github / github/codeql

cpp/memory-may-not-be-freed is not in security-and-quality suite

Aberta
#14,955 1 comentário 0 reações 0 responsáveis Ver no GitHub
question
Linguagem predominante
CodeQL
Estrelas
10.1k
Forks
2.1k
Merge médio
2d 15h
PRs com merge (30d)
141

Descrição

**Description of the issue**

The rule cpp/memory-may-not-be-freed in [cpp/ql/src/Critical/MemoryMayNotBeFreed.ql](https://github.com/github/codeql/blob/fefc02d65052619e13dc245c1db219b1b0897d99/cpp/ql/src/Critical/MemoryMayNotBeFreed.ql) (and many other rules in the same directory) is not in the security-and-quality suite.

This is surprising as it is in the Critical/ directory and detects an important kind of security vulnerability. I would expect it in the security-extended or security-and-quality suite.

cpp/memory-may-not-be-freed lacks the property `@precision`. I believe that is the reason why it is not selected in security-and-quality suite.
https://github.com/github/codeql/blob/fefc02d65052619e13dc245c1db219b1b0897d99/misc/suite-helpers/security-and-quality-selectors.yml#L1-L16

Guia de contribuição

Abrir o guia de contribuição

Avaliação

Esta issue ainda não foi avaliada.

Receba novas issues na sua caixa de entrada

Um resumo curto de issues do GitHub para quem está começando.