Commits

Commit history

1. Commits on Nov 29, 2023

   • C++: Add GOOD and BAD comments to qhelp examples.

     MathiasVP

     committed
     351caacView commit details

     Copy full SHA for 351caac

     View code at this pointBrowse repository at this point

   • Apply suggestions from code review

     Show description for 8afd928
     

     MathiasVP

     and

     felicitymay

     authored
     8afd928View commit details

     Copy full SHA for 8afd928

     View code at this pointBrowse repository at this point
2. Commits on Nov 28, 2023

   • C++: Add support for 'data' in the query.

     MathiasVP

     committed
     2b36ba3View commit details

     Copy full SHA for 2b36ba3

     View code at this pointBrowse repository at this point

   • C++: Add qhelp.

     MathiasVP

     committed
     71ad769View commit details

     Copy full SHA for 71ad769

     View code at this pointBrowse repository at this point

   • C++: Add a new query for detecting calls to 'c_str' on temporary objects.

     MathiasVP

     committed
     204acbaView commit details

     Copy full SHA for 204acba

     View code at this pointBrowse repository at this point
3. Commits on Nov 24, 2023

   • C++: No need to exclude ExprNodes as sources now that #14903 is merged.

     MathiasVP

     committed
     73138f1View commit details

     Copy full SHA for 73138f1

     View code at this pointBrowse repository at this point

   • C++: Remove workaround for negated conditions in 'cpp/user-controlled-bypass'.

     MathiasVP

     committed
     a7d820cView commit details

     Copy full SHA for a7d820c

     View code at this pointBrowse repository at this point

   • Merge pull request #14896 from MathiasVP/no-dtt-in-user-controlled-bypass

     Show description for e438671
     MathiasVP

     authored
     e438671View commit details

     Copy full SHA for e438671

     View code at this pointBrowse repository at this point

   • C++: Undo the workaround in 'cpp/tainted-permissions-check'.

     MathiasVP

     committed
     2681617View commit details

     Copy full SHA for 2681617

     View code at this pointBrowse repository at this point
4. Commits on Nov 23, 2023

   • C++: Rewrite 'cpp/user-controlled-bypass' away from 'DefaultTaintTracking'.

     MathiasVP

     committed
     5604fd7View commit details

     Copy full SHA for 5604fd7

     View code at this pointBrowse repository at this point

   • Merge pull request #14886 from jketema/rewrite-tainted-condition

     Show description for 257d94b
     MathiasVP

     authored
     257d94bView commit details

     Copy full SHA for 257d94b

     View code at this pointBrowse repository at this point

   • Merge pull request #14881 from MathiasVP/no-dtt-in-user-controlled-null-termination-tainted

     Show description for 149fb7b
     MathiasVP

     authored
     149fb7bView commit details

     Copy full SHA for 149fb7b

     View code at this pointBrowse repository at this point

   • Update cpp/ql/src/Security/CWE/CWE-170/ImproperNullTerminationTainted.ql

     Show description for b774ae0
     

     MathiasVP

     and

     jketema

     authored
     b774ae0View commit details

     Copy full SHA for b774ae0

     View code at this pointBrowse repository at this point

   • C++: Rewrite `cpp/tainted-permissions-check` to not use `DefaultTaintTracking`

     jketema

     committed
     7834626View commit details

     Copy full SHA for 7834626

     View code at this pointBrowse repository at this point
5. Commits on Nov 22, 2023

   • C++: Rewrite `cpp/tainted-format-string` away from `DefaultTaintTracking`

     jketema

     committed
     bb1945fView commit details

     Copy full SHA for bb1945f

     View code at this pointBrowse repository at this point

   • C++: Convert 'cpp/user-controlled-null-termination-tainted' away from 'DefaultTaintTracking'.

     MathiasVP

     committed
     306440cView commit details

     Copy full SHA for 306440c

     View code at this pointBrowse repository at this point
6. Commits on Nov 17, 2023

   • C++: Rewrite 'cpp/arithmetic-with-extreme-values' away from 'DefaultTaintTracking'.

