Jeroen Ketema
ad590f30c1
Merge branch 'main' into cpp/mad-barriers
2026-01-23 14:14:22 +01:00
Jeroen Ketema
ccd07b8a63
C++: Simplify cpp/sql-injection barrier
...
SQL sanitizers will not likely also be sources, so using `isBarrierIn` here
does not make a lot of sense.
I ran with and without this change on MRVA and got identical results.
2026-01-23 09:03:48 +01:00
Owen Mansel-Chan
656ebab776
Allow MaD barriers
...
This commit was done by Opus 4.5 with the following prompt:
In the commit 004d40ee93
2026-01-21 14:45:05 +00:00
Mathias Vorreiter Pedersen
6da7890ff5
C++: Add indirect barrier guard to 'cpp/unbounded-write' to prevent FPs after fixing conflation.
2026-01-15 18:31:54 +00:00
Anders Schack-Mulligen
78e1879c9e
Use more flowTo.
2025-12-03 14:12:08 +01:00
Anders Schack-Mulligen
dc6d3fe7ba
Use flowFrom.
2025-12-03 14:04:18 +01:00
Nora Dimitrijević
a0975e7e19
Constrain location overrides to actual sources/sinks
2025-10-28 09:42:20 +01:00
Nora Dimitrijević
96e1536769
C++/SqlTainted
2025-10-28 09:42:17 +01:00
Nora Dimitrijević
ec63547925
C++/UseOfHttp
2025-10-28 09:42:03 +01:00
Nora Dimitrijević
a65d4d5997
C++/TaintedAllocationSize
2025-10-28 09:42:01 +01:00
Nora Dimitrijević
f3d51e0151
C++/ArithmeticUncontrolled
2025-10-28 09:41:57 +01:00
Nora Dimitrijević
bbe2bf2b7f
C++/CleartextTransmission
2025-10-28 09:41:52 +01:00
Nora Dimitrijević
b0180409f4
C++/CleartextFileWrite
2025-10-28 09:41:49 +01:00
Nora Dimitrijević
d89aa0f19d
C++/CleartextBufferWrite
2025-10-28 09:41:46 +01:00
Nora Dimitrijević
17b261a506
C++/AuthenticationBypass
2025-10-28 09:41:43 +01:00
Nora Dimitrijević
0ed27f4e81
C++/CleartextSqliteDatabase
2025-10-28 09:41:40 +01:00
Nora Dimitrijević
2756e8255f
C++/UnboundedWrite
2025-10-28 09:41:35 +01:00
Nora Dimitrijević
65d79ff6fc
C++/ExecTainted
2025-10-28 09:41:29 +01:00
Owen Mansel-Chan
0bcdb91639
Improve qhelp for broken crypto algo queries
...
Previously it focussed too much on the risk of data being decrypted,
and didn't explain why using weak algorithms is a problem in other
contexts.
2025-10-08 14:10:54 +01:00
Mathias Vorreiter Pedersen
d8f34dba17
C++: Do not use the deprecated predicate in queries.
2025-09-18 12:16:23 +01:00
Mathias Vorreiter Pedersen
5e82eb9b24
C++: Fixup queries which assumes that a guard is always an expression.
2025-09-18 12:16:21 +01:00
Mathias Vorreiter Pedersen
a4c845c418
C++: Fix barrier in 'cpp/unbounded-write'.
2025-09-15 16:34:05 +01:00
Ian Lynagh
b3f4c68a1d
C++: Remove the BMN filter from some queries, but reduce precision to medium
...
Remove the `not any(Compilation c).buildModeNone() and` clause from:
cpp/wrong-type-format-argument
cpp/comparison-with-wider-type
cpp/integer-multiplication-cast-to-long
cpp/implicit-function-declaration
cpp/suspicious-add-sizeof
but reduce their precision to `medium`.
2025-09-11 13:32:11 +01:00
Mathias Vorreiter Pedersen
a81989d2d8
C++: Simplify the 'SSLResultNotChecked' query.
2025-09-08 12:28:28 +01:00
Michael Nebel
83d53baf82
C++: Fix some Ql4Ql violations.
