10090 Commits

Author	SHA1	Message	Date
Dilan Bhalla	7f61bfe155	fixing tainttracking module 2.14.3	2023-08-28 15:37:36 -07:00
Dilan	eb0e2c48ea	Merge tag 'codeql-cli/latest' ... Compatible with the latest released version of the CodeQL CLI	2023-08-28 22:03:51 +00:00
Dilan Bhalla	d9b45c817d	Merge branch 'main' of https://github.com/microsoft/codeql	2023-08-27 23:53:31 -07:00
Dilan Bhalla	5ee67421b7	microsoft dataflow fix for 2.14.3	2023-08-27 23:53:25 -07:00
Dilan Bhalla	6b23eeebc5	Merge branch 'main' of https://github.com/github/codeql	2023-08-27 23:45:53 -07:00
Dilan	019cff2fc0	Merge tag 'codeql-cli/latest' ... Compatible with the latest released version of the CodeQL CLI	2023-08-25 17:41:23 +00:00
dilanbhalla	f2994e70d0	Update DataFlow.qll	2023-08-25 10:39:28 -07:00
Alex Eyers-Taylor	1afcf8c8a8	Add changenotes.	2023-08-25 13:05:10 +01:00
Alex Eyers-Taylor	9f8fbf8a1a	CPP: Update tests for argv change	2023-08-25 13:05:10 +01:00
Alex Eyers-Taylor	45ddb4832c	CPP: Make wordexp take an indirect argument.	2023-08-25 13:05:10 +01:00
Alex Eyers-Taylor	a2f2b6c33f	CPP:Only consider **argv as tainted.	2023-08-25 13:05:10 +01:00
Jeroen Ketema	da403c1a79	Merge pull request #14039 from jketema/non-constant-assign ... C++: Omit assign case from `cpp/non-constant-format`	2023-08-24 16:54:19 +02:00
Jeroen Ketema	45c56fbce7	Update cpp/ql/src/change-notes/2023-08-24-remove-non-constant-assign-sources.md ... Co-authored-by: Mathias Vorreiter Pedersen <mathiasvp@github.com>	2023-08-24 16:17:59 +02:00
Jeroen Ketema	607f729339	C++: Add change note	2023-08-24 16:11:39 +02:00
Jeroen Ketema	9f7413eded	C++: Omit assign case from cpp/non-constant-format	2023-08-24 11:02:40 +02:00
Dilan Bhalla	da08e0b4bd	Reverting temp dataflow from 2.14.3 to 2.14.1	2023-08-24 00:51:51 -07:00
Jeroen Ketema	f996fa2f8b	Merge pull request #14043 from jketema/ir-regres ... C++: Add IR test case that shows regression after frontend update	2023-08-24 09:23:58 +02:00
Jeroen Ketema	c882945e30	C++: Add IR test case that shows regression after frontend update	2023-08-24 08:36:22 +02:00
Alex Eyers-Taylor	949b0a2613	CPP:Move import to start of file	2023-08-23 13:39:29 +01:00
Alex Eyers-Taylor	7d99d61662	CPP: Convert SQL tainted to IR dataflow.	2023-08-23 13:39:29 +01:00
Dilan Bhalla	8a9fd3539e	Adding internal C++ dataflow library	2023-08-23 00:05:19 -07:00
Jeroen Ketema	6566b91355	C++: Add indication that the test result is good	2023-08-22 16:38:46 +02:00
Jeroen Ketema	1e8daff02a	C++: Add cpp/non-constant-format test	2023-08-22 16:23:47 +02:00
Jeroen Ketema	2d0f73d7c2	Merge pull request #13881 from jketema/shared-taint-tracking ... Introduce shared taint tracking library	2023-08-21 12:45:49 +02:00
github-actions[bot]	098dfb4242	Release preparation for version 2.14.3	2023-08-18 14:48:15 +00:00
Jonas Jensen	a002f59f58	C++: Undo BadlyBoundedWrite change from #13929 ... This rolls back the query change, ensuring that there is no need for a change note.	2023-08-18 13:48:58 +02:00
Jonas Jensen	478a105e21	C++: delete change note ... Since the previous commit removed the best evidence we had for the change described in this note, I'm removing the note for now.	2023-08-18 13:35:32 +02:00
