codeql-coding-standards icon indicating copy to clipboard operation
codeql-coding-standards copied to clipboard

`DCL30-C`: Replace implementation with cpp/return-stack-allocated-memory

Open lcartey opened this issue 2 years ago • 0 comments

Affected rules

  • DCL30-C

Description

There have recently been improvements to the C++ standard query for returning stack allocated memory: https://github.com/github/codeql/blob/4de19b3ec97d4379ef5988bda591d749e1cd0f99/cpp/ql/src/Likely%20Bugs/Memory%20Management/ReturnStackAllocatedMemory.ql#L7

We should adopt this new and improved query which improves both false positive and false negative rates.

lcartey avatar Jan 19 '24 10:01 lcartey