2025-09-03 08:19:18 +02:00
Jeroen Ketema
a104600d4d
Merge branch 'main' into cpp/use-flow-state-inout-barriers
2025-08-25 17:04:30 +02:00
Nora Dimitrijević
89788206d1
[DIFF-INFORMED] C++: TypeConfusion
2025-08-15 12:01:30 +02:00
Nora Dimitrijević
5b9e37cd8f
[DIFF-INFORMED] C++: TaintedCondition
2025-08-15 12:01:28 +02:00
Nora Dimitrijević
0c636dd400
[DIFF-INFORMED] C++: UnsafeDaclSecurityDescriptor
2025-08-15 12:01:25 +02:00
Nora Dimitrijević
194d9a9f44
[DIFF-INFORMED] C++: UnsafeCreateProcessCall
2025-08-15 12:01:23 +02:00
Nora Dimitrijević
39b430aa7e
[DIFF-INFORMED] C++: IteratorToExpiredContainer
2025-08-15 12:01:21 +02:00
Nora Dimitrijević
ec85e55069
[DIFF-INFORMED] C++: InsufficientKeySize
2025-08-15 12:01:19 +02:00
Nora Dimitrijević
c0c96eaf5b
[DIFF-INFORMED] C++: UseOfHttp
2025-08-15 12:01:17 +02:00
Nora Dimitrijević
8560868e95
[DIFF-INFORMED] C++: CleartextSqliteDatabase
2025-08-15 12:01:15 +02:00
Nora Dimitrijević
05df2f2216
[DIFF-INFORMED] C++: CWE-311/Cleartext…
2025-08-15 12:01:13 +02:00
Nora Dimitrijević
21914030e8
[DIFF-INFORMED] C++: SSLResultConflation (has secondary config but passes test)
2025-08-15 12:01:11 +02:00
Nora Dimitrijević
87016f399c
[DIFF-INFORMED] C++: AuthenticationBypass
2025-08-15 12:01:09 +02:00
Nora Dimitrijević
861a768b2c
[DIFF-INFORMED] C++: CWE-190/ArithmeticTainted,etc.
2025-08-15 12:01:07 +02:00
Nora Dimitrijević
62fa7301c3
[DIFF-INFORMED] C++: ImproperNullTerminationTainted
2025-08-15 12:01:05 +02:00
Nora Dimitrijević
f3098e7695
[DIFF-INFORMED] C++: UnboundedWrite
2025-08-15 12:01:03 +02:00
Nora Dimitrijević
7df09f369f
[DIFF-INFORMED] C++: SqlTainted
2025-08-15 12:01:01 +02:00
Nora Dimitrijević
36d43a4830
[DIFF-INFORMED] C++: CgiXss
2025-08-15 12:00:59 +02:00
Nora Dimitrijević
80da00b599
[DIFF-INFORMED] C++: ExecTainted
2025-08-15 12:00:57 +02:00
Nora Dimitrijević
a77cab6981
[DIFF-INFORMED] C++: TaintedPath
2025-08-15 12:00:54 +02:00
Mathias Vorreiter Pedersen
1189665970
C++: Add barriers to 'cpp/overrun-write'.
2025-07-22 18:35:56 +01:00
Mathias Vorreiter Pedersen
a502bb1ac2
C++: Add a copy of 'isSinkPairImpl' (named 'isSinkPairImpl0') with a few more columns that we'll need.
2025-07-22 18:35:50 +01:00
Mathias Vorreiter Pedersen
e0eadc75dd
C++: Remove the ad-hoc code for keeping track of increments/decrements on pointers in the 'cpp/overrun-write' query.
2025-07-22 18:35:31 +01:00
Mathias Vorreiter Pedersen
29cceeba1a
C++: Don't use asExpr to mark the sink in 'cpp/uncontrolled-process-operation'.
2025-07-14 18:08:58 +01:00
Jeroen Ketema
399967b507
C++: Do not alert on unreachable code in cpp/incorrect-string-type-conversion
2025-07-10 11:49:12 +02:00
Jeroen Ketema
a5737dded3
Merge branch 'main' into feature/oracle-model
2025-06-26 12:48:55 +02:00
