Mathias Vorreiter Pedersen
|
a856bc8678
|
Merge pull request #10562 from rdmarsh2/rdmarsh2/cpp/field-off-by-one
C++: prototype for off-by-one in array-typed field
|
2022-10-06 11:04:12 +01:00 |
|
Mathias Vorreiter Pedersen
|
32d0b58923
|
C++: Fix qhelp example.
|
2022-10-06 10:19:53 +01:00 |
|
Mathias Vorreiter Pedersen
|
fcd69a005f
|
C++: Remove redundant pragma.
|
2022-10-05 09:56:24 +01:00 |
|
Mathias Vorreiter Pedersen
|
4d697cd369
|
C++: Rephrase QLDoc.
|
2022-10-04 17:15:08 +01:00 |
|
Mathias Vorreiter Pedersen
|
32839021f8
|
C++: Fix join that might blow up in the future.
|
2022-10-04 16:43:02 +01:00 |
|
Robert Marsh
|
84f9c9b224
|
C++: query help for ConstantSizeArrayOffByOne.ql
|
2022-09-30 15:15:24 -04:00 |
|
Robert Marsh
|
159f11cd28
|
C++: fill in more query metadata
|
2022-09-30 15:07:08 -04:00 |
|
Robert Marsh
|
8972176242
|
C++: autoformat
|
2022-09-30 14:22:33 -04:00 |
|
Robert Marsh
|
8ac8101a75
|
C++: convert to path-problem
|
2022-09-30 11:35:02 -04:00 |
|
Robert Marsh
|
423e0bf99a
|
C++: respond to style comments on PR
|
2022-09-30 11:27:14 -04:00 |
|
Mathias Vorreiter Pedersen
|
b0af4cba30
|
C++: Fix Code Scanning alert.
|
2022-09-30 10:05:45 +01:00 |
|
Robert Marsh
|
f17b563692
|
C++: handle interprocedural flows
This currently copy-pastes some predicates from InvalidPointerDeref.ql.
Those should be moved to a library file in a followup
|
2022-09-29 16:09:48 -04:00 |
|
Mathias Vorreiter Pedersen
|
2a514d60d4
|
C++: Add 'isBarrierIn' to prevent path duplication.
|
2022-09-29 19:55:58 +01:00 |
|
Mathias Vorreiter Pedersen
|
d12a76559a
|
C++: Use the new class in 'cpp/invalid-pointer-deref'.
|
2022-09-29 19:54:03 +01:00 |
|
Robert Marsh
|
447c11cd07
|
C++: move ConstantSizeArrayOffByOne.ql to CWE-193
|
2022-09-29 10:56:29 -04:00 |
|
Robert Marsh
|
e46b215c9d
|
C++: fix metadata and result format
|
2022-09-29 10:53:29 -04:00 |
|
Mathias Vorreiter Pedersen
|
70837dbd93
|
C++: Use range analysis to properly deduce the initial 'state2' instead of traversing the AST. Also fix state-passing related to negative states.
|
2022-09-29 13:32:39 +01:00 |
|
Mathias Vorreiter Pedersen
|
4ab676774e
|
C++: Add qhelp to new query.
|
2022-09-28 15:17:08 +01:00 |
|
Mathias Vorreiter Pedersen
|
769ff5c6f3
|
C++: Add 'isAdditionalFlowStep' predicates for both configurations in the product dataflow library and use them to fix missing results in the 'cpp/overrun-write' query.
|
2022-09-28 15:17:04 +01:00 |
|
Mathias Vorreiter Pedersen
|
ccbbb5754e
|
C++: Use range analysis in 'cpp/overrun-write' and accept test changes.
|
2022-09-28 15:14:29 +01:00 |
|
Mathias Vorreiter Pedersen
|
e4305948ef
|
C++: Fix FP on CWE-193 by blocking flow through back-edges of phi nodes.
