mirror of
https://github.com/github/codeql.git
synced 2025-12-19 10:23:15 +01:00
43 lines
2.7 KiB
ReStructuredText
43 lines
2.7 KiB
ReStructuredText
CodeQL for C and C++
|
|
====================
|
|
|
|
Experiment and learn how to write effective and efficient queries for CodeQL databases generated from C and C++ codebases.
|
|
|
|
.. toctree::
|
|
:hidden:
|
|
|
|
basic-query-for-cpp-code
|
|
codeql-library-for-cpp
|
|
functions-in-cpp
|
|
expressions-types-and-statements-in-cpp
|
|
conversions-and-classes-in-cpp
|
|
analyzing-data-flow-in-cpp
|
|
refining-a-query-to-account-for-edge-cases
|
|
detecting-a-potential-buffer-overflow
|
|
using-the-guards-library-in-cpp
|
|
using-range-analsis-in-cpp
|
|
hash-consing-and-value-numbering
|
|
|
|
|
|
- :doc:`Basic query for C and C++ code <basic-query-for-cpp-code>`: Learn to write and run a simple CodeQL query using LGTM.
|
|
|
|
- :doc:`CodeQL library for C and C++ <codeql-library-for-cpp>`: When analyzing C or C++ code, you can use the large collection of classes in the CodeQL library for C and C++.
|
|
|
|
- :doc:`Functions in C and C++ <functions-in-cpp>`: You can use CodeQL to explore functions in C and C++ code.
|
|
|
|
- :doc:`Expressions, types, and statements in C and C++ <expressions-types-and-statements-in-cpp>`: You can use CodeQL to explore expressions, types, and statements in C and C++ code to find, for example, incorrect assignments.
|
|
|
|
- :doc:`Conversions and classes in C and C++ <conversions-and-classes-in-cpp>`: You can use the standard CodeQL libraries for C and C++ to detect when the type of an expression is changed.
|
|
|
|
- :doc:`Analyzing data flow in C and C++ <analyzing-data-flow-in-cpp>`: You can use data flow analysis to track the flow of potentially malicious or insecure data that can cause vulnerabilities in your codebase.
|
|
|
|
- :doc:`Refining a query to account for edge cases <refining-a-query-to-account-for-edge-cases>`: You can improve the results generated by a CodeQL query by adding conditions to remove false positive results caused by common edge cases.
|
|
|
|
- :doc:`Detecting a potential buffer overflow <detecting-a-potential-buffer-overflow>`: You can use CodeQL to detect potential buffer overflows by checking for allocations equal to ``strlen`` in C and C++.
|
|
|
|
- :doc:`Using the guards library in C and C++ <using-the-guards-library-in-cpp>`: You can use the CodeQL guards library to identify conditional expressions that control the execution of other parts of a program in C and C++ codebases.
|
|
|
|
- :doc:`Using range analysis for C and C++ <using-range-analsis-in-cpp>`: You can use range analysis to determine the upper or lower bounds on an expression, or whether an expression could potentially over or underflow.
|
|
|
|
- :doc:`Hash consing and value numbering <hash-consing-and-value-numbering>`: You can use specialized CodeQL libraries to recognize expressions that are syntactically identical or compute the same value at runtime in C and C++ codebases.
|