Skip to content

Promote cpp/unsigned-difference-expression-compared-zero out of experimental#5094

Merged
geoffw0 merged 7 commits into
github:mainfrom
MathiasVP:promote-UnsignedDifferenceExpressionComparedZero
Feb 4, 2021
Merged

Promote cpp/unsigned-difference-expression-compared-zero out of experimental#5094
geoffw0 merged 7 commits into
github:mainfrom
MathiasVP:promote-UnsignedDifferenceExpressionComparedZero

Conversation

@MathiasVP

@MathiasVP MathiasVP commented Feb 4, 2021

Copy link
Copy Markdown
Contributor

This is the final step of https://github.com/github/codeql-c-analysis-team/issues/210. I didn't promote the query to high precision yet as that's been moved to https://github.com/github/codeql-c-analysis-team/issues/226.

@MathiasVP MathiasVP added the C++ label Feb 4, 2021
@MathiasVP MathiasVP requested a review from geoffw0 February 4, 2021 15:27
@MathiasVP MathiasVP requested review from a team and hubwriter as code owners February 4, 2021 15:27

@hubwriter hubwriter left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM - just a few minor observations.

@@ -0,0 +1,2 @@
lgtm

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The other change notes all seem to be lgtm,codescanning.
No codescanning for this?

@MathiasVP MathiasVP Feb 4, 2021

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No. As far as I know, code scanning only runs queries with @precision high, and this one is currently at medium. We hope that this query can be promoted to high precision in the future, but we want to try it out on LGTM first.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

That's true by default, but there's alternate suites that are recommended to users that want to run more queries. We might want a separate note for code scanning that mentions the security-extended and security-and-quality suites.

Comment thread cpp/ql/src/Security/CWE/CWE-191/UnsignedDifferenceExpressionComparedZero.qhelp Outdated
Comment thread cpp/ql/src/Security/CWE/CWE-191/UnsignedDifferenceExpressionComparedZero.qhelp Outdated
Comment thread cpp/ql/src/Security/CWE/CWE-191/UnsignedDifferenceExpressionComparedZero.qhelp Outdated
Co-authored-by: hubwriter <hubwriter@github.com>
…thub.com:MathiasVP/ql into promote-UnsignedDifferenceExpressionComparedZero

@geoffw0 geoffw0 left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM.

@geoffw0 geoffw0 merged commit 69c7c83 into github:main Feb 4, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants