9968 Commits

Author	SHA1	Message	Date
Mathias Vorreiter Pedersen	9d5b8cff2e	C++: Add a barrier to the 'cpp/invalid-pointer-deref' query.	2023-06-24 19:12:03 +01:00
Mathias Vorreiter Pedersen	fba753ce61	C++: Add more test cases to 'cpp/invalid-pointer-deref'.	2023-06-24 18:59:25 +01:00
Robert Marsh	69ee615119	Merge pull request #13515 from MathiasVP/dataflow-fix-for-self-iterators ... C++: Dataflow fix for the self-iterators issue	2023-06-23 13:50:23 -04:00
Mathias Vorreiter Pedersen	600c60af8b	Merge branch 'main' into rdmarsh2/cpp/cobo-array-vars	2023-06-23 10:54:46 +01:00
Mathias Vorreiter Pedersen	79fb6a6079	C++: Accept test changes.	2023-06-22 19:34:05 +01:00
Mathias Vorreiter Pedersen	0839c1aad1	C++: Allow self-flow through indirect parameters.	2023-06-22 19:33:18 +01:00
Mathias Vorreiter Pedersen	da54751d85	C++: Add testcase that demonstrate the need for self-flow out of indirect parameters.	2023-06-22 19:33:13 +01:00
Mathias Vorreiter Pedersen	fe97572f70	C++: Fix strncpy model.	2023-06-22 10:59:12 +01:00
Mathias Vorreiter Pedersen	273e5bc21f	C++: Add testcase demonstrating that the model for 'strncpy' is broken.	2023-06-22 10:59:12 +01:00
Mathias Vorreiter Pedersen	ff3c76c1fa	Update cpp/ql/lib/semmle/code/cpp/ir/dataflow/internal/DataFlowUtil.qll ... Co-authored-by: Jeroen Ketema <93738568+jketema@users.noreply.github.com>	2023-06-22 10:59:12 +01:00
Mathias Vorreiter Pedersen	4f1b2c6194	Update cpp/ql/lib/semmle/code/cpp/ir/dataflow/internal/DataFlowPrivate.qll ... Co-authored-by: Jeroen Ketema <93738568+jketema@users.noreply.github.com>	2023-06-22 10:59:12 +01:00
Mathias Vorreiter Pedersen	a8a04c8588	Update cpp/ql/lib/semmle/code/cpp/ir/dataflow/internal/DataFlowPrivate.qll ... Co-authored-by: Jeroen Ketema <93738568+jketema@users.noreply.github.com>	2023-06-22 10:59:12 +01:00
Mathias Vorreiter Pedersen	6528985a27	C++: Add QLDoc to 'hasAddressOperandAndIndirectionIndex'.	2023-06-22 10:59:12 +01:00
Mathias Vorreiter Pedersen	c7cff373de	C++: Add another testcase with conflation.	2023-06-22 10:59:12 +01:00
Mathias Vorreiter Pedersen	3365ff0d95	C++: Ensure that 'PrintIR' for dataflow still compiles.	2023-06-22 10:59:12 +01:00
Mathias Vorreiter Pedersen	6543da9990	C++: Accept test changes.	2023-06-22 10:59:11 +01:00
Mathias Vorreiter Pedersen	3b0a286d8e	C++: Adjust the rest of the library to the new API.	2023-06-22 10:59:11 +01:00
Mathias Vorreiter Pedersen	6034eb07af	C++: Change the API for indirect operands and indirection instructions to not allow pointer conflation.	2023-06-22 10:59:11 +01:00
Mathias Vorreiter Pedersen	9e9c811eb3	C++: Fix conflation bug in 'getIRRepresentationOfIndirectInstruction'.	2023-06-22 10:59:11 +01:00
Mathias Vorreiter Pedersen	5816f177c9	C++: Add failing test.	2023-06-22 10:59:11 +01:00
Robert Marsh	ba7cb8f4ae	C++: fix range analysis back edge detection for irreducible CFGs	2023-06-21 17:54:52 -04:00
Henry Mercer	5afdaf8fe1	Merge pull request #13525 from github/rc/3.10 ... Merge `rc/3.10` back to `main`	2023-06-21 17:13:36 +01:00
