CodeQL Cli - false positive - Missing Dispose call on local IDisposable on MemoryStream
Đang mở
acknowledged
C#
false-positive
not security
- Ngôn ngữ chính
- CodeQL
- Star
- 10.1k
- Fork
- 2.1k
- Merge trung bình
- 2 ngày 15 giờ
- Pull request đã merge (30 ngày)
- 141
Mô tả
**Description of the false positive**
Error type: Missing Dispose call on local IDisposable
I ran csharp-lgtm-full.qls on my codebase. The result flag out usage of System.IO.MemoryStream class. This class implements IDisposable. However, the documentation says that MemoryStream does not hold on to any resources which needs to be disposed. (https://docs.microsoft.com/en-us/dotnet/api/system.io.memorystream?view=net-6.0)
Code that is flagged
`response.SetupProperty(r => r.Body, new MemoryStream());`
I think this class should be added to ignore list based on the MSDN documentation.
Hướng dẫn đóng góp
Đánh giá
Issue này chưa được đánh giá.