github / github/codeql

cpp/memory-may-not-be-freed is not in security-and-quality suite

Ouverte
#14,955 1 commentaire 0 réactions 0 personnes assignées Voir sur GitHub
question
Langage dominant
CodeQL
Étoiles
10.1k
Forks
2.1k
Merge moyen
2 j 15 h
PR mergées (30 j)
141

Description

**Description of the issue**

The rule cpp/memory-may-not-be-freed in [cpp/ql/src/Critical/MemoryMayNotBeFreed.ql](https://github.com/github/codeql/blob/fefc02d65052619e13dc245c1db219b1b0897d99/cpp/ql/src/Critical/MemoryMayNotBeFreed.ql) (and many other rules in the same directory) is not in the security-and-quality suite.

This is surprising as it is in the Critical/ directory and detects an important kind of security vulnerability. I would expect it in the security-extended or security-and-quality suite.

cpp/memory-may-not-be-freed lacks the property `@precision`. I believe that is the reason why it is not selected in security-and-quality suite.
https://github.com/github/codeql/blob/fefc02d65052619e13dc245c1db219b1b0897d99/misc/suite-helpers/security-and-quality-selectors.yml#L1-L16

Guide de contribution

Ouvrir le guide de contribution

Évaluation

Cette issue n'a pas encore été évaluée.

Recevez les nouvelles issues par e-mail

Un résumé court des issues GitHub adaptées aux débutants.