Calum Grant
14cef6a207
C++: Fix FPs to cpp/return-stack-allocated-memory
2024-12-17 15:58:39 +00:00
Calum Grant
a9b3c0d91b
C++: Address review comments
2024-10-01 15:47:12 +01:00
Calum Grant
59a77d70c0
C++: Use Function::hasErrors in queries
2024-10-01 11:01:23 +01:00
Calum Grant
4b5aa1497b
C++: Implement Function::hasErrors()
2024-10-01 11:00:44 +01:00
erik-krogh
0fdd06fff5
use my script to delete outdated deprecations
2024-09-03 20:30:58 +02:00
Geoffrey White
0344381120
Merge remote-tracking branch 'upstream/main' into docsforautofix
2024-07-10 11:17:52 +01:00
Mathias Vorreiter Pedersen
962c73da16
C++: Promote 'cpp/unsafe-strncat' to Code Scanning.
2024-07-08 16:02:29 +01:00
Geoffrey White
4f0d725acd
C++: Add a 'good' example as well.
2024-07-08 14:32:03 +01:00
Geoffrey White
d52210d565
C++: Improve the example for cpp/return-stack-allocated-memory.
2024-07-08 14:32:01 +01:00
Mathias Vorreiter Pedersen
05d46a6793
C++: Also ignore phi input edges in 'AllocaInLoop.ql'.
2024-06-05 09:58:44 +01:00
Mathias Vorreiter Pedersen
769d9317c7
C++: Avoid a CP between 'getExpr(node)' and 'this' in 'LoopWithAlloca'.
2024-05-22 15:15:40 +01:00
Jeroen Ketema
1a60c01723
C++: Add memcmp test for cpp/network-to-host-function-as-array-bound
2024-05-21 10:27:38 +02:00
Geoffrey White
f5431abb10
C++: Fix strncpy reference link (the old link was broken).
2024-05-02 17:37:52 +01:00
Geoffrey White
ecbf7aef18
C++: Fix qhelp formatting.
2024-05-02 17:26:24 +01:00
Geoffrey White
8a261b7e7a
C++: Update StrncpyFlippedArgs.qhelp.
2024-05-02 17:04:49 +01:00
Geoffrey White
06d8892e03
C++: Rename an example file.
2024-05-02 16:39:59 +01:00
Mathias Vorreiter Pedersen
4a55b6fbdf
C++: Make 'cpp/uninitialized-local' a path-problem query.
2024-03-18 15:02:33 +00:00
Benjamin Rodes
f58f77de82
PR change suggestions.
2024-01-30 09:22:22 -05:00
Benjamin Rodes
13cf555cee
False positive fix for cpp/uninitialized-local
2024-01-29 13:21:05 -05:00
Mathias Vorreiter Pedersen
bae7e10e46
C++: Also add MSVC-related 'alloca'-like functions.
2023-11-15 12:07:17 +00:00
Mathias Vorreiter Pedersen
6730f57d5c
C++: Also flag up 'alloca' and friends.
2023-11-15 11:51:57 +00:00
Mathias Vorreiter Pedersen
022c9eb3cd
C++: Add a barrier feature to 'MustFlow'.
2023-11-07 09:23:42 +00:00
Mathias Vorreiter Pedersen
1dc08941f8
C++: Use 'MustFlow' in 'cpp/uninitialized-local'.
2023-11-07 09:23:41 +00:00
Mingjie Shen
d8e0ffa52d
Update cpp/ql/src/Likely Bugs/Memory Management/UninitializedLocal.ql
...
Co-authored-by: Jeroen Ketema <93738568+jketema@users.noreply.github.com >
2023-07-07 12:25:42 -04:00
Mingjie Shen
9218afedbe
C++: exclude uninitialized uses that are cast to void
...
This eliminates FPs caused by casting a variable explicitly to
void type. Developers use this cast to suppress compiler warnings
on unused variables, e.g.
