Skip to content

Commit cf96035

Browse files
committed
C++: Suspicious pointer scaling: @precision medium
This query is not producing good enough results to justify `@precision high`. It's fundamentally looking for a pattern that should correlate with memory management errors, but it doesn't look for the errors themselves.
1 parent 58285c0 commit cf96035

File tree

2 files changed

+2
-1
lines changed

2 files changed

+2
-1
lines changed

change-notes/1.22/analysis-cpp.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -11,6 +11,7 @@
1111

1212
| **Query** | **Expected impact** | **Change** |
1313
|----------------------------|------------------------|------------------------------------------------------------------|
14+
| Suspicious pointer scaling (`cpp/suspicious-pointer-scaling`) | Lower precision | The precision of this query has been reduced to "medium". This coding pattern is used intentionally and safely in a number of real-world projects. Results are no longer displayed on LGTM unless you choose to display them. |
1415

1516
## Changes to QL libraries
1617

cpp/ql/src/Security/CWE/CWE-468/IncorrectPointerScaling.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@
44
* can cause buffer overflow conditions.
55
* @kind problem
66
* @problem.severity warning
7-
* @precision high
7+
* @precision medium
88
* @id cpp/suspicious-pointer-scaling
99
* @tags security
1010
* external/cwe/cwe-468

0 commit comments

Comments
 (0)