10804 Commits

Author	SHA1	Message	Date
Mathias Vorreiter Pedersen	e38f65981e	C++: Accept test changes.	2023-10-04 20:12:42 +02:00
Mathias Vorreiter Pedersen	75c74d50f9	C++: Use 'unique' in 'hasIRRepresentationOfIndirectInstruction' similar to how it's done in 'hasIRRepresentationOfIndirectOperand'.	2023-10-04 19:00:33 +02:00
github-actions[bot]	9fe993bec3	Release preparation for version 2.15.0	2023-10-04 14:15:27 +00:00
Mathias Vorreiter Pedersen	843e9ad254	C++: Add more QLDoc.	2023-10-04 14:37:05 +02:00
Rasmus Wriedt Larsen	9c02b4f21c	Merge pull request #14289 from microsoft/jb1/16-cryptography-models-libraries-and-queries-migration ... 16 cryptography models libraries and queries migration	2023-10-04 12:27:59 +02:00
Josh Brown	de2e8b0b12	explicit "this" qualifiers	2023-10-03 16:13:54 -07:00
Josh Brown	ad86e576a4	autoformat	2023-10-03 13:40:17 -07:00
Josh Brown	b683a3caf8	Merge branch 'main' into jb1/16-cryptography-models-libraries-and-queries-migration	2023-10-04 07:24:29 +11:00
Henry Mercer	da92da2204	Bump minor versions of packs we regularly release	2023-10-03 16:31:23 +01:00
Henry Mercer	f3847b3f51	Merge branch 'main' into henrymercer/rc-3.11-mergeback	2023-10-03 16:30:23 +01:00
Mathias Vorreiter Pedersen	9a139ea903	C++: Accept test changes.	2023-10-03 15:58:35 +02:00
Mathias Vorreiter Pedersen	57d3f3f482	C++: Actually propagate the 'isBarrier1' or 'isBarrier2' predicates to the dataflow configurations.	2023-10-03 15:58:24 +02:00
Mathias Vorreiter Pedersen	9df5e43fae	C++: Block flow through indirect flow through pointer-arithmetic instructions when following flow for the allocation size.	2023-10-03 15:31:50 +02:00
Mathias Vorreiter Pedersen	b6ed9ccfda	C++: Add change notes.	2023-10-03 09:33:40 +02:00
Mathias Vorreiter Pedersen	7084dc1a88	C++: Promote 'cpp/use-after-free' and 'cpp/double-free' to Code Scanning.	2023-10-03 09:22:47 +02:00
Mathias Vorreiter Pedersen	5632dd5e46	Merge pull request #14275 from alexet/fix-use-after-free-fp ... CPP: Fix some use after free FPs.	2023-10-03 09:16:42 +02:00
Alex Eyers-Taylor	6b0ae0f312	CPP: Remove unned argument from use-after-free	2023-09-28 17:53:32 +01:00
Asger F	0d96ed8aee	Merge pull request #14305 from asgerf/shared/flow-state-inout-barriers ... Shared: add in/out barriers with flow state	2023-09-28 11:07:23 +02:00
Anders Schack-Mulligen	2548939849	C++: Use shared FileSystem library.	2023-09-28 08:58:55 +02:00
Alex Eyers-Taylor	2860c0c0d4	CPP: Move test into correct file.	2023-09-27 18:42:26 +01:00
Benjamin Rodes	25203db4e7	Removing 'security' tags from all queries.	2023-09-27 12:43:51 -04:00
Asger F	d501856519	Update DataFlowImpl.qll copies	2023-09-25 10:05:29 +02:00
Anders Schack-Mulligen	ae278fcad7	C++: Fix import conflict.	2023-09-22 15:06:21 +02:00
Anders Schack-Mulligen	66da997b7b	Dataflow: Make use of defaults for language-specific hooks.	2023-09-22 14:54:22 +02:00
Benjamin Rodes	c0c2ae544b	Updating weak elliptic curve sample queries.	2023-09-21 12:12:16 -07:00
