Mathias Vorreiter Pedersen
|
3468593d3a
|
Merge pull request #4915 from geoffw0/sqltaint
C++: Fix FPs in cpp/sql-injection
|
2021-01-14 11:20:08 +01:00 |
|
Geoffrey White
|
69664535b0
|
Merge pull request #4881 from ihsinme/main
CPP: Add query for CWE-401 memory leak on unsuccessful call to realloc function
|
2021-01-13 10:58:09 +00:00 |
|
ihsinme
|
d7a5e61f8e
|
Delete CompilerRemovalOfCodeToClearBuffers.qhelp
sorry i was in a hurry
|
2021-01-11 23:50:47 +03:00 |
|
ihsinme
|
c38cfcb735
|
Delete CompilerRemovalOfCodeToClearBuffers.ql
sorry i was in a hurry
|
2021-01-11 23:50:19 +03:00 |
|
ihsinme
|
65ff526eef
|
Delete CompilerRemovalOfCodeToClearBuffers.c
sorry i was in a hurry
|
2021-01-11 23:49:53 +03:00 |
|
ihsinme
|
b185a33157
|
Add files via upload
|
2021-01-11 23:39:02 +03:00 |
|
Geoffrey White
|
7409dd015e
|
C++: Autoformat.
|
2021-01-11 18:58:32 +00:00 |
|
ihsinme
|
b28444b55c
|
Update MemoryLeakOnFailedCallToRealloc.ql
I thought since there is no work on this PR, I will delete the residual import.
|
2021-01-11 21:17:49 +03:00 |
|
Geoffrey White
|
cf1d1dc5c0
|
C++: Remove old tags.
|
2021-01-11 09:31:06 +00:00 |
|
Geoffrey White
|
70ce5fde75
|
C++: Improve metadata for GlobalNamespaceClasses.ql.
|
2021-01-08 18:27:06 +00:00 |
|
Geoffrey White
|
a6937beee3
|
Merge branch 'main' into sqltaint
|
2021-01-08 17:27:43 +00:00 |
|
Mathias Vorreiter Pedersen
|
13a67c906e
|
Merge pull request #4810 from geoffw0/multtoalloc
C++: Query for multiplications used in allocations.
|
2021-01-07 13:48:58 +01:00 |
|
ihsinme
|
2d6dafc6be
|
Update MemoryLeakOnFailedCallToRealloc.ql
|
2021-01-07 15:44:50 +03:00 |
|
ihsinme
|
abdeaabd77
|
Update MemoryLeakOnFailedCallToRealloc.ql
|
2021-01-06 22:46:03 +03:00 |
|
ihsinme
|
2b8227e04d
|
Update cpp/ql/src/experimental/Security/CWE/CWE-401/MemoryLeakOnFailedCallToRealloc.ql
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com>
|
2021-01-06 22:23:46 +03:00 |
|
ihsinme
|
f7eb328f76
|
Update cpp/ql/src/experimental/Security/CWE/CWE-401/MemoryLeakOnFailedCallToRealloc.qhelp
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com>
|
2021-01-06 22:18:14 +03:00 |
|
ihsinme
|
d7f31ca1a0
|
Update cpp/ql/src/experimental/Security/CWE/CWE-401/MemoryLeakOnFailedCallToRealloc.qhelp
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com>
|
2021-01-06 22:17:26 +03:00 |
|
Geoffrey White
|
b5bcbd303e
|
C++: Cleaner solution.
|
2021-01-06 18:22:31 +00:00 |
|
Geoffrey White
|
18890c4a77
|
C++: Use isAdditionalBarrier in the SqlTainted query.
|
2021-01-05 11:33:39 +00:00 |
|
Geoffrey White
|
69efe7a72a
|
C++: Add isAdditionalBarrier to DefaultTaintTracking.
|
2021-01-05 11:32:43 +00:00 |
|
Mathias Vorreiter Pedersen
|
134982c5a9
|
C++: Respond to review comments.
|
2021-01-04 09:06:58 +01:00 |
|
Mathias Vorreiter Pedersen
|
454605b7b1
|
C++: Fix join order in getAnOverload.
|
2020-12-30 10:34:26 +01:00 |
|
ihsinme
|
cd7c47ea39
|
Add files via upload
|
2020-12-26 20:43:25 +03:00 |
|
Mathias Vorreiter Pedersen
|
4f07474b62
|
C++: Also allow custom sources in taintedWithoutGlobals
|
2020-12-21 19:55:47 +01:00 |
|
Mathias Vorreiter Pedersen
|
f4f96fe257
|
C++: Use isSource in queries. These were the only queries that restrict the source after dataflow terminates.
