Eric Bickle 000c1f7ec8 Java: Flow taint through ArithExpr for ThreadResourceAbuse ...

Ensure that tainted values flow through arithmetic operations when
checking for ThreadResourceAbuse vulnerabilities.

For example, multiplying 'number of seconds' by 1000 as an input
to Thread.Sleep, which accepts milliseconds, is a common scenario.

2023-10-06 14:24:37 -07:00

..

CWE-016

Rename springframework-5.2.3 to 5.3.8

2021-06-28 08:26:39 -07:00

CWE-020

Java: Fix qltests.

2023-06-09 08:37:35 +02:00

CWE-073

Add PathCreation.qll sinks to models-as-data

2023-06-02 09:14:35 +02:00

CWE-078

Fixed formatting, committed expected test results

2023-08-03 13:50:40 +01:00

CWE-089/src/main

Java: Update expected output.

2023-04-26 14:45:40 +02:00

CWE-094

C/C++/C#/Java/Python/Ruby/Swift: Adjust expected output.

2023-07-19 11:41:15 +02:00

CWE-200

Java: Fix qltests.

2023-06-09 08:37:35 +02:00

CWE-208

Adjust test expectation

2022-02-25 20:05:06 +00:00

CWE-295

Move from experimental

2022-01-20 10:23:18 +01:00

CWE-297

update alert-messsages of java queries

2022-09-26 12:15:25 +02:00

CWE-299

Java: Update expected output.

2023-04-26 14:45:40 +02:00

CWE-327

Java: Update expected output.

2023-04-26 14:45:40 +02:00

CWE-346

Dataflow: Update more tests.

2021-09-07 13:02:20 +02:00

CWE-348

Merge branch 'main' into charSeqSubSeq

2021-09-09 16:04:36 +02:00

CWE-352

Update JsonpInjection test expectations

2023-04-13 12:06:54 +02:00

CWE-400

Java: Flow taint through ArithExpr for ThreadResourceAbuse

2023-10-06 14:24:37 -07:00

CWE-470

C/C++/C#/Java/Python/Ruby/Swift: Adjust expected output.

2023-07-19 11:41:15 +02:00

CWE-489

Update qldoc and method name

2021-02-22 14:15:41 +00:00

CWE-502

update alert-messsages of java queries

2022-09-26 12:15:25 +02:00

CWE-548

update alert-messsages of java queries

2022-09-26 12:15:25 +02:00

CWE-552

C/C++/C#/Java/Python/Ruby/Swift: Adjust expected output.

2023-07-19 11:41:15 +02:00

CWE-555

update expected output of tests

2022-08-22 21:41:47 +02:00

CWE-598

Java: Fix qltests.

2023-06-09 08:37:35 +02:00

CWE-600

update alert-messsages of java queries

2022-09-26 12:15:25 +02:00

CWE-601

C/C++/C#/Java/Python/Ruby/Swift: Adjust expected output.

2023-07-19 11:41:15 +02:00

CWE-625

Move pattern check to MatchRegexConfiguration::isSink

2022-08-30 22:48:12 +00:00

CWE-652

C/C++/C#/Java/Python/Ruby/Swift: Adjust expected output.

2023-07-19 11:41:15 +02:00

CWE-665

Merged simplified query

2021-06-04 16:07:15 +02:00

CWE-755

Java: Fix qltests.

2023-06-09 08:37:35 +02:00

CWE-759

Merge branch 'main' into charSeqSubSeq

2021-09-09 16:04:36 +02:00

CWE-1004

C/C++/C#/Java/Python/Ruby/Swift: Adjust expected output.

2023-07-19 11:41:15 +02:00