9282 Commits

Author	SHA1	Message	Date
Mathias Vorreiter Pedersen	748a345e7f	C++: Add a test to reveal missing or spurious types on dataflow nodes.	2023-02-14 08:58:29 +00:00
Anders Schack-Mulligen	e877b161d8	Merge pull request #12124 from hvitved/dataflow/stage1-dispatch ... Data flow: Call context virtual dispatch pruning in stage 1	2023-02-13 13:13:43 +01:00
Jeroen Ketema	b9200c92d5	C++: Address review comments	2023-02-13 11:14:48 +01:00
Jeroen Ketema	3dfe0adf0a	C++: Fix formatting	2023-02-13 09:45:23 +01:00
Jeroen Ketema	3482158fee	C++: Add semmle.code.cpp.dataflow.new	2023-02-13 09:38:23 +01:00
Jeroen Ketema	996eb6c63c	C++: Fix Ql-for-QL warnings	2023-02-13 09:22:31 +01:00
Tom Hvitved	f7a5a33474	Address review comment	2023-02-13 09:01:15 +01:00
Mathias Vorreiter Pedersen	378484ec01	Merge pull request #12149 from MathiasVP/fewer-flowthroughs ... C++: Fix spurious flow-through	2023-02-10 18:45:46 +00:00
Jeroen Ketema	7bd28183ba	Merge pull request #12151 from jketema/remove-experimental-dataflow ... C++: Remove experimental copy of the use-use IR dataflow library	2023-02-10 18:08:14 +01:00
Mathias Vorreiter Pedersen	168202dbf7	Update cpp/ql/test/library-tests/dataflow/dataflow-tests/has-parameter-flow-out.ql ... Co-authored-by: Jeroen Ketema <93738568+jketema@users.noreply.github.com>	2023-02-10 16:36:40 +00:00
Jeroen Ketema	5f33827eca	C++: Update test results	2023-02-10 17:10:52 +01:00
Jeroen Ketema	b023c6bb23	C++: Remove experimental copy of the use-use IR dataflow library	2023-02-10 16:20:33 +01:00
Jeroen Ketema	1a83b712a0	C++: Add change note	2023-02-10 15:27:49 +01:00
Mathias Vorreiter Pedersen	9a8b3bad31	C++: Respond to PR reviews.	2023-02-10 13:56:19 +00:00
Jeroen Ketema	ecdeb9a970	C++: Revert semmle.code.cpp.dataflow to its old state ... While here make sure all queries and tests use IR dataflow when appropriate.	2023-02-10 14:21:44 +01:00
Mathias Vorreiter Pedersen	5bd7589109	C++: Fix spurious flow though and accept test changes.	2023-02-10 12:42:40 +00:00
Mathias Vorreiter Pedersen	faf9fd6253	C++: Add a testcase (and a new test) to test flow through functions.	2023-02-10 12:40:29 +00:00
Jeroen Ketema	ffbaef8771	C++: Update for test changes	2023-02-10 11:23:19 +01:00
Mathias Vorreiter Pedersen	e1aef3127c	Merge branch 'main' into mathiasvp/replace-ast-with-ir-use-usedataflow	2023-02-10 09:23:37 +00:00
Jeroen Ketema	8f15abc285	Merge pull request #12146 from jketema/global-indirect ... C++: Do not mark global indirect flow as spurious in dataflow tests	2023-02-10 10:21:04 +01:00
Jeroen Ketema	350fb89ebf	C++: Also mention all locations in the AST case	2023-02-10 09:49:24 +01:00
Mathias Vorreiter Pedersen	9aa9187dd7	Merge pull request #12141 from MathiasVP/fix-multiple-out-nodes ... C++: Deduplicate `OutNode`s	2023-02-10 08:39:16 +00:00
Mathias Vorreiter Pedersen	4719fd5235	C++: Accept more test changes.	2023-02-10 08:38:46 +00:00
Jeroen Ketema	12930c68fb	C++: Do not mark global indirect flow as spurious in dataflow tests	2023-02-10 09:29:27 +01:00
Mathias Vorreiter Pedersen	981c976754	C++: Expand comments.	2023-02-09 17:10:07 +00:00
