Mathias Vorreiter Pedersen
|
45f69be94c
|
C++: Accept test changes
|
2022-12-16 14:14:58 +00:00 |
|
Mathias Vorreiter Pedersen
|
df526552a6
|
C++: Fix mapping between dataflow nodes and '{Crement, Assign}Operations'.
|
2022-12-16 14:14:48 +00:00 |
|
Jeroen Ketema
|
31b4dda7bd
|
Merge pull request #11687 from jketema/tainted-path-use-use
C++: Make `cpp/path-injection` work with use-use dataflow
|
2022-12-14 18:06:05 +01:00 |
|
Mathias Vorreiter Pedersen
|
22b04af0fa
|
Merge pull request #11658 from MathiasVP/uncertain-writes
C++: Flow through uncertain writes
|
2022-12-14 15:26:28 +00:00 |
|
Jeroen Ketema
|
bb256514c0
|
Merge remote-tracking branch 'upstream/main' into mathiasvp/replace-ast-with-ir-use-usedataflow
|
2022-12-14 15:52:20 +01:00 |
|
Erik Krogh Kristensen
|
7615668f92
|
Merge pull request #11662 from erik-krogh/c-useInstanceOf
Swift/C++: Use instanceof in more places
|
2022-12-14 14:30:21 +01:00 |
|
Jeroen Ketema
|
c18cfa7a7a
|
C++: Fix itemization in QLDoc
|
2022-12-14 13:46:07 +01:00 |
|
Jeroen Ketema
|
4075f693bd
|
C++: Make cpp/path-injection work with use-use dataflow
|
2022-12-14 13:38:55 +01:00 |
|
Mathias Vorreiter Pedersen
|
973aad5c17
|
Merge pull request #11677 from jketema/argv-flow-source
C++: Recognize indirect `argv` accesses as flow sources for use-use dataflow
|
2022-12-14 12:36:18 +00:00 |
|
Jeroen Ketema
|
628f92a9fb
|
C++: Fix QL-for-QL warnings
|
2022-12-13 16:24:55 +01:00 |
|
Jeroen Ketema
|
3be0b3e6c7
|
C++: Recognize indirect argv accesses as flow sources for use-use dataflow
This fixes the test regression on `cpp/command-line-injection`.
|
2022-12-13 16:18:17 +01:00 |
|
Jeroen Ketema
|
b10ed976cc
|
Update cpp/ql/src/Likely Bugs/Memory Management/AllocaInLoop.ql
Co-authored-by: Mathias Vorreiter Pedersen <mathiasvp@github.com>
|
2022-12-13 10:57:34 +01:00 |
|
Tom Hvitved
|
cfcb3a60ba
|
C++: Update expected test output
|
2022-12-13 09:53:01 +01:00 |
|
Tom Hvitved
|
bc58cbec8c
|
C++: Implement ContentApprox
|
2022-12-13 09:53:01 +01:00 |
|
Tom Hvitved
|
0c2eee2a72
|
Data flow: Sync files
|
2022-12-13 09:52:55 +01:00 |
|
erik-krogh
|
92a7e787a8
|
C: do the minimal change to ValueNumberBound instead
|
2022-12-12 22:17:50 +01:00 |
|
Jeroen Ketema
|
18dea55071
|
C++: Fix cpp/alloca-in-loop regressions with use-use dataflow
|
2022-12-12 19:15:50 +01:00 |
|
erik-krogh
|
698e05f85a
|
Swift/C++: Use instanceof in more places
|
2022-12-12 16:58:13 +01:00 |
|
Mathias Vorreiter Pedersen
|
a161dddbbf
|
C++: Accept test changes. These happen because these remote flow sources specify that the remote source is both 'isReturnValue' and 'isReturnValueDeref'.
|
2022-12-12 13:39:09 +00:00 |
|
Mathias Vorreiter Pedersen
|
8722fb2cf5
|
C++: Accept test changes.
|
2022-12-12 10:54:40 +00:00 |
|
Mathias Vorreiter Pedersen
|
ad522651ec
|
C++: Flow through uncertain writes.
|
2022-12-12 10:54:26 +00:00 |
|
Mathias Vorreiter Pedersen
|
2999243e34
|
C++: Add failing IR dataflow testcase.
|
2022-12-12 10:42:59 +00:00 |
|
Jeroen Ketema
|
b2091e8632
|
Merge branch 'main' into mathiasvp/replace-ast-with-ir-use-usedataflow
|
2022-12-12 11:40:36 +01:00 |
|
Jeroen Ketema
|
cb1dacfef1
|
C++: Fix QL-for-QL warnings
|
2022-12-12 11:23:29 +01:00 |
|
Jeroen Ketema
|
beb66d027e
|
C++: Use FlowSource in cpp/path-injection
|
2022-12-10 20:27:56 +01:00 |
|
Jeroen Ketema
|
d5acd310ce
|
Merge pull request #11644 from jketema/lower-case-flow-source-description
C++: Make all flow source descriptions start with a lower case letter
|
2022-12-10 20:23:14 +01:00 |
|
Mathias Vorreiter Pedersen
|
9f9ffef697
|
C++: Make the Node IPA type private.
