Releases: github/codeql-coding-standards
Releases · github/codeql-coding-standards
v2.1.0
Release summary
- New queries added for the following rule packages: IO2, SideEffects1, Syntax
Supported versions
- The LGTM pack is not supported on any released version of LGTM without support from GitHub Professional Services.
- The Code Scanning pack is supported when:
- Using the CodeQL CLI version
2.7.6in conjunction with a copy of the CodeQL standard library for C++ (github/codeql) set to the tagcodeql-cli/v2.7.6. - Using the CodeQL Action or CodeQL runner with the codeql-bundle-20220120.
- Using the CodeQL CLI version
Appendix: MISRA-C-2012 new queries
New queries added to cover the following rules:
- DIR-4-5 -
IdentifiersInTheSameNameSpaceUnambiguous.ql - RULE-3-1 -
CharacterSequencesAndUsedWithinAComment.ql - RULE-3-2 -
LineSplicingUsedInComments.ql - RULE-4-1 -
OctalAndHexadecimalEscapeSequencesNotTerminated.ql - RULE-4-4 -
SectionsOfCodeShallNotBeCommentedOut.ql - RULE-7-2 -
UOrUSuffixRepresentedInUnsignedType.ql - RULE-7-3 -
LowercaseCharacterLUsedInLiteralSuffix.ql - RULE-12-1 -
UnenclosedSizeofOperand.ql,ImplicitPrecedenceOfOperatorsInExpression.ql - RULE-13-1 -
InitializerListsContainPersistentSideEffects.ql - RULE-13-4 -
ResultOfAnAssignmentOperatorShouldNotBeUsed.ql - RULE-13-5 -
PossibleSuppressedSideEffectInLogicOperatorOperand.ql - RULE-13-6 -
SizeofOperandWithSideEffect.ql
Appendix: CERT-C new queries
New queries added to cover the following rules:
- EXP30-C -
DependenceOnOrderOfScalarEvaluationForSideEffects.ql,DependenceOnOrderOfFunctionArgumentsForSideEffects.ql - EXP44-C -
UnevaluatedOperandWithSideEffect.ql - EXP45-C -
AssignmentsInSelectionStatements.ql - FIO38-C -
DoNotCopyAFileObject.ql - FIO40-C -
ResetStringsOnFgetsOrFgetwsFailure.ql - FIO41-C -
DoNotCallGetcAndPutcWithSideEffects.ql - FIO44-C -
OnlyUseValuesForFsetposThatAreReturnedFromFgetpos.ql
Supported versions
- The LGTM pack is not supported on any released version of LGTM without support from GitHub Professional Services.
- The Code Scanning pack is supported when:
- Using the CodeQL CLI version
2.7.6in conjunction with a copy of the CodeQL standard library for C++ (github/codeql) set to the tagcodeql-cli/v2.7.6. - Using the CodeQL Action or CodeQL runner with the codeql-bundle-20220120.
- Using the CodeQL CLI version
v2.0.0
Release summary
- New queries added for the following rule packages: IO1, Preprocessor1
Supported versions
- The LGTM pack is not supported on any released version of LGTM without support from GitHub Professional Services.
- The Code Scanning pack is supported when:
- Using the CodeQL CLI version
2.6.3in conjunction with a copy of the CodeQL standard library for C++ (github/codeql) set to the tagcodeql-cli/v2.6.3. - Using the CodeQL Action or CodeQL runner with the codeql-bundle-20211005.
- Using the CodeQL CLI version
Appendix: MISRA-C-2012 new queries
New queries added to cover the following rules:
- RULE-20-1 -
IncludeDirectivesPrecededByDirectivesOrComments.ql - RULE-20-2 -
ForbiddenCharactersInHeaderFileName.ql - RULE-20-9 -
IdentifiersUsedInPreprocessorExpression.ql - RULE-20-10 -
PreprocessorHashOperatorsShouldNotBeUsed.ql - RULE-22-6 -
FileUsedAfterClosed.ql
Appendix: CERT-C new queries
New queries added to cover the following rules:
- FIO30-C -
ExcludeUserInputFromFormatStrings.ql - FIO34-C -
DistinguishBetweenCharReadFromAFileAndEofOrWeof.ql,EndOfFileCheckPortability.ql - FIO39-C -
DoNotAlternatelyIOFromAStreamWithoutPositioning.ql - FIO42-C -
CloseFilesWhenTheyAreNoLongerNeeded.ql - FIO46-C -
UndefinedBehaviorAccessingAClosedFile.ql