Mathias Vorreiter Pedersen
daf7d1b7e7
C++: Add more QLDoc.
2023-01-31 10:37:51 +00:00
Mathias Vorreiter Pedersen
7583fe2ad8
C++: Respond to PR reviews.
2023-01-31 10:31:02 +00:00
Mathias Vorreiter Pedersen
f90007ae71
C++: Make our iterator models public.
2023-01-30 17:23:52 +00:00
Mathias Vorreiter Pedersen
470abfd0aa
C++: Conflate iterator value and indirection for taint-flow to fix AST dataflow.
2023-01-23 10:40:25 +00:00
Mathias Vorreiter Pedersen
962b651c44
C++: Fix models.
2023-01-23 10:10:02 +00:00
Geoffrey White
c160e0b2a4
C++: Add a warning on HeuristicAllocationExpr.getSizeBytes() and similar methods.
2023-01-05 12:47:52 +00:00
Geoffrey White
e7ea0d7ee9
C++: Attempt to clarify the way Allocation.qll and Deallocation.qll should be used.
2022-12-15 13:05:56 +00:00
Jeroen Ketema
9dc2614012
C++: Make all flow source descriptions start with a lower case letter
...
In every context where we use the description a lower case letter makes more
sense.
2022-12-09 23:18:58 +01:00
Jeroen Ketema
aabbafd2bf
C++: Fix QL-for-QL warning
2022-12-08 19:33:11 +01:00
Jeroen Ketema
ec0ce56269
C++: Model getaddrinfo as flow source
2022-12-08 19:20:11 +01:00
Jeroen Ketema
8f9a73ee09
C++: Address review comments
2022-12-08 16:14:12 +01:00
Jeroen Ketema
f35b7f8fe8
C++: Model scanf and fscanf as flow sources
2022-12-08 15:22:41 +01:00
Mathias Vorreiter Pedersen
6897b20722
Merge pull request #11601 from MathiasVP/keep-std-string-iterator
2022-12-08 12:59:33 +00:00
Mathias Vorreiter Pedersen
54c12cd715
C++: Reintroduce 'StdBasicStringIterator'.
2022-12-07 18:21:52 +00:00
Jeroen Ketema
01d8ad98f6
C++: Model secure_getenv and _wgetenv as local flow sources
2022-12-07 13:37:12 +01:00
Mathias Vorreiter Pedersen
cef7224739
C++: Make QL-for-QL happy.
2022-12-02 10:12:25 +00:00
Mathias Vorreiter Pedersen
a245977075
C++: Change iterator models.
2022-12-02 10:11:20 +00:00
Jeroen Ketema
612624d241
C++: Recognize basic_string::iterator as an iterator
2022-11-11 14:04:50 +01:00
Jeroen Ketema
ba00a0f370
C++: Share parameter logic in std::string model
2022-11-11 08:48:11 +01:00
Jeroen Ketema
23e29e993b
C++: Split std::string::insert off in a separate class
...
The `insert` function has two different return types: `iterator` and
`basic_string&`.
2022-11-11 08:48:01 +01:00
Jeroen Ketema
c61a9c5911
C++: Also taint the return value dereference in the strcat model
2022-11-08 12:08:44 +01:00
Mathias Vorreiter Pedersen
fa12bd3cdf
C++: Fix spelling.
2022-09-30 11:22:26 +01:00
Mathias Vorreiter Pedersen
483ff58c39
C++: Replace the giant list of predicate parameters with a module signature.
2022-09-30 10:36:03 +01:00
Mathias Vorreiter Pedersen
6d5de66e6a
C++: Add QLDoc to the parameterized module components in 'Allocation.qll'.
2022-09-30 10:04:57 +01:00
Mathias Vorreiter Pedersen
a9710453f4
C++: Add class with heuristics to detect allocations.
2022-09-29 19:54:03 +01:00
Mathias Vorreiter Pedersen
d2b150eaf5
C++: Fix QLDoc on the model predicates used by the new experimental use-use code.
2022-09-12 16:00:49 +01:00
Mathias Vorreiter Pedersen
bb1c088fe0
C++: Undo changes to iterator models.
2022-09-12 15:58:49 +01:00
Mathias Vorreiter Pedersen
6dcfe0348b
C++: Copy over the required changes to non-experimental libraries.
2022-09-09 17:26:58 +01:00
Mathias Vorreiter Pedersen
5509562fe6
C++: Repair a few broken models that were incorrectly a pointer
...
as tainted (instead of the pointee), or vice versa. Because of
existing dataflow pointer/pointee conflation we never noticed that,
but since this PR removes those imprecisions we now need to update
these models.
2022-09-09 17:04:36 +01:00
erik-krogh
5586c9a17e
delete old deprecations
2022-08-16 22:27:15 +02:00
Erik Krogh Kristensen
887f6557ed
fix common misspellings throughout github/codeql
2022-08-10 23:21:41 +02:00
Erik Krogh Kristensen
d389012b75
Merge branch 'main' into redundantImport
2022-04-26 14:24:51 +02:00
JohnMcSandwich
b3dff77d1a
C++: add new Windows pool allocation functions in Allocation.qll
...
Add:
- ExAllocatePool2
- ExAllocatePool3
- ExAllocatePoolZero
2022-04-25 10:21:42 +02:00
Erik Krogh Kristensen
a96489b23d
delete duplicate imports
2022-04-22 12:41:30 +02:00
Geoffrey White
9ae1ec69dc
C++: Autoformat.
2022-03-23 13:37:39 +00:00
Geoffrey White
97fef4b3a5
C++: Switch strategy to nomagic.
2022-03-21 12:58:06 +00:00
Geoffrey White
ff3bedcab9
C++: Fix expensive getWideCharType().
2022-03-17 14:41:57 +00:00
Erik Krogh Kristensen
9e46239928
CPP: remove 13 month old deprecation that override an even older deprecation
2022-03-09 18:28:12 +01:00
Erik Krogh Kristensen
a86f0afb3c
delete all deprecations that are over 14 months old
2022-03-09 18:28:07 +01:00
Geoffrey White
0396a84c3c
C++: Remove empty predicate / extends.
2022-01-28 17:11:38 +00:00
Geoffrey White
af09dd8af1
C++: Fixes to gets models.
2022-01-28 16:04:23 +00:00
Geoffrey White
47528dd8c0
C++: Autoformat.
2022-01-27 12:56:16 +00:00
Geoffrey White
588447d596
C++: Fix up isParameterDeref.
2022-01-24 11:06:24 +00:00
Geoffrey White
4326e6f706
C++: Split 'gets' model and make it a local source.
2022-01-21 17:29:49 +00:00
Geoffrey White
330b4c3704
C++: Generalize hasSocketInput a little to include fgets and friends.
2022-01-19 13:00:35 +00:00
Mathias Vorreiter Pedersen
6dc6a78293
C++: Add a 'IteratorByPointer' class so pointers are always iterators.
2021-11-17 14:41:19 +00:00
Erik Krogh Kristensen
fe891746bf
C++: fix implicit this
2021-10-15 14:59:48 +01:00
Anders Schack-Mulligen
57cb300759
C++/C#/Java/JavaScript/Python: Remove singleton set literals.
2021-10-14 11:34:22 +02:00
Mathias Vorreiter Pedersen
a3cf721b9e
Merge pull request #6713 from geoffw0/cwe139
...
C++: New query for 'Cleartext transmission of sensitive information'
2021-10-01 11:10:36 +02:00
Geoffrey White
679b0f9b73
C++: Autoformat.
2021-10-01 09:40:16 +01:00