|
2022-12-10 14:51:21 +00:00 |
|
Mathias Vorreiter Pedersen
|
de70cbfee9
|
C++: Change caching for dataflow.
|
2022-12-09 23:30:47 +00:00 |
|
Jeroen Ketema
|
ce92ba640a
|
C++: Accept test changes
|
2022-12-09 23:38:03 +01:00 |
|
Jeroen Ketema
|
9dc2614012
|
C++: Make all flow source descriptions start with a lower case letter
In every context where we use the description a lower case letter makes more
sense.
|
2022-12-09 23:18:58 +01:00 |
|
Jeroen Ketema
|
1e1974c9fb
|
C++: Add change note
|
2022-12-09 23:17:36 +01:00 |
|
Jeroen Ketema
|
331fab5ac0
|
C++: Generalize the ArgvSource flow source
This matches `isUserInput` and handles cases where `argv` has a different name,
which is allowed.
|
2022-12-09 23:12:31 +01:00 |
|
Mathias Vorreiter Pedersen
|
52bf39bcf9
|
C++: Use a 'fastTC' instead of '*' to improve performance.
|
2022-12-09 14:21:09 +00:00 |
|
Mathias Vorreiter Pedersen
|
a3285653ae
|
C++: Prevent an expression to stepping to itself.
|
2022-12-09 14:20:27 +00:00 |
|
Mathias Vorreiter Pedersen
|
7d1f10bc78
|
Merge pull request #11627 from jketema/getaddrinfo
C++: Model `getaddrinfo` as flow source
|
2022-12-09 12:38:43 +00:00 |
|
Mathias Vorreiter Pedersen
|
1169c1b898
|
C++: Accept test changes caused by the new consitency check.
|
2022-12-09 09:20:29 +00:00 |
|
Jeroen Ketema
|
2095f11b8c
|
C++: Add change note
|
2022-12-08 23:35:32 +01:00 |
|
Jeroen Ketema
|
aabbafd2bf
|
C++: Fix QL-for-QL warning
|
2022-12-08 19:33:11 +01:00 |
|
Jeroen Ketema
|
ec0ce56269
|
C++: Model getaddrinfo as flow source
|
2022-12-08 19:20:11 +01:00 |
|
Jeroen Ketema
|
89cd4790d5
|
Merge pull request #11610 from jketema/scanf
C++: Model `scanf` and `fscanf` as flow sources
|
2022-12-08 19:14:39 +01:00 |
|
Geoffrey White
|
f373b7fe7c
|
Merge pull request #11596 from geoffw0/cleartextbufferwrite
C++: Performance fix for cpp/cleartext-storage-buffer
|
2022-12-08 17:18:10 +00:00 |
|
Robert Marsh
|
f235b991db
|
Merge pull request #11374 from MathiasVP/indirect-outnodes-are-post-update-nodes
C++: Field flow through reference-returning functions
|
2022-12-08 10:46:19 -05:00 |
|
Jeroen Ketema
|
8f9a73ee09
|
C++: Address review comments
|
2022-12-08 16:14:12 +01:00 |
|
Jeroen Ketema
|
33fa76f911
|
C++: Add change note
|
2022-12-08 15:22:42 +01:00 |
|
Jeroen Ketema
|
b216c79992
|
C++: Accept test changes
|
2022-12-08 15:22:41 +01:00 |
|
Jeroen Ketema
|
f35b7f8fe8
|
C++: Model scanf and fscanf as flow sources
|
2022-12-08 15:22:41 +01:00 |
|
Mathias Vorreiter Pedersen
|
f814ce7f10
|
Merge branch 'mathiasvp/replace-ast-with-ir-use-usedataflow' into refactor-isdef-isuse
|
2022-12-08 13:25:20 +00:00 |
|
Mathias Vorreiter Pedersen
|
0a1097d735
|
C++: Accept test changes to 'sources-and-sinks.cpp'.
|
2022-12-08 13:17:35 +00:00 |
|
Mathias Vorreiter Pedersen
|
4fd6ac5657
|
Merge branch 'main' into mathiasvp/replace-ast-with-ir-use-usedataflow
|
2022-12-08 13:10:18 +00:00 |
|
Mathias Vorreiter Pedersen
|
6897b20722
|
Merge pull request #11601 from MathiasVP/keep-std-string-iterator
|
2022-12-08 12:59:33 +00:00 |
|