Jonas Jensen
76caad0fb4
Merge pull request #1119 from geoffw0/wprintf2
...
CPP: Better handling of %s/%c/%S/%C in Printf/FormattingFunction.qll
2019-04-01 08:47:20 +02:00
Ziemowit Laski
8a653b9adc
[CPP-340] Fix TooFewArguments.c to actually provide a ()-prototype.
2019-03-29 20:34:49 -07:00
Ziemowit Laski
59a54df149
[CPP-340] cpp/too-many-arguments should remain as cpp/futile-params.
2019-03-29 20:30:40 -07:00
Ziemowit Laski
2ea9f81c7f
[CPP-340] Refer to C coding standard, not C++.
2019-03-29 20:27:25 -07:00
Ziemowit Laski
cb5bbd2197
[CPP-340] When warning about mismatched parameters, follow what C
...
compilers do. Various integral and floating-point types
are treated as mutually implicitly convertible. Remaining
warnings deal with misuse of pointer and array types.
2019-03-29 20:19:45 -07:00
semmle-qlci
ed0ef36427
Merge pull request #1035 from asger-semmle/firebase
...
Approved by xiemaisi
2019-03-29 13:44:02 +00:00
Asger F
4c99c01c1a
JS: review comments
2019-03-29 13:42:22 +00:00
Max Schaefer
e4c4f7a5ae
Update javascript/ql/src/semmle/javascript/DOM.qll
...
Co-Authored-By: asger-semmle <42069257+asger-semmle@users.noreply.github.com >
2019-03-29 13:42:00 +00:00
Max Schaefer
10479eaf4d
Update javascript/ql/src/semmle/javascript/DOM.qll
...
Co-Authored-By: asger-semmle <42069257+asger-semmle@users.noreply.github.com >
2019-03-29 13:40:59 +00:00
Max Schaefer
a0b06c267c
Update javascript/ql/src/semmle/javascript/DOM.qll
...
Co-Authored-By: asger-semmle <42069257+asger-semmle@users.noreply.github.com >
2019-03-29 13:40:46 +00:00
Max Schaefer
62c895de3e
JavaScript: Introduce Type(Back)Tracker::continue predicate.
2019-03-29 11:45:18 +00:00
Geoffrey White
a6e0296c0c
CPP: Be slash/case insensitive.
2019-03-29 11:19:20 +00:00
Geoffrey White
c8caca3305
CPP: Add test cases for %ls, %hs.
2019-03-29 11:19:20 +00:00
Geoffrey White
f5a7d7a035
CPP: Correct a few comments.
2019-03-29 11:19:19 +00:00
Geoffrey White
d22c93f101
CPP: Change note.
2019-03-29 11:19:19 +00:00
Geoffrey White
66e87fc34c
CPP: Detect Microsoft compilations even more reliably.
2019-03-29 11:18:32 +00:00
Geoffrey White
5911699c55
CPP: Clean up some remaining old 'isWideCharDefault' logic that has caused confusion.
2019-03-29 11:18:31 +00:00
Geoffrey White
eef050dd47
CPP: Improve deduction of %S types in FormattingFunction.qll.
2019-03-29 11:18:31 +00:00
Geoffrey White
4a25c37ecc
CPP: Detect Microsoft compilations somewhat more reliably.
2019-03-29 11:18:31 +00:00
Geoffrey White
975a0bbf0d
CPP: Handle %s/%c/%S/%C correctly on non-MS platforms.
2019-03-29 11:18:31 +00:00
Geoffrey White
648cdbab6c
CPP: Add FormattingFunction.getFormatCharType() and test.
2019-03-29 11:18:31 +00:00
Geoffrey White
162c9981bd
CPP: Add some test cases.
2019-03-29 11:18:31 +00:00
Asger F
e90a889f76
JS: Refactor DOM libs to use DataFlow more
2019-03-29 11:15:30 +00:00
Max Schaefer
8bb91bf001
JavaScript: Autoformat.
