Skip to content

Comments

C++: Add support for SAX2XMLReader in the CWE-611 XXE query.#9047

Merged
MathiasVP merged 5 commits intogithub:mainfrom
geoffw0:xxe6
May 10, 2022
Merged

C++: Add support for SAX2XMLReader in the CWE-611 XXE query.#9047
MathiasVP merged 5 commits intogithub:mainfrom
geoffw0:xxe6

Conversation

@geoffw0
Copy link
Contributor

@geoffw0 geoffw0 commented May 5, 2022

Support for SAX2XMLReader in the CWE-611 XXE query.

Change note covered by the one in recent PR #8948.

@geoffw0 geoffw0 added C++ no-change-note-required This PR does not need a change note labels May 5, 2022
@geoffw0 geoffw0 requested a review from a team as a code owner May 5, 2022 15:43
Copy link

@github-advanced-security github-advanced-security bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Found 3 vulnerabilities.

Copy link
Contributor

@MathiasVP MathiasVP left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM other than a small comment. Since this PR involves joining with global value numbers, should we maybe run DCA on it?

@geoffw0
Copy link
Contributor Author

geoffw0 commented May 9, 2022

I've started a DCA run.

@geoffw0
Copy link
Contributor Author

geoffw0 commented May 10, 2022

DCA LGTM. The query actually ran a bit faster with this change, I don't know if that's wobble or our getClassAndName changes paying off perhaps?

Copy link
Contributor

@MathiasVP MathiasVP left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!

@MathiasVP MathiasVP merged commit a7fe37a into github:main May 10, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

C++ no-change-note-required This PR does not need a change note

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants