Real bug queries

[Smaugon]

Hi Fabian, thx for your outstanding work.

I have used the joern for C/C++ for several weeks and read the documents, but I cannot find examples for the types of vulnerabilies in the paper. Wonder why u did not push them on the github. Hope u could show them to more developers.

Thank you!

[fabsx00]

Sample queries are being added here and here:
https://github.com/ShiftLeftSecurity/codepropertygraph/tree/master/semanticcpg/src/test/scala/io/shiftleft/semanticcpg/samplequeries
https://github.com/ShiftLeftSecurity/codepropertygraph/tree/master/dataflowengine/src/test/scala/io/shiftleft/dataflowengine/samplequeries

Leaving this open until we have a notable corpus of queries.
Enjoy.

[fabsx00]

ShiftLeftSecurity/codepropertygraph#473

[fabsx00]

ShiftLeftSecurity/codepropertygraph#480

[Smaugon]

It's a pity that I have to quit my work on joern, still I appreciate that u can show them.
Thx for joern, Good luck to u.