erik-krogh
|
e89e0eb7fb
|
make some acronyms camelCase
|
2022-08-22 21:22:35 +02:00 |
|
Geoffrey White
|
e377eebdbc
|
C++: More 'adversary' -> 'malicious user' and related doc changes.
|
2022-03-25 11:34:37 +00:00 |
|
Geoffrey White
|
11074b6d77
|
Update cpp/ql/src/Security/CWE/CWE-497/PotentiallyExposedSystemData.ql
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
|
2022-03-25 11:08:07 +00:00 |
|
Geoffrey White
|
6b6ee61d3f
|
Apply suggestions from code review
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
|
2022-03-25 11:06:46 +00:00 |
|
Geoffrey White
|
46f3f28a11
|
C++: Fix broken merge.
|
2022-03-15 14:53:25 +00:00 |
|
Geoffrey White
|
28315df405
|
Merge branch 'main' into cwe497b
|
2022-03-15 11:23:00 +00:00 |
|
Geoffrey White
|
73710e9edb
|
C++: Fix QLDoc.
|
2022-03-14 19:11:43 +00:00 |
|
Geoffrey White
|
7c93eb1eaf
|
C++: Fix large newtype.
|
2022-03-14 19:06:41 +00:00 |
|
Geoffrey White
|
d1b04b4e07
|
C++: Use asDefiningArgument() where appropriate.
|
2022-03-14 17:53:47 +00:00 |
|
Erik Krogh Kristensen
|
69353bb014
|
patch upper-case acronyms to be PascalCase
|
2022-03-11 11:10:33 +01:00 |
|
Geoffrey White
|
9ebdb2ac1d
|
C++: QLDoc.
|
2022-03-08 16:12:58 +00:00 |
|
Geoffrey White
|
fc6f42296a
|
C++: Upgrade cpp/system-data-exposure.
|
2022-03-07 17:39:04 +00:00 |
|
Geoffrey White
|
cb33ed4fc2
|
C++: Only look for sensitive strings in appropriate parameters.
|
2022-03-07 11:29:09 +00:00 |
|
Geoffrey White
|
f1d6234483
|
C++: Add more information about registry query parameters.
|
2022-03-07 09:45:31 +00:00 |
|
Geoffrey White
|
4316026720
|
C++: VariableAccess -> Expr.
|
2022-03-04 18:00:54 +00:00 |
|
Geoffrey White
|
6848b6095b
|
C++: Autoformat.
|
2022-03-03 12:51:54 +00:00 |
|
Geoffrey White
|
5c6923c099
|
C++: Improve and differentiate the qhelp.
|
2022-03-03 11:04:55 +00:00 |
|
Geoffrey White
|
07b4bf7023
|
C++: Use the same trick as in ExposedSystemData to catch a few more results.
|
2022-03-03 10:33:39 +00:00 |
|
Geoffrey White
|
6e5729c924
|
C++: Fix typo and adjust violation message wording.
|
2022-03-03 10:28:53 +00:00 |
|
Geoffrey White
|
2a14a4f14e
|
C++: Fill in metadata.
|
2022-03-02 18:52:52 +00:00 |
|
Geoffrey White
|
66b9356eb9
|
C++: There is no overlap between OutputWrite and RemoteFlowSinkFunction.
|
2022-03-02 18:16:39 +00:00 |
|
Geoffrey White
|
a1ace7122d
|
C++: Move SystemData class into a library.
|
2022-03-02 18:01:06 +00:00 |
|
Geoffrey White
|
d95b56fca0
|
C++: Create prototype query.
|
2022-03-02 17:56:49 +00:00 |
|
Geoffrey White
|
6c40cda68d
|
C++: Pragmatic solution to include more sinks (plus autoformat changes).
|
2022-02-24 12:10:34 +00:00 |
|
Geoffrey White
|
703f18b82f
|
C++: Better deduplication.
|
2022-02-15 17:52:27 +00:00 |
|
Geoffrey White
|
c4d9c1d9e7
|
C++: Reduce result duplication.
|
2022-02-11 16:03:38 +00:00 |
|
Geoffrey White
|
00ba76b7e4
|
C++: Convert to IR taint tracking.
|
2022-02-11 13:00:42 +00:00 |
|
Geoffrey White
|
20ad92a82e
|
C++: Filter noisiest sources.
|
2022-02-10 11:11:30 +00:00 |
|
Geoffrey White
|
7b5b2fdcd1
|
C++: Modernize cpp/system-data-exposure as a path-problem using IR taint, RemoteFlowSinkFunction.
|
2022-02-10 11:11:26 +00:00 |
|
Erik Krogh Kristensen
|
6ff8d4de5c
|
add all remaining explicit this
|
2021-11-26 13:50:10 +01:00 |
|
CodeQL CI
|
d5e2026a26
|
Merge pull request #6934 from erik-krogh/more-instanceof
Approved by MathiasVP, esbena, yoff
|
2021-11-02 03:46:23 -07:00 |
|
Erik Krogh Kristensen
|
e75448ebb0
|
remove redundant inline casts
|
2021-10-28 16:35:53 +02:00 |
|
Erik Krogh Kristensen
|
d2d6b2ca7c
|
apply range pattern patch to cpp
|
2021-10-25 19:38:10 +02:00 |
|
Geoffrey White
|
da412178ce
|
C++: Use set literals (more).
|
2021-10-20 14:18:27 +01:00 |
|
Calum Grant
|
771e686946
|
Update security-severity scores
|
2021-06-15 13:25:17 +01:00 |
|
Calum Grant
|
a594afb828
|
Add security-severity metadata
|
2021-06-10 20:11:08 +01:00 |
|
Robert Marsh
|
03f72d207c
|
C++: use Declaration.hasGlobalOrStdName
|
2019-10-02 11:37:37 -07:00 |
|
Jonas Jensen
|
4ef5c9af62
|
C++: Autoformat everything
Some files that will change in #1736 have been spared.
./build -j4 target/jars/qlformat
find ql/cpp/ql -name "*.ql" -print0 | xargs -0 target/jars/qlformat --input
find ql/cpp/ql -name "*.qll" -print0 | xargs -0 target/jars/qlformat --input
(cd ql && git checkout 'cpp/ql/src/semmle/code/cpp/ir/implementation/**/*SSA*.qll')
buildutils-internal/scripts/pr-checks/sync-identical-files.py --latest
|
2019-09-09 11:25:53 +02:00 |
|
Pavel Avgustinov
|
d4b2c01634
|
Lift out intermediate helper predicate.
|
2018-11-23 14:22:44 +00:00 |
|
Pavel Avgustinov
|
b55526aa58
|
QL code and tests for C#/C++/JavaScript.
|
2018-08-02 17:53:23 +01:00 |
|