C++: Generate an SEH exception edge for each call inside a SEH block

github · Dec 13, 2024 · 254d550 · 254d550
1 parent 48820a1
commit 254d550
Show file tree

Hide file tree

Showing 4 changed files with 433 additions and 202 deletions.
diff --git a/cpp/ql/lib/semmle/code/cpp/ir/implementation/raw/internal/TranslatedCall.qll b/cpp/ql/lib/semmle/code/cpp/ir/implementation/raw/internal/TranslatedCall.qll
@@ -361,7 +361,12 @@ class TranslatedFunctionCall extends TranslatedCallExpr, TranslatedDirectCall {
     not exists(MemberFunction func | expr.getTarget() = func and func.isStatic())
   }
 
-  final override predicate mayThrowException(ExceptionEdge e) { this.mustThrowException(e) }
+  final override predicate mayThrowException(ExceptionEdge e) {
+    this.mustThrowException(e)
+    or
+    expr.getEnclosingStmt().getParentStmt*() instanceof MicrosoftTryStmt and
+    e instanceof SehExceptionEdge
+  }
 
   final override predicate mustThrowException(ExceptionEdge e) {
     expr.getTarget() instanceof AlwaysSehThrowingFunction and