Skip to content

1.6.0.md

Latest commit

 

History

History
13 lines (9 loc) · 1.13 KB

1.6.0.md

File metadata and controls

13 lines (9 loc) · 1.13 KB

1.6.0

Query Metadata Changes

  • The @security-severity metadata of cpp/cgi-xss has been increased from 6.1 (medium) to 7.8 (high).

Minor Analysis Improvements

  • The "Extraction warnings" (cpp/diagnostics/extraction-warnings) diagnostics query no longer yields ExtractionRecoverableWarnings for build-mode: none databases. The results were found to significantly increase the sizes of the produced SARIF files, making them unprocessable in some cases.
  • Fixed an issue with the "Suspicious add with sizeof" (cpp/suspicious-add-sizeof) query causing false positive results in build-mode: none databases.
  • Fixed an issue with the "Uncontrolled format string" (cpp/tainted-format-string) query involving certain kinds of formatting function implementations.
  • Fixed an issue with the "Wrong type of arguments to formatting function" (cpp/wrong-type-format-argument) query causing false positive results in build-mode: none databases.
  • Fixed an issue with the "Multiplication result converted to larger type" (cpp/integer-multiplication-cast-to-long) query causing false positive results in build-mode: none databases.