Geoffrey White
28dca3fa9f
Merge pull request #8245 from ihsinme/ihsinme-patch-67
...
CPP: Add query for CWE-476: NULL Pointer Dereference when using exception handling blocks
2022-05-09 12:26:20 +01:00
ihsinme
b98ddc72f5
Update DangerousUseOfExceptionBlocks.ql
2022-05-05 21:05:22 +03:00
ihsinme
2d4d7aa094
Update DangerousUseOfExceptionBlocks.ql
2022-05-05 18:40:29 +03:00
ihsinme
75244effc5
Update DangerousUseOfExceptionBlocks.ql
2022-05-05 13:27:17 +03:00
Geoffrey White
614a7650a6
Merge pull request #8775 from porcupineyhairs/cpam
...
CPP: PAM Authorization Bypass
2022-04-29 14:55:33 +01:00
Erik Krogh Kristensen
ff73dbc35c
delete redundant imports
2022-04-22 12:55:28 +02:00
Porcupiney Hairs
06edb3f3a1
fix formatting issues
2022-04-21 00:23:49 +05:30
Porcupiney Hairs
85c751cb7f
CPP: PAM Authorization Bypass
...
This PR is similar to my other PRs for
[Python](https://github.com/github/codeql/pull/8595 ) and
[Golang](https://github.com/github/codeql-go/pull/709 ).
This PR aims to detect instances were an initiated PAM Transaction invokes the `pam_authenticate` method but does not invoke a call to the pam_acct_mgmt` method. This is bad as a call to `pam_authenticate` only verifies the users credentials. It does not check if the user account is still is a valid state.
If only a call to `pam_authenticate` is used to verify the user, a user with an expired account password would still be able to login. This can be prevented by calling the `pam_acct_mgmt` function after a `pam_authenticate` function.
2022-04-19 18:24:19 +05:30
Geoffrey White
cb211f8844
Merge pull request #8599 from 4B5F5F4B/main
...
C++: refactor some code, and add access_ok cases
2022-04-11 15:57:27 +01:00
4B5F5F4B
04538d0599
Autoformated to make CodeQL happy
2022-04-06 11:59:26 +08:00
ihsinme
73de757f39
Update DangerousUseOfExceptionBlocks.ql
2022-04-04 21:38:03 +03:00
ihsinme
61860c9ae9
Update DangerousUseOfExceptionBlocks.ql
2022-04-02 13:44:40 +03:00
ihsinme
b95094235c
Apply suggestions from code review
...
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com >
2022-03-30 10:51:38 +03:00
4B5F5F4B
9ab773422a
refactor some code, and add access_ok cases
2022-03-30 12:25:32 +08:00
Robert Marsh
8d21c8b7c5
Merge pull request #8423 from 4B5F5F4B/main
...
[CPP][Linux Kernel]Add ql to detect CVE-2017-5123
2022-03-29 15:10:15 -04:00
4B5F5F4B
9358b824c0
modify select clause to make codeql happy:)
2022-03-29 10:41:12 +08:00
4B5F5F4B
2d7b9c0c4f
modify a little cute typo
2022-03-26 22:55:27 +08:00
4B5F5F4B
7a091f808b
Create NoCheckBeforeUnsafePutUser.ql
2022-03-26 22:45:03 +08:00
4B5F5F4B
64863d493b
Delete cve-2017-5123.ql
2022-03-26 22:42:59 +08:00
Paul1nh0
5a1dc61d9d
modify arguments check logic
...
