Visitar URL original
cpp: Add 'cpp/mmio-unsanitized-memcpy' query by Tito0015 · Pull Request #22438 · github/codeql · GitHub
Skip to content

cpp: Add 'cpp/mmio-unsanitized-memcpy' query #22438

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
geoffw0 merged 7 commits into from
Sep 18, 2026
Merged

cpp: Add 'cpp/mmio-unsanitized-memcpy' query #22438

Changes from 1 commit
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
b681bc4
cpp: Add 'cpp/mmio-unsanitized-memcpy' query
Tito0015 Aug 27, 2026
e20ec33
cpp: Add change note for mmio-unsanitized-memcpy query
Tito0015 Aug 31, 2026
30544e8
cpp: Move mmio-unsanitized-memcpy to experimental
Tito0015 Sep 2, 2026
56c5f3a
cpp: Drop experimental query id prefix and change note
Tito0015 Sep 3, 2026
5d6e2d4
cpp: fix alert location and update integration test expectations
Tito0015 Sep 4, 2026
ff2416b
cpp: remove non-ASCII character in test file
Tito0015 Sep 4, 2026
e41e090
cpp: address review nits on qhelp references and test header
Tito0015 Sep 17, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
cpp: remove non-ASCII character in test file
  • Loading branch information
@Tito0015
Tito0015 committed Sep 17, 2026
commit ff2416b0bf8228ff4eb656f24b64f05fc7c697d1
2 changes: 1 addition & 1 deletion cpp/ql/test/experimental/query-tests/Security/CWE/CWE-120/MmioUnsanitizedMemcpy/test.c
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -56,7 +56,7 @@ static void good_early_return(char *dst, char *src) {

static void good_constant_size(char *dst, char *src) {
uint32_t len = READ_REG(0x40001000);
memcpy(dst, src, 32); // GOOD — constant size, not tainted sink
memcpy(dst, src, 32); // GOOD
}

static void negative_volatile_global(char *dst, char *src) {
Expand Down