Geoffrey White
fd571538fb
Merge pull request #10706 from geoffw0/vaheuristic
...
C++: Tune cpp/unterminated-variadic-call
2022-10-10 13:39:40 +01:00
Geoffrey White
059864587e
C++: Add 'mremap' to whitelist.
2022-10-10 11:00:18 +01:00
Dave Bartolomeo
5ee7986649
Merge pull request #10736 from github/post-release-prep/codeql-cli-2.11.1
...
Post-release preparation for codeql-cli-2.11.1
2022-10-07 14:23:31 -04:00
github-actions[bot]
b8ef9e0ddc
Post-release preparation for codeql-cli-2.11.1
2022-10-07 15:59:45 +00:00
erik-krogh
66c9705502
fix some more style-guide violations in the alert-messages
2022-10-07 11:19:46 +02:00
github-actions[bot]
a02dcdc5e1
Release preparation for version 2.11.1
2022-10-07 02:20:28 +00:00
Henry Mercer
7a7d164b07
Merge pull request #10698 from github/henrymercer/successfully-extracted-files-tag
...
Tag successfully extracted files queries
2022-10-06 13:21:52 +01:00
Geoffrey White
c6b7bb436d
C++: Make the ql-for-ql checks happy.
2022-10-06 11:25:22 +01:00
Mathias Vorreiter Pedersen
a856bc8678
Merge pull request #10562 from rdmarsh2/rdmarsh2/cpp/field-off-by-one
...
C++: prototype for off-by-one in array-typed field
2022-10-06 11:04:12 +01:00
Mathias Vorreiter Pedersen
32d0b58923
C++: Fix qhelp example.
2022-10-06 10:19:53 +01:00
Geoffrey White
86756538f2
C++: Change note.
2022-10-06 09:14:25 +01:00
Geoffrey White
9a365d83cf
C++: Tighten up the heuristic in cpp/unterminated-variadic-call.
2022-10-06 09:14:16 +01:00
Henry Mercer
d80d39504f
Tag successfully extracted files queries
...
Tag the successfully extracted files queries with
`successfully-extracted-files` to make them easier to identify
programmatically in a language-independent way.
This follows the prior art for lines of code queries, which are tagged
`lines-of-code`.
2022-10-05 19:19:43 +01:00
Mathias Vorreiter Pedersen
fcd69a005f
C++: Remove redundant pragma.
2022-10-05 09:56:24 +01:00
Mathias Vorreiter Pedersen
4d697cd369
C++: Rephrase QLDoc.
2022-10-04 17:15:08 +01:00
Mathias Vorreiter Pedersen
32839021f8
C++: Fix join that might blow up in the future.
2022-10-04 16:43:02 +01:00
Robert Marsh
84f9c9b224
C++: query help for ConstantSizeArrayOffByOne.ql
2022-09-30 15:15:24 -04:00
Robert Marsh
159f11cd28
C++: fill in more query metadata
2022-09-30 15:07:08 -04:00
Robert Marsh
8972176242
C++: autoformat
2022-09-30 14:22:33 -04:00
Robert Marsh
8ac8101a75
C++: convert to path-problem
2022-09-30 11:35:02 -04:00
Robert Marsh
423e0bf99a
C++: respond to style comments on PR
2022-09-30 11:27:14 -04:00
Mathias Vorreiter Pedersen
b0af4cba30
C++: Fix Code Scanning alert.
2022-09-30 10:05:45 +01:00
Robert Marsh
f17b563692
C++: handle interprocedural flows
...
This currently copy-pastes some predicates from InvalidPointerDeref.ql.
Those should be moved to a library file in a followup
2022-09-29 16:09:48 -04:00
Mathias Vorreiter Pedersen
2a514d60d4
C++: Add 'isBarrierIn' to prevent path duplication.
2022-09-29 19:55:58 +01:00
Mathias Vorreiter Pedersen
d12a76559a
C++: Use the new class in 'cpp/invalid-pointer-deref'.
