Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

C++: Improve and promote cpp/overflow-buffer #18837

Merged
merged 20 commits into from
Mar 3, 2025
Merged

C++: Improve and promote cpp/overflow-buffer #18837

Changes from 1 commit
Commits
Show all changes
20 commits
Select commit Hold shift + click to select a range
e77ebf0
C++: Test spacing.
geoffw0 Feb 20, 2025
8935599
C++: Additional test cases.
geoffw0 Feb 20, 2025
3aa1ba5
C++: More additional test cases.
geoffw0 Feb 20, 2025
547b082
C++: Even more test cases.
geoffw0 Feb 20, 2025
ae25399
C++: Fix offsetof bug.
geoffw0 Feb 20, 2025
fd32355
C++: Give cpp/overflow-buffer medium precision, and upgrade severity …
geoffw0 Feb 20, 2025
90758b3
C++: Change notes.
geoffw0 Feb 20, 2025
3681ace
C++: Explore negative indices more in tests.
geoffw0 Feb 24, 2025
07004bd
C++: Test cases motivated by a real world FP.
geoffw0 Feb 25, 2025
812315d
C++: Use existing getSize / getRootType to find more generous bounds …
geoffw0 Feb 25, 2025
7d7498e
C++: Avoid problems when a variable has multiple types.
geoffw0 Feb 25, 2025
a7ac6b1
C++: Second change note.
geoffw0 Feb 25, 2025
c41add8
C++: Accept regressions in SAMATE based test cases.
geoffw0 Feb 26, 2025
abb88e3
C++: Add a test file that was internal (results as on main).
geoffw0 Feb 26, 2025
dbab845
C++: Effect of this branch on the new test.
geoffw0 Feb 26, 2025
1354beb
C++: Fix an issue with padding.
geoffw0 Feb 26, 2025
3d19e2a
C++: Static buffer overflow change note.
geoffw0 Feb 27, 2025
51d9162
C++: Another test.
geoffw0 Feb 27, 2025
998bec1
C++: Fix the bug.
geoffw0 Feb 27, 2025
7169c4b
C++: Another attempt to make the fix more solid. I believe it can't …
geoffw0 Feb 28, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
C++: Give cpp/overflow-buffer medium precision, and upgrade severity … 
…so it will appear in security-extended.
  • Loading branch information
@geoffw0
geoffw0 committed Feb 21, 2025
commit fd32355ca805472fab5ab73be174d710b239e403
3 changes: 2 additions & 1 deletion cpp/ql/src/Security/CWE/CWE-119/OverflowBuffer.ql
View file
Original file line number Diff line number Diff line change
@@ -5,8 +5,9 @@
* buffer.
* @kind problem
* @id cpp/overflow-buffer
* @problem.severity recommendation
* @problem.severity warning
* @security-severity 9.3
* @precision medium
* @tags security
* external/cwe/cwe-119
* external/cwe/cwe-121