +01:00
Robert Marsh
44bc6d7fdb
C++/C#: add NonPhiMemoryOperand union type
...
This fixes a performance issue where the whole MemoryOperand table was
scanned in some predicates that used only NonPhiMemoryOperand
2021-01-25 17:03:19 -08:00
Tom Hvitved
1c84455a6d
Merge pull request #5003 from hvitved/csharp/remove-getaqlclass
...
C#: Remove uses of `getAQlClass()`
2021-01-25 10:57:04 +01:00
Jonas Jensen
1b3d69d617
Merge pull request #4784 from MathiasVP/mathiasvp/reverse-read-take-3
...
C++: Support longer access paths in IR field flow
2021-01-25 10:36:03 +01:00
Tom Hvitved
c235462f7d
C++: Sync IRType.qll
2021-01-25 09:43:57 +01:00
ihsinme
b899229298
Add files via upload
2021-01-25 00:33:54 +03:00
ihsinme
9ae503a5a8
Add files via upload
2021-01-25 00:30:35 +03:00
ihsinme
20e19ec467
Add files via upload
2021-01-25 00:09:55 +03:00
ihsinme
9071ba2f99
Add files via upload
2021-01-25 00:06:19 +03:00
ihsinme
fcd532522d
Add files via upload
2021-01-24 22:36:42 +03:00
ihsinme
20d1b24e9c
Add files via upload
2021-01-24 22:35:11 +03:00