Skip to content

Commit 4e1f772

Browse files
turboturbo
authored
Merge pull request github#11702 from github/turbo/experimental/combined
Introduce the security-experimental CodeQL suite and experimental tag
2 parents 4b47b08 + c3116b3 commit 4e1f772

File tree

159 files changed

+240
-3
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

159 files changed

+240
-3
lines changed

‎CONTRIBUTING.md

Lines changed: 1 addition & 0 deletions

‎cpp/ql/src/codeql-suites/cpp-security-experimental.qls

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,9 @@
1+
- description: Extended and experimental security queries for C and C++
2+
- queries: .
3+
- apply: security-experimental-selectors.yml
4+
from: codeql/suite-helpers
5+
- apply: codeql-suites/exclude-slow-queries.yml
6+
# Excluding problematically slow experimental queries
7+
- exclude:
8+
query path:
9+
- experimental/Security/CWE/CWE-266/IncorrectPrivilegeAssignment.ql

‎cpp/ql/src/experimental/Likely Bugs/ArrayAccessProductFlow.ql

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -6,6 +6,7 @@
66
* @id cpp/off-by-one-array-access
77
* @tags reliability
88
* security
9+
* experimental
910
*/
1011

1112
import cpp

‎cpp/ql/src/experimental/Likely Bugs/OverrunWriteProductFlow.ql

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -7,6 +7,7 @@
77
* @id cpp/overrun-write
88
* @tags reliability
99
* security
10+
* experimental
1011
* external/cwe/cwe-119
1112
* external/cwe/cwe-131
1213
*/

‎cpp/ql/src/experimental/Likely Bugs/RedundantNullCheckParam.ql

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -9,6 +9,7 @@
99
* @tags reliability
1010
* security
1111
* external/cwe/cwe-476
12+
* experimental
1213
*/
1314

1415
import cpp

‎cpp/ql/src/experimental/Security/CWE/CWE-020/LateCheckOfFunctionArgument.ql

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -9,6 +9,7 @@
99
* @precision medium
1010
* @tags correctness
1111
* security
12+
* experimental
1213
* external/cwe/cwe-20
1314
*/
1415

‎cpp/ql/src/experimental/Security/CWE/CWE-020/NoCheckBeforeUnsafePutUser.ql

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -11,6 +11,7 @@
1111
* @problem.severity warning
1212
* @security-severity 7.5
1313
* @tags security
14+
* experimental
1415
* external/cwe/cwe-020
1516
*/
1617

‎cpp/ql/src/experimental/Security/CWE/CWE-078/WordexpTainted.ql

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -8,6 +8,7 @@
88
* @precision high
99
* @id cpp/wordexp-injection
1010
* @tags security
11+
* experimental
1112
* external/cwe/cwe-078
1213
*/
1314

‎cpp/ql/src/experimental/Security/CWE/CWE-1041/FindWrapperFunctions.ql

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -8,6 +8,7 @@
88
* @tags correctness
99
* maintainability
1010
* security
11+
* experimental
1112
* external/cwe/cwe-1041
1213
*/
1314

‎cpp/ql/src/experimental/Security/CWE/CWE-1126/DeclarationOfVariableWithUnnecessarilyWideScope.ql

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -9,6 +9,7 @@
99
* @precision medium
1010
* @tags correctness
1111
* security
12+
* experimental
1213
* external/cwe/cwe-1126
1314
*/
1415

0 commit comments

Comments
 (0)