github/codeql-coding-standardsPublic

NotificationsYou must be signed in to change notification settings
Fork67
Star155

Commitbe29857

committed

Add risk assessment tags to CERT queries

1 parent0b27939 commitbe29857Copy full SHA for be29857

File tree

232 files changed

+1165

-0

lines changed

c/cert/src/rules
- ARR30-C
  - DoNotFormOutOfBoundsPointersOrArraySubscripts.ql
- ARR32-C
  - VariableLengthArraySizeNotInValidRange.ql
- ARR36-C
  - DoNotRelatePointersThatDoNotReferToTheSameArray.ql
  - DoNotSubtractPointersThatDoNotReferToTheSameArray.ql
- ARR37-C
  - DoNotUsePointerArithmeticOnNonArrayObjectPointers.ql
- ARR38-C
  - LibraryFunctionArgumentOutOfBounds.ql
- ARR39-C
  - DoNotAddOrSubtractAScaledIntegerToAPointer.ql
- CON30-C
  - CleanUpThreadSpecificStorage.ql
- CON31-C
  - DoNotAllowAMutexToGoOutOfScopeWhileLocked.ql
  - DoNotDestroyAMutexWhileItIsLocked.ql
- CON32-C
  - PreventDataRacesWithMultipleThreads.ql
- CON33-C
  - RaceConditionsWhenUsingLibraryFunctions.ql
- CON34-C
  - AppropriateThreadObjectStorageDurations.ql
  - ThreadObjectStorageDurationsNotInitialized.ql
- CON35-C
  - DeadlockByLockingInPredefinedOrder.ql
- CON36-C
  - WrapFunctionsThatCanSpuriouslyWakeUpInLoop.ql
- CON37-C
  - DoNotCallSignalInMultithreadedProgram.ql
- CON38-C
  - PreserveSafetyWhenUsingConditionVariables.ql
- CON39-C
  - ThreadWasPreviouslyJoinedOrDetached.ql
- CON40-C
  - AtomicVariableTwiceInExpression.ql
- CON41-C
  - WrapFunctionsThatCanFailSpuriouslyInLoop.ql
- DCL30-C
  - AppropriateStorageDurationsFunctionReturn.ql
  - AppropriateStorageDurationsStackAdressEscape.ql
- DCL31-C
  - DeclareIdentifiersBeforeUsingThem.ql
- DCL37-C
  - DoNotDeclareOrDefineAReservedIdentifier.ql
- DCL38-C
  - DeclaringAFlexibleArrayMember.ql
- DCL39-C
  - InformationLeakageAcrossTrustBoundariesC.ql
- DCL40-C
  - ExcessLengthNamesIdentifiersNotDistinct.ql
  - IncompatibleFunctionDeclarations.ql
  - IncompatibleObjectDeclarations.ql
- DCL41-C
  - VariablesInsideSwitchStatement.ql
- ENV30-C
  - DoNotModifyTheReturnValueOfCertainFunctions.ql
- ENV31-C
  - EnvPointerIsInvalidAfterCertainOperations.ql
- ENV32-C
  - ExitHandlersMustReturnNormally.ql
- ENV33-C
  - DoNotCallSystem.ql
- ENV34-C
  - DoNotStorePointersReturnedByEnvFunctions.ql
  - DoNotStorePointersReturnedByEnvironmentFunWarn.ql
- ERR30-C
  - ErrnoNotSetToZero.ql
  - ErrnoReadBeforeReturn.ql
  - FunctionCallBeforeErrnoCheck.ql
  - SetlocaleMightSetErrno.ql
- ERR32-C
  - DoNotRelyOnIndeterminateValuesOfErrno.ql
- ERR33-C
  - DetectAndHandleStandardLibraryErrors.ql
- EXP30-C
  - DependenceOnOrderOfFunctionArgumentsForSideEffects.ql
  - DependenceOnOrderOfScalarEvaluationForSideEffects.ql
- EXP32-C
  - DoNotAccessVolatileObjectWithNonVolatileReference.ql
- EXP33-C
  - DoNotReadUninitializedMemory.ql
- EXP34-C
  - DoNotDereferenceNullPointers.ql
- EXP35-C
  - DoNotModifyObjectsWithTemporaryLifetime.ql
- EXP36-C
  - DoNotCastPointerToMoreStrictlyAlignedPointerType.ql
- EXP37-C
  - CallPOSIXOpenWithCorrectArgumentCount.ql
  - DoNotCallFunctionPointerWithIncompatibleType.ql
  - DoNotCallFunctionsWithIncompatibleArguments.ql
- EXP39-C
  - DoNotAccessVariableViaPointerOfIncompatibleType.ql
- EXP40-C
  - DoNotModifyConstantObjects.ql
- EXP42-C
  - DoNotComparePaddingData.ql
- EXP43-C
  - DoNotPassAliasedPointerToRestrictQualifiedParam.ql
  - RestrictPointerReferencesOverlappingObject.ql
- EXP44-C
  - UnevaluatedOperandWithSideEffect.ql
- EXP45-C
  - AssignmentsInSelectionStatements.ql
- EXP46-C
  - DoNotUseABitwiseOperatorWithABooleanLikeOperand.ql
- FIO30-C
  - ExcludeUserInputFromFormatStrings.ql
- FIO32-C
  - DoNotPerformFileOperationsOnDevices.ql
- FIO34-C
  - DistinguishBetweenCharReadFromAFileAndEofOrWeof.ql
  - EndOfFileCheckPortability.ql
- FIO37-C
  - SuccessfulFgetsOrFgetwsMayReturnAnEmptyString.ql
- FIO38-C
  - DoNotCopyAFileObject.ql
- FIO39-C
  - DoNotAlternatelyIOFromAStreamWithoutPositioning.ql
- FIO40-C
  - ResetStringsOnFgetsOrFgetwsFailure.ql
- FIO41-C
  - DoNotCallGetcAndPutcWithSideEffects.ql
- FIO42-C
  - CloseFilesWhenTheyAreNoLongerNeeded.ql
- FIO44-C
  - OnlyUseValuesForFsetposThatAreReturnedFromFgetpos.ql
- FIO45-C
  - ToctouRaceConditionsWhileAccessingFiles.ql
- FIO46-C
  - UndefinedBehaviorAccessingAClosedFile.ql
- FIO47-C
