Jonas Jensen
1b849dbf0e
C++: More principled macro exclusion
...
We no longer exclude macros based on their name, which means we can now
find results inside arguments to the `likely` macro in Linux (except
that Linux is compiled with `-fno-strict-overflow`).
2019-11-13 14:22:38 +01:00
Jonas Jensen
db33053422
C++: Add test for macro exclusions
2019-11-13 14:21:29 +01:00
semmle-qlci
b11a7427c2
Merge pull request #2270 from erik-krogh/reflectiveExpr
...
Approved by max-schaefer
2019-11-13 13:08:40 +00:00
Jonas Jensen
8d79634f8c
C++: Factor out isFromMacroDefinition predicate
...
This trick for excluding elements from macro bodies but not macro
arguments looks promising and should probably be used much more. With
this commit, it's now easy to use from any query.
Performance is still good because the new predicate gets appropriately
magiced.
2019-11-13 14:07:33 +01:00
Jonas Jensen
d2009c53dc
C++: Support GCC flags making ptr overflow defined
2019-11-13 14:07:33 +01:00
Jonas Jensen
463bf964a9
C++: Test showing FP with -fno-strict-overflow
2019-11-13 14:07:33 +01:00
Jonas Jensen
8ed991759c
C++: Rename PointerWrapAround to PointerOverflow
...
Overflow was the terminology I found for this in the C standard (C11
6.5.6-8).
2019-11-13 14:06:58 +01:00
Jonas Jensen
bd08c64933
C++: Apply my own review comments from #2218
2019-11-13 14:05:23 +01:00
Geoffrey White
abcf9e0d78
CPP: Autoformat.
2019-11-13 12:35:26 +00:00
Geoffrey White
86bea78413
CPP: Fix bad merge.
2019-11-13 12:34:35 +00:00
Tom Hvitved
9c9744620e
Merge pull request #2291 from calumgrant/cs/assembly-prefix
...
C#: Fix prefixing assembly IDs to type IDs
2019-11-13 13:25:15 +01:00
Max Schaefer
f804d316d7
Update javascript/ql/src/Security/CWE-020/IncompleteUrlSchemeCheck.ql
...
Co-Authored-By: Esben Sparre Andreasen <esbena@github.com >
2019-11-13 12:24:19 +00:00
Calum Grant
b65ab15d46
C#: Delete unused file.
2019-11-13 12:16:05 +00:00
alexet
2570f81aa7
Suites: Fix suite definition.
2019-11-13 12:03:13 +00:00
Geoffrey White
93b4985532
CPP: Backticks.
2019-11-13 10:42:28 +00:00
Max Schaefer
4fe09e8e73
JavaScript: Sort new query change notes alphabetically.
2019-11-13 10:27:18 +00:00
Max Schaefer
ab583b7994
JavaScript: Add query IncompleteUrlSchemeCheck.ql.
2019-11-13 10:27:18 +00:00
Calum Grant
3b775a9ecb
Merge pull request #2095 from hvitved/csharp/type-unification
...
C#: Type unification library
2019-11-13 09:48:59 +00:00
Geoffrey White
a5d2fbd25d
CPP: Resolve remaining comments from the original PR.
2019-11-13 09:46:09 +00:00
Max Schaefer
50cde34878
Merge pull request #181 from sauyon/hardcoded-sensitive
...
HardcodedCredentials: Use SensitiveActions
2019-11-13 09:21:45 +00:00
Max Schaefer
ed95cdea56
Merge pull request #183 from sauyon/regexp-improvements
...
OpenUrlRedirect: Use the regexp library for RegexpCheck
2019-11-13 09:20:19 +00:00
Max Schaefer
899ae102b0
Merge pull request #182 from sauyon/fix-newline
...
autobuilder: Add a missing newline to the usage blurb
2019-11-13 09:19:22 +00:00
semmle-qlci
f34025c5a0
Merge pull request #2306 from Semmle/revert-2247-odasa-8149
...
Approved by asger-semmle
2019-11-13 09:04:22 +00:00
Jonas Jensen
8a9ee8fcdd
Merge pull request #2300 from geoffw0/names
...