2022-09-29 19:54:03 +01:00
Robert Marsh
447c11cd07
C++: move ConstantSizeArrayOffByOne.ql to CWE-193
2022-09-29 10:56:29 -04:00
Robert Marsh
e46b215c9d
C++: fix metadata and result format
2022-09-29 10:53:29 -04:00
Mathias Vorreiter Pedersen
70837dbd93
C++: Use range analysis to properly deduce the initial 'state2' instead of traversing the AST. Also fix state-passing related to negative states.
2022-09-29 13:32:39 +01:00
Mathias Vorreiter Pedersen
4ab676774e
C++: Add qhelp to new query.
2022-09-28 15:17:08 +01:00
Mathias Vorreiter Pedersen
769ff5c6f3
C++: Add 'isAdditionalFlowStep' predicates for both configurations in the product dataflow library and use them to fix missing results in the 'cpp/overrun-write' query.
2022-09-28 15:17:04 +01:00
Mathias Vorreiter Pedersen
ccbbb5754e
C++: Use range analysis in 'cpp/overrun-write' and accept test changes.
2022-09-28 15:14:29 +01:00
Mathias Vorreiter Pedersen
e4305948ef
C++: Fix FP on CWE-193 by blocking flow through back-edges of phi nodes.
2022-09-27 16:28:03 +01:00
erik-krogh
0f1a8a6f5b
deleted unused internal code
2022-09-26 20:20:52 +02:00
Erik Krogh Kristensen
c2b5c39436
Merge pull request #10507 from erik-krogh/cpp-followMsg
...
CPP: Make more alert-messages follow the style guide
2022-09-24 17:26:11 +02:00
Dave Bartolomeo
3bd456e52d
Merge pull request #10565 from github/post-release-prep/codeql-cli-2.11.0
...
Post-release preparation for codeql-cli-2.11.0
2022-09-23 18:13:59 -04:00
github-actions[bot]
6cef0af5df
Post-release preparation for codeql-cli-2.11.0
2022-09-23 21:01:40 +00:00
Robert Marsh
b93a2b06bf
C++: prototype for off-by-one in array-typed field
2022-09-23 14:38:06 -04:00
Robert Marsh
c2dfbd47a3
Merge pull request #10398 from MathiasVP/further-work-on-buffer-over-queries
...
C++: Further work on buffer-overflow queries
2022-09-23 11:06:32 -04:00
erik-krogh
96b46de7c8
update alert-messages based on review feedback
2022-09-23 14:53:54 +02:00
erik-krogh
edd03020c2
fix the casing in the alert-message of cpp/unclear-array-index-validation
2022-09-23 14:48:01 +02:00
Mathias Vorreiter Pedersen
639aaff9c7
C++: Add more metadata.
2022-09-23 13:47:02 +01:00
erik-krogh
9e4843d53e
update the alert-message of cpp/file-may-not-be-closed based on feedback
2022-09-23 14:46:00 +02:00
erik-krogh
2351884352
update some alert-messages based on review feedback
2022-09-23 14:45:59 +02:00
erik-krogh
a3c051bf96
add change-note
2022-09-23 14:45:59 +02:00
erik-krogh
40bea78186
remove more instances of the alert-loc being repeated as a link
2022-09-23 14:45:59 +02:00
erik-krogh
d55993a37b
autoformat
2022-09-23 14:45:59 +02:00
erik-krogh
33165f4f55
CPP: update expected output
2022-09-23 14:45:59 +02:00
erik-krogh
a30c38f38c
CPP: make more alert messages follow the style-guide
2022-09-23 14:45:59 +02:00
Mathias Vorreiter Pedersen
ce3654c6ec
C++: Make ql-for-ql happy.
2022-09-23 13:07:07 +01:00
Mathias Vorreiter Pedersen
162ec2884e
C++: Also fix 'OverrunWriteProductFlow.ql'
2022-09-23 12:59:27 +01:00
