codeql-coding-standards icon indicating copy to clipboard operation
codeql-coding-standards copied to clipboard

This repository contains CodeQL queries and libraries which support various Coding Standards.

Results 202 codeql-coding-standards issues
Sort by recently updated
recently updated
newest added

## Description - Improves reporting by providing a more descriptive message of which C extensions were used. - Improves reporting by grouping results generated from a macro and reporting them...

### Affected rules - `RULE-1-2` ### Description This rule currently flags all variable length arrays, and arrays without a specified size, but which are initialized. However, various types of variable...

Difficulty-Medium
Impact-High
false positive/false negative

## Description This PR fixes issue [#665](https://github.com/github/codeql-coding-standards/issues/665). The implementation in [UnnecessaryExposedIdentifierDeclarationShared.qll](https://github.com/github/codeql-coding-standards/blob/main/cpp/common/src/codingstandards/cpp/rules/unnecessaryexposedidentifierdeclarationshared/UnnecessaryExposedIdentifierDeclarationShared.qll#L206) raises a false positive while computing the usage or the scope of variables that are template instantiations or constexpr....

Provide an interface for identifying the link target of a declaration, to simplify the implementation of `RULE-5-8` and `RULE-8-3`.

enhancement
Standard-MISRA-C

### Affected rules - M3-4-1 ### Description M3-4-1 raises a false positive while computing the usage or the scope of variables that are template instantiations or constexpr. ### Example ```cpp...

false positive/false negative

### Affected rules - `A1-1-2` ### Description This rule looks for compilations with no warning flags. However, it will falsely detect `-Wno-*` flags as if they are warning flags. Notably,...

Difficulty-Low
Impact-Medium
false positive/false negative
Standard-AUTOSAR

### Affected rules - A1-1-2 ### Description Currently, A1-1-2 reports compilations that do not specify at least one flag of type `-Wfoo`. However, clang and gcc both give priority to...

Difficulty-Low
Impact-Medium
false positive/false negative

## Description Affected files for which the relevant test output will need to be checked: - [ ] c/cert/src/rules/ARR37-C/DoNotUsePointerArithmeticOnNonArrayObjectPointers.ql - [ ] c/cert/src/rules/ARR39-C/DoNotAddOrSubtractAScaledIntegerToAPointer.ql - [ ] c/cert/src/rules/CON30-C/CleanUpThreadSpecificStorage.ql - [ ]...

Bumps the github_actions group with 1 update in the /.github/workflows directory: [actions/download-artifact](https://github.com/actions/download-artifact). Updates `actions/download-artifact` from 2 to 4 Release notes Sourced from actions/download-artifact's releases. v4.0.0 What's Changed The release of...

dependencies
github_actions

### Affected rules - `RULE-11-9` ### Description Rule 11.9 prohibits the use of `0` as a null pointer constant when assigning to a pointer. However, we do not capture all...

Difficulty-Low
Impact-Medium
false positive/false negative
Standard-MISRA-C