Mathias Vorreiter Pedersen
|
2c2f9b9e17
|
C++: Fix comment.
|
2023-07-12 11:59:29 +01:00 |
|
Mathias Vorreiter Pedersen
|
19872d5adf
|
Update cpp/ql/src/experimental/Security/CWE/CWE-193/InvalidPointerDeref.ql
Co-authored-by: Jeroen Ketema <93738568+jketema@users.noreply.github.com>
|
2023-07-12 11:58:07 +01:00 |
|
Mathias Vorreiter Pedersen
|
3d5414b84c
|
Update cpp/ql/src/experimental/Security/CWE/CWE-193/InvalidPointerDeref.ql
Co-authored-by: Jeroen Ketema <93738568+jketema@users.noreply.github.com>
|
2023-07-12 11:57:51 +01:00 |
|
Mathias Vorreiter Pedersen
|
63c5684fbb
|
C++: Join with 'invalidPointerToDerefSource' in 'hasFlowPath' to prevent conflation of paths.
|
2023-07-11 10:24:01 +01:00 |
|
Mathias Vorreiter Pedersen
|
ae8ecc9076
|
C++: Add a final configuration to preserve call contexts between configuration transitions.
|
2023-07-10 13:52:32 +01:00 |
|
Jeroen Ketema
|
fa2ee26379
|
C++: Add more default predicates to product flow
|
2023-07-06 16:06:36 +02:00 |
|
Jeroen Ketema
|
43a8119091
|
Merge pull request #13591 from jketema/pointer-deref-barrier
C++: Add barrier to `InvalidPointerToDerefConfig` in `cpp/invalid-pointer-deref`
|
2023-06-28 17:46:41 +02:00 |
|
Jeroen Ketema
|
14609a9795
|
C++: Add barrier to InvalidPointerToDerefConfig in cpp/invalid-pointer-deref
|
2023-06-28 14:04:45 +02:00 |
|
Mathias Vorreiter Pedersen
|
2c99009c1a
|
Merge pull request #13117 from rdmarsh2/rdmarsh2/cpp/cobo-handle-array-casts
C++: handle cast arrays properly in off-by-one query
|
2023-06-28 09:25:12 +01:00 |
|
Mathias Vorreiter Pedersen
|
f2cbbab419
|
Merge branch 'main' into rdmarsh2/cpp/cobo-handle-array-casts
|
2023-06-27 12:03:42 +01:00 |
|
Mathias Vorreiter Pedersen
|
985650cb04
|
Merge pull request #13559 from MathiasVP/add-barrier-to-invalid-deref-query
C++: Add barriers to `cpp/invalid-pointer-deref`
|
2023-06-27 11:56:58 +01:00 |
|
Mathias Vorreiter Pedersen
|
ef383a135d
|
C++: Prune the set of interesting pointer-arithmetic instructions by another flow.
|
2023-06-26 19:09:43 +01:00 |
|
Mathias Vorreiter Pedersen
|
d68b0605cd
|
C++: Use 'arrayTypeCand' in 'isSourceImpl' instead of checking for array size explicitly.
|
2023-06-26 11:37:35 +01:00 |
|
Mathias Vorreiter Pedersen
|
3b4f2b22d6
|
C++: Fix Code Scanning errors.
|
2023-06-26 11:36:56 +01:00 |
|
Mathias Vorreiter Pedersen
|
b87bf46c30
|
C++: Fix joins.
|
2023-06-26 11:28:32 +01:00 |
|
Mathias Vorreiter Pedersen
|
e32f7d84a5
|
C++: Speed up analysis on 'Samate' by avoiding the 'Variable' column in the dataflow stages of the query.
|
2023-06-25 00:35:43 +01:00 |
|
Mathias Vorreiter Pedersen
|
e0f5c584b9
|
C++: Fix Code Scanning error.
|
2023-06-24 19:38:22 +01:00 |
|
Mathias Vorreiter Pedersen
|
9d5b8cff2e
|
C++: Add a barrier to the 'cpp/invalid-pointer-deref' query.
|
2023-06-24 19:12:03 +01:00 |
|
Mathias Vorreiter Pedersen
|
600c60af8b
|
Merge branch 'main' into rdmarsh2/cpp/cobo-array-vars
|
2023-06-23 10:54:46 +01:00 |
|
Jeroen Ketema
|
272ced6ea5
|
Merge pull request #13374 from jketema/ptr-deref-min
C++: Remove `cpp/invalid-pointer-deref` results duplicating ones with smaller `k`
|
2023-06-05 19:31:24 +02:00 |
|
Jeroen Ketema
|
93215ba7e1
|
Merge pull request #13355 from jketema/ptr-deref-forward
C++: Ensure that the sink instruction occurs last in `cpp/invalid-pointer-deref`
|
2023-06-05 15:56:50 +02:00 |
|
Jeroen Ketema
|
86df424fca
|
C++: Fix query formatting
|
2023-06-05 15:10:54 +02:00 |
|
Jeroen Ketema
|
4a27028768
|
C++: Remove cpp/invalid-pointer-deref results duplicating ones with smaller k
|
2023-06-05 15:03:58 +02:00 |
|
Mathias Vorreiter Pedersen
|
52fb00cac3
|
Merge pull request #12036 from nmouha/patch-1
CPP: Add query for CVE-2022-37454: Integer addition may overflow inside if statement
|
2023-06-05 12:13:27 +01:00 |
|
Jeroen Ketema
|
11182e4ee4
|
C++: Move location where getASuccessor is used to avoid join order problems
|
2023-06-05 12:36:25 +02:00 |
|
Jeroen Ketema
|
8ac1d56a7f
|
C++: Fix join order in cpp/invalid-pointer-deref
|
2023-06-02 16:37:35 +02:00 |
|
Jeroen Ketema
|
ac4933a9cc
|
C++: Ensure that the sink instruction occurs last in cpp/invalid-pointer-deref
This avoids some counter-intuitive paths where we would seemingly jump back
to an earlier instruction, which might actually have been in bounds.