     MathiasVP

     committed
     c65c248View commit details

     Copy full SHA for c65c248

     View code at this pointBrowse repository at this point
7. Commits on Nov 16, 2023

   • Merge pull request #14812 from MathiasVP/no-dtt-in-Integer-overflow-tainted

     Show description for c5d2866
     MathiasVP

     authored
     c5d2866View commit details

     Copy full SHA for c5d2866

     View code at this pointBrowse repository at this point

   • C++: Rewrite 'cpp/cpp/integer-overflow-tainted' away from DefaultTaintTracking.

     MathiasVP

     committed
     078f223View commit details

     Copy full SHA for 078f223

     View code at this pointBrowse repository at this point

   • C++: Delete `cpp/tainted-format-string-through-global`

     jketema

     committed
     afe318eView commit details

     Copy full SHA for afe318e

     View code at this pointBrowse repository at this point
8. Commits on Nov 15, 2023

   • C++: Address review comments

     jketema

     committed
     46e6e72View commit details

     Copy full SHA for 46e6e72

     View code at this pointBrowse repository at this point

   • C++: Rewrite `cpp/uncontrolled-process-operation` to not use `DefaultTaintTracking`

     jketema

     committed
     92c1896View commit details

     Copy full SHA for 92c1896

     View code at this pointBrowse repository at this point
9. Commits on Nov 14, 2023

   • Merge branch 'main' into no-dtt-in-tainted-arithmetic

     MathiasVP

     committed
     1623bbaView commit details

     Copy full SHA for 1623bba

     View code at this pointBrowse repository at this point

   • C++: Rewrite 'cpp/cpp/tainted-arithmetic' away from DefaultTaintTracking.

     MathiasVP

     committed
     c950e26View commit details

     Copy full SHA for c950e26

     View code at this pointBrowse repository at this point

   • C++: Block flow out of sinks that are qualifiers. This removes the new result duplication and keeps the new result.

     MathiasVP

     committed
     967bbbcView commit details

     Copy full SHA for 967bbbc

     View code at this pointBrowse repository at this point
10. Commits on Nov 13, 2023

    • C++: Fix failing test and accept test cases.

      MathiasVP

      committed
      cc62683View commit details

      Copy full SHA for cc62683

      View code at this pointBrowse repository at this point
11. Commits on Nov 9, 2023

    • Update cpp/ql/src/Security/CWE/CWE-120/UnboundedWrite.ql

      Show description for 7048190
      

      MathiasVP

      and

      jketema

      authored
      7048190View commit details

      Copy full SHA for 7048190

      View code at this pointBrowse repository at this point
12. Commits on Nov 8, 2023

    • C++: Rewrite 'cpp/unbounded-write' away from DefaultTaintTracking.

      MathiasVP

      committed
      e90803aView commit details

      Copy full SHA for e90803a

      View code at this pointBrowse repository at this point
13. Commits on Oct 31, 2023

    • Merge pull request #14650 from jketema/invalid-experimental

      Show description for 37a536b
      MathiasVP

      authored
      37a536bView commit details

      Copy full SHA for 37a536b

      View code at this pointBrowse repository at this point

    • C++: Drop `experimental` tag from `cpp/invalid-pointer-deref`

      jketema

      committed
      3478890View commit details

      Copy full SHA for 3478890

      View code at this pointBrowse repository at this point

    • C++: Expose a public memset model and use it in the exposure queries.

      MathiasVP

      committed
      4a1bf95View commit details

      Copy full SHA for 4a1bf95

      View code at this pointBrowse repository at this point
14. Commits on Oct 13, 2023

    • Merge pull request #14424 from jketema/rewrite-cgi-xss

      Show description for d56a9f0
      jketema

      authored
      d56a9f0View commit details

      Copy full SHA for d56a9f0

      View code at this pointBrowse repository at this point

    • C++: Fix barrier in `cpp/cgi-xss`

      jketema

      committed
      6167627View commit details

      Copy full SHA for 6167627

      View code at this pointBrowse repository at this point
15. Commits on Oct 12, 2023

    • C++: Remove the hacky flow state since this is no longer needed after #13717.

      MathiasVP

      committed
      64fa6c8View commit details

      Copy full SHA for 64fa6c8

      View code at this pointBrowse repository at this point
16. Commits on Oct 10, 2023

    • C++: Rewrite `cpp/cgi-xss` to not use default taint tracking

      Show description for 3b777c2
      jketema

      committed
      3b777c2View commit details

      Copy full SHA for 3b777c2

      View code at this pointBrowse repository at this point