Mathias Vorreiter Pedersen
|
ff4c63f696
|
C++: Add change note.
|
2023-11-28 09:16:49 +00:00 |
|
Mathias Vorreiter Pedersen
|
e10caa68f6
|
C++: Add tests.
|
2023-11-28 09:06:24 +00:00 |
|
Mathias Vorreiter Pedersen
|
e94cde9b4b
|
C++: Move the use-after-free tests to subdirectory.
|
2023-11-28 09:06:24 +00:00 |
|
Mathias Vorreiter Pedersen
|
71ad7696c3
|
C++: Add qhelp.
|
2023-11-28 09:06:24 +00:00 |
|
Mathias Vorreiter Pedersen
|
204acbacc5
|
C++: Add a new query for detecting calls to 'c_str' on temporary objects.
|
2023-11-28 09:06:24 +00:00 |
|
Mathias Vorreiter Pedersen
|
22a91d18b8
|
C++: Make the sequence container classes public.
|
2023-11-27 21:32:49 +00:00 |
|
Alex Eyers-Taylor
|
9eb5b23f54
|
CPP: Fix query formatting
|
2023-11-27 15:55:44 +00:00 |
|
Jeroen Ketema
|
c02a732632
|
C++: Remove DefaultTaintTracking library
|
2023-11-24 18:35:19 +01:00 |
|
Mathias Vorreiter Pedersen
|
73138f1913
|
C++: No need to exclude ExprNodes as sources now that #14903 is merged.
|
2023-11-24 16:58:30 +00:00 |
|
Alex Eyers-Taylor
|
1c012548d4
|
CPP: Add tests for incorrect check scanf
|
2023-11-24 16:58:11 +00:00 |
|
Alex Eyers-Taylor
|
12e24a2b44
|
CPP: Exclude incorrect scanf checks from missing scanf checks
|
2023-11-24 16:57:59 +00:00 |
|
Mathias Vorreiter Pedersen
|
e89d8e2967
|
Merge pull request #14907 from MathiasVP/remove-workaround-in-authentication-bypass
C++: Remove workaround for negated conditions in `cpp/user-controlled-bypass`
|
2023-11-24 16:54:37 +00:00 |
|
Jeroen Ketema
|
ee35bfb290
|
C++: Do not use isReturnValue in getenv, gets, and fgets models
|
2023-11-24 16:38:15 +01:00 |
|
Mathias Vorreiter Pedersen
|
a7d820ce62
|
C++: Remove workaround for negated conditions in 'cpp/user-controlled-bypass'.
|
2023-11-24 15:17:45 +00:00 |
|
Alex Eyers-Taylor
|
f48e8b6062
|
CPP: Add query for detecteing incorrect error checking for scanf
|
2023-11-24 14:53:10 +00:00 |
|
Mathias Vorreiter Pedersen
|
e438671846
|
Merge pull request #14896 from MathiasVP/no-dtt-in-user-controlled-bypass
C++: Rewrite `cpp/user-controlled-bypass` away from `DefaultTaintTracking`
|
2023-11-24 14:43:10 +00:00 |
|
Mathias Vorreiter Pedersen
|
6b48b3643e
|
Merge branch 'main' into no-dtt-in-user-controlled-bypass
|
2023-11-24 12:50:45 +00:00 |
|
Mathias Vorreiter Pedersen
|
2681617f28
|
C++: Undo the workaround in 'cpp/tainted-permissions-check'.
|
2023-11-24 10:56:11 +00:00 |
|
Mathias Vorreiter Pedersen
|
0c924c2b27
|
C++: Taint-flow through integer to boolean casts.
|
2023-11-24 10:55:50 +00:00 |
|
Mathias Vorreiter Pedersen
|
5604fd7d80
|
C++: Rewrite 'cpp/user-controlled-bypass' away from 'DefaultTaintTracking'.
|
2023-11-23 17:35:54 +00:00 |
|
Mathias Vorreiter Pedersen
|
97319854e2
|
C++: Accept test changes.
|
2023-11-23 16:53:57 +00:00 |
|
Mathias Vorreiter Pedersen
|
6f5cfca84c
|
C++: Sync identical files.
|
2023-11-23 16:53:57 +00:00 |
|
Mathias Vorreiter Pedersen
|
cc261bfabb
|
C++: Recurse through 'LogicalNotInstruction' in 'getConstantValue'.
|
2023-11-23 16:53:57 +00:00 |
|
Mathias Vorreiter Pedersen
|
98bf748e64
|
C++: Accept test changes.
|
2023-11-23 16:53:57 +00:00 |
|
Mathias Vorreiter Pedersen
|
7364634a6b
|
C++: No need to special-case negations in IRGuards.
|
2023-11-23 16:53:57 +00:00 |
|
Mathias Vorreiter Pedersen
|
3af3a72161
|
C++: Don't short-circuit negations in conditions.
