Jonas Jensen 39911af56b C++: Avoid partial chi flow to struct/class ...

Flow through partial chi-instruction operands was introduced to make
definition-by-reference work, but its implementation also allowed all
other partial writes to propagate. In particular, tainting a field would
taint the whole struct, which in turn led to taint propagating across
unrelated fields of a struct.

The security test `CWE-134/semmle/argv/argvLocal.c` shows that we also
want to propagate taint from an array element to the whole array, and it
also seems right to propagate taint from a union member to the whole
union.

2020-04-07 16:24:24 +02:00

..

config/suites

C++: Added query to suites and change-notes

2020-01-17 14:51:40 +01:00

ql

C++: Avoid partial chi flow to struct/class

2020-04-07 16:24:24 +02:00

upgrades

C++: Add upgrade script

2020-03-16 09:58:02 +00:00