2019-03-29 08:30:05 +00:00
Max Schaefer
41a3ad3f82
JavaScript: Tweak some regexes in Files.qll.
...
It seems preferable to use the same regex everywhere, even if it's overly general for a few cases.
2019-03-29 08:30:05 +00:00
Max Schaefer
f5279b2a1d
JavaScript: Resolve AMD imports based on absolute paths if there is only a single candidate.
2019-03-29 08:30:05 +00:00
Max Schaefer
b29b3dff4d
JavaScript: Use proper camel-case for AMD-related class names.
2019-03-29 08:14:07 +00:00
Jonas Jensen
752ca94402
Merge pull request #854 from geoffw0/taintedmalloc
...
CPP: Improve TaintedAllocationSize.ql
2019-03-29 09:13:18 +01:00
Jonas Jensen
68a19d7d3e
Merge branch 'master' into taintedmalloc
2019-03-29 09:12:38 +01:00
Max Schaefer
d541bd58fb
JavaScript: Unify (most) overrides of getAnImportedModule.
2019-03-29 08:11:29 +00:00
Max Schaefer
6a78e37d93
JavaScript: Make AMD dependencies Imports.
2019-03-29 08:11:29 +00:00
Jonas Jensen
fcf04abb84
Merge pull request #1120 from jcreedcmu/jcreed/nan
...
C++: Teach range analysis to pay attention to NaNs.
2019-03-29 07:51:27 +01:00
Jason Reed
e52bbe7784
C++: Add change note.
2019-03-28 20:47:03 -04:00
Jason Reed
d03b5bca31
C++: Fix non-private imports.
2019-03-28 20:39:29 -04:00
Jason Reed
9c0be34fd4
C++: Remove accidental redundancy.
2019-03-28 20:39:29 -04:00
Jason Reed
23ee7ee928
C++: Teach range analysis to pay attention to NaNs.
2019-03-28 20:39:29 -04:00
Jonas Jensen
886e52468d
Merge pull request #1177 from geoffw0/qhelp
...
CPP: Add a reference about include optimization for AV Rule 35
2019-03-28 20:44:39 +01:00
Geoffrey White
f358e61719
CPP: Add a reference about include optimization to the qhelp for AV Rule 35.
2019-03-28 16:37:50 +00:00
Geoffrey White
a7e349c2a2
CPP: Add change note.
2019-03-28 15:50:37 +00:00
Geoffrey White
faa23a53be
CPP: Update expected for changes elsewhere.
2019-03-28 15:49:36 +00:00
Geoffrey White
e7c02027f5
CPP: Fix 'BAD'.
2019-03-28 15:49:36 +00:00
Geoffrey White
743b17af50
CPP: Autoformat.
2019-03-28 15:49:36 +00:00
Geoffrey White
0b85966b31
CPP: Fix dubious [old] taint library results involving strlen.
2019-03-28 15:49:36 +00:00
Geoffrey White
8c75e730e4
CPP: Widen TaintedAllocationSize.ql.
2019-03-28 15:49:36 +00:00
Geoffrey White
dab1bba25c
CPP: Add a test of TaintedAllocationSize.
2019-03-28 15:49:36 +00:00
Asger F
4908902f47
JS: Update to use TypeTracker::end()
2019-03-28 15:26:55 +00:00
Asger F
365db0ff1f
JS: track document and dom values using type tracking
2019-03-28 15:24:00 +00:00
semmle-qlci
225c22cca0
Merge pull request #1171 from hvitved/csharp/attributes-named-args
...
Approved by calumgrant
2019-03-28 12:06:13 +00:00
Calum Grant
8012dacd69
Merge pull request #1104 from hvitved/csharp/dispatch/performance
...
C#: Dispatch library performance tweaks
2019-03-28 11:57:19 +00:00
semmle-qlci
35ea746045
Merge pull request #1172 from asger-semmle/hostname-prefix-sanitizer
...
Approved by xiemaisi
2019-03-28 11:55:10 +00:00