Geoffrey White
|
8d3fc735ea
|
C++: Fix compilation issue in UseAfterFree.qll.
|
2024-03-13 17:03:00 +00:00 |
|
Geoffrey White
|
1da611cc02
|
Merge branch 'main' into mad
|
2024-02-27 17:29:45 +00:00 |
|
Ben Rodes
|
55fe8d376c
|
Update cpp/ql/lib/semmle/code/cpp/security/flowafterfree/UseAfterFree.qll
|
2024-01-23 10:49:47 -05:00 |
|
Benjamin Rodes
|
dfb3aec002
|
Removing unnecessary private modules and adding comments.
|
2024-01-23 10:47:38 -05:00 |
|
Mathias Vorreiter Pedersen
|
42fd3fc836
|
C++: Make more things 'private' and add QLDoc to public things. (#40)
|
2024-01-23 10:27:01 -05:00 |
|
Benjamin Rodes
|
da10e6ca5b
|
Moving FlowAfterFree and UseAfterFree.qll as a general purpose lib.
|
2024-01-22 11:18:03 -05:00 |
|
Geoffrey White
|
a8863e44db
|
C++: Port implementation to CPP.
|
2024-01-18 13:24:57 +00:00 |
|
Jeroen Ketema
|
5165999e9e
|
C++: Deprecate isUserInput, userInputArgument, and userInputReturned
|
2023-12-08 13:21:31 +01:00 |
|
Jeroen Ketema
|
c02a732632
|
C++: Remove DefaultTaintTracking library
|
2023-11-24 18:35:19 +01:00 |
|
Mathias Vorreiter Pedersen
|
375f0ea8b6
|
C++: Update documentation.
|
2023-10-30 15:57:30 +00:00 |
|
Mathias Vorreiter Pedersen
|
1e699ec0e5
|
C++: Simplify 'InvalidPointerToDereference.qll' now that the difference between 'derefSource' and 'pai' is always 0.
|
2023-10-30 15:53:48 +00:00 |
|
Mathias Vorreiter Pedersen
|
c8edf3151b
|
C++: Remove the use of range analysis in 'invalidPointerToDerefSource'.
|
2023-10-30 15:47:47 +00:00 |
|
Mathias Vorreiter Pedersen
|
7e6857d36b
|
C++: Make 'hasSize' slightly smarter when handling ternary operators.
|
2023-10-16 10:48:28 +01:00 |
|
Mathias Vorreiter Pedersen
|
843e9ad254
|
C++: Add more QLDoc.
|
2023-10-04 14:37:05 +02:00 |
|
Mathias Vorreiter Pedersen
|
9df5e43fae
|
C++: Block flow through indirect flow through pointer-arithmetic instructions when following flow for the allocation size.
|
2023-10-03 15:31:50 +02:00 |
|
Mathias Vorreiter Pedersen
|
20f501d1c7
|
C++: Change queries to use 'asExpr' instead of 'asConvertedExpr'.
|
2023-09-01 15:01:32 +01:00 |
|
Mathias Vorreiter Pedersen
|
d14ad92dbd
|
Merge pull request #14006 from MathiasVP/promote-invalid-pointer-deref-out-of-experimental
C++: Promote `cpp/invalid-pointer-deref` out of experimental
|
2023-08-29 09:38:56 +01:00 |
|
Mathias Vorreiter Pedersen
|
89b91ec5c8
|
C++: Disable field flow from the 'cpp/invalid-pointer-deref' query.
|
2023-08-25 15:01:37 +01:00 |
|
Alex Eyers-Taylor
|
a2f2b6c33f
|
CPP:Only consider **argv as tainted.
|
2023-08-25 13:05:10 +01:00 |
|
Mathias Vorreiter Pedersen
|
9c5d7350dc
|
C++: Add a small amount of pruning to 'SizeBarrierConfig'.
|
2023-08-25 10:25:28 +01:00 |
|
Mathias Vorreiter Pedersen
|
ded06a77d0
|
C++: More pruning.
|
2023-08-25 10:22:55 +01:00 |
|
Mathias Vorreiter Pedersen
|
123e58767b
|
C++: Share RangeAnalysisUtil with 'cpp/overrun-write'.
|
2023-08-23 22:42:00 +01:00 |
|
Mathias Vorreiter Pedersen
|
9359bea7b5
|
Merge pull request #13725 from MathiasVP/fix-barriers-in-invalid-pointer-deref
C++: Fix barriers in invalid pointer deref
|
2023-08-14 14:29:12 +01:00 |
|
Mathias Vorreiter Pedersen
|
e2f671e327
|
C++: Add more comments.
|
2023-08-14 10:44:46 +01:00 |
|
Mathias Vorreiter Pedersen
|
df9c756369
|
C++: Add more comments.
