5345 Commits

Author	SHA1	Message	Date
Geoffrey White	69664535b0	Merge pull request #4881 from ihsinme/main ... CPP: Add query for CWE-401 memory leak on unsuccessful call to realloc function	2021-01-13 10:58:09 +00:00
ihsinme	bbd3f7631e	Delete test.c ... sorry i was in a hurry	2021-01-11 23:52:26 +03:00
ihsinme	b92d63d5df	Delete CompilerRemovalOfCodeToClearBuffers.qlref ... sorry i was in a hurry	2021-01-11 23:51:37 +03:00
ihsinme	05f866e912	Delete CompilerRemovalOfCodeToClearBuffers.expected ... sorry i was in a hurry	2021-01-11 23:51:18 +03:00
ihsinme	d7a5e61f8e	Delete CompilerRemovalOfCodeToClearBuffers.qhelp ... sorry i was in a hurry	2021-01-11 23:50:47 +03:00
ihsinme	c38cfcb735	Delete CompilerRemovalOfCodeToClearBuffers.ql ... sorry i was in a hurry	2021-01-11 23:50:19 +03:00
ihsinme	65ff526eef	Delete CompilerRemovalOfCodeToClearBuffers.c ... sorry i was in a hurry	2021-01-11 23:49:53 +03:00
ihsinme	ed6d8e3d18	Add files via upload	2021-01-11 23:40:38 +03:00
ihsinme	b185a33157	Add files via upload	2021-01-11 23:39:02 +03:00
ihsinme	b28444b55c	Update MemoryLeakOnFailedCallToRealloc.ql ... I thought since there is no work on this PR, I will delete the residual import.	2021-01-11 21:17:49 +03:00
Geoffrey White	cf1d1dc5c0	C++: Remove old tags.	2021-01-11 09:31:06 +00:00
Geoffrey White	70ce5fde75	C++: Improve metadata for GlobalNamespaceClasses.ql.	2021-01-08 18:27:06 +00:00
Mathias Vorreiter Pedersen	13a67c906e	Merge pull request #4810 from geoffw0/multtoalloc ... C++: Query for multiplications used in allocations.	2021-01-07 13:48:58 +01:00
ihsinme	2d6dafc6be	Update MemoryLeakOnFailedCallToRealloc.ql	2021-01-07 15:44:50 +03:00
ihsinme	f378c14659	Update MemoryLeakOnFailedCallToRealloc.expected	2021-01-07 15:43:58 +03:00
ihsinme	592cd284e8	Update test.c	2021-01-07 15:41:31 +03:00
ihsinme	abdeaabd77	Update MemoryLeakOnFailedCallToRealloc.ql	2021-01-06 22:46:03 +03:00
ihsinme	2b8227e04d	Update cpp/ql/src/experimental/Security/CWE/CWE-401/MemoryLeakOnFailedCallToRealloc.ql ... Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com>	2021-01-06 22:23:46 +03:00
ihsinme	f7eb328f76	Update cpp/ql/src/experimental/Security/CWE/CWE-401/MemoryLeakOnFailedCallToRealloc.qhelp ... Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com>	2021-01-06 22:18:14 +03:00
ihsinme	d7f31ca1a0	Update cpp/ql/src/experimental/Security/CWE/CWE-401/MemoryLeakOnFailedCallToRealloc.qhelp ... Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com>	2021-01-06 22:17:26 +03:00
Geoffrey White	f69ceb3dbb	Merge pull request #4904 from MathiasVP/conflated-dataflow-testcases ... C++: Add dataflow testcases that need flow through conflated memory	2021-01-06 17:48:18 +00:00
Mathias Vorreiter Pedersen	bb158f1857	C++: Add dataflow testcases that need flow through conflated memory.	2021-01-04 11:43:23 +01:00
Mathias Vorreiter Pedersen	134982c5a9	C++: Respond to review comments.	2021-01-04 09:06:58 +01:00
Mathias Vorreiter Pedersen	454605b7b1	C++: Fix join order in getAnOverload.	2020-12-30 10:34:26 +01:00
ihsinme	0c7381a3b0	Add files via upload	2020-12-26 20:45:11 +03:00
