Nora Dimitrijević
a124dcf436
C++: Update QLDoc
...
Arguably warning, not just recommendation; it may be a logic error.
TODO: What CWE/CVEs should I tag this with?
2022-09-30 00:06:53 +02:00
Nora Dimitrijević
981a9798b8
C++: Update .qhelp with precision disclaimer.
2022-09-29 23:59:22 +02:00
Nora Dimitrijević
68b473377a
C++: Fix QL-on-QL Redundant Cast warning
2022-09-29 23:19:49 +02:00
Nora Dimitrijević
2a046352ce
C++: Simplify
2022-09-29 23:06:17 +02:00
Nora Dimitrijević
891bc342be
C++: Fix another implicit/explicit this FP
2022-09-29 18:42:23 +02:00
Nora Dimitrijević
28bd591107
C++: Fix explicit this-> FP.
2022-09-29 17:04:11 +02:00
Nora Dimitrijević
29d7c0e21b
C++: Exclude commas in if-conditions.
2022-09-29 16:29:57 +02:00
Nora Dimitrijević
64903336f7
C++: Exclude all parenthesized CommaExprs.
2022-09-29 15:49:29 +02:00
Nora Dimitrijević
909b36a078
C++: Fix implicit-this FP, uncovered non-funptr FP
2022-09-29 13:14:36 +02:00
Nora Dimitrijević
19a9c5d7d3
C++: Identified another real-life FP
2022-09-28 21:19:45 +02:00
Nora Dimitrijević
96c73bcb19
C++: Fix FP: bad Location for FieldAccess exprs
2022-09-28 20:37:22 +02:00
Nora Dimitrijević
6d5df14547
C++: Remove arguable FPs re: sizeof/decltype
2022-09-28 20:01:14 +02:00
Nora Dimitrijević
592bc18a97
C++: Reduce FPs by excluding all commas in loop heads
...
This leads to a 50% reduction of alerts in MRVA 1000.
2022-09-28 19:38:41 +02:00
Nora Dimitrijević
823b0109f0
C++: Mark FPs that are hard to solve w/o source code
2022-09-28 16:20:13 +02:00
Nora Dimitrijević
0128b1702e
C++: Fix "LHS-end = RHS-begin" FP
2022-09-28 15:36:01 +02:00
Nora Dimitrijević
e7c1fadd94
C++: Fix member-call- and C-cast-related FPs
2022-09-28 15:02:22 +02:00
Nora Dimitrijević
cacf78838c
C++: Tests (w/ FPs) from MRVA top 1000 run
2022-09-27 18:48:32 +02:00
Nora Dimitrijević
0e9b77e7c3
C++: Initial .qhelp file
2022-09-23 11:46:31 +02:00
Nora Dimitrijević
dca13f5c89
C++: Initial cpp/comma-before-misleading-indentation
...
MRVA top 1000 run at: https://github.com/github/semmle-code/actions/runs/3106828111
2022-09-22 17:44:18 +02:00
Nora Dimitrijević
f1efc76e8c
C++: Initial commit of cpp/comma-before-missing-indentation
2022-09-22 17:06:04 +02:00
Tom Hvitved
f0f4fe7286
Merge pull request #10444 from hvitved/ruby/stmt-sequence-post-update
...
Ruby: Add post-update nodes for compound arguments
2022-09-22 13:18:51 +02:00
Andrew Eisenberg
99e8cb78b0
Merge pull request #10496 from aeisenberg/aeisenberg/merge-rc3.7-into-main
...
Aeisenberg/merge rc3.7 into main
2022-09-21 08:09:47 -07:00
Tom Hvitved
db8b6ac69a
Data flow: Sync files
2022-09-21 11:02:24 +02:00
Andrew Eisenberg
58e4861b45
Merge branch 'main' into rc/3.7
2022-09-20 12:43:20 -07:00
Geoffrey White
9ddb485405
Merge branch 'main' into cleartext-perf
2022-09-20 17:56:18 +01:00
Mathias Vorreiter Pedersen
74ccec75c8
C++: Sync identical files.