|
2023-06-02 12:36:34 +02:00 |
|
Robert Marsh
|
df4d156a36
|
C++: remove unneeded exists variables
|
2023-06-01 11:28:12 -04:00 |
|
Mathias Vorreiter Pedersen
|
3d9c282f48
|
Merge pull request #13320 from jketema/ptr-deref-dedup
|
2023-05-31 10:12:05 -07:00 |
|
Jeroen Ketema
|
dd30acf1e3
|
C++: Add nodes query predicate to cpp/invalid-pointer-deref
|
2023-05-30 18:43:01 +02:00 |
|
Jeroen Ketema
|
f5ed02a433
|
C++: Take into account the delta at the final sink in cpp/invalid-pointer-deref
|
2023-05-30 18:33:20 +02:00 |
|
Jeroen Ketema
|
a8c76388c0
|
C++: Fix configuration names in comments in cpp/invalid-pointer-deref
|
2023-05-30 18:15:37 +02:00 |
|
Mathias Vorreiter Pedersen
|
f00b29d3d2
|
C++: The small-string optimization commonly used inside 'std::string' is causing a lot of FPs. Let's exclude this for now to reduce the number of results for this query.
|
2023-05-30 07:33:07 -07:00 |
|
Mathias Vorreiter Pedersen
|
0f08642653
|
C++: Fix join in 'pointerArithOverflow0'.
|
2023-05-26 11:16:44 -07:00 |
|
Robert Marsh
|
d18fb646d1
|
C++: handle cast arrays properly in off-by-one query
|
2023-05-26 13:16:21 -04:00 |
|
Robert Marsh
|
6e230e10f8
|
C++: include stack-allocated arrays in off-by-one query
|
2023-05-26 13:04:51 -04:00 |
|
Robert Marsh
|
b2fb2aa0d1
|
Merge pull request #13045 from rdmarsh2/rdmarsh2/cpp/improve-constant-off-by-one
C++: stitch paths and ignore cast arrays in constant off-by-one query
|
2023-05-26 12:47:08 -04:00 |
|
Mathias Vorreiter Pedersen
|
c3fdc83af6
|
C++: Also add an out barrier on all sinks.
|
2023-05-25 12:23:50 -07:00 |
|
Mathias Vorreiter Pedersen
|
ebc1d5feff
|
Merge branch 'main' into rdmarsh2/cpp/improve-constant-off-by-one
|
2023-05-24 16:07:08 -07:00 |
|
Mathias Vorreiter Pedersen
|
298013a57e
|
C++: Add in-barrier on sources to reduce duplication.
|
2023-05-24 16:02:27 -07:00 |
|
Mathias Vorreiter Pedersen
|
64d7b4923d
|
C++: Prune flow states based on 'PointerArithmeticToDerefConfig'.
|
2023-05-24 16:02:17 -07:00 |
|
Mathias Vorreiter Pedersen
|
0dfc9b996d
|
C++: Promote 'cpp/overrun-write' out of experimental.
|
2023-05-23 14:57:42 -07:00 |
|
Mathias Vorreiter Pedersen
|
81dbfecbfc
|
C++: Promote the product-dataflow library out of experimental.
|
2023-05-23 09:48:50 -07:00 |
|
Robert Marsh
|
4ed7450689
|
C++: remove unneeded pragma
|
2023-05-22 11:09:44 -04:00 |
|
Robert Marsh
|
604affdeb0
|
C++: autoformat
|
2023-05-22 09:31:39 -04:00 |
|
Robert Marsh
|
bf07b0f97b
|
C++: fix cxartesian product in constant off-by-one query
|
2023-05-19 18:32:09 -04:00 |
|
Mathias Vorreiter Pedersen
|
a77c62473e
|
C++: Reduce code-duplication in 'cpp/overrun-write'.
|
2023-05-18 13:23:15 +01:00 |
|
Nicky Mouha
|
27519ce3ea
|
Create IfStatementAdditionOverflow.qhelp
|
2023-05-17 15:27:19 -04:00 |
|
Nicky Mouha
|
5c6fc2ff01
|
Update IfStatementAdditionOverflow.ql
|
2023-05-17 15:18:52 -04:00 |
|
Jeroen Ketema
|
d1efffe492
|
Merge branch 'main' into deref-size
|
2023-05-17 17:13:49 +02:00 |
|