  - UseValidSpecifiers.ql
  - WrongNumberOfFormatArguments.ql
  - WrongTypeFormatArguments.ql
- FLP30-C
  - FloatingPointLoopCounters.ql
- FLP32-C
  - UncheckedRangeDomainPoleErrors.ql
- FLP34-C
  - UncheckedFloatingPointConversion.ql
- FLP36-C
  - IntToFloatPreservePrecision.ql
- FLP37-C
  - MemcmpUsedToCompareFloats.ql
- INT30-C
  - UnsignedIntegerOperationsWrapAround.ql
- INT31-C
  - IntegerConversionCausesDataLoss.ql
- INT32-C
  - SignedIntegerOverflow.ql
- INT33-C
  - DivOrRemByZero.ql
- INT34-C
  - ExprShiftedbyNegativeOrGreaterPrecisionOperand.ql
- INT35-C
  - UseCorrectIntegerPrecisions.ql
- INT36-C
  - ConvertingAPointerToIntegerOrIntegerToPointer.ql
- MEM30-C
  - DoNotAccessFreedMemory.ql
- MEM31-C
  - FreeMemoryWhenNoLongerNeededCert.ql
- MEM33-C
  - AllocStructsWithAFlexibleArrayMemberDynamically.ql
  - CopyStructsWithAFlexibleArrayMemberDynamically.ql
- MEM34-C
  - OnlyFreeMemoryAllocatedDynamicallyCert.ql
- MEM35-C
  - InsufficientMemoryAllocatedForObject.ql
- MEM36-C
  - DoNotModifyAlignmentOfMemoryWithRealloc.ql
- MSC30-C
  - RandUsedForGeneratingPseudorandomNumbers.ql
- MSC32-C
  - ProperlySeedPseudorandomNumberGenerators.ql
- MSC33-C
  - DoNotPassInvalidDataToTheAsctimeFunction.ql
- MSC37-C
  - ControlFlowReachesTheEndOfANonVoidFunction.ql
- MSC38-C
  - DoNotTreatAPredefinedIdentifierAsObject.ql
- MSC39-C
  - DoNotCallVaArgOnAVaListThatHasAnIndeterminateValue.ql
- MSC40-C
  - DoNotViolateInLineLinkageConstraints.ql
- PRE31-C
  - SideEffectsInArgumentsToUnsafeMacros.ql
- PRE32-C
  - MacroOrFunctionArgsContainHashToken.ql
- SIG30-C
  - CallOnlyAsyncSafeFunctionsWithinSignalHandlers.ql
- SIG31-C
  - DoNotAccessSharedObjectsInSignalHandlers.ql
- SIG34-C
  - DoNotCallSignalFromInterruptibleSignalHandlers.ql
- SIG35-C
  - DoNotReturnFromAComputationalExceptionHandler.ql
- STR30-C
  - DoNotAttemptToModifyStringLiterals.ql
- STR31-C
  - StringsHasSufficientSpaceForTheNullTerminator.ql
- STR32-C
  - NonNullTerminatedToFunctionThatExpectsAString.ql
- STR34-C
  - CastCharBeforeConvertingToLargerSizes.ql
- STR37-C
  - ToCharacterHandlingFunctionsRepresentableAsUChar.ql
- STR38-C
  - DoNotConfuseNarrowAndWideFunctions.ql
cpp/cert/src/rules
- CON50-CPP
  - DoNotAllowAMutexToGoOutOfScopeWhileLocked.ql
  - DoNotDestroyAMutexWhileItIsLocked.ql
- CON51-CPP
  - EnsureActivelyHeldLocksAreReleasedOnExceptionalConditions.ql
- CON52-CPP
  - PreventBitFieldAccessFromMultipleThreads.ql
- CON53-CPP
  - DeadlockByLockingInPredefinedOrder.ql
- CON54-CPP
  - WrapFunctionsThatCanSpuriouslyWakeUpInLoop.ql
- CON55-CPP
  - PreserveSafetyWhenUsingConditionVariables.ql
- CON56-CPP
  - DoNotSpeculativelyLockALockedNonRecursiveMutex.ql
  - LockedALockedNonRecursiveMutexAudit.ql
- CTR50-CPP
  - ContainerAccessWithoutRangeCheckCert.ql
- CTR51-CPP
  - UsesValidContainerElementAccess.ql
- CTR52-CPP
  - GuaranteeGenericCppLibraryFunctionsDoNotOverflow.ql
- CTR53-CPP
  - UseValidIteratorRanges.ql
- CTR54-CPP
  - DoNotSubtractIteratorsForDifferentContainers.ql
- CTR55-CPP
  - DoNotUseAnAdditiveOperatorOnAnIterator.ql
- CTR56-CPP
  - DoNotUsePointerArithmeticOnPolymorphicObjects.ql
- CTR57-CPP
  - ProvideAValidOrderingPredicate.ql
- CTR58-CPP
  - PredicateFunctionObjectsShouldNotBeMutable.ql
- DCL50-CPP
  - DoNotDefineACStyleVariadicFunction.ql
- DCL51-CPP
  - EnumeratorReusesReservedName.ql
  - FunctionReusesReservedName.ql
  - ObjectReusesReservedName.ql
  - RedefiningOfStandardLibraryName.ql
  - ReuseOfReservedIdentifier.ql
  - UseOfDoubleUnderscoreReservedPrefix.ql
  - UseOfReservedLiteralSuffixIdentifier.ql
  - UseOfSingleUnderscoreReservedPrefix.ql
- DCL53-CPP
  - LocalConstructorInitializedObjectHidesIdentifier.ql
  - LocalFunctionDeclaration.ql
- DCL54-CPP
  - SingularOverloadOfMemoryFunction.ql
- DCL55-CPP
  - InformationLeakageAcrossTrustBoundaries.ql
- DCL56-CPP
  - CyclesDuringStaticObjectInit.ql
- DCL57-CPP
  - DoNotLetExceptionsEscapeFromDestructorsOrDeallocationFunctions.ql
- DCL58-CPP
  - ModificationOfTheStandardNamespaces.ql
- DCL59-CPP
  - UnnamedNamespaceInHeaderFile.ql
- DCL60-CPP
  - OneDefinitionRuleNotObeyed.ql
- ERR50-CPP
  - ConditionVariablePostConditionFailedCert.ql
  - ExitHandlerThrowsExceptionCert.ql
  - ExplicitAbruptTerminationCert.ql
  - JoinableThreadCopiedOrDestroyedCert.ql