(void) x;
2023-07-06 17:43:42 -04:00
Kasper Svendsen
c46898cb75
C++: Make implicit this receivers explicit
2023-05-09 15:35:54 +02:00
Mathias Vorreiter Pedersen
e5700e07c7
C++: Fix join order in 'cpp/unsafe-strncat'.
2023-03-31 21:33:28 +01:00
Anders Schack-Mulligen
72415c7c2c
C++: Rename references.
2023-03-23 13:06:19 +01:00
Ed Minnix
2d5944fb0e
Refactor DataFlow configurations to use "Config" naming convention
2023-03-19 17:44:07 -04:00
Jeroen Ketema
5391b13db9
C++: Make dataflow configuration modules private in qll files
2023-03-08 09:18:09 +01:00
Jeroen Ketema
fb57914751
C++: Convert a number of data flow based queries to use ConfigSig
2023-03-07 18:21:52 +01:00
Jeroen Ketema
ecdeb9a970
C++: Revert semmle.code.cpp.dataflow to its old state
...
While here make sure all queries and tests use IR dataflow when appropriate.
2023-02-10 14:21:44 +01:00
Jeroen Ketema
628f92a9fb
C++: Fix QL-for-QL warnings
2022-12-13 16:24:55 +01:00
Jeroen Ketema
b10ed976cc
Update cpp/ql/src/Likely Bugs/Memory Management/AllocaInLoop.ql
...
Co-authored-by: Mathias Vorreiter Pedersen <mathiasvp@github.com >
2022-12-13 10:57:34 +01:00
Jeroen Ketema
18dea55071
C++: Fix cpp/alloca-in-loop regressions with use-use dataflow
2022-12-12 19:15:50 +01:00
Jeroen Ketema
4731f9222c
Merge remote-tracking branch 'upstream/main' into mathiasvp/replace-ast-with-ir-use-usedataflow
2022-11-22 10:53:24 +01:00
Mathias Vorreiter Pedersen
b748ed8f43
C++: Repair the 'MustFlow' library.
2022-11-18 16:41:32 +00:00
Robert Marsh
de89b4c69f
C++: repair the ReturnCstr query
2022-10-26 11:02:23 -04:00
Josh Soref
360ce7bcf0
spelling: vulnerabilities
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com >
2022-10-14 15:08:44 -04:00
Josh Soref
5dd61e3abe
spelling: operand
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com >
2022-10-14 15:08:44 -04:00
Josh Soref
324aa61738
spelling: interesting
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com >
2022-10-14 15:08:44 -04:00
Josh Soref
0919507565
spelling: outside
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com >
2022-10-12 04:40:26 -04:00
Josh Soref
879158a653
spelling: behavior
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com >
2022-10-11 00:23:36 -04:00
erik-krogh
a30c38f38c
CPP: make more alert messages follow the style-guide
2022-09-23 14:45:59 +02:00
Mathias Vorreiter Pedersen
9745073024
C++: Speedup 'cpp/using-expired-stack-address' by avoiding a large negation.
2022-09-06 14:33:33 +01:00
Mathias Vorreiter Pedersen
c953b05cc2
Merge branch 'main' into fix-joins-in-using-expired-stack-address
2022-08-18 15:13:05 +01:00
Mathias Vorreiter Pedersen
5704995b62
C++: Fix joins in 'cpp/using-expired-stack-address'.
2022-08-18 13:23:39 +01:00
erik-krogh
2e44fba67d
add explicit this
2022-08-17 13:33:31 +02:00
Nora Dimitrijević
60f4049388
Re-autoformat StrncpyFlippedArgs.ql
2022-08-10 14:14:42 +02:00
Nora Dimitrijević
df419003ad
Use Strcpy.qll in StrncpyFlippedArgs.ql
...
As a result, the query gets access to more types of strncpy-like
functions, as demonstrated by test.cpp, which now "fails" (i.e. works) for the new test
cases instroduced
in the previous commit.
2022-08-10 13:42:21 +02:00
