Alex Eyers-Taylor
|
949b0a2613
|
CPP:Move import to start of file
|
2023-08-23 13:39:29 +01:00 |
|
Alex Eyers-Taylor
|
7d99d61662
|
CPP: Convert SQL tainted to IR dataflow.
|
2023-08-23 13:39:29 +01:00 |
|
Jonas Jensen
|
a002f59f58
|
C++: Undo BadlyBoundedWrite change from #13929
This rolls back the query change, ensuring that there is no need for a
change note.
|
2023-08-18 13:48:58 +02:00 |
|
Jeroen Ketema
|
d0e7354a1b
|
C++: Only consider the maximum buffer size for badly bounded write
|
2023-08-09 12:30:00 +02:00 |
|
Anders Schack-Mulligen
|
c01a494ea5
|
C/C++: Don't force-include XxeFlowStateTransformer steps in XXE.ql.
|
2023-07-19 11:41:15 +02:00 |
|
Jeroen Ketema
|
52ab215560
|
C++/Swift: Remove none() dataflow configuration predicates
These now have default implementations that are also `none()`
|
2023-07-12 23:49:29 +02:00 |
|
Jeroen Ketema
|
fa2ee26379
|
C++: Add more default predicates to product flow
|
2023-07-06 16:06:36 +02:00 |
|
Mathias Vorreiter Pedersen
|
f714de0040
|
Merge pull request #13610 from MathiasVP/promote-overrun-write-again
C++: Move `cpp/overrun-write` back to `medium` precision
|
2023-07-05 13:39:12 +01:00 |
|
Mathias Vorreiter Pedersen
|
95ddc01ccb
|
Merge pull request #13502 from rvermeulen/rvermeulen/compare-using-integer-precision
C++: Account for the signedness of the lesser operand in `cpp/comparison-with-wider-type`
|
2023-06-30 17:44:28 +01:00 |
|
Mathias Vorreiter Pedersen
|
67e3ef7b09
|
C++: Revert the barrier added in #13623.
|
2023-06-30 09:39:37 +01:00 |
|
Mathias Vorreiter Pedersen
|
59d9c6e3f2
|
C++: Use the pruning stage in the product-flow configuration.
|
2023-06-29 16:50:57 +01:00 |
|
Mathias Vorreiter Pedersen
|
285112f4cd
|
C++: Move 'cpp/overrun-write' back to medium precision.
|
2023-06-29 08:18:47 +01:00 |
|
Remco Vermeulen
|
c0884432e8
|
Format query
|
2023-06-20 10:38:08 -07:00 |
|
Remco Vermeulen
|
32d7faa3b8
|
Account for the signedness of the lesser operand
|
2023-06-19 16:57:36 -07:00 |
|
Jeroen Ketema
|
0bb67e45b3
|
C++: lower the precision of cpp/overrun-write to exclude it from our query suites
|
2023-06-16 19:07:56 +02:00 |
|
erik-krogh
|
a4ef8619c6
|
delete old deprecations
|
2023-06-08 10:10:21 +02:00 |
|
Mathias Vorreiter Pedersen
|
960e6521a4
|
Revert "C++: Whitespace commit to make qhelp show up in diff."
This reverts commit ec192d621c.
|
2023-05-25 15:21:09 -07:00 |
|
Mathias Vorreiter Pedersen
|
ec192d621c
|
C++: Whitespace commit to make qhelp show up in diff.
|
2023-05-24 16:13:42 -07:00 |
|
Mathias Vorreiter Pedersen
|
e1223d0b21
|
C++: Add security severity.
|
2023-05-23 15:01:33 -07:00 |
|
Mathias Vorreiter Pedersen
|
0dfc9b996d
|
C++: Promote 'cpp/overrun-write' out of experimental.
|
2023-05-23 14:57:42 -07:00 |
|
Kasper Svendsen
|
c46898cb75
|
C++: Make implicit this receivers explicit
|
2023-05-09 15:35:54 +02:00 |
|
Mathias Vorreiter Pedersen
|
8fef101432
|
C++: Fix missing result and accept test changes.
