Geoffrey White 298f70f082 Merge pull request #6120 from MathiasVP/not-overflow-is-barrier-in-cwe-190 ...

C++: Recognize any non-overflowing arithmetic expression as a barrier for `cpp/uncontrolled-arithmetic`

2021-06-23 10:35:33 +01:00

..

CWE-014

C++: Make the tests more realistic by actually using the local variable for something. Otherwise it looks like a zero-initialization of a buffer, which the query now tries to exclude.

2021-02-26 09:19:05 +01:00

CWE-022/semmle/tests

C++: Accept test changes after merge from main (which changed the path explanations).

2021-03-11 21:16:57 +01:00

CWE-078/semmle/ExecTainted

CPP: Add the Semmle security tests.

2018-11-26 17:52:34 +00:00

CWE-079/semmle/CgiXss

C++: Accept test changes after merge from main (which changed the path explanations).

2021-03-11 21:16:57 +01:00

CWE-089/SqlTainted

C++: Accept test changes after merge from main (which changed the path explanations).

2021-03-11 21:16:57 +01:00

CWE-114/semmle/UncontrolledProcessOperation

C++: accept test regressions

2021-05-06 08:14:38 -07:00

CWE-119/semmle/tests

C++: Add range analysis to fix FPs.

2021-05-18 17:54:30 +02:00

CWE-120/semmle

C++: Accept test changes after merge from main (which changed the path explanations).

2021-03-11 21:16:57 +01:00

CWE-121/semmle/tests

CPP: Add the Semmle security tests.

2018-11-26 17:52:34 +00:00

CWE-129/semmle/ImproperArrayIndexValidation

C++: Accept test changes for IR libs

2020-02-15 21:12:20 +01:00

CWE-131/semmle/NoSpaceForZeroTerminator

C++: Move the SizeCheck*.ql tests to the standard location.

2020-10-20 16:02:54 +01:00

CWE-134/semmle

C++: accept test changes from IR sharing

2021-05-06 08:14:45 -07:00

CWE-190/semmle

C++: Make any non-overflowing arithmetic operation a barrier.

2021-06-21 14:05:34 +02:00

CWE-191/UnsignedDifferenceExpressionComparedZero

C++: Add more dataflow cases to replace the loss.

2021-04-13 15:09:12 +01:00

CWE-242/semmle/tests

C++: Add getOutputParameterIndex override to UserDefinedFormattingFunction and accept test changes

2020-07-15 14:46:08 +02:00

CWE-253

CPP: Exclude switch statements.

2018-10-19 10:24:29 +01:00

CWE-290/semmle/AuthenticationBypass

C++: Accept test changes after merge from main (which changed the path explanations).

2021-03-11 21:16:57 +01:00

CWE-311/semmle/tests

C++: Accept test changes after merge from main (which changed the path explanations).

2021-03-11 21:16:57 +01:00

CWE-327

C++: Repair funcion call in a function call.

2021-06-17 14:33:16 +01:00

CWE-367/semmle

C++: Call qualifiers are passed by reference

2020-05-11 09:39:48 +02:00

CWE-416/semmle/tests

CPP: Add the Semmle security tests.

2018-11-26 17:52:34 +00:00

CWE-428

Fixing typos & incorporating feedback.

2018-10-16 10:00:51 -07:00

CWE-457/semmle

CPP: Add test cases for ConditionallyUninitializedVariables.ql.

2019-10-28 18:43:00 +00:00

CWE-468/semmle

C++: Speed up SuspiciousAddWithSizeof select

2020-04-24 16:18:18 +02:00

CWE-497/semmle/tests

CPP: Add the Semmle security tests.

2018-11-26 17:52:34 +00:00

CWE-570

C++: Promote cpp/incorrect-allocation-error-handling out of experimental.

2021-05-20 09:47:45 +02:00

CWE-676/semmle

CPP: Update the query name and description.

2019-05-29 10:35:49 +01:00

CWE-704

Updates based on feedback

2018-10-02 11:17:23 -07:00

CWE-732

C++: Fix new UnsafeDaclSecurityDescriptor FP

2019-04-02 11:31:12 +02:00

CWE-764/semmle/tests

C++: Add mutex test case.

2021-03-30 15:39:21 +01:00

CWE-772/semmle

CPP: Add a test of placement new in CWE-772 (this case came up recently but has already been fixed).

2019-04-11 12:23:33 +01:00

CWE-807/semmle/TaintedCondition

C++: require that other operands be predictable

2020-11-09 13:00:55 -08:00

CWE-835/semmle/InfiniteLoopWithUnsatisfiableExitCondition

CPP: Add the Semmle security tests.

2018-11-26 17:52:34 +00:00