Mathias Vorreiter Pedersen
|
cca6052026
|
C++: Use 'operandNode' to generate the string for indirect operands.
|
2023-09-01 14:04:54 +01:00 |
|
Mathias Vorreiter Pedersen
|
f1c4fa2345
|
C++: When we generate a string for the node we avoid multiple results by only using the 0'th result from the 'asExpr' predicate. However, when we want to convert between nodes and expressions we don't care about which one we get.
|
2023-09-01 14:04:52 +01:00 |
|
Mathias Vorreiter Pedersen
|
d2bb73ba1f
|
C++: Use the index to to get the 'most converted' and 'least converted' instruction in a bunch of places.
|
2023-09-01 13:47:06 +01:00 |
|
Mathias Vorreiter Pedersen
|
4dfaf9225c
|
C++: Index 'getConvertedResultExpression' by an integer.
|
2023-09-01 13:32:29 +01:00 |
|
Mathias Vorreiter Pedersen
|
16d62186c0
|
C++: Use this new predicate everywhere we need to convert an instruction to an expression.
|
2023-09-01 13:32:25 +01:00 |
|
Mathias Vorreiter Pedersen
|
60819ad7f2
|
Add a single predicate that should be used to convert an instruction to an expression.
|
2023-09-01 13:06:25 +01:00 |
|
Mathias Vorreiter Pedersen
|
72d9812fea
|
C++: Accept more test changes.
|
2023-08-31 21:56:35 +01:00 |
|
Mathias Vorreiter Pedersen
|
dfefd62089
|
C++: Accept test changes.
|
2023-08-31 20:38:46 +01:00 |
|
Mathias Vorreiter Pedersen
|
aed14f2924
|
C++: Don't insert loads for constants.
|
2023-08-31 20:38:40 +01:00 |
|
Mathias Vorreiter Pedersen
|
b575747357
|
C++: Add testcase with invalid IR.
|
2023-08-31 20:35:33 +01:00 |
|
Mathias Vorreiter Pedersen
|
10548b57d7
|
Merge pull request #14103 from MathiasVP/non-certain-def-is-a-use
C++: Non-certain definitions should always be uses
|
2023-08-31 16:15:30 +01:00 |
|
Tom Hvitved
|
73370e7282
|
Merge pull request #14100 from hvitved/dataflow/consistency-pack
Data flow: Add consistency checks to shared ql pack
|
2023-08-31 11:47:40 +02:00 |
|
Mathias Vorreiter Pedersen
|
f5509da4bb
|
Merge pull request #14038 from alexet/delete-ir
CPP: Add delete/delete[] calls to the IR.
|
2023-08-31 09:22:34 +01:00 |
|
Mathias Vorreiter Pedersen
|
1159508e4f
|
Merge pull request #14008 from MathiasVP/reuse-even-more-nodes
C++: Reuse even more `DataFlow::Node`s
|
2023-08-30 19:38:52 +01:00 |
|
Alex Eyers-Taylor
|
59a77666a6
|
CPP: Remove uneeded indirection around delete calls in the IR.
|
2023-08-30 16:31:51 +01:00 |
|
Mathias Vorreiter Pedersen
|
261ba8e02d
|
C++: Add QLDoc to 'isDereference'.
|
2023-08-30 14:34:30 +01:00 |
|
Tom Hvitved
|
db304d118b
|
C++: Use data flow consistency checks from shared pack
|
2023-08-30 15:29:41 +02:00 |
|
Mathias Vorreiter Pedersen
|
4ca259b200
|
C++: Non-exact definitions should always be a use.
|
2023-08-30 11:50:57 +01:00 |
|
Mathias Vorreiter Pedersen
|
b092da485d
|
C++: Accept more test changes.
|
2023-08-30 11:26:40 +01:00 |
|
Mathias Vorreiter Pedersen
|
e4a11b86d9
|
Merge branch 'main' into reuse-even-more-nodes
|
2023-08-29 15:08:30 +01:00 |
|
Tom Hvitved
|
8624ff12be
|
Merge pull request #14082 from hvitved/csharp/bump-dependencies
C#: Bump all dependencies
|
2023-08-29 15:52:40 +02:00 |
|
Mathias Vorreiter Pedersen
|
99cc4171f8
|
C++: Fix FPs by making 'isArgumentOfCallable' more robust.
|
2023-08-29 14:12:09 +01:00 |
|
Alex Eyers-Taylor
|
9df5e30034
|
CPP: Add changenote for adding delete to the IR.
|
2023-08-29 12:13:40 +01:00 |
|
Alex Eyers-Taylor
|
24b679d5a0
|
CPP: Fix IR formatting.
|
2023-08-29 11:17:44 +01:00 |
|
Alex Eyers-Taylor
|
8b1b1618c4
|
CPP: Add tests for false positive in memory vulnerability queries.
|
2023-08-29 11:17:44 +01:00 |
|
Alex Eyers-Taylor
|
3b344c3578
|
CPP: Handle cases where the deallocator function is determined dynamically.
