hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-17 01:03:14 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
main
codeql/cpp/ql/test/query-tests/Security/CWE
History
Mingjie Shen 25a46a82ba C++: Use appropriate sizeof in CWE-119 memcpy tests 
Signed-off-by: Mingjie Shen <shen497@purdue.edu>
2025-11-27 05:15:51 +00:00
..
CWE-014
C++: Make the tests more realistic by actually using the local variable for something. Otherwise it looks like a zero-initialization of a buffer, which the query now tries to exclude.
2021-02-26 09:19:05 +01:00
CWE-022
C++: Accept qltest changes.
2025-03-14 10:51:28 +01:00
CWE-078
C++: Add some test cases.
2025-02-20 15:21:25 +00:00
CWE-079/semmle/CgiXss
C++: Accept test changes in paths.
2024-04-16 11:09:22 +01:00
CWE-089/SqlTainted
C++: Pretty print MaD ids in test output
2025-06-26 23:38:32 +02:00
CWE-114
C++: Accept test changes.
2024-04-18 12:33:27 +01:00
CWE-119
C++: Use appropriate sizeof in CWE-119 memcpy tests
2025-11-27 05:15:51 +00:00
CWE-120/semmle
C++: Fix an issue with padding.
2025-02-26 17:43:25 +00:00
CWE-121/semmle/tests
C++: Make the tests use more repetitions.
2022-10-06 09:14:24 +01:00
CWE-129
C++: Accept test changes.
2024-10-08 10:08:14 +01:00
CWE-131/NoSpaceForZeroTerminator
C++: Fix ODR violations in tests
2024-10-08 20:09:31 +02:00
CWE-134
C++: Accept test changes.
2025-08-02 16:43:19 +01:00
CWE-190
C++: Fix ODR violations in tests
2024-10-08 20:09:31 +02:00
CWE-191/UnsignedDifferenceExpressionComparedZero
C++: Accept test changes.
2024-07-16 13:05:45 +01:00
CWE-193
C++: Accept qltest changes.
2025-03-14 10:51:28 +01:00
CWE-197/SAMATE/IntegerOverflowTainted
C++: Accept test changes.
2023-11-16 13:54:13 +00:00
CWE-242/semmle/tests
C++: Fix pointer/pointee conflation and handle flow through '++' when tracking indirect flow.
2022-10-24 14:23:43 +02:00
CWE-253
CPP: update expected output
2022-09-23 14:45:59 +02:00
CWE-290/semmle/AuthenticationBypass
C++: Accept test changes.
2024-04-18 12:33:27 +01:00
CWE-295
C++: Accept more test changes.
2025-08-13 17:46:06 +02:00
CWE-311/semmle/tests
C++: Accept qltest changes.
2025-03-14 10:51:28 +01:00
CWE-313
[TEST] C++: CleartextSqliteDatabase: add new test
2025-08-15 12:00:26 +02:00
CWE-319/UseOfHttp
C++: Accept query test 'toString' improvements.
2025-05-16 21:01:55 +01:00
CWE-326
C++: Map operand nodes that are only used once onto the related instruction node
2023-02-07 14:17:54 +01:00
CWE-327
C++: Repair funcion call in a function call.
2021-06-17 14:33:16 +01:00
CWE-367/semmle
C++: Add test annotation
2023-12-04 17:53:08 +01:00
CWE-416/semmle/tests
C++: Add use-after-free FP tests
2025-04-28 14:13:14 +02:00
CWE-428
C++: Typos.
2022-02-22 14:33:11 +00:00
CWE-457/semmle
C++: Add GOOD annotation
2025-09-12 10:29:27 +02:00
CWE-468/semmle
CPP: update expected output
2022-09-23 14:45:59 +02:00
CWE-497
C++: Accept test changes.
2025-08-02 16:43:19 +01:00
CWE-570
C++: Add basic modeling of functions that don't throw
2024-08-26 09:37:44 +02:00
CWE-611
C++: Accept test changes.
2025-08-02 16:43:19 +01:00
CWE-676
C++: Ignore gets'es with incorrect parameter counts
2024-06-04 11:15:07 +02:00
CWE-704
C++: Do not alert on unreachable code in cpp/incorrect-string-type-conversion
2025-07-10 11:49:12 +02:00
CWE-732
CPP: update expected output
2022-09-23 14:45:59 +02:00
CWE-764/semmle/tests
C++: Add mutex test case.
2021-03-30 15:39:21 +01:00
CWE-772
update the alert-message of cpp/file-may-not-be-closed based on feedback
2022-09-23 14:46:00 +02:00
CWE-807/semmle/TaintedCondition
C++: Accept test changes.
2024-04-18 12:33:27 +01:00
CWE-835/semmle/InfiniteLoopWithUnsatisfiableExitCondition
CPP: Add the Semmle security tests.
2018-11-26 17:52:34 +00:00
CWE-843
C++: Accept test changes.
2024-04-18 12:33:27 +01:00
README.md
C++: Subsection header.
2021-09-13 14:10:17 +01:00

README.md

CWE specific security tests

Source from the Juliet Test Suite

Some of the the files in these tests contain source code copied or derived from the public domain "Juliet Test Suite for C/C++" (provided by NIST / SAMATE Team at https://samate.nist.gov/SARD/testsuite.php). Such tests are typically in subdirectories named "SAMATE".