hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-01-04 10:10:20 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
ecee427c72713b68303cbdb3ff7c64985d540e6d
codeql/cpp/ql/test/query-tests/Security/CWE
History
Mathias Vorreiter Pedersen f5509da4bb Merge pull request #14038 from alexet/delete-ir 
CPP: Add delete/delete[] calls to the IR.
2023-08-31 09:22:34 +01:00
..
CWE-014
C++: Make the tests more realistic by actually using the local variable for something. Otherwise it looks like a zero-initialization of a buffer, which the query now tries to exclude.
2021-02-26 09:19:05 +01:00
CWE-022
CPP: Update tests for argv change
2023-08-25 13:05:10 +01:00
CWE-078
C++: Accept more test changes.
2023-08-30 11:26:40 +01:00
CWE-079/semmle/CgiXss
Merge branch 'main' into mathiasvp/replace-ast-with-ir-use-usedataflow
2022-11-07 15:03:26 +01:00
CWE-089/SqlTainted
CPP: Update tests for argv change
2023-08-25 13:05:10 +01:00
CWE-114
C++: Accept query changes. These are just deduplications.
2023-01-30 09:26:14 +00:00
CWE-119
C++: Accept more test changes.
2023-08-30 11:26:40 +01:00
CWE-120/semmle
C++: Undo BadlyBoundedWrite change from #13929
2023-08-18 13:48:58 +02:00
CWE-121/semmle/tests
C++: Make the tests use more repetitions.
2022-10-06 09:14:24 +01:00
CWE-129
CPP: Update tests for argv change
2023-08-25 13:05:10 +01:00
CWE-131/NoSpaceForZeroTerminator
C++: Update the queries.
2023-01-05 11:33:58 +00:00
CWE-134
C++: C++: Use getAUse in getIRRepresentationOfIndirectOperand
2023-03-09 15:15:00 +01:00
CWE-190
CPP: Update tests for argv change
2023-08-25 13:05:10 +01:00
CWE-191/UnsignedDifferenceExpressionComparedZero
C++: Add more dataflow cases to replace the loss.
2021-04-13 15:09:12 +01:00
CWE-193
C++: Accept test changes and add a few non-field flow tests to make up for the fact that we're no longer using field flow in the query.
2023-08-25 15:18:15 +01:00
CWE-197/SAMATE/IntegerOverflowTainted
CPP: update expected output
2022-09-23 14:45:59 +02:00
CWE-242/semmle/tests
C++: Fix pointer/pointee conflation and handle flow through '++' when tracking indirect flow.
2022-10-24 14:23:43 +02:00
CWE-253
CPP: update expected output
2022-09-23 14:45:59 +02:00
CWE-290/semmle/AuthenticationBypass
Merge branch 'main' into mathiasvp/replace-ast-with-ir-use-usedataflow
2023-01-23 15:49:36 +00:00
CWE-295
Merge pull request #7243 from geoffw0/sslquery2
2021-12-01 15:02:19 +00:00
CWE-311/semmle/tests
C++: Accept more test changes.
2023-08-30 11:26:40 +01:00
CWE-319/UseOfHttp
C++: Don't limit instruction and operand reuse to those cases where we have a result for 'isUseImpl'.
2023-08-21 12:51:00 +01:00
CWE-326
C++: Map operand nodes that are only used once onto the related instruction node
2023-02-07 14:17:54 +01:00
CWE-327
C++: Repair funcion call in a function call.
2021-06-17 14:33:16 +01:00
CWE-367/semmle
C++: Add tests.
2021-10-08 14:30:27 +01:00
CWE-416/semmle/tests
CPP: Add delete/delete[] calls to the IR.
2023-08-29 11:17:43 +01:00
CWE-428
C++: Typos.
2022-02-22 14:33:11 +00:00
CWE-457/semmle
C++: add testcases for UninitializedLocal.ql
2023-07-06 20:07:58 -04:00
CWE-468/semmle
CPP: update expected output
2022-09-23 14:45:59 +02:00
CWE-497
C++: Don't limit instruction and operand reuse to those cases where we have a result for 'isUseImpl'.
2023-08-21 12:51:00 +01:00
CWE-570
Update cpp/ql/test/query-tests/Security/CWE/CWE-570/test.cpp
2021-08-11 16:18:18 +02:00
CWE-611
C++: Don't limit instruction and operand reuse to those cases where we have a result for 'isUseImpl'.
2023-08-21 12:51:00 +01:00
CWE-676
CPP: update expected output
2022-09-23 14:45:59 +02:00
CWE-704
Updates based on feedback
2018-10-02 11:17:23 -07:00
CWE-732
CPP: update expected output
2022-09-23 14:45:59 +02:00
CWE-764/semmle/tests
C++: Add mutex test case.
2021-03-30 15:39:21 +01:00
CWE-772
update the alert-message of cpp/file-may-not-be-closed based on feedback
2022-09-23 14:46:00 +02:00
CWE-807/semmle/TaintedCondition
Merge branch 'main' into mathiasvp/replace-ast-with-ir-use-usedataflow
2022-11-07 15:03:26 +01:00
CWE-835/semmle/InfiniteLoopWithUnsatisfiableExitCondition
CPP: Add the Semmle security tests.
2018-11-26 17:52:34 +00:00
README.md
C++: Subsection header.
2021-09-13 14:10:17 +01:00

README.md

CWE specific security tests

Source from the Juliet Test Suite

Some of the the files in these tests contain source code copied or derived from the public domain "Juliet Test Suite for C/C++" (provided by NIST / SAMATE Team at https://samate.nist.gov/SARD/testsuite.php). Such tests are typically in subdirectories named "SAMATE".