Jonas Jensen	cd1f196848	C++: Accept regression in test after evaluator fix	2023-08-18 13:30:20 +02:00
Mathias Vorreiter Pedersen	5f5a87e2c7	C++: Add false positive.	2023-08-17 12:13:16 +01:00
Jeroen Ketema	33e8310625	Merge branch 'main' into shared-taint-tracking	2023-08-17 00:14:25 +02:00
Mathias Vorreiter Pedersen	66d13dc0d5	Merge pull request #13981 from MathiasVP/fix-orig-delta-for-subtraction ... C++: Fix original delta calculation for subtraction in new range analysis	2023-08-16 13:28:21 +01:00
Mathias Vorreiter Pedersen	20df63f26d	C++: Respond to review comments.	2023-08-16 12:50:41 +01:00
Jeroen Ketema	591565a0db	Merge pull request #13971 from jketema/float ... C++: Update test after float128 related extractor changes	2023-08-16 13:11:35 +02:00
Mathias Vorreiter Pedersen	5e14b5cca7	C++: 'origDelta' should always be 'odLeft' when deriving subtraction ranges.	2023-08-16 12:10:31 +01:00
Mathias Vorreiter Pedersen	986aa74db7	Merge pull request #13972 from MathiasVP/range-analysis-for-sub-expr ... C++: Support subtraction in the new range analysis	2023-08-16 11:51:11 +01:00
Michael Nebel	365b10183f	Merge pull request #13744 from tamasvajk/standalone/integration-test ... C#: Add integration test for standalone extraction	2023-08-16 10:50:12 +02:00
Jeroen Ketema	4ada83c0ba	C++: Update test after float128 related extractor changes	2023-08-15 22:10:05 +02:00
Mathias Vorreiter Pedersen	49a5a39395	C++: Accept test changes.	2023-08-15 16:49:58 +01:00
Mathias Vorreiter Pedersen	e145b81f58	C++: Accept test changes.	2023-08-15 16:12:44 +01:00
Mathias Vorreiter Pedersen	109e45e112	C++: Add precise range analysis for subtraction.	2023-08-15 16:12:40 +01:00
Mathias Vorreiter Pedersen	3fb024164b	C++: Add a FP caused by bad range analysis for subtraction.	2023-08-15 16:00:35 +01:00
Mathias Vorreiter Pedersen	569f3c9b78	C++: Don't do indirect (instruction -> operand) flow when there's a store to the address in between the instruction and the operand.	2023-08-15 11:08:01 +01:00
Mathias Vorreiter Pedersen	f662cceb0b	C++: Use value numbering to better detect whether a write is certain.	2023-08-15 11:07:14 +01:00
Mathias Vorreiter Pedersen	9359bea7b5	Merge pull request #13725 from MathiasVP/fix-barriers-in-invalid-pointer-deref ... C++: Fix barriers in invalid pointer deref	2023-08-14 14:29:12 +01:00
Mathias Vorreiter Pedersen	e2f671e327	C++: Add more comments.	2023-08-14 10:44:46 +01:00
Tamas Vajk	01af74aeda	C#: Add space to CMD metacharacters	2023-08-14 11:19:17 +02:00
Mathias Vorreiter Pedersen	df9c756369	C++: Add more comments.	2023-08-14 10:09:27 +01:00
Mathias Vorreiter Pedersen	c265113073	Update cpp/ql/lib/semmle/code/cpp/security/InvalidPointerDereference/InvalidPointerToDereference.qll ... Co-authored-by: Jeroen Ketema <93738568+jketema@users.noreply.github.com>	2023-08-14 09:51:28 +01:00
Mathias Vorreiter Pedersen	2c6bbd8060	C++: Replace 'left' with 'small' and 'right' with 'large' for consistency.	2023-08-13 22:53:41 +01:00
Mathias Vorreiter Pedersen	efe3c0d34a	C++: Rename n' to m.	2023-08-11 15:24:08 +01:00