DCL30-C: Replace implementation with cpp/return-stack-allocated-memory
#495
Labels
Difficulty-Medium
A false positive or false negative report which is expected to take 1-5 days effort to address
false positive/false negative
An issue related to observed false positives or false negatives.
Impact-High
Comments
lcartey
added
false positive/false negative
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Affected rules
DCL30-CDescription
There have recently been improvements to the C++ standard query for returning stack allocated memory:
https://github.com/github/codeql/blob/4de19b3ec97d4379ef5988bda591d749e1cd0f99/cpp/ql/src/Likely%20Bugs/Memory%20Management/ReturnStackAllocatedMemory.ql#L7
We should adopt this new and improved query which improves both false positive and false negative rates.
The text was updated successfully, but these errors were encountered: