Ben Rodes
d4c0c4059d
Brodes/overflow buffer fixes ( #79 )
...
* Addreessing false positive due to incorrect use of getType
* Addressing false positive with strncpy.
* BufferAccess must be reachable. False positives observed where accesses occur in dead code.
* Formatting and updating tests.
2024-08-12 16:00:11 -04:00
Dilan Bhalla
ed8ada30e8
apply Mathias patch
2024-08-02 15:45:35 -07:00
Dilan Bhalla
73ee8ef664
2.18.1 merge conflict
2024-07-31 14:53:08 -07:00
Dilan Bhalla
db6fb7b5a3
2.18.1 merge
2024-07-31 14:52:51 -07:00
github-actions[bot]
368bcb684a
Release preparation for version 2.18.1
2024-07-22 21:30:50 +00:00
Chuan-kai Lin
23320b6e5e
Revert "Release preparation for version 2.18.1"
2024-07-22 13:22:49 -07:00
github-actions[bot]
55935fc123
Release preparation for version 2.18.1
2024-07-22 14:56:15 +00:00
Geoffrey White
98319be3a7
Merge pull request #16985 from geoffw0/madprov
...
C++: Support MaD alert provenance
2024-07-17 16:25:49 +01:00
Mathias Vorreiter Pedersen
45ba0c3319
Merge pull request #16907 from MathiasVP/phi-escape-5
...
C++: Add a new `MemoryLocation` to represent sets of `Allocation`s
2024-07-17 15:44:04 +01:00
Mathias Vorreiter Pedersen
8a3a3fa263
C++: Sync identical files.
2024-07-17 14:39:08 +01:00
Mathias Vorreiter Pedersen
d5ccb2e396
C++: Add a large QLDoc with example to 'getInstructionSuccessor'.
2024-07-17 14:39:02 +01:00
Mathias Vorreiter Pedersen
dbe0fceea6
C++: Sync identical files.
2024-07-16 17:42:39 +01:00
Mathias Vorreiter Pedersen
083b9b77c9
C++: Delete redundant conjuncts.
2024-07-16 17:42:31 +01:00
Mathias Vorreiter Pedersen
8894fba17a
C++: Sync identical files.
2024-07-16 16:19:04 +01:00
Mathias Vorreiter Pedersen
950d70ffed
C++: Replace 'InitializeGroup' with 'UninitializedGroup'.
2024-07-16 16:16:50 +01:00
Geoffrey White
e39e7656da
C++: Change note.
2024-07-16 09:59:42 +01:00
Geoffrey White
195c20cfd5
C++: Fix provenance for sources/sinks.
2024-07-16 09:33:51 +01:00
Geoffrey White
eefbb676e9
C++: Support alert provenance.
2024-07-16 09:33:48 +01:00
Anders Schack-Mulligen
da5abc8321
Dataflow: Replace MakeSets with QlBuiltins::InternSets.
2024-07-15 13:35:57 +02:00
Mathias Vorreiter Pedersen
813f08ef57
C++: Strip away specifiers and typedefs when finding iterator parameters for a string taint function.
2024-07-12 09:54:04 +01:00
Calum Grant
24914efcb8
Merge pull request #16956 from github/calumgrant/cpp20-array-sizes
...
C++: Test C++20 implicit array sizes.
2024-07-11 17:44:08 +01:00
Calum Grant
13c25a494f
C++: Move change notes to correct location
2024-07-11 16:49:17 +01:00
Calum Grant
c6fb50095b
C++: Change note and autoformat
2024-07-11 14:21:09 +01:00
Calum Grant
29df3cb5b3
C++: Add test for C++20 implicit array sizes
...
Implement NewArrayExpr.getArraySize()
2024-07-11 12:59:52 +01:00
Jeroen Ketema
87d9218369
Merge pull request #16951 from jketema/builtin-op
...
C++: Support more builtin operations
2024-07-11 12:50:46 +02:00
Dilan
7bc16a378d
Merge tag 'codeql-cli/latest'
...
Compatible with the latest released version of the CodeQL CLI
2024-07-11 09:59:18 +00:00
Jeroen Ketema
ed42c3cd6f
C++: Fix class extension
2024-07-11 11:48:01 +02:00
Jeroen Ketema
48bf06f1aa
C++: Fix getAPrimaryQlClass
2024-07-11 10:43:17 +02:00
Jeroen Ketema
0413e0e090
C++: Clean up QLDoc and add change note
2024-07-11 10:37:26 +02:00
Jeroen Ketema
3f789bad60
C++: Support more builtin operations
2024-07-10 21:27:09 +02:00
Mathias Vorreiter Pedersen
6359388cea
Merge pull request #16915 from MathiasVP/fix-iterator-to-expired-container-fp-4
...
C++: Fix `cpp/iterator-to-expired-container` FPs
2024-07-09 11:23:46 +01:00
github-actions[bot]
ae3aba061b
Post-release preparation for codeql-cli-2.18.0
2024-07-08 13:30:13 +00:00
github-actions[bot]
b0d6778652
Release preparation for version 2.18.0
2024-07-08 09:10:51 +00:00
Mathias Vorreiter Pedersen
a747ffca07
C++: Address definitions should also handle ssa variables that are calls.
2024-07-06 12:27:35 +01:00
Mathias Vorreiter Pedersen
b954845318
C++: Ignore the new 'InitializeGroup' instruction in dataflow.
2024-07-04 14:22:06 +01:00
Mathias Vorreiter Pedersen
89f0705585
C++: Sync identical files.
2024-07-04 14:22:03 +01:00
Mathias Vorreiter Pedersen
72b52cc814
C++: Insert Chi instructions after InitializeGroup instructions whose variable group's virtual variable is all aliased memory.
2024-07-04 14:22:02 +01:00
Mathias Vorreiter Pedersen
92e814b75e
C++: Stub 'VariableGroup' and 'GroupedMemoryLocation' in unaliased SSA so that the pyrameterized files compile.
2024-07-04 14:21:59 +01:00
Mathias Vorreiter Pedersen
db525f5cee
C++: Sync identical files.
2024-07-04 14:21:58 +01:00
Mathias Vorreiter Pedersen
03ec184ee0
C++: Add 'InitializeGroup' instructions to the successor relation.
2024-07-04 14:21:56 +01:00
Mathias Vorreiter Pedersen
c4d72e5b4f
C++: No need to check if the offset is non-negative. It always is because of 'defBlock.getInstruction(oldOffset)' has a result.
2024-07-04 14:21:55 +01:00
Mathias Vorreiter Pedersen
cf8b2d55c5
C++: Hide away the 'multiply by two' hack in a predicate.
2024-07-04 14:21:53 +01:00
Mathias Vorreiter Pedersen
8db7ece8d4
C++: Fill in trivial parts of SSA.
2024-07-04 14:21:51 +01:00
Mathias Vorreiter Pedersen
2c4bf13d05
C++: Sync identical files.
2024-07-04 14:21:50 +01:00
Mathias Vorreiter Pedersen
c54dc49891
C++: Improve 'toString' on the 'InitializeGroup' instruction.
2024-07-04 14:21:49 +01:00
Mathias Vorreiter Pedersen
b185c67d4f
C++: Handle overlap with grouped memory locations.
2024-07-04 14:21:47 +01:00
Mathias Vorreiter Pedersen
e7c43b3fcc
C++: Return grouped memory locations from 'getOperandMemoryLocation' and 'getResultMemoryLocation'.
2024-07-04 14:21:46 +01:00
Mathias Vorreiter Pedersen
09c03d9a5f
C++: The virtual variable of a variable that is contained in a grouped memory location is that grouped memory location (or all aliased memory if it escapes).
2024-07-04 14:21:45 +01:00
Mathias Vorreiter Pedersen
399d47d2cb
C++: Cleanup
2024-07-04 14:21:43 +01:00
Mathias Vorreiter Pedersen
5e1c67f5f1
C++: Add a new 'MemoryLocation' that represents a set of allocations.
2024-07-04 14:21:42 +01:00