|
2023-08-29 11:17:44 +01:00 |
|
Alex Eyers-Taylor
|
689fda43ed
|
CPP: Add delete/delete[] calls to the IR.
|
2023-08-29 11:17:43 +01:00 |
|
Mathias Vorreiter Pedersen
|
d14ad92dbd
|
Merge pull request #14006 from MathiasVP/promote-invalid-pointer-deref-out-of-experimental
C++: Promote `cpp/invalid-pointer-deref` out of experimental
|
2023-08-29 09:38:56 +01:00 |
|
Mathias Vorreiter Pedersen
|
f3a77c6006
|
Merge pull request #14060 from MathiasVP/fix-compare-where-assign-meant-fp
C++: Fix FP in `cpp/compare-where-assign-meant`
|
2023-08-29 09:38:39 +01:00 |
|
Mathias Vorreiter Pedersen
|
dbdb433957
|
Merge pull request #14058 from alexet/delete-or-delete-array
CPP: Add parent class for delete and delete[]
|
2023-08-29 09:38:07 +01:00 |
|
Tom Hvitved
|
bce47fe344
|
C#: Bump all dependencies
|
2023-08-29 09:24:39 +02:00 |
|
Dave Bartolomeo
|
3343b78015
|
Merge pull request #14074 from github/post-release-prep/codeql-cli-2.14.3
Post-release preparation for codeql-cli-2.14.3
|
2023-08-28 13:34:10 -04:00 |
|
github-actions[bot]
|
3eba77421a
|
Post-release preparation for codeql-cli-2.14.3
|
2023-08-28 15:53:49 +00:00 |
|
Mathias Vorreiter Pedersen
|
f65fe34513
|
C++: Add false positive caused by flowing back into a function after doing reverse reads.
|
2023-08-28 14:45:16 +01:00 |
|
Mathias Vorreiter Pedersen
|
bb1712b489
|
Merge branch 'main' into reuse-even-more-nodes
|
2023-08-26 18:08:58 +01:00 |
|
Alexander Eyers-Taylor
|
ea2140dc7d
|
Apply suggestions from code review
Co-authored-by: Mathias Vorreiter Pedersen <mathiasvp@github.com>
|
2023-08-25 17:15:08 +01:00 |
|
Alex Eyers-Taylor
|
8badf10a53
|
CPP: Add change notes for changes to DeleteExpr/DeleteArrayExpr
|
2023-08-25 17:13:34 +01:00 |
|
Mathias Vorreiter Pedersen
|
9542646a5d
|
C++: Add change note.
|
2023-08-25 16:45:53 +01:00 |
|
Mathias Vorreiter Pedersen
|
104416cc59
|
C++: Accept test changes.
|
2023-08-25 16:40:06 +01:00 |
|
Mathias Vorreiter Pedersen
|
cb2f7b0f95
|
C++: Exclude results in macro expansions from 'cpp/compare-where-assign-meant'.
|
2023-08-25 16:39:47 +01:00 |
|
Mathias Vorreiter Pedersen
|
759f939edd
|
C++: Add false positive.
|
2023-08-25 16:38:48 +01:00 |
|
Alex Eyers-Taylor
|
d699201ad0
|
CPP: Add a test demonstating when a deallocator call exists.
|
2023-08-25 15:45:50 +01:00 |
|
Alex Eyers-Taylor
|
027ed5e909
|
CPP: Docs improvements to DeleteOrDeleteArrayExpr
|
2023-08-25 15:45:50 +01:00 |
|
Alex Eyers-Taylor
|
417b9c9a32
|
CPP: Use DeleteOrDeleteArrayExpr in another place.
|
2023-08-25 15:45:50 +01:00 |
|
Alex Eyers-Taylor
|
a3711e1df0
|
CPP: Replace getAllocatorCall with getDeallocator call.
|
2023-08-25 15:45:50 +01:00 |
|
Mathias Vorreiter Pedersen
|
b948ed9045
|
C++: Accept test changes and add a few non-field flow tests to make up for the fact that we're no longer using field flow in the query.
|
2023-08-25 15:18:15 +01:00 |
|
Mathias Vorreiter Pedersen
|
89b91ec5c8
|
C++: Disable field flow from the 'cpp/invalid-pointer-deref' query.
|
2023-08-25 15:01:37 +01:00 |
|
Mathias Vorreiter Pedersen
|
c3cf48b38a
|
C++: Add a 'fieldFlowBranchLimit' override to the product flow library.
|
2023-08-25 14:58:56 +01:00 |
|
Alex Eyers-Taylor
|
04f8ed6af0
|
CPP: Simplify code using DeleteOrDeleteArrayExpr
|
2023-08-25 13:57:16 +01:00 |
|
Alex Eyers-Taylor
|
c43ba456e5
|
CPP: Remove old DeleteOrDeleteArrayExpr from a query.
|
2023-08-25 13:57:16 +01:00 |
|