  - RethrowNestedWithoutCaptureCert.ql
- ERR51-CPP
  - HandleAllExceptions.ql
- ERR52-CPP
  - DoNotUseSetjmpOrLongjmp.ql
- ERR53-CPP
  - DestroyedValueReferencedInConstructorDestructorCatchBlock.ql
- ERR54-CPP
  - CatchBlockShadowingCert.ql
- ERR55-CPP
  - HonorExceptionSpecifications.ql
- ERR56-CPP
  - GuaranteeExceptionSafety.ql
- ERR57-CPP
  - DoNotLeakResourcesWhenHandlingExceptions.ql
- ERR58-CPP
  - HandleAllExceptionsThrownBeforeMainBeginsExecuting.ql
- ERR59-CPP
  - DoNotThrowAnExceptionAcrossExecutionBoundaries.ql
- ERR60-CPP
  - ExceptionObjectsMustBeNothrowCopyConstructible.ql
- ERR61-CPP
  - CatchExceptionsByLvalueReference.ql
- ERR62-CPP
  - DetectErrorsWhenConvertingAStringToANumber.ql
- EXP50-CPP
  - DoNotDependOnTheOrderOfEvaluationForSideEffectsInFunctionCallsAsFunctionArguments.ql
  - DoNotDependOnTheOrderOfScalarObjectEvaluationForSideEffects.ql
- EXP51-CPP
  - DoNotDeleteAnArrayThroughAPointerOfTheIncorrectType.ql
- EXP52-CPP
  - DoNotRelyOnSideEffectsInDeclTypeOperand.ql
  - DoNotRelyOnSideEffectsInDeclValExpression.ql
  - DoNotRelyOnSideEffectsInNoExceptOperand.ql
  - DoNotRelyOnSideEffectsInSizeOfOperand.ql
  - DoNotRelyOnSideEffectsInTypeIdOperand.ql
- EXP53-CPP
  - DoNotReadUninitializedMemory.ql
- EXP54-CPP
  - ObjectAccessedAfterLifetimeCert.ql
  - ObjectAccessedBeforeLifetimeCert.ql
- EXP55-CPP
  - RemoveConstOrVolatileQualificationCert.ql
- EXP56-CPP
  - FunctionWithMismatchedLanguageLinkage.ql
- EXP57-CPP
  - CastOfPointerToIncompleteClass.ql
  - DeletingPointerToIncompleteClass.ql
- EXP58-CPP
  - PassNonTrivialObjectToVaStart.ql
  - PassPromotablePrimitiveTypeToVaStart.ql
  - PassReferenceTypeToVaStart.ql
- EXP59-CPP
  - OffsetUsedOnInvalidTypeOrMember.ql
- EXP60-CPP
  - DoNotPassANonstandardObjectAcrossBoundaries.ql
- EXP61-CPP
  - EscapingLambdaObjectWithCaptureByReference.ql
  - ReturningLambdaObjectWithCaptureByReference.ql
- EXP62-CPP
  - MemcmpUsedToAccessObjectRepresentation.ql
  - MemcpyUsedToAccessObjectRepresentation.ql
  - MemsetUsedToAccessObjectRepresentation.ql
- EXP63-CPP
  - DoNotRelyOnTheValueOfAMovedFromObject.ql
- FIO50-CPP
  - InterleavedInputOutputWithoutPosition.ql
- FIO51-CPP
  - CloseFilesWhenTheyAreNoLongerNeeded.ql
- INT50-CPP
  - DoNotCastToAnOutOfRangeEnumerationValue.ql
- MEM50-CPP
  - UseAfterFree.ql
- MEM51-CPP
  - ProperlyDeallocateDynamicallyAllocatedResources.ql
- MEM52-CPP
  - DetectAndHandleMemoryAllocationErrors.ql
- MEM53-CPP
  - MissingConstructorCallForManuallyManagedObject.ql
  - MissingDestructorCallForManuallyManagedObject.ql
- MEM54-CPP
  - PlacementNewInsufficientStorageCert.ql
  - PlacementNewNotProperlyAlignedCert.ql
- MEM55-CPP
  - OperatorDeleteMissingPartnerCert.ql
  - ThrowingNoThrowOperatorNewDeleteCert.ql
  - ThrowingOperatorNewReturnsNullCert.ql
  - ThrowingOperatorNewThrowsInvalidExceptionCert.ql
- MEM56-CPP
  - OwnedPointerValueStoredInUnrelatedSmartPointerCert.ql
- MEM57-CPP
  - UsingDefaultOperatorNewForOverAlignedTypes.ql
- MSC50-CPP
  - DoNotUseRandForGeneratingPseudorandomNumbers.ql
- MSC51-CPP
  - BadlySeededRandomNumberGenerator.ql
- MSC52-CPP
  - NonVoidFunctionDoesNotReturnCert.ql
- MSC53-CPP
  - FunctionNoReturnAttributeConditionCert.ql
- MSC54-CPP
  - SignalHandlerMustBeAPlainOldFunction.ql
- OOP50-CPP
  - DoNotInvokeVirtualFunctionsFromConstructorsOrDestructors.ql
- OOP51-CPP
  - DoNotSliceDerivedObjects.ql
- OOP52-CPP
  - DoNotDeleteAPolymorphicObjectWithoutAVirtualDestructor.ql
- OOP53-CPP
  - UseCanonicalOrderForMemberInit.ql
- OOP54-CPP
  - GracefullyHandleSelfCopyAssignment.ql
- OOP55-CPP
  - MemberAccessWithUninitializedStaticPointerToMember.ql
  - UseOfPointerToMemberToAccessNonexistentMember.ql
  - UseOfPointerToMemberToAccessUndefinedMember.ql
- OOP56-CPP
  - HonorNewReplacementHandlerRequirements.ql
  - HonorTerminationReplacementHandlerRequirements.ql
- OOP57-CPP
  - PreferSpecialMemberFunctionsAndOverloadedOperatorsToCStandardLibraryFunctions.ql
- OOP58-CPP
  - CopyOperationsMustNotMutateTheSourceObject.ql
- STR50-CPP
  - BasicStringMayNotBeNullTerminatedCert.ql
  - OperationMayNotNullTerminateCStyleStringCert.ql
- STR51-CPP
  - DoNotAttemptToCreateAStringFromANullPointer.ql
- STR52-CPP
  - UseValidReferencesForElementsOfString.ql
- STR53-CPP
  - RangeCheckStringElementAccess.ql

