hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-07-09 13:35:38 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
33da3ef74e01c8b559b47ea22dd7cfac40b500b4
codeql/cpp/ql/test/query-tests/Security/CWE
History
Owen Mansel-Chan 19745e13b5 Fix some lines with // $ ... // $ MISSING: 
Note that when a line is marked `// BAD [NOT DETECTED]` but actually has
an alert, I assume that the `[NOT DETECTED]` is outdated and should be
deleted.
2026-07-07 20:48:39 +01:00
..
CWE-014
Add MISSING: tag
2026-07-07 10:59:21 +01:00
CWE-022
C++: Convert qlref tests to inline expectations
2026-07-07 09:49:50 +01:00
CWE-078
C++: Convert qlref tests to inline expectations
2026-07-07 09:49:50 +01:00
CWE-079/semmle/CgiXss
C++: Convert qlref tests to inline expectations
2026-07-07 09:49:50 +01:00
CWE-089/SqlTainted
C++: Pretty print MaD ids in test output
2025-06-26 23:38:32 +02:00
CWE-114
Add MISSING: tag
2026-07-07 10:59:21 +01:00
CWE-119
Add MISSING: tag
2026-07-07 10:59:21 +01:00
CWE-120/semmle
Add MISSING: tag
2026-07-07 10:59:21 +01:00
CWE-121/semmle/tests
C++: Convert qlref tests to inline expectations
2026-07-07 09:49:50 +01:00
CWE-129
C++: Convert qlref tests to inline expectations
2026-07-07 09:49:50 +01:00
CWE-131/NoSpaceForZeroTerminator
Address review comments
2026-07-07 20:48:36 +01:00
CWE-134
C++: Convert qlref tests to inline expectations
2026-07-07 09:49:50 +01:00
CWE-190
Add MISSING: tag
2026-07-07 10:59:21 +01:00
CWE-191/UnsignedDifferenceExpressionComparedZero
Add SPURIOUS: tags
2026-07-07 10:54:11 +01:00
CWE-193
Fix some lines with // $ ... // $ MISSING:
2026-07-07 20:48:39 +01:00
CWE-197/SAMATE/IntegerOverflowTainted
C++: Convert qlref tests to inline expectations
2026-07-07 09:49:50 +01:00
CWE-242/semmle/tests
C++: Convert qlref tests to inline expectations
2026-07-07 09:49:50 +01:00
CWE-253
C++: Convert qlref tests to inline expectations
2026-07-07 09:49:50 +01:00
CWE-290/semmle/AuthenticationBypass
C++: Convert qlref tests to inline expectations
2026-07-07 09:49:50 +01:00
CWE-295
Add MISSING: tag
2026-07-07 10:59:21 +01:00
CWE-311/semmle/tests
Add MISSING: tag
2026-07-07 10:59:21 +01:00
CWE-313
[TEST] C++: CleartextSqliteDatabase: add new test
2025-08-15 12:00:26 +02:00
CWE-319/UseOfHttp
C++: Convert qlref tests to inline expectations
2026-07-07 09:49:50 +01:00
CWE-326
C++: Convert qlref tests to inline expectations
2026-07-07 09:49:50 +01:00
CWE-327
Add MISSING: tag
2026-07-07 10:59:21 +01:00
CWE-367/semmle
Add MISSING: tag
2026-07-07 10:59:21 +01:00
CWE-416/semmle/tests
Fix some lines with // $ ... // $ MISSING:
2026-07-07 20:48:39 +01:00
CWE-428
C++: Convert qlref tests to inline expectations
2026-07-07 09:49:50 +01:00
CWE-457/semmle
Add MISSING: tag
2026-07-07 10:59:21 +01:00
CWE-468/semmle
Add MISSING: tag
2026-07-07 10:59:21 +01:00
CWE-497
C++: Convert qlref tests to inline expectations
2026-07-07 09:49:50 +01:00
CWE-570
C++: Convert qlref tests to inline expectations
2026-07-07 09:49:50 +01:00
CWE-611
Add MISSING: tag
2026-07-07 10:59:21 +01:00
CWE-676
C++: Convert qlref tests to inline expectations
2026-07-07 09:49:50 +01:00
CWE-704
C++: Do not alert on unreachable code in cpp/incorrect-string-type-conversion
2025-07-10 11:49:12 +02:00
CWE-732
C++: Convert qlref tests to inline expectations
2026-07-07 09:49:50 +01:00
CWE-764/semmle/tests
Add SPURIOUS: tags
2026-07-07 10:54:11 +01:00
CWE-772
C++: Convert qlref tests to inline expectations
2026-07-07 09:49:50 +01:00
CWE-807/semmle/TaintedCondition
Address review comments
2026-07-07 20:48:36 +01:00
CWE-835/semmle/InfiniteLoopWithUnsatisfiableExitCondition
C++: Convert qlref tests to inline expectations
2026-07-07 09:49:50 +01:00
CWE-843
Add MISSING: tag
2026-07-07 10:59:21 +01:00
README.md
C++: Subsection header.
2021-09-13 14:10:17 +01:00

README.md

CWE specific security tests

Source from the Juliet Test Suite

Some of the the files in these tests contain source code copied or derived from the public domain "Juliet Test Suite for C/C++" (provided by NIST / SAMATE Team at https://samate.nist.gov/SARD/testsuite.php). Such tests are typically in subdirectories named "SAMATE".