Open
Description
See: https://discuss.lgtm.com/t/java-false-positives/1787/2
Final fields that are well-known, and for which we don't have the source code (e.g. Long.BYTES
) are not considered ConstantIntegerExpr
in RangeUtils.qll
, so we incorrectly flag some multiplications as potential overflows.