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

232 files changed

+1165

-0

lines changed

`‎c/cert/src/rules/ARR30-C/DoNotFormOutOfBoundsPointersOrArraySubscripts.ql`

Lines changed: 5 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -9,6 +9,11 @@`
`9`	`9`	`* @tags external/cert/id/arr30-c`
`10`	`10`	`* correctness`
`11`	`11`	`* security`
	`12`	`+ * external/cert/severity/high`
	`13`	`+ * external/cert/likelihood/likely`
	`14`	`+ * external/cert/remediation-cost/high`
	`15`	`+ * external/cert/priority/p9`
	`16`	`+ * external/cert/level/l2`
`12`	`17`	`* external/cert/obligation/rule`
`13`	`18`	`*/`
`14`	`19`

`‎c/cert/src/rules/ARR32-C/VariableLengthArraySizeNotInValidRange.ql`

Lines changed: 5 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -9,6 +9,11 @@`
`9`	`9`	`* @tags external/cert/id/arr32-c`
`10`	`10`	`* correctness`
`11`	`11`	`* security`
	`12`	`+ * external/cert/severity/high`
	`13`	`+ * external/cert/likelihood/probable`
	`14`	`+ * external/cert/remediation-cost/high`
	`15`	`+ * external/cert/priority/p6`
	`16`	`+ * external/cert/level/l2`
`12`	`17`	`* external/cert/obligation/rule`
`13`	`18`	`*/`
`14`	`19`

`‎c/cert/src/rules/ARR36-C/DoNotRelatePointersThatDoNotReferToTheSameArray.ql`

Lines changed: 5 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -8,6 +8,11 @@`
`8`	`8`	`* @problem.severity warning`
`9`	`9`	`* @tags external/cert/id/arr36-c`
`10`	`10`	`* correctness`
	`11`	`+ * external/cert/severity/medium`
	`12`	`+ * external/cert/likelihood/probable`
	`13`	`+ * external/cert/remediation-cost/medium`
	`14`	`+ * external/cert/priority/p8`
	`15`	`+ * external/cert/level/l2`
`11`	`16`	`* external/cert/obligation/rule`
`12`	`17`	`*/`
`13`	`18`

