Mathias Vorreiter Pedersen
5da3fb5e05
Merge pull request #16959 from MathiasVP/promote-iterator-to-expired-container-to-code-scanning
...
C++: Promote `cp/iterator-to-expired-container` to Code Scanning
2024-07-15 11:55:32 +01:00
Mathias Vorreiter Pedersen
64513fb6c2
C++: Add change note.
2024-07-11 14:26:47 +01:00
Mathias Vorreiter Pedersen
8012f3b2f7
C++: Increase the precision of 'cpp/iterator-to-expired-container' to high.
2024-07-11 14:26:05 +01:00
Geoffrey White
0344381120
Merge remote-tracking branch 'upstream/main' into docsforautofix
2024-07-10 11:17:52 +01:00
Geoffrey White
74384625f6
C++: Autoformat.
2024-07-10 11:17:44 +01:00
Mathias Vorreiter Pedersen
9cfd06c761
C++: Increase the precision of 'cpp/unsafe-strncat' to high.
2024-07-08 16:06:58 +01:00
Mathias Vorreiter Pedersen
962c73da16
C++: Promote 'cpp/unsafe-strncat' to Code Scanning.
2024-07-08 16:02:29 +01:00
Geoffrey White
8818f63ca7
C++: Add some practical details to the examples.
2024-07-08 14:32:05 +01:00
Geoffrey White
80af5b7725
C++: Add a third example for cpp/world-writable-file-creation.
2024-07-08 14:32:04 +01:00
Geoffrey White
4f0d725acd
C++: Add a 'good' example as well.
2024-07-08 14:32:03 +01:00
Geoffrey White
d52210d565
C++: Improve the example for cpp/return-stack-allocated-memory.
2024-07-08 14:32:01 +01:00
Geoffrey White
3c70583aa2
C++: Add close calls to examples for cpp/toctou-race-condition.
2024-07-08 14:32:00 +01:00
Geoffrey White
0288499801
C++: Rephrase the alert message for cpp/wrong-type-format-argument to be less prescriptive.
2024-07-08 14:31:59 +01:00
github-actions[bot]
ae3aba061b
Post-release preparation for codeql-cli-2.18.0
2024-07-08 13:30:13 +00:00
github-actions[bot]
b0d6778652
Release preparation for version 2.18.0
2024-07-08 09:10:51 +00:00
Geoffrey White
1343e4c9aa
C++: Add another 'good' example for cpp/unsigned-difference-expression-compared-zero.
2024-07-04 17:11:10 +01:00
Geoffrey White
7abece46c7
C++: Add a 'good' example for cpp/unsigned-difference-expression-compared-zero.
2024-07-04 17:11:09 +01:00
Geoffrey White
f64743e91d
C++: Fix mistake in example for cpp/incorrect-allocation-error-handling.
2024-07-04 16:19:32 +01:00
Arthur Baars
b12b33c8f9
Merge remote-tracking branch 'upstream/main' into 'rc/3.14'
2024-06-28 19:50:35 +02:00
Mathias Vorreiter Pedersen
921afb71e2
Update cpp/ql/src/Security/CWE/CWE-570/IncorrectAllocationErrorHandling.ql
...
Co-authored-by: Jeroen Ketema <93738568+jketema@users.noreply.github.com >
2024-06-25 10:03:53 +01:00
Mathias Vorreiter Pedersen
bb8b0d0bf5
C++: Use the unary version of 'comparesEq' to handle both disjuncts.
2024-06-25 09:30:53 +01:00
github-actions[bot]
fd385736e6
Post-release preparation for codeql-cli-2.17.6
2024-06-25 06:39:45 +00:00
github-actions[bot]
e32a587078
Release preparation for version 2.17.6
2024-06-24 14:33:10 +00:00
github-actions[bot]
8a25081a0e
Post-release preparation for codeql-cli-2.17.5
2024-06-10 15:33:08 +00:00
github-actions[bot]
877bfa2468
Release preparation for version 2.17.5
2024-06-10 13:40:39 +00:00
Mathias Vorreiter Pedersen
9f4c1380e5
Merge pull request #16677 from MathiasVP/phi-input-nodes
...
