Geoffrey White 208ae7aa01 Merge pull request #21514 from geoffw0/suspicioussizeof ...

C++: Fix an issue with cpp/suspicious-add-sizeof in BMN databases

2026-03-20 09:41:39 +00:00

..

CWE-014

Fix cwe tags to include leading zero

2025-04-30 16:43:03 +01:00

CWE-020

Use more flowTo.

2025-12-03 14:12:08 +01:00

CWE-022

[DIFF-INFORMED] C++: TaintedPath

2025-08-15 12:00:54 +02:00

CWE-078

C++/ExecTainted

2025-10-28 09:41:29 +01:00

CWE-079

Change @security-severity for XSS queries from 6.1 to 7.8

2026-03-13 10:01:02 +00:00

CWE-089

Merge branch 'main' into cpp/mad-barriers

2026-01-23 14:14:22 +01:00

CWE-114

C++: Don't use asExpr to mark the sink in 'cpp/uncontrolled-process-operation'.

2025-07-14 18:08:58 +01:00

CWE-119

C++: Add barriers to 'cpp/overrun-write'.

2025-07-22 18:35:56 +01:00

CWE-120

C++: Add indirect barrier guard to 'cpp/unbounded-write' to prevent FPs after fixing conflation.

2026-01-15 18:31:54 +00:00

CWE-121

C++: Remove omittable exists variables

2023-01-10 13:36:01 +01:00

CWE-129

C++: Do not use the deprecated predicate in queries.

2025-09-18 12:16:23 +01:00

CWE-131

Rewrite recommendations

2024-05-24 16:10:42 -07:00

CWE-134

the [] syntax directly

2026-03-19 14:36:28 +08:00

CWE-170

[DIFF-INFORMED] C++: ImproperNullTerminationTainted

2025-08-15 12:01:05 +02:00

CWE-190

Constrain location overrides to actual sources/sinks

2025-10-28 09:42:20 +01:00

CWE-191

C++: Promote 'cpp/unsigned-difference-expression-compared-zero' to Code Scanning.

2024-07-17 11:44:37 +01:00

CWE-193

C++: Drop experimental tag from cpp/invalid-pointer-deref

2023-10-31 19:46:22 +01:00

CWE-253

CPP: make more alert messages follow the style-guide

2022-09-23 14:45:59 +02:00

CWE-290

C++/AuthenticationBypass

2025-10-28 09:41:43 +01:00

CWE-295

C++: Fixup queries which assumes that a guard is always an expression.

2025-09-18 12:16:21 +01:00

CWE-311

Use flowFrom.

2025-12-03 14:04:18 +01:00

CWE-313

C++/CleartextSqliteDatabase

2025-10-28 09:41:40 +01:00

CWE-319

Constrain location overrides to actual sources/sinks

2025-10-28 09:42:20 +01:00

CWE-326

[DIFF-INFORMED] C++: InsufficientKeySize

2025-08-15 12:01:19 +02:00

CWE-327

Improve qhelp for broken crypto algo queries

2025-10-08 14:10:54 +01:00

CWE-367

C++: Fixup queries which assumes that a guard is always an expression.

2025-09-18 12:16:21 +01:00

CWE-416

[DIFF-INFORMED] C++: IteratorToExpiredContainer

2025-08-15 12:01:21 +02:00

CWE-428

[DIFF-INFORMED] C++: UnsafeCreateProcessCall

2025-08-15 12:01:23 +02:00

CWE-457

C++: Fix some Ql4Ql violations.

2025-09-03 08:19:18 +02:00

CWE-468

C++: Fix the issue.

2026-03-19 13:16:16 +00:00

CWE-497

C++: mass enable diff-informed data flow

2025-06-11 18:51:01 +02:00

CWE-570

C++: Fix some Ql4Ql violations.

2025-09-03 08:19:18 +02:00

CWE-611

C++: mass enable diff-informed data flow

2025-06-11 18:51:01 +02:00

CWE-676

C++: Ignore gets'es with incorrect parameter counts

2024-06-04 11:15:07 +02:00

CWE-704

C++: Do not alert on unreachable code in cpp/incorrect-string-type-conversion

2025-07-10 11:49:12 +02:00

CWE-732

[DIFF-INFORMED] C++: UnsafeDaclSecurityDescriptor

2025-08-15 12:01:25 +02:00

CWE-764

Update security-severity scores

2021-06-15 13:25:17 +01:00

CWE-807

[DIFF-INFORMED] C++: TaintedCondition

2025-08-15 12:01:28 +02:00

CWE-835

Update security-severity scores

2021-06-15 13:25:17 +01:00

CWE-843

[DIFF-INFORMED] C++: TypeConfusion

2025-08-15 12:01:30 +02:00