False positive: Static field written by instance method by Interlocked API
未关闭
acknowledged
C#
false-positive
not security
- 主要语言
- CodeQL
- 星标
- 10.1k
- 派生
- 2.1k
- 平均合并
- 2 天 15 小时
- 30 天内合并 PR
- 141
描述
See https://github.com/sungam3r/SteroidsDI/security/code-scanning/92 and https://github.com/sungam3r/SteroidsDI/security/code-scanning/93
贡献指南
调研方向
Start with the two linked code-scanning alerts for sungam3r/SteroidsDI and inspect how the Interlocked API is interpreted in the relevant analysis. Confirm why the static-field writes are reported from an instance method, then verify that the alerts no longer appear without suppressing valid findings.
由索引模型根据 Issue 内容生成。
评估
- 领域
- security
- Issue 类型
- 缺陷
- 难度
- 4/5
- 预计耗时
- 3-5 天
- 活跃度
- 停滞
- 描述清晰度
- 需要澄清
- 新手友好度
- 20/100