|
2023-04-06 10:41:08 +01:00 |
|
Anders Schack-Mulligen
|
72415c7c2c
|
C++: Rename references.
|
2023-03-23 13:06:19 +01:00 |
|
Ed Minnix
|
2d5944fb0e
|
Refactor DataFlow configurations to use "Config" naming convention
|
2023-03-19 17:44:07 -04:00 |
|
Mathias Vorreiter Pedersen
|
84a61d1e02
|
C++: No need for 'matches'.
|
2023-03-09 15:36:26 +00:00 |
|
Mathias Vorreiter Pedersen
|
2931e5dea8
|
C++: Reduce duplication by blocking flow into sources (since we'll already be considering flow starting at those sources) and out of sinks (since we'll already be alerting on this sink if it's relevant).
|
2023-03-09 14:59:13 +00:00 |
|
Mathias Vorreiter Pedersen
|
03ba7ea851
|
C++: Move the weird global property 'not sqlite_encryption_used()' from the sink definition to the source definition. The dataflow library starts tracking flow from the sources, so it's better to to rule out the entire database in the source definition than in the sink definition.
|
2023-03-09 14:59:13 +00:00 |
|
Mathias Vorreiter Pedersen
|
7819a7d2bc
|
C++: Severely restrict the set of sinks in 'cpp/cleartext-storage-database'. This reduces the number of sinks considered on the 'sysown/proxysql' from > 62000 sinks to ~1000 sinks.
|
2023-03-09 14:59:13 +00:00 |
|
Jeroen Ketema
|
30cbc91092
|
C++: Update XXE XML query with DataFlow::ConfigSig
|
2023-03-08 15:04:53 +01:00 |
|
Jeroen Ketema
|
8253f2d343
|
C++: Update UnsafeDaclSecurityDescriptor with DataFlow::ConfigSig
|
2023-03-08 15:04:53 +01:00 |
|
Jeroen Ketema
|
7fe1a9431c
|
C++: Update PotentiallyExposedSystemData with DataFlow::ConfigSig
|
2023-03-08 15:04:53 +01:00 |
|
Jeroen Ketema
|
53aa34bdd3
|
C++: Update UnsafeCreateProcessCall with DataFlow::ConfigSig
|
2023-03-08 15:04:53 +01:00 |
|
Mathias Vorreiter Pedersen
|
a247a8b3ea
|
Merge branch 'main' into mathiasvp/replace-ast-with-ir-use-usedataflow
|
2023-03-08 13:35:35 +00:00 |
|
Jeroen Ketema
|
5391b13db9
|
C++: Make dataflow configuration modules private in qll files
|
2023-03-08 09:18:09 +01:00 |
|
Jeroen Ketema
|
13bdd9c0c6
|
C++: Fix query compliation
Apparently some queries we skipped in the testing I did locally.
|
2023-03-07 19:16:10 +01:00 |
|
Jeroen Ketema
|
57c5d5f2c7
|
C++: Add QLDoc on configuration modules where the original class had one
|
2023-03-07 19:01:05 +01:00 |
|
Jeroen Ketema
|
0c39d1e5ca
|
C++: Fix query formatting
|
2023-03-07 18:55:58 +01:00 |
|
Jeroen Ketema
|
2eb2e11ef7
|
C++: Fix query compilation
|
2023-03-07 18:53:07 +01:00 |
|
Jeroen Ketema
|
fb57914751
|
C++: Convert a number of data flow based queries to use ConfigSig
|
2023-03-07 18:21:52 +01:00 |
|
Mathias Vorreiter Pedersen
|
ce02de48a0
|
C++: Fix Code Scanning error.
