v2.9.0
Pre-release
Pre-release
Release summary
- New queries added for the following rule packages: Concurrency4, Declarations2
- The following changes have been made for this release:
M0-1-4
-SingleUsePODVariable.ql
- This rule no longer considers compiler-generated access to a variable when determining if the variable has a single use.
A8-5-3
-AvoidAutoWithBracedInitialization.ql
:- Fix regression where
auto x{0}
was no longer detected as a braced initialization with typeauto
with the latest CodeQL versions. - No longer falsely detect cases where braced initialization was not used, but where the inferred type would be
std::initializer_list
.
- Fix regression where
A7-3-1
-DefinitionNotConsideredForUnqualifiedLookup.ql
- The locations reported for names occurring in using-declarations has improved in the latest CodeQL versions.
- Updated the CodeQL version to
2.9.4
.
Supported versions
- The LGTM pack is not supported on any released version of LGTM without support from GitHub Professional Services.
- The Code Scanning pack is supported when:
- Using the CodeQL CLI version
2.9.4
in conjunction with a copy of the CodeQL standard library for C++ (github/codeql
) set to the tagcodeql-cli/v2.9.4
. - Using the CodeQL Action or CodeQL runner with the codeql-bundle-20220615.
- Using the CodeQL CLI version
Appendix: CERT-C new queries
New queries added to cover the following rules:
- CON30-C -
CleanUpThreadSpecificStorage.ql
- CON34-C -
AppropriateThreadObjectStorageDurations.ql
,ThreadObjectStorageDurationsNotInitialized.ql
- DCL38-C -
DeclaringAFlexibleArrayMember.ql
- DCL40-C -
ExcessLengthNamesIdentifiersNotDistinct.ql
,IncompatibleObjectDeclarations.ql
,IncompatibleFunctionDeclarations.ql
- DCL41-C -
VariablesInsideSwitchStatement.ql