Skip to content

v2.9.0

Pre-release
Pre-release
Compare
Choose a tag to compare
@github-actions github-actions released this 03 Oct 15:53
6437440

Release summary

  • New queries added for the following rule packages: Concurrency4, Declarations2
  • The following changes have been made for this release:
  • M0-1-4 - SingleUsePODVariable.ql
    • This rule no longer considers compiler-generated access to a variable when determining if the variable has a single use.
  • A8-5-3 - AvoidAutoWithBracedInitialization.ql:
    • Fix regression where auto x{0} was no longer detected as a braced initialization with type auto with the latest CodeQL versions.
    • No longer falsely detect cases where braced initialization was not used, but where the inferred type would be std::initializer_list.
  • A7-3-1 - DefinitionNotConsideredForUnqualifiedLookup.ql
    • The locations reported for names occurring in using-declarations has improved in the latest CodeQL versions.
  • Updated the CodeQL version to 2.9.4.

Supported versions

  • The LGTM pack is not supported on any released version of LGTM without support from GitHub Professional Services.
  • The Code Scanning pack is supported when:
    • Using the CodeQL CLI version 2.9.4 in conjunction with a copy of the CodeQL standard library for C++ (github/codeql) set to the tag codeql-cli/v2.9.4.
    • Using the CodeQL Action or CodeQL runner with the codeql-bundle-20220615.

Appendix: CERT-C new queries

New queries added to cover the following rules:

  • CON30-C - CleanUpThreadSpecificStorage.ql
  • CON34-C - AppropriateThreadObjectStorageDurations.ql, ThreadObjectStorageDurationsNotInitialized.ql
  • DCL38-C - DeclaringAFlexibleArrayMember.ql
  • DCL40-C - ExcessLengthNamesIdentifiersNotDistinct.ql, IncompatibleObjectDeclarations.ql, IncompatibleFunctionDeclarations.ql
  • DCL41-C - VariablesInsideSwitchStatement.ql