C++: Extend barrier guards to handle phi inputs
2024-06-06 19:21:30 +01:00
Mathias Vorreiter Pedersen
05d46a6793
C++: Also ignore phi input edges in 'AllocaInLoop.ql'.
2024-06-05 09:58:44 +01:00
Jeroen Ketema
6f8449cf75
C++: Add change note
2024-06-05 10:05:13 +02:00
Jeroen Ketema
66077dc38d
C++: Ignore gets'es with incorrect parameter counts
2024-06-04 11:15:07 +02:00
github-actions[bot]
906b65d09c
Post-release preparation for codeql-cli-2.17.4
2024-05-28 18:02:25 +00:00
github-actions[bot]
33b4ae8bbb
Release preparation for version 2.17.4
2024-05-28 15:44:32 +00:00
Remco Vermeulen
6df4c8964b
Rewrite recommendations
...
- Replace segmentation fault with crash that is platform agnostic (I think segmentation fault is not really a thing on Windows).
- Replace security vulnerability with malicious code execution. This provides a range of issues, because a crash (previously segmentation fault) could also be considered a security vulnerability. Namely a DOS.
- Removed the additional note on stack allocated arrays which seem confusing because we are always talking about buffers allocated on the heap.
2024-05-24 16:10:42 -07:00
Dave Bartolomeo
613ccaac1d
Add change note to all v1.0.0 packs
2024-05-23 13:01:22 -04:00
Dave Bartolomeo
ffe4c8c87b
Update all pack versions to 1.0.0
2024-05-22 13:39:08 -04:00
Mathias Vorreiter Pedersen
769d9317c7
C++: Avoid a CP between 'getExpr(node)' and 'this' in 'LoopWithAlloca'.
2024-05-22 15:15:40 +01:00
Mathias Vorreiter Pedersen
1a0d66b339
Merge pull request #16557 from MathiasVP/fix-unique-pointer-query-fp
...
C++: Fix `cpp/use-of-unique-pointer-after-lifetime-ends` FP
2024-05-22 15:09:54 +01:00
Mathias Vorreiter Pedersen
9907f0f827
C++: Exclude a cast to any integral type.
2024-05-22 13:42:07 +01:00
Mathias Vorreiter Pedersen
00a940fd58
Merge pull request #16524 from catenacyber/deref-null-result
...
Adds another rule for null deref
2024-05-22 12:37:39 +01:00
Mathias Vorreiter Pedersen
4b02f88089
C++: Add change note.
2024-05-22 12:37:08 +01:00
Mathias Vorreiter Pedersen
af81698fa8
C++: Fix FP and accept test changes.
2024-05-22 12:34:09 +01:00
Mathias Vorreiter Pedersen
eda815789b
Update cpp/ql/src/experimental/Likely Bugs/DerefNullResult.ql
2024-05-22 11:21:04 +01:00
Philippe Antoine
ab4b823c2e
fixup unique assignment
2024-05-21 22:10:00 +02:00
Jeroen Ketema
1a60c01723
C++: Add memcmp test for cpp/network-to-host-function-as-array-bound
2024-05-21 10:27:38 +02:00
Philippe Antoine
8ace9da14a
fixup dataflow path and formatting
2024-05-20 21:31:47 +02:00
Geoffrey White
13a7d9acb6
Merge pull request #16528 from geoffw0/docfix2
...
C++: Update an instance of the name 'Semmle' in a doc page.
2024-05-20 15:07:42 +01:00
Geoffrey White
0ba3cd96f5
C++: Update an instance of the name 'Semmle' in a doc page.
2024-05-20 10:02:50 +01:00
Mathias Vorreiter Pedersen
2f7766a557
C++: Autoformat.
2024-05-20 09:04:24 +01:00
Mathias Vorreiter Pedersen
e8b9d7e6fa
C++: Modify change note to be more aligned with existing change notes.
2024-05-20 08:52:18 +01:00
codeqlhelper
15667dcf1e
Create 2024-05-19-avoid-reporting-static-variable.md
2024-05-19 21:55:35 +08:00
codeqlhelper
1d8d45b3aa
Static variables are initialized to zero or null by compiler
...
Static variables are initialized to zero or null by compiler, no need to get an initializer of them
2024-05-19 21:48:43 +08:00