|
2022-09-27 16:28:03 +01:00 |
|
erik-krogh
|
0f1a8a6f5b
|
deleted unused internal code
|
2022-09-26 20:20:52 +02:00 |
|
Erik Krogh Kristensen
|
c2b5c39436
|
Merge pull request #10507 from erik-krogh/cpp-followMsg
CPP: Make more alert-messages follow the style guide
|
2022-09-24 17:26:11 +02:00 |
|
Dave Bartolomeo
|
3bd456e52d
|
Merge pull request #10565 from github/post-release-prep/codeql-cli-2.11.0
Post-release preparation for codeql-cli-2.11.0
|
2022-09-23 18:13:59 -04:00 |
|
github-actions[bot]
|
6cef0af5df
|
Post-release preparation for codeql-cli-2.11.0
|
2022-09-23 21:01:40 +00:00 |
|
Robert Marsh
|
b93a2b06bf
|
C++: prototype for off-by-one in array-typed field
|
2022-09-23 14:38:06 -04:00 |
|
Robert Marsh
|
c2dfbd47a3
|
Merge pull request #10398 from MathiasVP/further-work-on-buffer-over-queries
C++: Further work on buffer-overflow queries
|
2022-09-23 11:06:32 -04:00 |
|
erik-krogh
|
96b46de7c8
|
update alert-messages based on review feedback
|
2022-09-23 14:53:54 +02:00 |
|
erik-krogh
|
edd03020c2
|
fix the casing in the alert-message of cpp/unclear-array-index-validation
|
2022-09-23 14:48:01 +02:00 |
|
Mathias Vorreiter Pedersen
|
639aaff9c7
|
C++: Add more metadata.
|
2022-09-23 13:47:02 +01:00 |
|
erik-krogh
|
9e4843d53e
|
update the alert-message of cpp/file-may-not-be-closed based on feedback
|
2022-09-23 14:46:00 +02:00 |
|
erik-krogh
|
2351884352
|
update some alert-messages based on review feedback
|
2022-09-23 14:45:59 +02:00 |
|
erik-krogh
|
a3c051bf96
|
add change-note
|
2022-09-23 14:45:59 +02:00 |
|
erik-krogh
|
40bea78186
|
remove more instances of the alert-loc being repeated as a link
|
2022-09-23 14:45:59 +02:00 |
|
erik-krogh
|
d55993a37b
|
autoformat
|
2022-09-23 14:45:59 +02:00 |
|
erik-krogh
|
33165f4f55
|
CPP: update expected output
|
2022-09-23 14:45:59 +02:00 |
|
erik-krogh
|
a30c38f38c
|
CPP: make more alert messages follow the style-guide
|
2022-09-23 14:45:59 +02:00 |
|
Mathias Vorreiter Pedersen
|
ce3654c6ec
|
C++: Make ql-for-ql happy.
|
2022-09-23 13:07:07 +01:00 |
|
Mathias Vorreiter Pedersen
|
162ec2884e
|
C++: Also fix 'OverrunWriteProductFlow.ql'
|
2022-09-23 12:59:27 +01:00 |
|
Mathias Vorreiter Pedersen
|
8056131901
|
C++: Autoformat.
|
2022-09-23 12:26:37 +01:00 |
|
github-actions[bot]
|
f5cf8cffa3
|
Release preparation for version 2.11.0
|
2022-09-22 20:14:12 +00:00 |
|
Mathias Vorreiter Pedersen
|
c4afb3a2b5
|
Merge branch 'main' into further-work-on-buffer-over-queries
|
2022-09-22 16:35:52 +01:00 |
|
Henry Mercer
|
f8f99af8b7
|
Bump the minor version of packs we regularly release
|
2022-09-22 12:14:19 +01:00 |
|
Robert Marsh
|
fcd0bb13b3
|
C++: add paths to ArrayAccessProductFlow
|
2022-09-21 12:37:31 -04:00 |
|
Andrew Eisenberg
|
99e8cb78b0
|
Merge pull request #10496 from aeisenberg/aeisenberg/merge-rc3.7-into-main
Aeisenberg/merge rc3.7 into main
|
2022-09-21 08:09:47 -07:00 |
|
Andrew Eisenberg
|
58e4861b45
|
Merge branch 'main' into rc/3.7
|
2022-09-20 12:43:20 -07:00 |
|
Geoffrey White
|
9ddb485405
|
Merge branch 'main' into cleartext-perf
|
2022-09-20 17:56:18 +01:00 |
|
Mathias Vorreiter Pedersen
|
7c41219376
|
Merge pull request #10438 from MathiasVP/invalid-pointer-deref-query
C++: Add a `cpp/invalid-pointer-deref` query to experimental
|
2022-09-20 10:41:31 +01:00 |
|
Mathias Vorreiter Pedersen
|
02076074ff
|
C++: Add more comments.
|
2022-09-18 12:48:13 +01:00 |
|
Mathias Vorreiter Pedersen
|
78535dc70b
|
C++: Autoformat.
|
2022-09-18 12:02:32 +01:00 |
|