github-actions[bot]
79be301984
Post-release preparation for codeql-cli-2.19.0
2024-09-16 14:09:32 +00:00
Chris Smowton
8c92d92427
Copyedit
2024-09-16 12:23:10 +01:00
github-actions[bot]
acdafd9646
Release preparation for version 2.19.0
2024-09-16 10:56:10 +00:00
Dave Bartolomeo
485fc04029
Initial merge from main
2024-09-15 08:55:31 -04:00
Jeroen Ketema
087a8484aa
Merge pull request #17430 from jketema/fix-finally-inconsistency
...
C++: Fix `__finally` related inconsistencies
2024-09-13 15:27:56 +02:00
Jeroen Ketema
ca10953761
C++: Update syntax zoo expected test results
2024-09-10 21:25:29 +02:00
Jeroen Ketema
5754f8bac8
C++: Fix __finally related inconsistencies
2024-09-10 20:39:13 +02:00
Ben Rodes
58779e1b90
Merge branch 'main' into brodes/overflow-buffer-fixes-upstream
2024-09-10 13:46:24 -04:00
Jeroen Ketema
5f4fee0780
C++: Address review comments
2024-09-10 14:23:10 +02:00
Jeroen Ketema
500a2a0738
C++: Fix IR inconsistency due to throwing __except block
...
The fix consists of three parts:
* Ensure that an `Unwind` instruction is generated for functions that contain
a Microsoft `__try` statement, or a function that must throw.
* Do not manually introduce `Unwind` instructions for `__except` blocks, but
depend on the `Unwind` that we now insert in the function.
* Add missing `getExceptionSuccessorInstruction` predicate to
`TranslatedMicrosoftTryExceptHandler`
2024-09-10 12:41:43 +02:00
Jeroen Ketema
dfa16423c0
C++: Add IR inconsistency test
2024-09-09 21:50:42 +02:00
github-actions[bot]
97edff3f70
Post-release preparation for codeql-cli-2.18.4
2024-09-09 18:45:46 +00:00
Jeroen Ketema
6e0b5bcb63
Merge pull request #17414 from MathiasVP/add-more-try-except-testcases
...
C++: Add more IR inconsistency tests
2024-09-09 18:10:42 +02:00
github-actions[bot]
91537cdf9a
Release preparation for version 2.18.4
2024-09-09 16:08:48 +00:00
Mathias Vorreiter Pedersen
353cd8cc74
C++: Add more IR inconsistency tests.
2024-09-09 16:37:55 +01:00
Jeroen Ketema
915d24c62f
C++: Re-introduce the original version of the many_defs_per_use IR test
...
See: 28cff2ea20
2024-09-06 17:38:29 +02:00
Jeroen Ketema
b73b8682b4
Merge pull request #17371 from jketema/correct-include
...
C++: Update expected test results after extractor changes
2024-09-06 09:38:06 +02:00
REDMOND\brodes
1005a89007
Updating test cases.
2024-09-05 15:25:23 -04:00
Mathias Vorreiter Pedersen
25d7f17efc
C++: Add testcase with IR inconsistencies.
2024-09-05 19:32:53 +01:00
Jeroen Ketema
78c6c09912
Merge pull request #13560 from am0o0/amammad-cpp-bombs
...
C++: Decompression Bombs
2024-09-05 20:01:02 +02:00
Jeroen Ketema
e891c5a882
C++: Fix expected test results
2024-09-05 17:48:11 +02:00
am0o0
401bb24fde
remove redundent zStreamAccess in flow steps
2024-09-05 17:09:26 +02:00
am0o0
faef6359dd
add '// BAD' comment for the zstd sink
2024-09-05 17:05:21 +02:00
Ben Rodes
8ab22feae1
Update cpp/ql/test/query-tests/Security/CWE/CWE-119/semmle/tests/tests.cpp
...
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com >
2024-09-05 10:07:19 -04:00
Jeroen Ketema
5b65f98e2c
C++: Update expected test results after extractor changes
...