`‎c/cert/src/rules/ARR36-C/DoNotSubtractPointersThatDoNotReferToTheSameArray.ql`

Lines changed: 5 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -8,6 +8,11 @@`
`8`	`8`	`* @problem.severity warning`
`9`	`9`	`* @tags external/cert/id/arr36-c`
`10`	`10`	`* correctness`
	`11`	`+ * external/cert/severity/medium`
	`12`	`+ * external/cert/likelihood/probable`
	`13`	`+ * external/cert/remediation-cost/medium`
	`14`	`+ * external/cert/priority/p8`
	`15`	`+ * external/cert/level/l2`
`11`	`16`	`* external/cert/obligation/rule`
`12`	`17`	`*/`
`13`	`18`

`‎c/cert/src/rules/ARR37-C/DoNotUsePointerArithmeticOnNonArrayObjectPointers.ql`

Lines changed: 5 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -8,6 +8,11 @@`
`8`	`8`	`* @problem.severity error`
`9`	`9`	`* @tags external/cert/id/arr37-c`
`10`	`10`	`* correctness`
	`11`	`+ * external/cert/severity/medium`
	`12`	`+ * external/cert/likelihood/probable`
	`13`	`+ * external/cert/remediation-cost/medium`
	`14`	`+ * external/cert/priority/p8`
	`15`	`+ * external/cert/level/l2`
`11`	`16`	`* external/cert/obligation/rule`
`12`	`17`	`*/`
`13`	`18`

`‎c/cert/src/rules/ARR38-C/LibraryFunctionArgumentOutOfBounds.ql`

Lines changed: 5 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -9,6 +9,11 @@`
`9`	`9`	`* @tags external/cert/id/arr38-c`
`10`	`10`	`* correctness`
`11`	`11`	`* security`
	`12`	`+ * external/cert/severity/high`
	`13`	`+ * external/cert/likelihood/likely`
	`14`	`+ * external/cert/remediation-cost/medium`
	`15`	`+ * external/cert/priority/p18`
	`16`	`+ * external/cert/level/l1`
`12`	`17`	`* external/cert/obligation/rule`
`13`	`18`	`*/`
`14`	`19`

`‎c/cert/src/rules/ARR39-C/DoNotAddOrSubtractAScaledIntegerToAPointer.ql`

Lines changed: 5 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -8,6 +8,11 @@`
`8`	`8`	`* @problem.severity error`
`9`	`9`	`* @tags external/cert/id/arr39-c`
`10`	`10`	`* correctness`
	`11`	`+ * external/cert/severity/high`
	`12`	`+ * external/cert/likelihood/probable`
	`13`	`+ * external/cert/remediation-cost/high`
	`14`	`+ * external/cert/priority/p6`
	`15`	`+ * external/cert/level/l2`
`11`	`16`	`* external/cert/obligation/rule`
`12`	`17`	`*/`
`13`	`18`

`‎c/cert/src/rules/CON30-C/CleanUpThreadSpecificStorage.ql`

Lines changed: 5 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -9,6 +9,11 @@`
`9`	`9`	`* @tags external/cert/id/con30-c`
`10`	`10`	`* correctness`
`11`	`11`	`* concurrency`
	`12`	`+ * external/cert/severity/medium`
	`13`	`+ * external/cert/likelihood/unlikely`
	`14`	`+ * external/cert/remediation-cost/medium`
	`15`	`+ * external/cert/priority/p4`
	`16`	`+ * external/cert/level/l3`
`12`	`17`	`* external/cert/obligation/rule`
`13`	`18`	`*/`
`14`	`19`

`‎c/cert/src/rules/CON31-C/DoNotAllowAMutexToGoOutOfScopeWhileLocked.ql`

Lines changed: 5 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -9,6 +9,11 @@`
`9`	`9`	`* @tags external/cert/id/con31-c`
`10`	`10`	`* correctness`
`11`	`11`	`* concurrency`
	`12`	`+ * external/cert/severity/medium`
	`13`	`+ * external/cert/likelihood/probable`
	`14`	`+ * external/cert/remediation-cost/high`
	`15`	`+ * external/cert/priority/p4`
	`16`	`+ * external/cert/level/l3`
`12`	`17`	`* external/cert/obligation/rule`
`13`	`18`	`*/`
`14`	`19`

`‎c/cert/src/rules/CON31-C/DoNotDestroyAMutexWhileItIsLocked.ql`

Lines changed: 5 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -8,6 +8,11 @@`
`8`	`8`	`* @tags external/cert/id/con31-c`
`9`	`9`	`* correctness`
`10`	`10`	`* concurrency`
	`11`	`+ * external/cert/severity/medium`
	`12`	`+ * external/cert/likelihood/probable`
	`13`	`+ * external/cert/remediation-cost/high`
	`14`	`+ * external/cert/priority/p4`
	`15`	`+ * external/cert/level/l3`
`11`	`16`	`* external/cert/obligation/rule`
`12`	`17`	`*/`
`13`	`18`