As far as I can tell, root cause of double-fetech issue is read from the same user mode memory twice, so it makes sense that only check whether user mode pointer is same or not
2022-03-23 11:20:08 +08:00
Paul1nh0
6a6cd61d83
automated using CodeQL for VSCode extension
2022-03-23 09:37:45 +08:00
Paul1nh0
f2728f5284
delete some unused code
2022-03-22 23:20:30 +08:00
Paul1nh0
afe4a8435f
Using globalValueNumber to match same arguments
2022-03-22 21:14:07 +08:00
Paul1nh0
d476493c3e
Add double-fetch.ql under CWE-362 directory
2022-03-22 19:08:44 +08:00
Paul1nh0
dd4e82126c
remove to another directory
2022-03-22 19:06:53 +08:00
Paul1nh0
2dad2c477b
query description added
2022-03-22 19:06:03 +08:00
ihsinme
151c93f502
Update DangerousUseOfExceptionBlocks.cpp
2022-03-21 09:52:14 +03:00
4B5F5F4B
d4c7314484
Delete cve-2016-6480.ql
...
commit by mistake
2022-03-17 09:49:28 +08:00
Paul1nh0
85b22647ac
Add query for double-fetch vulnerability
2022-03-16 18:16:49 +08:00
4B5F5F4B
2a29c201ff
Merge branch 'github:main' into main
2022-03-16 18:06:16 +08:00
4B5F5F4B
baf1c8d76b
Create cve-2016-6480.ql
2022-03-16 17:49:05 +08:00
ihsinme
2959150198
Update DangerousUseOfExceptionBlocks.ql
2022-03-16 09:30:38 +03:00
Mathias Vorreiter Pedersen
57922f56ee
Merge pull request #8424 from ihsinme/ihsinme-patch-fix077
...
Detection reduction on request
2022-03-15 16:17:47 +00:00
ihsinme
62ecf54aaa
Update DangerousUseOfExceptionBlocks.cpp
2022-03-15 08:53:38 +03:00
ihsinme
e99eaeb256
Apply suggestions from code review
...
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com >
2022-03-15 08:53:00 +03:00
ihsinme
1db759cc4d
Update InsecureTemporaryFile.ql
2022-03-14 09:33:08 +03:00
4B5F5F4B
597603a3a6
Create cve-2017-5123.ql
...
Add query to detect CVE-2017-5123
2022-03-14 09:44:30 +08:00
4B5F5F4B
4030561eb7
Delete CVE
2022-03-14 09:43:04 +08:00
4B5F5F4B
880c12bd34
Create CVE
2022-03-14 09:42:40 +08:00
Jeroen Ketema
a8b2805aeb
Merge pull request #8246 from ihsinme/ihsinme-patch-82
...
CPP: Add query for CWE-754: Improper Check for Unusual or Exceptional Conditions when using functions scanf
2022-03-11 12:54:49 +01:00
ihsinme
8335778e20
Update ImproperCheckReturnValueScanf.qhelp
2022-03-08 07:45:07 +03:00
ihsinme
c0c7748c5e
Apply suggestions from code review
...
Co-authored-by: Jeroen Ketema <93738568+jketema@users.noreply.github.com >
2022-03-08 07:42:35 +03:00
Mathias Vorreiter Pedersen
c7d624d314
Merge pull request #8247 from ihsinme/ihsinme-patch-80
...
CPP: Add query for CWE-190: Integer Overflow or Wraparound when using transform after operation
2022-03-07 11:00:29 +00:00
Geoffrey White
e7dca435a9
Merge pull request #6950 from ihsinme/ihsinme-patch-078
...
CPP: Add query for CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
2022-03-07 10:55:29 +00:00
ihsinme
9e76260f1d
Update DangerousUseOfTransformationAfterOperation.ql
2022-03-02 10:38:57 +03:00
ihsinme
f5267ba8c6
Update DangerousUseOfTransformationAfterOperation.qhelp
2022-03-02 10:24:40 +03:00
ihsinme
a6654fce4a
Update ImproperCheckReturnValueScanf.ql
2022-03-01 16:37:29 +03:00
ihsinme
be11e4fc2d
Apply suggestions from code review
...
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com >
2022-03-01 12:25:57 +03:00
ihsinme
d772ea0efe
Apply suggestions from code review
...
Co-authored-by: Jeroen Ketema <93738568+jketema@users.noreply.github.com >
2022-03-01 10:49:36 +03:00
ihsinme
c6083a6f95
Apply suggestions from code review
...
Co-authored-by: Mathias Vorreiter Pedersen <mathiasvp@github.com >
2022-03-01 09:37:57 +03:00