Benjamin Rodes	50db4fd63e	Moved Cpp into sub directory 'cryptography' instead of crypto. Added python models, inventory, and example alerts.	2023-09-21 12:12:15 -07:00
Benjamin Rodes	7560db66fa	incorrect import path	2023-09-21 12:12:15 -07:00
Benjamin Rodes	fe22dc45b1	Moving inventory queries into a new subdirectory structure for new_models and old_models.	2023-09-21 12:12:15 -07:00
Benjamin Rodes	6d7ac8de28	Adding example alerts	2023-09-21 12:12:15 -07:00
Benjamin Rodes	4c9cc5a21f	Adding inventory queries.	2023-09-21 12:12:15 -07:00
Benjamin Rodes	7256faa7eb	Added modeling infrastructure	2023-09-21 12:12:15 -07:00
Anders Schack-Mulligen	13f7daf71e	Merge pull request #13982 from aschackmull/dataflow/typeflow-calledge-pruning ... Dataflow: Add type-based call-edge pruning.	2023-09-21 13:33:08 +02:00
Alex Eyers-Taylor	d0849311a6	CPP: Fix use after free FPs by elimnatiing freeing nodes rather than freeing expressions.	2023-09-20 18:47:57 +01:00
Alex Eyers-Taylor	9de6230bbf	CPP: Add use after free false positive example.	2023-09-20 18:34:47 +01:00
github-actions[bot]	3acf5244b0	Post-release preparation for codeql-cli-2.14.6	2023-09-20 10:25:10 +00:00
Mathias Vorreiter Pedersen	22d66b6d81	Update cpp/ql/lib/semmle/code/cpp/ir/dataflow/internal/DataFlowUtil.qll	2023-09-20 09:56:10 +01:00
Mathias Vorreiter Pedersen	fb1ce2ab70	C++: Lift 'getParameter' to 'ParameterNode'.	2023-09-20 09:51:35 +01:00
Geoffrey White	a3579f6e38	Merge branch 'main' into typos	2023-09-19 16:44:13 +01:00
Geoffrey White	8a0e202b63	CPP: Fix typos.	2023-09-19 15:18:03 +01:00
Mathias Vorreiter Pedersen	7ef5971337	C++: Use 'size_t' explicitly in test.	2023-09-19 13:58:08 +01:00
Mathias Vorreiter Pedersen	9b35202d21	Merge pull request #14249 from MathiasVP/fix-malloc-decl-in-test ... C++: Fix the declaration of `malloc` in test	2023-09-19 13:53:23 +01:00
github-actions[bot]	0a3670727f	Release preparation for version 2.14.6	2023-09-19 11:40:30 +00:00
Mathias Vorreiter Pedersen	8906a37989	Merge pull request #14250 from MathiasVP/reduce-dataflow-duplication-for-allocations ... C++: Reduce dataflow duplication for allocations	2023-09-19 11:18:20 +01:00
Alexander Eyers-Taylor	1f4a5301cd	Merge pull request #14242 from alexet/simplify-ir-guards ... CPP: Simplify some code in IRGuards.	2023-09-19 10:35:09 +01:00
Mathias Vorreiter Pedersen	fda52a568d	C++: Accept test changes.	2023-09-18 17:55:25 +01:00
Mathias Vorreiter Pedersen	d2e66a1186	C++: Ignore addresses of 'InitializeDynamicAllocationInstruction' in 'unique' when converting between instructions and expression in dataflow.	2023-09-18 17:55:19 +01:00
Mathias Vorreiter Pedersen	8a2d4852c6	C++: Add another testcase.	2023-09-18 16:48:03 +01:00
Mathias Vorreiter Pedersen	bc0b2e5318	C++: Fix the return type and parameter type of 'malloc' in test.	2023-09-18 16:40:46 +01:00
Mathias Vorreiter Pedersen	0e9f5f6b8e	C++: Accept test changes.	2023-09-18 11:46:19 +01:00
Mathias Vorreiter Pedersen	38b100531b	C++: Only add conversion when necessary.	2023-09-18 11:46:11 +01:00