The updated test results look more correct, as the documentation of
`#include_next` [1] that it should start looking in the next directory
in the search path. Before this update, the frontend was actually
looking in the current directory first, which is incorrect.
[1] https://gcc.gnu.org/onlinedocs/cpp/Wrapper-Headers.html
2024-09-05 15:17:43 +02:00
Simon Friis Vindum
5950af390d
Merge pull request #17351 from paldepind/swap-member-data-flow
...
C++: Make swap member functions data-flow functions
2024-09-05 11:39:16 +02:00
Jeroen Ketema
b6e38ff862
Merge pull request #17342 from jketema/coroutine
...
C++: Fix coroutine IR inconsistencies
2024-09-05 10:15:16 +02:00
Jeroen Ketema
3aa68b34bb
C++: Fix zstd and clean up test
2024-09-04 22:25:44 +02:00
REDMOND\brodes
78898955b6
Updating change log
2024-09-04 12:54:27 -04:00
REDMOND\brodes
6f1aade8e0
Added change log
2024-09-04 12:51:37 -04:00
Jeroen Ketema
fd9a5ee453
Update cpp/downgrades/7ff6a6e53dbcff09d1b9b758b594bc6d17366863/coroutine.ql
...
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com >
2024-09-04 18:45:33 +02:00
REDMOND\brodes
77b88afa9e
Removing commented out code and altering comments to explain why the code was removed.
2024-09-04 12:44:36 -04:00
REDMOND\brodes
cc953c87d9
Added test case to demonstrate type error corrected in this branch.
2024-09-04 12:41:05 -04:00
REDMOND\brodes
e4d29905a9
Formatting and updating tests.
2024-09-04 11:16:24 -04:00
REDMOND\brodes
f0eeaaf44e
BufferAccess must be reachable. False positives observed where accesses occur in dead code.
2024-09-04 11:16:23 -04:00
REDMOND\brodes
abd0a076a8
Addressing false positive with strncpy.
2024-09-04 11:16:21 -04:00
REDMOND\brodes
9105375097
Addreessing false positive due to incorrect use of getType
2024-09-04 11:16:19 -04:00
Jeroen Ketema
9b905d5e84
C++: Set precision to low
...
There are no barriers, so the query as is will flag up any use of the
identified functions.
2024-09-04 14:13:43 +02:00
Jeroen Ketema
238895e677
C++: Fix formatting
2024-09-04 14:10:24 +02:00
Jeroen Ketema
92c6170a76
C++: Simplify QLhelp
...
One good and one bad example suffices to get the point across, and makes the
help more readable. The examples also do not have to be complete.
2024-09-04 14:06:12 +02:00
Simon Friis Vindum
f066f21751
C++: Make swap member functions data-flow functions
2024-09-04 13:55:19 +02:00
Jeroen Ketema
2369b18ca6
C++: Make additional flow steps more uniform
2024-09-04 13:43:03 +02:00
Jeroen Ketema
8fe0d0a045
C++: Improve query output
2024-09-04 13:22:02 +02:00
Jeroen Ketema
8d22d147b8
C++: Clean up QLDoc
2024-09-04 13:16:56 +02:00
Erik Krogh Kristensen
4258119ba3
Merge branch 'main' into del-deps-sep-2024
2024-09-04 12:43:41 +02:00
Jeroen Ketema
65fafbf4df
C++: Fix QL-for-QL warnings
2024-09-04 11:57:10 +02:00
Jeroen Ketema
084dbc4e12
C++: Rename qhelp file to match ql file
2024-09-04 11:48:42 +02:00
Jeroen Ketema
c048401ca7
C++: Clean up Brotli test
2024-09-04 11:40:32 +02:00
Jeroen Ketema
0f98e292ed
C++: Cleanup minizip test
2024-09-04 11:19:22 +02:00
Jeroen Ketema
09f6576e6b
C++: Simplify libarchive test
2024-09-04 11:04:21 +02:00