Mathias Vorreiter Pedersen 354a12c906 C++: Fix queries. Since there's no longer indirect -> direct flow in ...

taint-tracking we need to make sure the affected sink definitions also
handle indirect flow.

2023-02-27 14:57:36 +00:00

..

CWE-014

Update security-severity scores

2021-06-15 13:25:17 +01:00

CWE-020

C++: Revert semmle.code.cpp.dataflow to its old state

2023-02-10 14:21:44 +01:00

CWE-022

Merge remote-tracking branch 'upstream/main' into mathiasvp/replace-ast-with-ir-use-usedataflow

2022-12-20 11:34:41 +01:00

CWE-078

C++: Repair the 'cpp/command-line-injection' query in preparation for IR-based use-use dataflow.

2022-10-14 15:11:41 +02:00

CWE-079

C++: Deprecate DefaultTaintTracking and TaintTrackingImpl

2022-12-06 17:45:16 +01:00

CWE-089

C++: Deprecate DefaultTaintTracking and TaintTrackingImpl

2022-12-06 17:45:16 +01:00

CWE-114

C++: Deprecate DefaultTaintTracking and TaintTrackingImpl

2022-12-06 17:45:16 +01:00

CWE-119

Update security-severity scores

2021-06-15 13:25:17 +01:00

CWE-120

C++: Deprecate DefaultTaintTracking and TaintTrackingImpl

2022-12-06 17:45:16 +01:00

CWE-121

C++: Remove omittable exists variables

2023-01-10 13:36:01 +01:00

CWE-129

C++: Make all flow source descriptions start with a lower case letter

2022-12-09 23:18:58 +01:00

CWE-131

C++: Revert semmle.code.cpp.dataflow to its old state

2023-02-10 14:21:44 +01:00

CWE-134

C++: Deprecate DefaultTaintTracking and TaintTrackingImpl

2022-12-06 17:45:16 +01:00

CWE-170

C++: Deprecate DefaultTaintTracking and TaintTrackingImpl

2022-12-06 17:45:16 +01:00

CWE-190

C++: Fix spurious results in default taint tracking

2023-01-16 19:10:10 +01:00

CWE-191

C++: Revert semmle.code.cpp.dataflow to its old state

2023-02-10 14:21:44 +01:00

CWE-253

CPP: make more alert messages follow the style-guide

2022-09-23 14:45:59 +02:00

CWE-290

Update cpp/ql/src/Security/CWE/CWE-290/AuthenticationBypass.ql

2023-01-17 14:37:19 +00:00

CWE-295

C++: Revert semmle.code.cpp.dataflow to its old state

2023-02-10 14:21:44 +01:00

CWE-311

C++: Fix queries. Since there's no longer indirect -> direct flow in

2023-02-27 14:57:36 +00:00

CWE-313

C++: Revert semmle.code.cpp.dataflow to its old state

2023-02-10 14:21:44 +01:00

CWE-319

C++: Fix queries. Since there's no longer indirect -> direct flow in

2023-02-27 14:57:36 +00:00

CWE-326

C++: Add missing 'security-severity' tags.

2022-03-15 10:54:36 +00:00

CWE-327

Merge branch 'main' into weak-crypto3

2021-06-21 11:55:29 +01:00

CWE-367

C++: Remove omittable exists variables

2023-01-10 13:36:01 +01:00

CWE-428

C++: Revert semmle.code.cpp.dataflow to its old state

2023-02-10 14:21:44 +01:00

CWE-457

deleted unused internal code

2022-09-26 20:20:52 +02:00

CWE-468

C++: Remove omittable exists variables

2023-01-10 13:36:01 +01:00

CWE-497

C++: Fix queries. Since there's no longer indirect -> direct flow in

2023-02-27 14:57:36 +00:00

CWE-570

C++: Add more CWEs to 'cpp/incorrect-allocation-error-handling'.

2021-10-04 15:15:40 +01:00

CWE-611

C++: Fix CWE-611 XXE query to work with use-use dataflow - take 2

2022-11-23 23:59:04 +01:00

CWE-676

CPP: make more alert messages follow the style-guide

2022-09-23 14:45:59 +02:00

CWE-704

C++: Remove internal 'microsoft' tags from queries.

2022-08-01 17:30:23 +01:00

CWE-732

C++: Revert semmle.code.cpp.dataflow to its old state

2023-02-10 14:21:44 +01:00

CWE-764

Update security-severity scores

2021-06-15 13:25:17 +01:00

CWE-807

C++: Deprecate DefaultTaintTracking and TaintTrackingImpl

2022-12-06 17:45:16 +01:00

CWE-835

Update security-severity scores

2021-06-15 13:25:17 +01:00