Skip to content

Implement OutOfBounds package #281

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 29 commits into from
Apr 8, 2023
Merged

Implement OutOfBounds package #281

Show file tree
Hide file tree
Changes from 4 commits
Commits
Show all changes
29 commits
Select commit Hold shift + click to select a range
8539f46
OutOfBounds: WIP libraries
Mar 30, 2023
8c30b0f
Update OutOfBounds.qll
Mar 30, 2023
11406b1
Update OutOfBounds.qll
Mar 30, 2023
667fc33
Update OutOfBounds.qll
Mar 30, 2023
837b90d
Update OutOfBounds.qll
Mar 30, 2023
4427b40
Add ARR38-C
Mar 30, 2023
dfda651
ARR38-C: Update query
Mar 30, 2023
5f8a6f7
Implement OutOfBounds.qll, ARR38-C, and ARR30-C
Apr 5, 2023
d28b90f
Merge branch 'main' into OutOfBounds
Apr 5, 2023
4766e4d
Correct OutOfBounds.qll format
Apr 5, 2023
ba41544
Merge branch 'OutOfBounds' of https://github.com/kraiouchkine/codeql-…
Apr 5, 2023
2696ef9
Update DoNotFormOutOfBoundsPointersOrArraySubscripts.md
Apr 5, 2023
7f766cb
Fix strncat/wcscat param definition and add rules
Apr 5, 2023
406dab5
Add RULE-21-18 test-case
Apr 5, 2023
883ecca
Update RULE-21-17 and RULE-21-18 tests
Apr 5, 2023
e9dd4a8
Update strtok param indices in OutOfBounds library
Apr 5, 2023
76146e4
Refactor OutOfBounds.qll and arg/offset model
Apr 6, 2023
1aa1766
Add test case to ARR30-C
Apr 6, 2023
94a05c4
Correct OutOfBounds.qll formatting
Apr 6, 2023
0f6e747
Resolve performance issue in OutOfBounds.qll
Apr 6, 2023
3b8361a
Expand ARR30-C coverage and test + add comments
Apr 6, 2023
8ef1af9
Fix OutOfBounds.qll format
Apr 6, 2023
b3523be
ARR38-C: Add missing GVN logic
Apr 6, 2023
a8c7dc3
Restrict ARR30-C to reduce FPs and fix performance
Apr 7, 2023
9dd30f0
Remove defining argument nodes from data-flow graph
Apr 7, 2023
2f31431
Correct ARR30-C metadata
Apr 7, 2023
aa4ef08
Merge branch 'main' into OutOfBounds
Apr 7, 2023
03c17ae
Update getNameOrInternalName regex
Apr 7, 2023
ea9b0f4
Merge branch 'main' into OutOfBounds
rvermeulen Apr 7, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions .vscode/tasks.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -248,6 +248,7 @@
"Null",
"OperatorInvariants",
"Operators",
"OutOfBounds",
"Pointers",
"Pointers1",
"Pointers2",
Expand Down
1 change: 1 addition & 0 deletions c/cert/test/rules/ARR38-C/LibraryFunctionArgumentOutOfBounds.expected
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1 @@
No expected results have yet been specified
1 change: 1 addition & 0 deletions c/cert/test/rules/ARR38-C/LibraryFunctionArgumentOutOfBounds.qlref
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1 @@
rules/ARR38-C/LibraryFunctionArgumentOutOfBounds.ql
Loading