Release summary

• New queries added for the following rule packages: Conversions2
• The following changes have been made for this release:
  • M5-2-2 -PointerToAVirtualBaseClassCastToAPointer.ql:
    • Report casts where the from or to types are typedefs to virtual base classes or derived classes.
    • Report casts to a reference type which is a derived type.
    • Report casts where the base class is the parent of a virtual base class.
    • The alert message has been updated to refer to the virtual base class derivation.
  • RULE-1-2,RULE-23-3,RULE-23-5,RULE-23-6:
    • Results that occur in nested macro invocations are now reported in the macro that defines the contravening code, rather than the macro which is first expanded.
    • Results the occur in arguments to macro invocations are now reported in at the macro invocation site, instead of the macro definition site.

Supported versions

• The LGTM pack is not supported on any released version of LGTM without support from GitHub Professional Services.
• The Code Scanning pack is supported when:
  • Using the CodeQL CLI version2.20.7 in conjunction with a copy of the CodeQL standard library for C++ (github/codeql) set to the tagcodeql-cli/v2.20.7.
  • Using the CodeQL Action or CodeQL runner with thecodeql-bundle-v2.20.7.

Appendix: MISRA-C++-2023 new queries

New queries added to cover the following rules:

• RULE-8-2-1 -VirtualBaseClassCastToDerived.ql
• RULE-8-2-2 -NoCStyleOrFunctionalCasts.ql
• RULE-8-2-6 -IntToPointerCastProhibited.ql
• RULE-8-2-7 -NoPointerToIntegralCast.ql
• RULE-8-2-8 -PointerToIntegralCast.ql
• RULE-9-2-1 -NoStandaloneTypeCastExpression.ql