Mathias Vorreiter Pedersen	6b851d0529	C++: Fix an inconsistency with too many out nodes.	2023-02-09 16:55:19 +00:00
Mathias Vorreiter Pedersen	7439de37a3	C++: Add a new test that demonstrates multiple out nodes.	2023-02-09 16:23:32 +00:00
Jeroen Ketema	9d6098af15	Merge pull request #12004 from jketema/single-use ... C++: Map operand nodes that are only used once onto the related instruction node	2023-02-09 17:18:39 +01:00
Jeroen Ketema	e4c211df2d	C++: Address review comments	2023-02-09 11:58:41 +01:00
Mathias Vorreiter Pedersen	946e301ed6	Merge pull request #12079 from rdmarsh2/rdmarsh2/use-use-taint-test-reads ... C++: allow read steps at the sink in IR taint test	2023-02-08 15:08:00 +00:00
Mathias Vorreiter Pedersen	825628675e	C++: Only allow implicit reads of fields that exist on the sink node's type.	2023-02-08 13:08:22 +00:00
Tom Hvitved	8e8897b08b	Data flow: Sync files	2023-02-07 15:15:04 +01:00
Jeroen Ketema	20ce4cdf91	C++: Map operand nodes that are only used once onto the related instruction node	2023-02-07 14:17:54 +01:00
Mathias Vorreiter Pedersen	746f04bafc	C++: Construct fewer strings.	2023-02-07 11:44:32 +00:00
Mathias Vorreiter Pedersen	ff29356ae9	Merge pull request #12106 from MathiasVP/fewer-strings ... C++: Replace `toUpperCase().matches("...")` with case-insensitive `regexpMatch`	2023-02-07 11:31:36 +00:00
Jeroen Ketema	1c35109675	C++: Add experimental tag to experimental query	2023-02-06 20:31:26 +01:00
Jeroen Ketema	868f07bc91	Merge branch 'main' into ihsinme-patch-102	2023-02-06 20:16:53 +01:00
ihsinme	065ca3c227	Update DivideByZeroUsingReturnValue.ql	2023-02-06 19:42:46 +03:00
Mathias Vorreiter Pedersen	4016299aa8	Update cpp/ql/lib/semmle/code/cpp/security/Encryption.qll ... Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com>	2023-02-06 15:55:15 +00:00
Jeroen Ketema	d108185ec7	Merge pull request #12102 from jketema/fix-typos ... C++: Fix some typos in the use-use dataflow code	2023-02-06 16:50:48 +01:00
Mathias Vorreiter Pedersen	1c9a526afa	C++: Construct fewer strings.	2023-02-06 15:18:15 +00:00
Jeroen Ketema	30952f6a24	C++: Fix some typos in the use-use dataflow code	2023-02-06 11:56:59 +01:00
Mathias Vorreiter Pedersen	00fe448e3a	Merge pull request #12072 from aschackmull/dataflow/stage3-perf ... Dataflow: Fix join in `fwdFlowRead` (take 2)	2023-02-06 10:43:11 +00:00
Mathias Vorreiter Pedersen	316eecc064	C++: Accept test changes.	2023-02-06 09:09:00 +00:00
Mathias Vorreiter Pedersen	559c799309	C++: Also recognize iterators obtained via a function that doesn't receive the container as a qualiifer.	2023-02-03 21:43:21 +00:00
Mathias Vorreiter Pedersen	77250af444	Merge pull request #12050 from MathiasVP/flow-out-of-iterators-3	2023-02-03 18:43:37 +00:00
Mathias Vorreiter Pedersen	09a7573163	C++: Add comments to the new FP.	2023-02-03 17:09:19 +00:00
Mathias Vorreiter Pedersen	ae774a6b95	C++: Add a test with an indirect source.	2023-02-03 16:59:54 +00:00
Robert Marsh	ad8e82ac65	C++: allow read steps at the sink in IR taint test	2023-02-03 11:38:49 -05:00
Mathias Vorreiter Pedersen	0a6f914bfc	C++: Make the documentation on 'isSink' less ambiguous.	2023-02-03 14:09:01 +00:00