ihsinme
2131f35801
Update WrongInDetectingAndHandlingMemoryAllocationErrors.ql
2021-02-04 15:41:40 +03:00
ihsinme
2b946aee5a
Update WrongInDetectingAndHandlingMemoryAllocationErrors.ql
2021-01-31 15:21:54 +03:00
ihsinme
bdbf5a4fae
Apply suggestions from code review
...
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com >
2021-01-29 13:41:45 +03:00
ihsinme
c8eeb5f73e
Update WrongInDetectingAndHandlingMemoryAllocationErrors.ql
2021-01-29 11:51:15 +03:00
ihsinme
bdfdcbd673
Update WrongInDetectingAndHandlingMemoryAllocationErrors.ql
2021-01-27 15:48:18 +03:00
ihsinme
16d058f498
Update WrongInDetectingAndHandlingMemoryAllocationErrors.ql
2021-01-27 15:06:57 +03:00
ihsinme
5d163b4c15
Update WrongInDetectingAndHandlingMemoryAllocationErrors.qhelp
2021-01-27 15:05:58 +03:00
ihsinme
25de82c78c
Apply suggestions from code review
...
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com >
2021-01-27 15:05:01 +03:00
ihsinme
bec0064396
Update test.cpp
2021-01-27 14:54:47 +03:00
ihsinme
8737c1442b
Update WrongInDetectingAndHandlingMemoryAllocationErrors.cpp
2021-01-27 14:48:23 +03:00
ihsinme
20e19ec467
Add files via upload
2021-01-25 00:09:55 +03:00
ihsinme
9071ba2f99
Add files via upload
2021-01-25 00:06:19 +03:00
Geoffrey White
69664535b0
Merge pull request #4881 from ihsinme/main
...
CPP: Add query for CWE-401 memory leak on unsuccessful call to realloc function
2021-01-13 10:58:09 +00:00
Anders Schack-Mulligen
29935e1388
Merge pull request #4771 from intrigus-lgtm/split-cwe-295
...
Java: Add unsafe hostname verification query and remove existing overlapping query
2021-01-13 11:31:38 +01:00
intrigus
2931e1f3fb
Java: Add change note for #4771
2021-01-12 15:37:45 +01:00
intrigus
1901f6bf55
Java: Make @id @name of query more similar.
2021-01-12 15:36:55 +01:00
intrigus
4fa8f5eab2
Java: Accept test changes
2021-01-12 15:29:03 +01:00
CodeQL CI
1c8547c897
Merge pull request #4774 from erik-krogh/forms
...
Approved by asgerf
2021-01-12 02:01:38 -08:00
ihsinme
bbd3f7631e
Delete test.c
...
sorry i was in a hurry
2021-01-11 23:52:26 +03:00
ihsinme
b92d63d5df
Delete CompilerRemovalOfCodeToClearBuffers.qlref
...
sorry i was in a hurry
2021-01-11 23:51:37 +03:00
ihsinme
05f866e912
Delete CompilerRemovalOfCodeToClearBuffers.expected
...
sorry i was in a hurry
2021-01-11 23:51:18 +03:00
ihsinme
d7a5e61f8e
Delete CompilerRemovalOfCodeToClearBuffers.qhelp
...
sorry i was in a hurry
2021-01-11 23:50:47 +03:00
ihsinme
c38cfcb735
Delete CompilerRemovalOfCodeToClearBuffers.ql
...
sorry i was in a hurry
2021-01-11 23:50:19 +03:00
ihsinme
65ff526eef
Delete CompilerRemovalOfCodeToClearBuffers.c
...
sorry i was in a hurry
2021-01-11 23:49:53 +03:00
ihsinme
ed6d8e3d18
Add files via upload
2021-01-11 23:40:38 +03:00
ihsinme
b185a33157
Add files via upload
2021-01-11 23:39:02 +03:00
ihsinme
b28444b55c
Update MemoryLeakOnFailedCallToRealloc.ql
...
I thought since there is no work on this PR, I will delete the residual import.
2021-01-11 21:17:49 +03:00
intrigus
85286f362c
Java: Replace global flow by local flow
2021-01-11 19:02:07 +01:00
intrigus-lgtm
722bd4dafa
Java: Revise qhelp
2021-01-11 18:57:24 +01:00
intrigus-lgtm
4cfdb10ddc
Java: Improve QLDoc & simplify code
...
Co-authored-by: Anders Schack-Mulligen <aschackmull@users.noreply.github.com >
2021-01-11 18:50:43 +01:00
CodeQL CI
4bc287e89b
Merge pull request #4933 from madneal/fix-for-predicates
...
Approved by shati-patel
2021-01-11 06:01:33 -08:00
madneal
ee3ffa0700
add extra clarifications in the comments
2021-01-11 21:43:24 +08:00
Mathias Vorreiter Pedersen
59abcd6dae
Merge pull request #4938 from geoffw0/cpp302
...
C++: Tidy up old QL headers
2021-01-11 14:12:16 +01:00
intrigus
5c1e746c96
Java: Rename to EnvReadMethod
2021-01-11 13:42:08 +01:00
intrigus
1eb2b75389
Java: Further reduce FPs, simply Flag2Guard flow
2021-01-11 13:42:08 +01:00
intrigus
b4692734b2
Java: Add QLDoc improve query message
2021-01-11 13:42:08 +01:00
intrigus-lgtm
f4b912cd8a
Apply suggestions from doc review
...
Co-authored-by: Felicity Chapman <felicitymay@github.com >
2021-01-11 13:42:08 +01:00
intrigus
e11304a1ca
Java: Autoformat
2021-01-11 13:42:08 +01:00
intrigus-lgtm
b8f3e64a0f
Apply suggestions from code review
...
Co-authored-by: Felicity Chapman <felicitymay@github.com >
2021-01-11 13:42:08 +01:00
intrigus
502e4c39f5
Java: Fix Qhelp
2021-01-11 13:42:08 +01:00
intrigus-lgtm
355cb6eeec
Fix Qhelp format
...
Co-authored-by: Felicity Chapman <felicitymay@github.com >
2021-01-11 13:42:07 +01:00
intrigus-lgtm
10fc2cf9f8
Apply suggestions from code review
...
Co-authored-by: Chris Smowton <smowton@github.com >
2021-01-11 13:42:07 +01:00
intrigus
c88f07dde4
Java: Accept test output
2021-01-11 13:42:07 +01:00
intrigus
33b0ff28d8
Java: Update test
2021-01-11 13:42:07 +01:00
intrigus
9e2ef9bd74
Java: Filter results by feature flags.
...
This ignores results that are guarded by a feature flag
that suggests an intentionally insecure feature.
Inspired by Go's `InsecureFeatureFlag.qll` and
`DisabledCertificateCheck.ql`.
2021-01-11 13:42:07 +01:00
intrigus
a62a2e58dd
Java: Improve QL-Doc
2021-01-11 13:42:07 +01:00
intrigus
d98b171998
Java: Make EnvTaintedMethod public + QL-Doc
2021-01-11 13:42:07 +01:00
intrigus
e021158b5f
Java: Tighter model of HostnameVerifier#verify
...
This more tightly models `HostnameVerifier#verify` previously it
was possible to accidentally match other methods called `verify`.
2021-01-11 13:42:07 +01:00
intrigus
0a9df07df7
Apply suggestions from review.
2021-01-11 13:42:07 +01:00
intrigus
70b0703952
Java: Remove overlapping code
2021-01-11 13:42:07 +01:00
