Geoffrey White 7f56c67544 Merge pull request #18837 from geoffw0/overflowbuffer ...

C++: Improve and promote cpp/overflow-buffer

2025-03-03 14:17:12 +00:00

..

CWE-014

C++: Make memset_s a clearer recommendation in the .qhelp for cpp/memset-may-be-deleted.

2024-07-22 09:51:22 +01:00

CWE-020

use my script to delete outdated deprecations

2024-09-03 20:30:58 +02:00

CWE-022

apply suggestions from code review, and the examples to the test

2024-05-08 19:34:50 +02:00

CWE-078

C++: Add and correct some QLDoc.

2025-02-20 15:33:59 +00:00

CWE-079

C++: Fix barrier in cpp/cgi-xss

2023-10-13 14:05:47 +02:00

CWE-089

C++: Change queries to use 'asExpr' instead of 'asConvertedExpr'.

2023-09-01 15:01:32 +01:00

CWE-114

C++: No need to exclude ExprNodes as sources now that #14903 is merged.

2023-11-24 16:58:30 +00:00

CWE-119

C++: Give cpp/overflow-buffer medium precision, and upgrade severity so it will appear in security-extended.

2025-02-21 18:58:58 +00:00

CWE-120

C++: Speed up the 'cpp/unbounded-write' query.

2025-01-13 16:03:30 +00:00

CWE-121

C++: Remove omittable exists variables

2023-01-10 13:36:01 +01:00

CWE-129

C++: Don't allow 'x < 0' as a barrier guard.

2024-10-09 14:17:56 +01:00

CWE-131

Rewrite recommendations

2024-05-24 16:10:42 -07:00

CWE-134

C++: No need to exclude ExprNodes as sources now that #14903 is merged.

2023-11-24 16:58:30 +00:00

CWE-170

Update cpp/ql/src/Security/CWE/CWE-170/ImproperNullTerminationTainted.ql

2023-11-23 14:10:57 +00:00

CWE-190

C++: Fix join order problem in TaintedAllocationSize.

2025-01-23 14:20:23 +01:00

CWE-191

C++: Promote 'cpp/unsigned-difference-expression-compared-zero' to Code Scanning.

2024-07-17 11:44:37 +01:00

CWE-193

C++: Drop experimental tag from cpp/invalid-pointer-deref

2023-10-31 19:46:22 +01:00

CWE-253

CPP: make more alert messages follow the style-guide

2022-09-23 14:45:59 +02:00

CWE-290

C++: No need to exclude ExprNodes as sources now that #14903 is merged.

2023-11-24 16:58:30 +00:00

CWE-295

C++: Make implicit this receivers explicit

2023-05-09 15:35:54 +02:00

CWE-311

Apply suggestions from code review

2024-07-25 15:17:21 +01:00

CWE-313

Apply suggestions from code review

2024-07-25 15:17:21 +01:00

CWE-319

C++: Rename references.

2023-03-23 13:06:19 +01:00

CWE-326

C++: Rename references.

2023-03-23 13:06:19 +01:00

CWE-327

C++: Make implicit this receivers explicit

2023-05-09 15:35:54 +02:00

CWE-367

C++: Add close calls to examples for cpp/toctou-race-condition.

2024-07-08 14:32:00 +01:00

CWE-416

C++: Increase the precision of 'cpp/iterator-to-expired-container' to high.

2024-07-11 14:26:05 +01:00

CWE-428

C++: Rename references.

2023-03-23 13:06:19 +01:00

CWE-457

deleted unused internal code

2022-09-26 20:20:52 +02:00

CWE-468

C++: Remove omittable exists variables

2023-01-10 13:36:01 +01:00

CWE-497

C++: Autoformat.

2024-04-10 15:02:19 +01:00

CWE-570

Updating to NonCppThrowingFunction use in IncorrectALlocationErrorHandling.ql

2024-11-21 12:59:56 -05:00

CWE-611

C++: Add alert provenance plumbing.

2024-04-12 09:20:06 +02:00

CWE-676

C++: Ignore gets'es with incorrect parameter counts

2024-06-04 11:15:07 +02:00

CWE-704

Formatting.

2024-09-30 11:23:08 -04:00

CWE-732

C++: Silence alerts coming from CMake test compilation files

2025-01-07 14:12:55 +01:00

CWE-764

Update security-severity scores

2021-06-15 13:25:17 +01:00

CWE-807

C++: Undo the workaround in 'cpp/tainted-permissions-check'.

2023-11-24 10:56:11 +00:00

CWE-835

Update security-severity scores

2021-06-15 13:25:17 +01:00

CWE-843

C++: Move 'hasAFieldWithOffset' to 'Field'.

2025-01-29 18:19:17 +00:00