Ben Rodes
Pycvc4
Any plans to update CVC4 and move towards using pycvc4? The current supported CVC4 version has bugs and general feature limitations that are solved by later cvc4 releases, but they...
In z3 I can have string index and value arrays and access symbolic elements, but trying something similar in pysmt results in an exception. Details below. I'm new to pysmt,...
I'm looking for general assistance on how to properly use codeql with barrier guards when the guard condition may not be computed in the guard itself, but instead also data...
On lgtm.com I ran the following query c++ on openssl/openssl: ``` import cpp from Call c where not c.getTarget().hasDefinition() and c.getTarget().hasGlobalName("BUF_MEM_free") select c, "TEST" ``` It produces several instances of...
I'm trying to detect sanitizing/barrier guards in more complex control flow. In another BarrierGarud issue I opened (https://github.com/github/codeql/issues/10011), we established how to address complex dataflow into the barrier guard, but...
The current docker noted here https://github.com/github/semantic/packages/11609 no longer supports --json, yet this appears to be fixed here https://github.com/github/semantic/commit/a064c535cc25b0ecbd3f5b067b1460cdbe49168f
Does semantic properly parse call by reference for php? E.g., ``` function foo(&$a) { $a++; } ``` I was experimenting with this function using the latest semanatic docker, and I...
I'm using the 'latest' docker tag. PHP dowhile loops have the body/condition inverted (the condition is listed in the body and the body in the condition). ```
Overhaul of try/catch to support differentiating SEH vs C++ exception handling in IR generation.
Failing code scanning alert fixes affecting experimental crypto CPP code specifically.