Mathias Vorreiter Pedersen
|
21167f4b67
|
C++: Accept test changes.
|
2021-11-22 13:04:23 +00:00 |
|
Mathias Vorreiter Pedersen
|
f308be7382
|
C++: Restore the missing flow. This has a couple of side-effects: First, it gives us some new good flow (yay). Second, it causes some duplication of results that uses 'argv' as a taint source. The duplication isn't very bad, though. And since it is only for paths that start at 'argv', I think we can live with it for now.
|
2021-11-22 13:04:07 +00:00 |
|
Mathias Vorreiter Pedersen
|
74221f4aba
|
Merge pull request #7209 from geoffw0/experimental-tests
C++: Move experimental test.
|
2021-11-22 13:01:52 +00:00 |
|
Geoffrey White
|
6f2b528a32
|
C++: Move experimental test.
|
2021-11-22 11:02:06 +00:00 |
|
ihsinme
|
6d27585b92
|
Update FindIncorrectlyUsedExceptions.ql
|
2021-11-19 16:59:00 +03:00 |
|
ihsinme
|
418adb824c
|
Update FindIncorrectlyUsedExceptions.ql
|
2021-11-19 16:04:04 +03:00 |
|
Tom Hvitved
|
2b2ff7717e
|
Merge pull request #7179 from hvitved/ruby/shared-ssa-consistency
Ruby: Move SSA consistency queries into shared SSA library
|
2021-11-19 13:49:25 +01:00 |
|
Tom Hvitved
|
4068cc9c3a
|
Shared SSA: Sync files
|
2021-11-19 11:31:28 +01:00 |
|
ihsinme
|
fd73f4094f
|
Update FindIncorrectlyUsedExceptions.ql
|
2021-11-19 10:54:02 +03:00 |
|
Erik Krogh Kristensen
|
011fc20963
|
use matches instead of regexpMatch
|
2021-11-18 15:41:25 +01:00 |
|
Mathias Vorreiter Pedersen
|
c998370c84
|
C++: Accept more test changes.
|
2021-11-17 15:22:17 +00:00 |
|
Mathias Vorreiter Pedersen
|
36585a7469
|
C++: Accept test changes.
|
2021-11-17 14:41:30 +00:00 |
|
Mathias Vorreiter Pedersen
|
6dc6a78293
|
C++: Add a 'IteratorByPointer' class so pointers are always iterators.
|
2021-11-17 14:41:19 +00:00 |
|
Geoffrey White
|
d232283647
|
Merge pull request #7149 from geoffw0/non-https-url2
C++: Minor improvements to 'Failure to use HTTPS URLs' query
|
2021-11-17 10:05:30 +00:00 |
|
Paolo Tranquilli
|
2ce5b85db4
|
Merge pull request #7112 from github/redsun82/frontend-update
c++: update ir tests after frontend update
|
2021-11-16 16:30:34 +01:00 |
|
Geoffrey White
|
ea9640a39d
|
C++: Autoformat.
|
2021-11-16 14:26:42 +00:00 |
|
Anders Schack-Mulligen
|
c70d384d28
|
Merge pull request #7045 from aschackmull/dataflow/hidden-ret-subpaths
Data flow: Support hidden return nodes in subpaths predicate
|
2021-11-16 15:04:51 +01:00 |
|
Paolo Tranquilli
|
8d3cf7f5aa
|
C++: update ir tests after frontend update
After updating the frontend new intermediate objects appear in the AST
and raw dumps.
|
2021-11-16 13:25:32 +00:00 |
|
Geoffrey White
|
5ef71e6ef3
|
C++: Add a few more sinks.
|
2021-11-16 13:02:56 +00:00 |
|
Geoffrey White
|
aafa5762ad
|
C++: Add a CWE tag associated with OWASP A8.
|
2021-11-16 11:21:25 +00:00 |
|
Mathias Vorreiter Pedersen
|
71c279f537
|
Merge branch 'main' into use-range-analysis-in-buffer-write
|
2021-11-16 09:14:02 +00:00 |
|
Mathias Vorreiter Pedersen
|
3f0bfe1d75
|
C++: Remove the implicit assumption about the existence of a lower bound implying the existence of an upper bound (and vice veraa).
|
2021-11-15 13:39:15 +00:00 |
|
Mathias Vorreiter Pedersen
|
63f50a9eb7
|
C++: Cleanup the case for possibly-negative unsigned values.
|
2021-11-15 13:31:51 +00:00 |
|
Mathias Vorreiter Pedersen
|
9a9f7943aa
|
C++: Fix bug for exact powers of 10 and accept test changes.