|
2023-11-23 16:53:57 +00:00 |
|
Mathias Vorreiter Pedersen
|
257d94be20
|
Merge pull request #14886 from jketema/rewrite-tainted-condition
C++: Rewrite `cpp/tainted-permissions-check` to not use `DefaultTaintTracking`
|
2023-11-23 16:18:03 +00:00 |
|
Mathias Vorreiter Pedersen
|
149fb7bbc2
|
Merge pull request #14881 from MathiasVP/no-dtt-in-user-controlled-null-termination-tainted
C++: Rewrite `cpp/user-controlled-null-termination-tainted` away from `DefaultTaintTracking`
|
2023-11-23 14:41:33 +00:00 |
|
Mathias Vorreiter Pedersen
|
401a378598
|
C++: Accept test changes.
|
2023-11-23 14:12:16 +00:00 |
|
Mathias Vorreiter Pedersen
|
b774ae07c8
|
Update cpp/ql/src/Security/CWE/CWE-170/ImproperNullTerminationTainted.ql
Co-authored-by: Jeroen Ketema <93738568+jketema@users.noreply.github.com>
|
2023-11-23 14:10:57 +00:00 |
|
Jeroen Ketema
|
7834626e26
|
C++: Rewrite cpp/tainted-permissions-check to not use DefaultTaintTracking
|
2023-11-23 14:52:53 +01:00 |
|
Jeroen Ketema
|
257fe1ad6b
|
Merge pull request #14801 from jketema/rewrite-tainted-format-string
C++: Rewrite `cpp/tainted-format-string` away from `DefaultTaintTracking`
|
2023-11-22 17:55:36 +01:00 |
|
Jeroen Ketema
|
1fbe23228e
|
C++: Update test to reflect updated test results
|
2023-11-22 16:49:13 +01:00 |
|
Jeroen Ketema
|
bb1945f899
|
C++: Rewrite cpp/tainted-format-string away from DefaultTaintTracking
|
2023-11-22 16:49:13 +01:00 |
|
Mathias Vorreiter Pedersen
|
640e2f56d5
|
C++: Accept test changes.
|
2023-11-22 15:43:24 +00:00 |
|
Mathias Vorreiter Pedersen
|
306440ce6e
|
C++: Convert 'cpp/user-controlled-null-termination-tainted' away from 'DefaultTaintTracking'.
|
2023-11-22 15:43:24 +00:00 |
|
Tom Hvitved
|
1a6886cf99
|
SSA: Add locations to ease debugging
|
2023-11-22 08:37:02 +01:00 |
|
Mathias Vorreiter Pedersen
|
a80dbc5200
|
C++: Accept test changes.
|
2023-11-21 17:50:11 +00:00 |
|
Mathias Vorreiter Pedersen
|
976adc3c7c
|
C++: Fixup queries to keep the old results.
|
2023-11-21 17:50:08 +00:00 |
|
Mathias Vorreiter Pedersen
|
ef2caa3944
|
C++: Add a new API for mapping a dataflow node to a definition. This means we can reduce duplication from 'asExpr'.
|
2023-11-21 17:49:02 +00:00 |
|
Mathias Vorreiter Pedersen
|
75f860595a
|
Merge pull request #14838 from MathiasVP/no-dtt-in-arithmetic-with-extreme-values
C++: Convert `cpp/arithmetic-with-extreme-values` away from `DefaultTaintTracking`
|
2023-11-20 16:39:58 +00:00 |
|
Mathias Vorreiter Pedersen
|
ab6260600e
|
Merge pull request #14822 from MathiasVP/fix-global-variable-flow-for-arrays
C++: Fix global-variable flow for array types
|
2023-11-20 13:46:05 +00:00 |
|
Mathias Vorreiter Pedersen
|
dcba8e5408
|
C++: Fix global variable flow for array types.
|
2023-11-20 12:15:55 +00:00 |
|
Mathias Vorreiter Pedersen
|
8039e117ba
|
C++: Add more global-variable flow tests.
|
2023-11-20 12:15:52 +00:00 |
|
Chris Campbell
|
27a2781954
|
Merge branch 'github:main' into main
|
2023-11-20 12:15:45 +00:00 |
|
Arthur Baars
|
db180d9872
|
Merge pull request #14823 from github/post-release-prep/codeql-cli-2.15.3
Post-release preparation for codeql-cli-2.15.3
|
2023-11-19 12:13:42 +01:00 |
|
Mathias Vorreiter Pedersen
|
c65c2489cf
|
C++: Rewrite 'cpp/arithmetic-with-extreme-values' away from 'DefaultTaintTracking'.
|
2023-11-17 16:38:35 +00:00 |
|
github-actions[bot]
|
bad499e360
|
Post-release preparation for codeql-cli-2.15.3
|
2023-11-17 14:35:41 +00:00 |
|
Mathias Vorreiter Pedersen
|
a10f94af81
|
Merge pull request #14810 from MathiasVP/fix-ref-deref-duplication
C++: Fix dataflow duplication from `ReferenceDereference` expressions
|
2023-11-16 16:10:07 +00:00 |
|
Chris Campbell
|
114b694553
|
Remove @precision values, correct missing tags
|
2023-11-16 15:50:41 +00:00 |
|