`‎c/cert/src/rules/CON32-C/PreventDataRacesWithMultipleThreads.ql`

Lines changed: 5 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -9,6 +9,11 @@`
`9`	`9`	`* @tags external/cert/id/con32-c`
`10`	`10`	`* correctness`
`11`	`11`	`* concurrency`
	`12`	`+ * external/cert/severity/medium`
	`13`	`+ * external/cert/likelihood/probable`
	`14`	`+ * external/cert/remediation-cost/medium`
	`15`	`+ * external/cert/priority/p8`
	`16`	`+ * external/cert/level/l2`
`12`	`17`	`* external/cert/obligation/rule`
`13`	`18`	`*/`
`14`	`19`

`‎c/cert/src/rules/CON33-C/RaceConditionsWhenUsingLibraryFunctions.ql`

Lines changed: 5 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -8,6 +8,11 @@`
`8`	`8`	`* @tags external/cert/id/con33-c`
`9`	`9`	`* correctness`
`10`	`10`	`* concurrency`
	`11`	`+ * external/cert/severity/medium`
	`12`	`+ * external/cert/likelihood/probable`
	`13`	`+ * external/cert/remediation-cost/high`
	`14`	`+ * external/cert/priority/p4`
	`15`	`+ * external/cert/level/l3`
`11`	`16`	`* external/cert/obligation/rule`
`12`	`17`	`*/`
`13`	`18`

`‎c/cert/src/rules/CON34-C/AppropriateThreadObjectStorageDurations.ql`

Lines changed: 6 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -9,6 +9,12 @@`
`9`	`9`	`* @tags external/cert/id/con34-c`
`10`	`10`	`* correctness`
`11`	`11`	`* concurrency`
	`12`	`+ * external/cert/recommendation/con34-c`
	`13`	`+ * external/cert/severity/medium`
	`14`	`+ * external/cert/likelihood/probable`
	`15`	`+ * external/cert/remediation-cost/high`
	`16`	`+ * external/cert/priority/p4`
	`17`	`+ * external/cert/level/l3`
`12`	`18`	`* external/cert/obligation/rule`
`13`	`19`	`*/`
`14`	`20`

`‎c/cert/src/rules/CON34-C/ThreadObjectStorageDurationsNotInitialized.ql`

Lines changed: 6 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -10,6 +10,12 @@`
`10`	`10`	`* external/cert/audit`
`11`	`11`	`* correctness`
`12`	`12`	`* concurrency`
	`13`	`+ * external/cert/recommendation/con34-c`
	`14`	`+ * external/cert/severity/medium`
	`15`	`+ * external/cert/likelihood/probable`
	`16`	`+ * external/cert/remediation-cost/high`
	`17`	`+ * external/cert/priority/p4`
	`18`	`+ * external/cert/level/l3`
`13`	`19`	`* external/cert/obligation/rule`
`14`	`20`	`*/`
`15`	`21`

`‎c/cert/src/rules/CON35-C/DeadlockByLockingInPredefinedOrder.ql`

Lines changed: 5 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -9,6 +9,11 @@`
`9`	`9`	`* @tags external/cert/id/con35-c`
`10`	`10`	`* correctness`
`11`	`11`	`* concurrency`
	`12`	`+ * external/cert/severity/low`
	`13`	`+ * external/cert/likelihood/probable`
	`14`	`+ * external/cert/remediation-cost/medium`
	`15`	`+ * external/cert/priority/p4`
	`16`	`+ * external/cert/level/l3`
`12`	`17`	`* external/cert/obligation/rule`
`13`	`18`	`*/`
`14`	`19`

`‎c/cert/src/rules/CON36-C/WrapFunctionsThatCanSpuriouslyWakeUpInLoop.ql`

Lines changed: 5 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -9,6 +9,11 @@`
`9`	`9`	`* @tags external/cert/id/con36-c`
`10`	`10`	`* correctness`
`11`	`11`	`* concurrency`
	`12`	`+ * external/cert/severity/low`
	`13`	`+ * external/cert/likelihood/unlikely`
	`14`	`+ * external/cert/remediation-cost/medium`
	`15`	`+ * external/cert/priority/p2`
	`16`	`+ * external/cert/level/l3`
`12`	`17`	`* external/cert/obligation/rule`
`13`	`18`	`*/`
`14`	`19`

`‎c/cert/src/rules/CON37-C/DoNotCallSignalInMultithreadedProgram.ql`

Lines changed: 5 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -9,6 +9,11 @@`
`9`	`9`	`* @tags external/cert/id/con37-c`
`10`	`10`	`* correctness`
`11`	`11`	`* concurrency`
	`12`	`+ * external/cert/severity/low`
	`13`	`+ * external/cert/likelihood/probable`
	`14`	`+ * external/cert/remediation-cost/low`
	`15`	`+ * external/cert/priority/p6`
	`16`	`+ * external/cert/level/l2`
`12`	`17`	`* external/cert/obligation/rule`
`13`	`18`	`*/`
`14`	`19`

`‎c/cert/src/rules/CON38-C/PreserveSafetyWhenUsingConditionVariables.ql`

Lines changed: 5 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -9,6 +9,11 @@`
`9`	`9`	`* @tags external/cert/id/con38-c`
`10`	`10`	`* correctness`
`11`	`11`	`* concurrency`
	`12`	`+ * external/cert/severity/low`
	`13`	`+ * external/cert/likelihood/unlikely`
	`14`	`+ * external/cert/remediation-cost/medium`
	`15`	`+ * external/cert/priority/p2`
	`16`	`+ * external/cert/level/l3`
`12`	`17`	`* external/cert/obligation/rule`
`13`	`18`	`*/`
`14`	`19`

