5268 Commits

Author	SHA1	Message	Date
ihsinme	bbd3f7631e	Delete test.c ... sorry i was in a hurry	2021-01-11 23:52:26 +03:00
ihsinme	b92d63d5df	Delete CompilerRemovalOfCodeToClearBuffers.qlref ... sorry i was in a hurry	2021-01-11 23:51:37 +03:00
ihsinme	05f866e912	Delete CompilerRemovalOfCodeToClearBuffers.expected ... sorry i was in a hurry	2021-01-11 23:51:18 +03:00
ihsinme	d7a5e61f8e	Delete CompilerRemovalOfCodeToClearBuffers.qhelp ... sorry i was in a hurry	2021-01-11 23:50:47 +03:00
ihsinme	c38cfcb735	Delete CompilerRemovalOfCodeToClearBuffers.ql ... sorry i was in a hurry	2021-01-11 23:50:19 +03:00
ihsinme	65ff526eef	Delete CompilerRemovalOfCodeToClearBuffers.c ... sorry i was in a hurry	2021-01-11 23:49:53 +03:00
ihsinme	ed6d8e3d18	Add files via upload	2021-01-11 23:40:38 +03:00
ihsinme	b185a33157	Add files via upload	2021-01-11 23:39:02 +03:00
ihsinme	b28444b55c	Update MemoryLeakOnFailedCallToRealloc.ql ... I thought since there is no work on this PR, I will delete the residual import.	2021-01-11 21:17:49 +03:00
ihsinme	2d6dafc6be	Update MemoryLeakOnFailedCallToRealloc.ql	2021-01-07 15:44:50 +03:00
ihsinme	f378c14659	Update MemoryLeakOnFailedCallToRealloc.expected	2021-01-07 15:43:58 +03:00
ihsinme	592cd284e8	Update test.c	2021-01-07 15:41:31 +03:00
ihsinme	abdeaabd77	Update MemoryLeakOnFailedCallToRealloc.ql	2021-01-06 22:46:03 +03:00
ihsinme	2b8227e04d	Update cpp/ql/src/experimental/Security/CWE/CWE-401/MemoryLeakOnFailedCallToRealloc.ql ... Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com>	2021-01-06 22:23:46 +03:00
ihsinme	f7eb328f76	Update cpp/ql/src/experimental/Security/CWE/CWE-401/MemoryLeakOnFailedCallToRealloc.qhelp ... Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com>	2021-01-06 22:18:14 +03:00
ihsinme	d7f31ca1a0	Update cpp/ql/src/experimental/Security/CWE/CWE-401/MemoryLeakOnFailedCallToRealloc.qhelp ... Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com>	2021-01-06 22:17:26 +03:00
ihsinme	0c7381a3b0	Add files via upload	2020-12-26 20:45:11 +03:00
ihsinme	cd7c47ea39	Add files via upload	2020-12-26 20:43:25 +03:00
Mathias Vorreiter Pedersen	4f07474b62	C++: Also allow custom sources in taintedWithoutGlobals	2020-12-21 19:55:47 +01:00
Mathias Vorreiter Pedersen	f4f96fe257	C++: Use isSource in queries. These were the only queries that restrict the source after dataflow terminates.	2020-12-21 16:35:35 +01:00
Mathias Vorreiter Pedersen	0e84c638b6	C++: Add isSource to AdjustedConfiguration	2020-12-21 16:34:22 +01:00
Jonas Jensen	4308381057	Merge pull request #4846 from MathiasVP/default-taint-tracking-operand-instruction-interleaving ... C++: Instruction -> Operand interleaving for DefaultTaintTracking	2020-12-21 12:44:06 +01:00
Jonas Jensen	3236cbd83e	C++: Test the AST wrapper for IR GVN ... Out of our 3 GVN libraries, the one we actually use in production didn't have tests -- except indirectly through `diff_ir_expr.ql`.	2020-12-21 08:21:02 +01:00
Mathias Vorreiter Pedersen	b5102043b1	Fix comments.	2020-12-18 14:19:02 +01:00