2022-09-20 13:37:54 +01:00
Mathias Vorreiter Pedersen
79654d978d
C++: Sync identical files.
2022-09-20 12:57:21 +01:00
Mathias Vorreiter Pedersen
7c41219376
Merge pull request #10438 from MathiasVP/invalid-pointer-deref-query
...
C++: Add a `cpp/invalid-pointer-deref` query to experimental
2022-09-20 10:41:31 +01:00
Erik Krogh Kristensen
a4cd913aea
Merge pull request #10312 from erik-krogh/fix-caseDiff
...
ensure consistent casing of names
2022-09-19 10:43:12 +02:00
Mathias Vorreiter Pedersen
02076074ff
C++: Add more comments.
2022-09-18 12:48:13 +01:00
Mathias Vorreiter Pedersen
3e6576bfaf
C++: Add example of missing result.
2022-09-18 12:18:04 +01:00
Mathias Vorreiter Pedersen
d1cf688abf
C++: Fix test function naming.
2022-09-18 12:17:46 +01:00
Mathias Vorreiter Pedersen
78535dc70b
C++: Autoformat.
2022-09-18 12:02:32 +01:00
Mathias Vorreiter Pedersen
dc00643ad1
C++: More QLDoc.
2022-09-16 17:14:29 +01:00
Mathias Vorreiter Pedersen
031f20a0eb
C++: Respond to review comments.
2022-09-16 16:19:06 +01:00
github-actions[bot]
67ce442674
Post-release preparation for codeql-cli-2.10.5
2022-09-16 14:23:44 +00:00
Mathias Vorreiter Pedersen
4482669d7e
C++: Add a new 'InvalidPointerDeref' query to experimental.
2022-09-15 17:47:15 +01:00
Mathias Vorreiter Pedersen
b8a5aa5d85
C++: Fix a couple of range analysis issues:
...
1. The new query is expecting pointer arithmetic operations to generate
range-analysis bounds, but this wasn't true on main.
2. The bounds generated by `boundFlowCond` was incorrectly inferred as
non-strict when comparing a pointers (unlike when comparing values of
integral types). This gave FPs in the new query.
This also fixes a couple of missing results in existing queries that
use the new range-analysis library.
2022-09-15 17:46:52 +01:00
Mathias Vorreiter Pedersen
d981f898e4
C++: Add flow states to the product dataflow library.
2022-09-15 15:54:09 +01:00
Philip Ginsbach
26099d6ab7
remove more upper-case variable names
2022-09-15 14:36:02 +01:00
Geoffrey White
6b21563018
C++: Update change note.
2022-09-15 13:37:20 +01:00
Philip Ginsbach
c5703898b0
remove upper-case NamedExpression variable names
2022-09-14 16:35:24 +01:00
Philip Ginsbach
8f7f631211
upper-case variable names are deprecated
2022-09-14 14:50:26 +01:00
Mathias Vorreiter Pedersen
7f6b400b78
Merge pull request #10366 from MathiasVP/use-use-flow-in-experimental
...
C++: Use-use flow in `experimental`
2022-09-13 09:30:48 +01:00
Mathias Vorreiter Pedersen
6e4b3c242f
Merge pull request #10377 from geoffw0/deprecate-pointsto
...
C++: Put a warning on the PointsTo library.
2022-09-12 16:25:40 +01:00
Mathias Vorreiter Pedersen
d2b150eaf5
C++: Fix QLDoc on the model predicates used by the new experimental use-use code.
2022-09-12 16:00:49 +01:00
Mathias Vorreiter Pedersen
bb1c088fe0
C++: Undo changes to iterator models.
2022-09-12 15:58:49 +01:00
Geoffrey White
842af4bf74
C++: Specifically suggest DataFlow as an alternative.
2022-09-12 14:25:45 +01:00
erik-krogh
bae4490620
add change-note
2022-09-12 12:12:18 +02:00
Mathias Vorreiter Pedersen
c988547e9c
C++: Accept test changes.
2022-09-11 18:31:53 +01:00