`‎c/cert/src/rules/CON39-C/ThreadWasPreviouslyJoinedOrDetached.ql`

Lines changed: 5 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -9,6 +9,11 @@`
`9`	`9`	`* @tags external/cert/id/con39-c`
`10`	`10`	`* correctness`
`11`	`11`	`* concurrency`
	`12`	`+ * external/cert/severity/low`
	`13`	`+ * external/cert/likelihood/likely`
	`14`	`+ * external/cert/remediation-cost/medium`
	`15`	`+ * external/cert/priority/p6`
	`16`	`+ * external/cert/level/l2`
`12`	`17`	`* external/cert/obligation/rule`
`13`	`18`	`*/`
`14`	`19`

`‎c/cert/src/rules/CON40-C/AtomicVariableTwiceInExpression.ql`

Lines changed: 5 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -9,6 +9,11 @@`
`9`	`9`	`* @tags external/cert/id/con40-c`
`10`	`10`	`* correctness`
`11`	`11`	`* concurrency`
	`12`	`+ * external/cert/severity/medium`
	`13`	`+ * external/cert/likelihood/probable`
	`14`	`+ * external/cert/remediation-cost/medium`
	`15`	`+ * external/cert/priority/p8`
	`16`	`+ * external/cert/level/l2`
`12`	`17`	`* external/cert/obligation/rule`
`13`	`18`	`*/`
`14`	`19`

`‎c/cert/src/rules/CON41-C/WrapFunctionsThatCanFailSpuriouslyInLoop.ql`

Lines changed: 5 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -9,6 +9,11 @@`
`9`	`9`	`* @tags external/cert/id/con41-c`
`10`	`10`	`* correctness`
`11`	`11`	`* concurrency`
	`12`	`+ * external/cert/severity/low`
	`13`	`+ * external/cert/likelihood/unlikely`
	`14`	`+ * external/cert/remediation-cost/medium`
	`15`	`+ * external/cert/priority/p2`
	`16`	`+ * external/cert/level/l3`
`12`	`17`	`* external/cert/obligation/rule`
`13`	`18`	`*/`
`14`	`19`

`‎c/cert/src/rules/DCL30-C/AppropriateStorageDurationsFunctionReturn.ql`

Lines changed: 5 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -8,6 +8,11 @@`
`8`	`8`	`* @problem.severity error`
`9`	`9`	`* @tags external/cert/id/dcl30-c`
`10`	`10`	`* correctness`
	`11`	`+ * external/cert/severity/high`
	`12`	`+ * external/cert/likelihood/probable`
	`13`	`+ * external/cert/remediation-cost/high`
	`14`	`+ * external/cert/priority/p6`
	`15`	`+ * external/cert/level/l2`
`11`	`16`	`* external/cert/obligation/rule`
`12`	`17`	`*/`
`13`	`18`

`‎c/cert/src/rules/DCL30-C/AppropriateStorageDurationsStackAdressEscape.ql`

Lines changed: 5 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -8,6 +8,11 @@`
`8`	`8`	`* @problem.severity error`
`9`	`9`	`* @tags external/cert/id/dcl30-c`
`10`	`10`	`* correctness`
	`11`	`+ * external/cert/severity/high`
	`12`	`+ * external/cert/likelihood/probable`
	`13`	`+ * external/cert/remediation-cost/high`
	`14`	`+ * external/cert/priority/p6`
	`15`	`+ * external/cert/level/l2`
`11`	`16`	`* external/cert/obligation/rule`
`12`	`17`	`*/`
`13`	`18`

`‎c/cert/src/rules/DCL31-C/DeclareIdentifiersBeforeUsingThem.ql`

Lines changed: 5 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -8,6 +8,11 @@`
`8`	`8`	`* @tags external/cert/id/dcl31-c`
`9`	`9`	`* correctness`
`10`	`10`	`* readability`
	`11`	`+ * external/cert/severity/low`
	`12`	`+ * external/cert/likelihood/unlikely`
	`13`	`+ * external/cert/remediation-cost/low`
	`14`	`+ * external/cert/priority/p3`
	`15`	`+ * external/cert/level/l3`
`11`	`16`	`* external/cert/obligation/rule`
`12`	`17`	`*/`
`13`	`18`

`‎c/cert/src/rules/DCL37-C/DoNotDeclareOrDefineAReservedIdentifier.ql`

Lines changed: 5 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -9,6 +9,11 @@`
`9`	`9`	`* correctness`
`10`	`10`	`* maintainability`
`11`	`11`	`* readability`
	`12`	`+ * external/cert/severity/low`
	`13`	`+ * external/cert/likelihood/unlikely`
	`14`	`+ * external/cert/remediation-cost/low`
	`15`	`+ * external/cert/priority/p3`
	`16`	`+ * external/cert/level/l3`
`12`	`17`	`* external/cert/obligation/rule`
`13`	`18`	`*/`
`14`	`19`