Mathias Vorreiter Pedersen	f5e4725642	C++: Propagate flow from instruction's to non-exact operands for arrays and unions, and accept test changes.	2020-12-18 13:54:34 +01:00
Mathias Vorreiter Pedersen	2bf8e47932	Merge branch 'main' into default-taint-tracking-operand-instruction-interleaving	2020-12-18 11:59:10 +01:00
Mathias Vorreiter Pedersen	7ccd48e53c	Make DefaultTaintTracking do operand->instruction->operand interleaving like DataFlowUtil.	2020-12-18 11:57:16 +01:00
Jonas Jensen	fd7dec7f20	Merge pull request #4824 from geoffw0/modelchanges5 ... C++: Add cases in the Allocation model.	2020-12-18 09:16:01 +01:00
Geoffrey White	c89f7d824b	C++: Back out support for SysAllocString. It turns out supporting all of the SysAlloc stuff is beyond our current models, supporting just SysFreeString as we do is OK.	2020-12-16 15:08:53 +00:00
Jonas Jensen	406cc64dcc	Merge pull request #4831 from geoffw0/printfunknown ... C++: Fix Printf.qll specsAreKnown	2020-12-16 10:56:56 +01:00
Geoffrey White	93dfeac3c8	C++: Make specsAreKnown more accurate.	2020-12-15 17:43:28 +00:00
Geoffrey White	676e85a155	C++: Re-enable the check.	2020-12-15 17:42:10 +00:00
Geoffrey White	94dea9f71d	C++: Add a test of unknown format specifiers (with specsAreKnown check disabled).	2020-12-15 17:40:32 +00:00
Geoffrey White	4bf2f3af50	C++: Fix comment.	2020-12-15 10:15:41 +00:00
Geoffrey White	d7a92e581f	Merge branch 'main' into swap	2020-12-14 17:54:11 +00:00
Geoffrey White	9c77d3c829	C++: Add AliasFunction model.	2020-12-14 17:52:02 +00:00
Geoffrey White	f9a7322d68	C++: Remove redundant check.	2020-12-14 17:16:16 +00:00
Geoffrey White	e02ebfb9bd	C++: Add extra cases to Allocation / Deallocation.	2020-12-14 14:00:36 +00:00
Geoffrey White	899d1ab6d8	C++: Add tests of strdup (and variants) as allocators.	2020-12-14 13:50:11 +00:00
Robert Marsh	af180d430e	Merge pull request #4805 from geoffw0/sscanf ... C++: Refine examples and tests for cpp/memory-unsafe-function-scan (experimental) query	2020-12-11 12:42:11 -08:00
Robert Marsh	0210c1f721	Merge pull request #4783 from geoffw0/modelchanges4 ... C++: More use of set literals.	2020-12-10 15:24:50 -08:00
Geoffrey White	b79ca4535a	C++: Undo the iterator.qll change. Notice that it was 'and' not 'or'.	2020-12-10 18:29:39 +00:00
Geoffrey White	3bef0e5c00	C++: Implement a general model.	2020-12-09 18:53:49 +00:00
Geoffrey White	209191bb24	C++: Add another good example.	2020-12-09 16:55:07 +00:00
Geoffrey White	80db155d54	C++: Fix example and test.	2020-12-09 16:46:48 +00:00
Geoffrey White	d08efb4e47	C++: Combine the member swap models.	2020-12-08 19:50:13 +00:00
Geoffrey White	4a81d36309	C++: Move all of the swap models into Swap.qll.	2020-12-08 18:19:43 +00:00
Geoffrey White	e18f290864	C++: Correct comment.	2020-12-08 16:55:19 +00:00
james	da16fad0f1	Merge branch 'rc/1.26' into 126-mergeback	2020-12-08 09:26:12 +00:00
Geoffrey White	ef131d3951	C++: Fix StandardDeallocationFunction.	2020-12-07 18:52:35 +00:00