cpp/memory-may-not-be-freed is not in security-and-quality suite
- 主要言語
- CodeQL
- スター
- 10.1k
- フォーク
- 2.1k
- 平均マージ
- 2日 15時間
- マージ済み PR(30日)
- 141
説明
**Description of the issue**
The rule cpp/memory-may-not-be-freed in [cpp/ql/src/Critical/MemoryMayNotBeFreed.ql](https://github.com/github/codeql/blob/fefc02d65052619e13dc245c1db219b1b0897d99/cpp/ql/src/Critical/MemoryMayNotBeFreed.ql) (and many other rules in the same directory) is not in the security-and-quality suite.
This is surprising as it is in the Critical/ directory and detects an important kind of security vulnerability. I would expect it in the security-extended or security-and-quality suite.
cpp/memory-may-not-be-freed lacks the property `@precision`. I believe that is the reason why it is not selected in security-and-quality suite.
https://github.com/github/codeql/blob/fefc02d65052619e13dc245c1db219b1b0897d99/misc/suite-helpers/security-and-quality-selectors.yml#L1-L16
コントリビューションガイド
評価
この issue はまだ評価されていません。