|
2023-03-07 14:40:36 +00:00 |
|
Mathias Vorreiter Pedersen
|
b054b9c5cd
|
Merge pull request #12408 from jketema/merge-main
C++: use-use dataflow merge main
|
2023-03-07 13:05:30 +00:00 |
|
Paolo Tranquilli
|
c4fd39ec3f
|
C++: fix example code for FilePermissions.qll
|
2023-03-07 13:50:20 +01:00 |
|
Jeroen Ketema
|
9ec479a2a0
|
C++: Update queries to use DataFlow::ConfigSig
|
2023-03-07 10:15:11 +01:00 |
|
Jeroen Ketema
|
47930f94e2
|
Merge remote-tracking branch 'upstream/main' into merge-main
|
2023-03-06 15:20:39 +01:00 |
|
Mathias Vorreiter Pedersen
|
8836cbae5b
|
C++: Make sure we use an indirect sink only for the sinks that receive a
pointer to the data. Also fix a bug where we used 'asExpr' instead
of 'asIndirectExpr'.
|
2023-03-06 11:22:58 +00:00 |
|
Mathias Vorreiter Pedersen
|
907e6299a4
|
C++: Convert 'ExecTainted' to use the new refactored dataflow library.
|
2023-03-03 14:41:29 +00:00 |
|
Mathias Vorreiter Pedersen
|
075a83c987
|
Stage stats before on 'ExecTainted.ql' before:
```
1 10 1 Fwd 609968 1398 -1 94 769936 ExecTaintConfiguration
2 15 1 Rev 239464 774 -1 52 320663 ExecTaintConfiguration
3 20 2 Fwd 205794 511 650 39 18576546 ExecTaintConfiguration
4 25 2 Rev 161966 351 428 39 13639502 ExecTaintConfiguration
5 30 3 Fwd 31889 322 791 39 5982574 ExecTaintConfiguration
6 35 3 Rev 30068 303 661 39 4181421 ExecTaintConfiguration
7 40 4 Fwd 24031 232 1432 39 14725618 ExecTaintConfiguration
8 45 4 Rev 21506 219 907 39 5962780 ExecTaintConfiguration
9 50 5 Fwd 20149 204 1527 38 8350094 ExecTaintConfiguration
10 55 5 Rev 20102 204 1472 38 7515307 ExecTaintConfiguration
11 60 6 Fwd 19950 200 904 33 9673369 ExecTaintConfiguration
12 65 6 Rev 18431 200 901 33 7030957 ExecTaintConfiguration
```
Stage stats after:
```
1 10 1 Fwd 368610 699 -1 65 445199 ExecTaintConfiguration
2 15 1 Rev 112848 336 -1 23 150522 ExecTaintConfiguration
3 20 2 Fwd 91528 219 270 22 4120713 ExecTaintConfiguration
4 25 2 Rev 66017 141 159 22 2657398 ExecTaintConfiguration
5 30 3 Fwd 12161 119 208 22 792468 ExecTaintConfiguration
6 35 3 Rev 11640 111 167 22 569193 ExecTaintConfiguration
7 40 4 Fwd 11423 109 331 22 1203871 ExecTaintConfiguration
8 45 4 Rev 10851 107 323 22 904017 ExecTaintConfiguration
9 50 5 Fwd 10694 107 763 22 2428404 ExecTaintConfiguration
10 55 5 Rev 10332 104 735 22 2355698 ExecTaintConfiguration
11 60 6 Fwd 10302 104 729 22 5772762 ExecTaintConfiguration
12 65 6 Rev 9482 102 725 22 4020951 ExecTaintConfiguration
```
|
2023-02-28 15:05:29 +00:00 |
|
Mathias Vorreiter Pedersen
|
8dd0bdbdb0
|
C++: Rename 'fst' and 'snd' to 'incoming' and 'outgoing'.
|
2023-02-28 15:05:18 +00:00 |
|
Mathias Vorreiter Pedersen
|
354a12c906
|
C++: Fix queries. Since there's no longer indirect -> direct flow in
taint-tracking we need to make sure the affected sink definitions also
handle indirect flow.
|
2023-02-27 14:57:36 +00:00 |
|
Jeroen Ketema
|
ecdeb9a970
|
C++: Revert semmle.code.cpp.dataflow to its old state
While here make sure all queries and tests use IR dataflow when appropriate.
|
2023-02-10 14:21:44 +01:00 |
|