26997800c9
As recommended by CodeQL this change replaces
cpp/potential-buffer-overflow with cpp/overrunning-write-with-float
and cpp/overrunning-write.
Enables:
1. cpp/overrunning-write
- @name Likely overrunning write
- @description Buffer write operations that do not control the length
data written may overflow
- @kind problem
- @problem.severity error
- @security-severity 9.3
- @precision high
- @id cpp/very-likely-overrunning-write
- @tags reliability
- security
- external/cwe/cwe-120
- external/cwe/cwe-787
- external/cwe/cwe-805
2. cpp/overrunning-write-with-float
- @name Potentially overrunning write with float to string conversion
- @description Buffer write operations that do not control the length
of data written may overflow when floating point inputs
take extreme values.
- @kind problem
- @problem.severity error
- @security-severity 9.3
- @precision medium
- @id cpp/overrunning-write-with-float
- @tags reliability
- security
- external/cwe/cwe-120
- external/cwe/cwe-787
- external/cwe/cwe-805
3. cpp/very-likely-overrunning-write
- @name Likely overrunning write
- @description Buffer write operations that do not control the length
of data written may overflow
- @kind problem
- @problem.severity error
- @security-severity 9.3
- @precision high
- @id cpp/very-likely-overrunning-write
- @tags reliability
- security
- external/cwe/cwe-120
- external/cwe/cwe-787
- external/cwe/cwe-805
- CWEs:
- https://cwe.mitre.org/data/definitions/120.html
- https://cwe.mitre.org/data/definitions/787.html
- https://cwe.mitre.org/data/definitions/805.html
Cc: Sean Brogan <sean.brogan@microsoft.com>
Cc: Michael Kubacki <mikuback@linux.microsoft.com>
Cc: Michael D Kinney <michael.d.kinney@intel.com>
Signed-off-by: Michael Kubacki <michael.kubacki@microsoft.com>
Reviewed-by: Michael D Kinney <michael.d.kinney@intel.com>
Reviewed-by: Oliver Smith-Denny <osd@smith-denny.com>
25 lines
611 B
Plaintext
25 lines
611 B
Plaintext
---
|
|
- description: EDK2 (C++) queries
|
|
|
|
# Bring in all queries from the official cpp-queries suite so individual queries can be explicitly enabled.
|
|
|
|
- queries: '.'
|
|
from: codeql/cpp-queries
|
|
|
|
# Enable individual queries below.
|
|
|
|
- include:
|
|
id: cpp/conditionallyuninitializedvariable
|
|
- include:
|
|
id: cpp/infinite-loop-with-unsatisfiable-exit-condition
|
|
- include:
|
|
id: cpp/overflow-buffer
|
|
- include:
|
|
id: cpp/overrunning-write
|
|
- include:
|
|
id: cpp/overrunning-write-with-float
|
|
- include:
|
|
id: cpp/pointer-overflow-check
|
|
- include:
|
|
id: cpp/very-likely-overrunning-write
|