Remco Vermeulen	c0884432e8	Format query	2023-06-20 10:38:08 -07:00
Owen Mansel-Chan	d7c97f8759	Merge pull request #13455 from owen-mc/dataflow/add-flowCheckNodeSpecific ... Dataflow: add language-specific hook for breaking up big step relation	2023-06-20 13:24:26 +01:00
Mathias Vorreiter Pedersen	2b0282ca12	C++: Accept test changes.	2023-06-20 13:05:25 +01:00
Mathias Vorreiter Pedersen	952dbd69e9	C++: Default to one indirection in the case of self iterators.	2023-06-20 12:59:27 +01:00
Robert Marsh	971456c725	C++: add a test for self-valued iterators	2023-06-20 12:59:27 +01:00
github-actions[bot]	18b678e69e	Post-release preparation for codeql-cli-2.13.4	2023-06-20 10:20:05 +00:00
Remco Vermeulen	32d7faa3b8	Account for the signedness of the lesser operand	2023-06-19 16:57:36 -07:00
erik-krogh	2104507cec	add change-note	2023-06-19 23:11:38 +02:00
erik-krogh	5fdfd98a1d	delete the deprecated Conatiner::getURL predicates	2023-06-19 23:11:38 +02:00
Jeroen Ketema	0bb67e45b3	C++: lower the precision of cpp/overrun-write to exclude it from our query suites	2023-06-16 19:07:56 +02:00
Jeroen Ketema	000add206c	Revert "Exclude cpp/overrun-write from cpp-security-extended.qls" ... This reverts commit 3aaa649076.	2023-06-16 19:05:04 +02:00
Jeroen Ketema	9ff5754473	C++: Add cpp/invalid-pointer-def FP test case	2023-06-16 16:48:24 +02:00
Jeroen Ketema	0e68767efc	C++: Add more cpp/invalid-pointer-deref FPs	2023-06-16 15:28:05 +02:00
Jeroen Ketema	3aaa649076	Exclude cpp/overrun-write from cpp-security-extended.qls	2023-06-15 16:50:42 +02:00
Jeroen Ketema	8fb3d838c9	C++: Add FP test case for cpp/invalid-pointer-deref	2023-06-15 10:03:31 +02:00
Owen Mansel-Chan	3ff6d033d3	Rename to neverSkipInPathGraph	2023-06-14 15:29:54 +01:00
Owen Mansel-Chan	5f72ce0935	Add stub implementations of flowCheckNodeSpecific	2023-06-14 14:46:35 +01:00
Owen Mansel-Chan	e0f7437d40	Sync dataflow library	2023-06-14 14:29:56 +01:00
Anders Schack-Mulligen	1b7bbf6320	Merge pull request #13083 from aschackmull/dataflow/typestrengthen ... Dataflow: Strengthen tracked types.	2023-06-09 13:23:30 +02:00
Mathias Vorreiter Pedersen	74ed9f535c	Merge pull request #13406 from MathiasVP/fix-++-problem ... C++: Fix the `++` problem	2023-06-09 11:20:00 +01:00
Anders Schack-Mulligen	d230509905	Dataflow: Address review comments.	2023-06-09 08:37:36 +02:00
Anders Schack-Mulligen	4399138c82	Dataflow: Fix QL4QL alert.	2023-06-09 08:37:36 +02:00
Anders Schack-Mulligen	53f2b8aab0	Dataflow: Sync.	2023-06-09 08:37:36 +02:00
Anders Schack-Mulligen	fd832416d8	Dataflow: Add empty type strengthening predicate for languages without type pruning.	2023-06-09 08:37:35 +02:00
Anders Schack-Mulligen	e8cea79f1d	Dataflow: Sync.	2023-06-09 08:37:35 +02:00
github-actions[bot]	e4be303a23	Release preparation for version 2.13.4	2023-06-08 19:57:37 +00:00
Mathias Vorreiter Pedersen	a357eeedac	C++: Accept test changes.	2023-06-08 12:50:16 +01:00
Mathias Vorreiter Pedersen	afb1129f27	C++: Ensure that postfix crement operations are handled properly in dataflow SSA.	2023-06-08 12:50:05 +01:00