CPP: Rename/relocate some queries and libraries
2019-11-13 09:11:24 +01:00
Sauyon Lee
3b39f5c2e1
OpenUrlRedirect: Use the regexp library for RegexpCheck
2019-11-12 15:14:05 -08:00
Sauyon Lee
2ba680ef4c
autobuilder: Add a missing newline to the usage blurb
2019-11-12 15:11:03 -08:00
Sauyon Lee
4e4d94da7b
Merge pull request #180 from max/receiver-deref-update
...
Conservatively handle indirect updates through pointer-type receiver.
2019-11-12 17:56:13 -05:00
Max Schaefer
155cea7b5b
Revert "JavaScript: Improve double-escaping query"
2019-11-12 22:54:12 +00:00
Sauyon Lee
50a008900c
HardcodedCredentials: Use SensitiveActions
2019-11-12 14:08:44 -08:00
Robert Marsh
3de590763e
C++: autoformat
2019-11-12 13:57:49 -08:00
yh-semmle
429c307832
Merge pull request #2304 from aschackmull/java/rangeanalysis-integral-fix
...
Java: Fix range analysis bug in integral inequality bounds.
2019-11-12 16:33:12 -05:00
yh-semmle
6a16eb838d
Merge pull request #2305 from aschackmull/java/overflowcheck-conditionalexpr
...
Java: Add ConditionalExpr to overflow candidate pattern.
2019-11-12 16:32:09 -05:00
Dave Bartolomeo
5b33255e44
Merge pull request #1585 from rdmarsh2/rdmarsh/cpp/hasGlobalOrStdName
...
C++: add Declaration.hasGlobalOrStdName()
2019-11-12 12:00:17 -07:00
Robert Marsh
47f87c214c
Merge branch 'master' into rdmarsh/cpp/ir-constructor-side-effects
2019-11-12 10:31:04 -08:00
Geoffrey White
db26b85fa3
CPP: Fix test (I missed a file in the move).
2019-11-12 18:25:20 +00:00
Robert Marsh
9554513cd6
autoformat
2019-11-12 10:16:01 -08:00
Ziemowit Laski
5cc92b7502
[CPP-418] Mention that GNU vector initializers are syntactically
...
similar to array initializers.
2019-11-12 17:35:50 +00:00
Ziemowit Laski
d0069fcacd
[CPP-418] Literals.
2019-11-12 17:35:50 +00:00
Ziemowit Laski
20e28b8a97
[CPP-418] Reformat.
2019-11-12 17:35:50 +00:00
Ziemowit Laski
2baa748390
Address further review comments.
2019-11-12 17:35:50 +00:00
Ziemowit Laski
faf4342d8e
[CPP-418] Update references to BuiltInOperationBuiltInOffsetOf and __builtin_offsetof.
2019-11-12 17:35:50 +00:00
Ziemowit Laski
6eac51dba4
[CPP-418] Address review comments.
2019-11-12 17:35:49 +00:00
Ziemowit Laski
e2d5a82735
[CPP-418] Expressions.
2019-11-12 17:35:49 +00:00
Ziemowit Laski
1f337e943f
[CPP-418] Typo.
2019-11-12 17:33:08 +00:00
Ziemowit Laski
98eca4743a
[CPP-418] Calls, casts, assignments and other goodness.
2019-11-12 17:33:08 +00:00
Ziemowit Laski
e647dc341a
[CPP-418] Fill in examples for ErroneousType, UnknownType, and
...
assorted complex/imaginary arithmetic operations.
2019-11-12 17:33:08 +00:00
Ziemowit Laski
09f538a4bf
[CPP-418] Merge detritus.
2019-11-12 17:33:08 +00:00
Ziemowit Laski
f255977027
[CPP-418] Some more complex numbers, vectors.
2019-11-12 17:33:08 +00:00
Ziemowit Laski
89655612b0
[CPP-418] Tweak vector initializer syntax.
2019-11-12 17:33:08 +00:00
Ziemowit Laski
ecb700c8f4
[CPP-418] Some assignments and call expressions. Some could not be divined.
2019-11-12 17:33:08 +00:00