ihsinme	cd7c47ea39	Add files via upload	2020-12-26 20:43:25 +03:00
Mathias Vorreiter Pedersen	4f07474b62	C++: Also allow custom sources in taintedWithoutGlobals	2020-12-21 19:55:47 +01:00
Mathias Vorreiter Pedersen	f4f96fe257	C++: Use isSource in queries. These were the only queries that restrict the source after dataflow terminates.	2020-12-21 16:35:35 +01:00
Mathias Vorreiter Pedersen	0e84c638b6	C++: Add isSource to AdjustedConfiguration	2020-12-21 16:34:22 +01:00
Jonas Jensen	4308381057	Merge pull request #4846 from MathiasVP/default-taint-tracking-operand-instruction-interleaving ... C++: Instruction -> Operand interleaving for DefaultTaintTracking	2020-12-21 12:44:06 +01:00
Jonas Jensen	3236cbd83e	C++: Test the AST wrapper for IR GVN ... Out of our 3 GVN libraries, the one we actually use in production didn't have tests -- except indirectly through `diff_ir_expr.ql`.	2020-12-21 08:21:02 +01:00
Mathias Vorreiter Pedersen	b5102043b1	Fix comments.	2020-12-18 14:19:02 +01:00
Mathias Vorreiter Pedersen	f5e4725642	C++: Propagate flow from instruction's to non-exact operands for arrays and unions, and accept test changes.	2020-12-18 13:54:34 +01:00
Mathias Vorreiter Pedersen	2bf8e47932	Merge branch 'main' into default-taint-tracking-operand-instruction-interleaving	2020-12-18 11:59:10 +01:00
Mathias Vorreiter Pedersen	7ccd48e53c	Make DefaultTaintTracking do operand->instruction->operand interleaving like DataFlowUtil.	2020-12-18 11:57:16 +01:00
Geoffrey White	dc4ca9b1b9	C++: Add qhelp and example.	2020-12-18 10:10:05 +00:00
Jonas Jensen	fd7dec7f20	Merge pull request #4824 from geoffw0/modelchanges5 ... C++: Add cases in the Allocation model.	2020-12-18 09:16:01 +01:00
Geoffrey White	fda531da49	C++: Add query precision.	2020-12-17 14:31:43 +00:00
Geoffrey White	136fa01b87	C++: Query headers (apart from precison - needs more research).	2020-12-16 16:24:10 +00:00
Geoffrey White	1e3535754b	C++: Violation message.	2020-12-16 16:13:02 +00:00
Geoffrey White	2210344f4d	C++: Add a test.	2020-12-16 15:44:53 +00:00
Geoffrey White	c89f7d824b	C++: Back out support for SysAllocString. It turns out supporting all of the SysAlloc stuff is beyond our current models, supporting just SysFreeString as we do is OK.	2020-12-16 15:08:53 +00:00
Jonas Jensen	406cc64dcc	Merge pull request #4831 from geoffw0/printfunknown ... C++: Fix Printf.qll specsAreKnown	2020-12-16 10:56:56 +01:00
Geoffrey White	93dfeac3c8	C++: Make specsAreKnown more accurate.	2020-12-15 17:43:28 +00:00
Geoffrey White	676e85a155	C++: Re-enable the check.	2020-12-15 17:42:10 +00:00
Geoffrey White	94dea9f71d	C++: Add a test of unknown format specifiers (with specsAreKnown check disabled).	2020-12-15 17:40:32 +00:00
Geoffrey White	4bf2f3af50	C++: Fix comment.	2020-12-15 10:15:41 +00:00
Geoffrey White	d7a92e581f	Merge branch 'main' into swap	2020-12-14 17:54:11 +00:00
Geoffrey White	9c77d3c829	C++: Add AliasFunction model.	2020-12-14 17:52:02 +00:00
Geoffrey White	f9a7322d68	C++: Remove redundant check.	2020-12-14 17:16:16 +00:00