|
2020-12-21 16:35:35 +01:00 |
|
Mathias Vorreiter Pedersen
|
0e84c638b6
|
C++: Add isSource to AdjustedConfiguration
|
2020-12-21 16:34:22 +01:00 |
|
Mathias Vorreiter Pedersen
|
b5102043b1
|
Fix comments.
|
2020-12-18 14:19:02 +01:00 |
|
Mathias Vorreiter Pedersen
|
f5e4725642
|
C++: Propagate flow from instruction's to non-exact operands for arrays and unions, and accept test changes.
|
2020-12-18 13:54:34 +01:00 |
|
Mathias Vorreiter Pedersen
|
2bf8e47932
|
Merge branch 'main' into default-taint-tracking-operand-instruction-interleaving
|
2020-12-18 11:59:10 +01:00 |
|
Mathias Vorreiter Pedersen
|
7ccd48e53c
|
Make DefaultTaintTracking do operand->instruction->operand interleaving like DataFlowUtil.
|
2020-12-18 11:57:16 +01:00 |
|
Geoffrey White
|
dc4ca9b1b9
|
C++: Add qhelp and example.
|
2020-12-18 10:10:05 +00:00 |
|
Jonas Jensen
|
fd7dec7f20
|
Merge pull request #4824 from geoffw0/modelchanges5
C++: Add cases in the Allocation model.
|
2020-12-18 09:16:01 +01:00 |
|
Geoffrey White
|
fda531da49
|
C++: Add query precision.
|
2020-12-17 14:31:43 +00:00 |
|
Geoffrey White
|
136fa01b87
|
C++: Query headers (apart from precison - needs more research).
|
2020-12-16 16:24:10 +00:00 |
|
Geoffrey White
|
1e3535754b
|
C++: Violation message.
|
2020-12-16 16:13:02 +00:00 |
|
Geoffrey White
|
c89f7d824b
|
C++: Back out support for SysAllocString. It turns out supporting all of the SysAlloc stuff is beyond our current models, supporting just SysFreeString as we do is OK.
|
2020-12-16 15:08:53 +00:00 |
|
Jonas Jensen
|
406cc64dcc
|
Merge pull request #4831 from geoffw0/printfunknown
C++: Fix Printf.qll specsAreKnown
|
2020-12-16 10:56:56 +01:00 |
|
Geoffrey White
|
93dfeac3c8
|
C++: Make specsAreKnown more accurate.
|
2020-12-15 17:43:28 +00:00 |
|
Geoffrey White
|
676e85a155
|
C++: Re-enable the check.
|
2020-12-15 17:42:10 +00:00 |
|
Geoffrey White
|
94dea9f71d
|
C++: Add a test of unknown format specifiers (with specsAreKnown check disabled).
|
2020-12-15 17:40:32 +00:00 |
|
Geoffrey White
|
4bf2f3af50
|
C++: Fix comment.
|
2020-12-15 10:15:41 +00:00 |
|
Geoffrey White
|
d7a92e581f
|
Merge branch 'main' into swap
|
2020-12-14 17:54:11 +00:00 |
|
Geoffrey White
|
9c77d3c829
|
C++: Add AliasFunction model.
|
2020-12-14 17:52:02 +00:00 |
|
Geoffrey White
|
f9a7322d68
|
C++: Remove redundant check.
|
2020-12-14 17:16:16 +00:00 |
|
Geoffrey White
|
e02ebfb9bd
|
C++: Add extra cases to Allocation / Deallocation.
|
2020-12-14 14:00:36 +00:00 |
|
Robert Marsh
|
af180d430e
|
Merge pull request #4805 from geoffw0/sscanf
C++: Refine examples and tests for cpp/memory-unsafe-function-scan (experimental) query
|
2020-12-11 12:42:11 -08:00 |
|
Robert Marsh
|
0210c1f721
|
Merge pull request #4783 from geoffw0/modelchanges4
C++: More use of set literals.
|
2020-12-10 15:24:50 -08:00 |
|
Geoffrey White
|
b79ca4535a
|
C++: Undo the iterator.qll change. Notice that it was 'and' not 'or'.
|
2020-12-10 18:29:39 +00:00 |
|
Geoffrey White
|
c5592a1ed7
|
C++: New experimental query.
|
2020-12-10 16:46:09 +00:00 |
|
Geoffrey White
|
3bef0e5c00
|
C++: Implement a general model.
|
2020-12-09 18:53:49 +00:00 |
|