hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-06-08 06:32:28 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
cf9d289df56cebc64d4fbd71f1e161bcce0460d0
codeql/cpp/ql/test/query-tests/Security/CWE
History
Geoffrey White 146318dbc1 Merge pull request #8580 from geoffw0/privdata 
C++: Port PrivateData.qll from C# and use it in cpp/cleartext-transmission
2022-03-31 10:12:46 +01:00
..
CWE-014
C++: Make the tests more realistic by actually using the local variable for something. Otherwise it looks like a zero-initialization of a buffer, which the query now tries to exclude.
2021-02-26 09:19:05 +01:00
CWE-022
Accept test changes.
2021-10-28 12:36:36 +01:00
CWE-078
C++: Add cpp/command-line-injection test using a wrapper macro
2022-03-21 11:19:54 +01:00
CWE-079/semmle/CgiXss
update further test with new locations
2021-11-23 15:28:15 +00:00
CWE-089/SqlTainted
C++: add subpaths to DefaultTaintTracking
2021-09-23 21:00:45 -07:00
CWE-114
update further test with new locations
2021-11-23 15:28:15 +00:00
CWE-119
C++: Actally convert 'cpp/overflow-destination' to a path-problem query.
2022-03-09 13:49:52 +00:00
CWE-120/semmle
Merge branch 'main' into rdmarsh2/cpp/hex-format-range-analysis
2022-01-14 12:53:52 -05:00
CWE-121/semmle/tests
CPP: Add the Semmle security tests.
2018-11-26 17:52:34 +00:00
CWE-129
C++: Accept test changes.
2022-03-11 09:30:44 +00:00
CWE-131/semmle/NoSpaceForZeroTerminator
C++: Move the SizeCheck*.ql tests to the standard location.
2020-10-20 16:02:54 +01:00
CWE-134
C++: Accept qltest expected changes.
2022-01-18 10:36:52 +01:00
CWE-190
C++: Use a 'TaintTracking::Configuration' for 'cpp/uncontrolled-allocation-size'.
2022-03-09 12:09:32 +00:00
CWE-191/UnsignedDifferenceExpressionComparedZero
C++: Add more dataflow cases to replace the loss.
2021-04-13 15:09:12 +01:00
CWE-197/SAMATE/IntegerOverflowTainted
C++: Fix a few glitches and accept line number changes in expected files.
2021-09-02 17:34:47 +01:00
CWE-242/semmle/tests
C++: demote VeryLikelyOverrunWrite cast results
2022-01-13 11:59:48 +00:00
CWE-253
CPP: Exclude switch statements.
2018-10-19 10:24:29 +01:00
CWE-290/semmle/AuthenticationBypass
C++: add subpaths to DefaultTaintTracking
2021-09-23 21:00:45 -07:00
CWE-295
Merge pull request #7243 from geoffw0/sslquery2
2021-12-01 15:02:19 +00:00
CWE-311/semmle/tests
C++: More test cases for salary.
2022-03-29 15:05:27 +01:00
CWE-319/UseOfHttp
C++: Add GVN.
2022-02-24 17:22:37 +00:00
CWE-326
C++: accept test output from perf improvement
2022-03-04 11:39:10 -05:00
CWE-327
C++: Repair funcion call in a function call.
2021-06-17 14:33:16 +01:00
CWE-367/semmle
C++: Add tests.
2021-10-08 14:30:27 +01:00
CWE-416/semmle/tests
Revert "Merge pull request #6004 from MathiasVP/path-sensitive-stack-variable-reachability-analysis"
2021-07-20 18:06:49 +02:00
CWE-428
C++: Typos.
2022-02-22 14:33:11 +00:00
CWE-457/semmle
Revert "Merge pull request #6004 from MathiasVP/path-sensitive-stack-variable-reachability-analysis"
2021-07-20 18:06:49 +02:00
CWE-468/semmle
C++: Speed up SuspiciousAddWithSizeof select
2020-04-24 16:18:18 +02:00
CWE-497
C++: Fix ODR/dbcheck issue in test.
2022-03-15 20:00:19 +00:00
CWE-570
Update cpp/ql/test/query-tests/Security/CWE/CWE-570/test.cpp
2021-08-11 16:18:18 +02:00
CWE-676
C++: Fix a few glitches and accept line number changes in expected files.
2021-09-02 17:34:47 +01:00
CWE-704
Updates based on feedback
2018-10-02 11:17:23 -07:00
CWE-732
Address review comments
2022-02-02 17:24:55 +01:00
CWE-764/semmle/tests
C++: Add mutex test case.
2021-03-30 15:39:21 +01:00
CWE-772
C++: Actually fix expected files after layout changes.
2021-09-03 09:13:41 +01:00
CWE-807/semmle/TaintedCondition
Accept test changes.
2021-10-28 12:36:36 +01:00
CWE-835/semmle/InfiniteLoopWithUnsatisfiableExitCondition
CPP: Add the Semmle security tests.
2018-11-26 17:52:34 +00:00
README.md
C++: Subsection header.
2021-09-13 14:10:17 +01:00

README.md

CWE specific security tests

Source from the Juliet Test Suite

Some of the the files in these tests contain source code copied or derived from the public domain "Juliet Test Suite for C/C++" (provided by NIST / SAMATE Team at https://samate.nist.gov/SARD/testsuite.php). Such tests are typically in subdirectories named "SAMATE".