cpp/memory-may-not-be-freed is not in security-and-quality suite
- Vorherrschende Sprache
- CodeQL
- Sterne
- 10.1k
- Forks
- 2.1k
- Ø Merge
- 2 T. 15 Std.
- Gemergte PRs (30 T.)
- 141
Beschreibung
**Description of the issue**
The rule cpp/memory-may-not-be-freed in [cpp/ql/src/Critical/MemoryMayNotBeFreed.ql](https://github.com/github/codeql/blob/fefc02d65052619e13dc245c1db219b1b0897d99/cpp/ql/src/Critical/MemoryMayNotBeFreed.ql) (and many other rules in the same directory) is not in the security-and-quality suite.
This is surprising as it is in the Critical/ directory and detects an important kind of security vulnerability. I would expect it in the security-extended or security-and-quality suite.
cpp/memory-may-not-be-freed lacks the property `@precision`. I believe that is the reason why it is not selected in security-and-quality suite.
https://github.com/github/codeql/blob/fefc02d65052619e13dc245c1db219b1b0897d99/misc/suite-helpers/security-and-quality-selectors.yml#L1-L16
Beitragsleitfaden
Bewertung
Dieses Issue wurde noch nicht bewertet.