|
2021-11-15 13:20:45 +00:00 |
|
Mathias Vorreiter Pedersen
|
53884915a5
|
C++: Add more tests (which demonstrate a couple of bugs in the implementation).
|
2021-11-15 13:18:30 +00:00 |
|
Mathias Vorreiter Pedersen
|
c2e057def9
|
Merge pull request #7094 from geoffw0/non-https-url
C++: New query 'Failure to use HTTPS URLs'
|
2021-11-15 10:00:19 +00:00 |
|
Mathias Vorreiter Pedersen
|
982de28b89
|
Update cpp/ql/lib/semmle/code/cpp/commons/Printf.qll
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com>
|
2021-11-11 13:19:13 +00:00 |
|
Geoffrey White
|
ea580cd9c0
|
C++: Add explanatory comments.
|
2021-11-11 11:49:51 +00:00 |
|
Mathias Vorreiter Pedersen
|
dbcd4d6d5d
|
C++: Remove 'ReferenceToInstruction' from the list of instructions we interpret as a load. This makes use lose a bunch of flow, and we'll restore this flow in the next commit.
|
2021-11-11 10:38:52 +00:00 |
|
Anders Schack-Mulligen
|
7ffd9b4f9e
|
Dataflow: Include read/store steps when finding non-hidden return.
|
2021-11-11 11:26:21 +01:00 |
|
Geoffrey White
|
901919f7ff
|
C++: Add tests expanding on the issue with (global) variables.
|
2021-11-11 09:40:03 +00:00 |
|
Geoffrey White
|
43ff3b1c80
|
C++: Address review comment.
|
2021-11-11 09:39:59 +00:00 |
|
Mathias Vorreiter Pedersen
|
bf9b8cfff0
|
Merge pull request #6947 from ihsinme/ihsinme-patch-077
CPP: Add query for CWE-377 Insecure Temporary File
|
2021-11-11 09:02:04 +00:00 |
|
Geoffrey White
|
9a1b98e1d9
|
C++: Fix qhelp example link.
|
2021-11-10 17:54:05 +00:00 |
|
Geoffrey White
|
c29011a5cf
|
C++: Add more sinks.
|
2021-11-10 16:43:28 +00:00 |
|
Geoffrey White
|
ae622bd482
|
C++: Use hasGlobalOrStdName.
|
2021-11-10 14:57:07 +00:00 |
|
Anders Schack-Mulligen
|
6d9fb3ca43
|
Dataflow: Sync.
|
2021-11-10 15:11:13 +01:00 |
|
Mathias Vorreiter Pedersen
|
ccdaf49464
|
C++: Fix the same bug in the test for ordered maps.
|
2021-11-10 13:24:27 +00:00 |
|
Mathias Vorreiter Pedersen
|
86d78b34aa
|
C++: Use the correct variable in the 'test'.
|
2021-11-10 13:04:48 +00:00 |
|
Geoffrey White
|
2f39c64cc2
|
C++: Fix character in qhelp.
|
2021-11-10 11:23:57 +00:00 |
|
Mathias Vorreiter Pedersen
|
e2ab1c8c5e
|
Merge branch 'main' into use-range-analysis-in-buffer-write
|
2021-11-10 08:28:43 +00:00 |
|
ihsinme
|
a0448240aa
|
Update InsecureTemporaryFile.expected
|
2021-11-10 09:23:51 +03:00 |
|
ihsinme
|
7514fe2b45
|
Update test.cpp
|
2021-11-10 09:22:58 +03:00 |
|
ihsinme
|
289d58745a
|
Update InsecureTemporaryFile.ql
|
2021-11-10 09:22:03 +03:00 |
|
Geoffrey White
|
26e9adcc34
|
C++: Change note.
|
2021-11-09 19:39:21 +00:00 |
|
Geoffrey White
|
ef21d1b512
|
C++: Add a model for curl as well.
|
2021-11-09 19:32:43 +00:00 |
|
Geoffrey White
|
6388ac5f1d
|
C++: Add tests.
|
2021-11-09 18:41:57 +00:00 |
|
Geoffrey White
|
d2b18d952d
|
C++: Add qhelp.
|
2021-11-09 18:41:56 +00:00 |
|
Geoffrey White
|
bd1e708c5d
|
C++: First version of cpp/non-https-url.
|
2021-11-09 18:33:49 +00:00 |
|
Mathias Vorreiter Pedersen
|
10bca3544c
|
C++: Change 'annotate_path_to_sink' so that you now annotate a ir-path with the previous node (instead of its source). This gives a better overview of the path.
|
2021-11-09 13:49:12 +00:00 |
|