`‎c/cert/src/rules/DCL38-C/DeclaringAFlexibleArrayMember.ql`

Lines changed: 5 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -10,6 +10,11 @@`
`10`	`10`	`* correctness`
`11`	`11`	`* maintainability`
`12`	`12`	`* readability`
	`13`	`+ * external/cert/severity/low`
	`14`	`+ * external/cert/likelihood/unlikely`
	`15`	`+ * external/cert/remediation-cost/low`
	`16`	`+ * external/cert/priority/p3`
	`17`	`+ * external/cert/level/l3`
`13`	`18`	`* external/cert/obligation/rule`
`14`	`19`	`*/`
`15`	`20`

`‎c/cert/src/rules/DCL39-C/InformationLeakageAcrossTrustBoundariesC.ql`

Lines changed: 5 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -8,6 +8,11 @@`
`8`	`8`	`* @problem.severity error`
`9`	`9`	`* @tags external/cert/id/dcl39-c`
`10`	`10`	`* security`
	`11`	`+ * external/cert/severity/low`
	`12`	`+ * external/cert/likelihood/unlikely`
	`13`	`+ * external/cert/remediation-cost/high`
	`14`	`+ * external/cert/priority/p1`
	`15`	`+ * external/cert/level/l3`
`11`	`16`	`* external/cert/obligation/rule`
`12`	`17`	`*/`
`13`	`18`

`‎c/cert/src/rules/DCL40-C/ExcessLengthNamesIdentifiersNotDistinct.ql`

Lines changed: 5 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -9,6 +9,11 @@`
`9`	`9`	`* correctness`
`10`	`10`	`* maintainability`
`11`	`11`	`* readability`
	`12`	`+ * external/cert/severity/low`
	`13`	`+ * external/cert/likelihood/unlikely`
	`14`	`+ * external/cert/remediation-cost/medium`
	`15`	`+ * external/cert/priority/p2`
	`16`	`+ * external/cert/level/l3`
`12`	`17`	`* external/cert/obligation/rule`
`13`	`18`	`*/`
`14`	`19`

`‎c/cert/src/rules/DCL40-C/IncompatibleFunctionDeclarations.ql`

Lines changed: 5 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -11,6 +11,11 @@`
`11`	`11`	`* correctness`
`12`	`12`	`* maintainability`
`13`	`13`	`* readability`
	`14`	`+ * external/cert/severity/low`
	`15`	`+ * external/cert/likelihood/unlikely`
	`16`	`+ * external/cert/remediation-cost/medium`
	`17`	`+ * external/cert/priority/p2`
	`18`	`+ * external/cert/level/l3`
`14`	`19`	`* external/cert/obligation/rule`
`15`	`20`	`*/`
`16`	`21`

`‎c/cert/src/rules/DCL40-C/IncompatibleObjectDeclarations.ql`

Lines changed: 5 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -10,6 +10,11 @@`
`10`	`10`	`* correctness`
`11`	`11`	`* maintainability`
`12`	`12`	`* readability`
	`13`	`+ * external/cert/severity/low`
	`14`	`+ * external/cert/likelihood/unlikely`
	`15`	`+ * external/cert/remediation-cost/medium`
	`16`	`+ * external/cert/priority/p2`
	`17`	`+ * external/cert/level/l3`
`13`	`18`	`* external/cert/obligation/rule`
`14`	`19`	`*/`
`15`	`20`

`‎c/cert/src/rules/DCL41-C/VariablesInsideSwitchStatement.ql`

Lines changed: 5 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -10,6 +10,11 @@`
`10`	`10`	`* correctness`
`11`	`11`	`* maintainability`
`12`	`12`	`* readability`
	`13`	`+ * external/cert/severity/medium`
	`14`	`+ * external/cert/likelihood/unlikely`
	`15`	`+ * external/cert/remediation-cost/medium`
	`16`	`+ * external/cert/priority/p4`
	`17`	`+ * external/cert/level/l3`
`13`	`18`	`* external/cert/obligation/rule`
`14`	`19`	`*/`
`15`	`20`

`‎c/cert/src/rules/ENV30-C/DoNotModifyTheReturnValueOfCertainFunctions.ql`

Lines changed: 5 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -8,6 +8,11 @@`
`8`	`8`	`* @problem.severity warning`
`9`	`9`	`* @tags external/cert/id/env30-c`
`10`	`10`	`* correctness`
	`11`	`+ * external/cert/severity/low`
	`12`	`+ * external/cert/likelihood/probable`
	`13`	`+ * external/cert/remediation-cost/medium`
	`14`	`+ * external/cert/priority/p4`
	`15`	`+ * external/cert/level/l3`
`11`	`16`	`* external/cert/obligation/rule`
`12`	`17`	`*/`
`13`	`18`

`‎c/cert/src/rules/ENV31-C/EnvPointerIsInvalidAfterCertainOperations.ql`

Lines changed: 5 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -8,6 +8,11 @@`
`8`	`8`	`* @problem.severity error`
`9`	`9`	`* @tags external/cert/id/env31-c`
`10`	`10`	`* correctness`
	`11`	`+ * external/cert/severity/low`
	`12`	`+ * external/cert/likelihood/probable`
	`13`	`+ * external/cert/remediation-cost/medium`
	`14`	`+ * external/cert/priority/p4`
	`15`	`+ * external/cert/level/l3`
`11`	`16`	`* external/cert/obligation/rule`
`12`	`17`	`*/`
`13`	`18`

0 commit comments

Comments

(0)

Movatterモバイル変換

File tree

232 files changed

Some content is hidden

232 files changed

0 commit comments