[C++] CWE-020/ExternalAPIs: diff-informed + qlref tests #20231

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Draft

d10c wants to merge 2 commits into github:main from d10c:d10c/cpp-cwe-020-diff-informed

Contributor

d10c commented Aug 15, 2025

Split off from #20073 because
it wasn't clear how to format the MaD yaml to get alerts to show on the test.

Commits:

[TEST] C++: CWE-020/ExternalAPI: add tests based on qlhelp: add tests
[DIFF-INFORMED] C++: (IR) ExternalAPIs: make query diff-informed

d10c added 2 commits

August 15, 2025 11:55


          [TEST] C++: CWE-020/ExternalAPI: add tests based on qlhelp

42d162a


          [DIFF-INFORMED] C++: (IR) ExternalAPIs

2b646fe

https://github.com/d10c/codeql/blob/d10c/diff-informed-phase-3/cpp/ql/src/Security/CWE/CWE-020/UntrustedDataToExternalAPI.ql#L19
https://github.com/d10c/codeql/blob/d10c/diff-informed-phase-3/cpp/ql/src/Security/CWE/CWE-020/IRUntrustedDataToExternalAPI.ql#L20

github-actions bot added the C++ label

d10c mentioned this pull request

C++: Diff-informed queries: phase 3 (non-trivial locations) #20073

Merged

d10c self-assigned this

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

C++