|
2023-08-14 10:09:27 +01:00 |
|
Mathias Vorreiter Pedersen
|
c265113073
|
Update cpp/ql/lib/semmle/code/cpp/security/InvalidPointerDereference/InvalidPointerToDereference.qll
Co-authored-by: Jeroen Ketema <93738568+jketema@users.noreply.github.com>
|
2023-08-14 09:51:28 +01:00 |
|
Mathias Vorreiter Pedersen
|
2c6bbd8060
|
C++: Replace 'left' with 'small' and 'right' with 'large' for consistency.
|
2023-08-13 22:53:41 +01:00 |
|
Mathias Vorreiter Pedersen
|
efe3c0d34a
|
C++: Rename n' to m.
|
2023-08-11 15:24:08 +01:00 |
|
Mathias Vorreiter Pedersen
|
f4e6deeee0
|
C++: Remove 'ValidForStateConfig'.
|
2023-08-11 13:57:59 +01:00 |
|
Mathias Vorreiter Pedersen
|
88d3fcb34b
|
C++: Fix comment.
|
2023-08-11 11:50:50 +01:00 |
|
Mathias Vorreiter Pedersen
|
3d5b1986c9
|
C++: Fix a bug where 'boundedImpl' could give back multiple deltas.
|
2023-08-11 11:46:28 +01:00 |
|
Mathias Vorreiter Pedersen
|
c0a54e90c9
|
C++: Fix an inequality that should be strict, but wasn't.
|
2023-08-11 11:43:55 +01:00 |
|
Mathias Vorreiter Pedersen
|
9aae174942
|
C++: Move conjunct below comment.
|
2023-08-10 13:58:07 +01:00 |
|
Mathias Vorreiter Pedersen
|
6d949cbd39
|
C++: Rename 'getAFlowStateForNode' to 'getASizeAddend'.
|
2023-08-10 13:19:28 +01:00 |
|
Mathias Vorreiter Pedersen
|
a2b8eb924e
|
C++: Remove the '+ 1' in 'getAFlowStateForNode'.
|
2023-08-10 13:17:47 +01:00 |
|
Mathias Vorreiter Pedersen
|
1455e8bd4c
|
C++: Convert all '<'s to '<='s.
|
2023-08-10 11:55:57 +01:00 |
|
Mathias Vorreiter Pedersen
|
dcc1429ed8
|
C++: Get rid of '+ 1' in comments.
|
2023-08-10 11:38:40 +01:00 |
|
Mathias Vorreiter Pedersen
|
b750016bc1
|
C++: Fix more comments.
|
2023-08-10 11:31:30 +01:00 |
|
Mathias Vorreiter Pedersen
|
ce9b018789
|
C++: Move bounds checkout out of 'operandGuardChecks' for clarity.
|
2023-08-09 18:37:17 +01:00 |
|
Mathias Vorreiter Pedersen
|
8a490775d8
|
Merge branch 'main' into fix-barriers-in-invalid-pointer-deref
|
2023-08-09 14:32:58 +01:00 |
|
Mathias Vorreiter Pedersen
|
cb1076c335
|
Revert "Merge pull request #13783 from MathiasVP/type-bounds-for-new-range-analysis"
This reverts commit e9750af89f, reversing
changes made to 37a546253e.
|
2023-08-09 13:02:54 +01:00 |
|
Mathias Vorreiter Pedersen
|
60f2e8a676
|
C++: Fix QLDoc.
|
2023-08-07 15:55:43 +01:00 |
|
Mathias Vorreiter Pedersen
|
33e991b037
|
C++: Fix QLDoc.
|
2023-08-06 20:50:19 +01:00 |
|
Mathias Vorreiter Pedersen
|
f0a1742ad6
|
C++: Fix barriers in 'AllocationToInvalidPointer.qll'.
|
2023-08-05 21:58:24 +02:00 |
|
Mathias Vorreiter Pedersen
|
7c9d41d3b9
|
C++: Make 'SizeBarrier' private as promised.
|
2023-08-05 21:57:57 +02:00 |
|
Mathias Vorreiter Pedersen
|
0f285ccce0
|
C++: Fix QLDoc.
|
2023-08-05 21:55:00 +02:00 |
|
Mathias Vorreiter Pedersen
|
c0828a488f
|
C++: Fix barriers in 'InvalidPointerToDereference.qll'.
|
2023-08-05 21:55:00 +02:00 |
|
Mathias Vorreiter Pedersen
|
9807c0b0a6
|
C++: Filter type-based reasons out of MCTV queries.
|
2023-08-04 16:11:35 +02:00 |
|
Mathias Vorreiter Pedersen
|
ce9a14b692
|
Revert "Merge pull request #13792 from MathiasVP/swap-argument-order-in-invalid-ptr-deref"
This reverts commit 1fa6511482, reversing
changes made to 4676ca5a4a.
|
2023-07-29 11:26:41 +02:00 |
|
Mathias Vorreiter Pedersen
|
9f2ee0d7c2
|
C++: Rename 'delta' to 'deltaDerefSourceAndPai'.
|
2023-07-25 11:25:24 +02:00 |
|