C++: fix inc.qhelp files and change notes

This commit is contained in:
Paolo Tranquilli
2022-01-12 08:52:20 +00:00
committed by GitHub
parent 7b4300e4cf
commit 64d15d6226
3 changed files with 3 additions and 5 deletions

View File

@@ -2,9 +2,7 @@
"-//Semmle//qhelp//EN"
"qhelp.dtd">
<qhelp>
<fragment>
<recommendation>
<p>Always control the length of buffer copy and buffer write operations. <code>strncpy</code> should be used over <code>strcpy</code>, <code>snprintf</code> over <code>sprintf</code>, and in other cases 'n-variant' functions should be preferred.</p>
</recommendation>
</fragment>
</qhelp>

View File

@@ -2,7 +2,6 @@
"-//Semmle//qhelp//EN"
"qhelp.dtd">
<qhelp>
<fragment>
<references>
<li>CERT C Coding Standard: <a href="https://www.securecoding.cert.org/confluence/display/c/STR31-C.+Guarantee+that+storage+for+strings+has+sufficient+space+for+character+data+and+the+null+terminator">STR31-C. Guarantee that storage for strings has sufficient space for character data and the null terminator</a>.</li>
@@ -12,5 +11,4 @@
-->
</references>
</fragment>
</qhelp>

View File

@@ -1,2 +1,4 @@
lgtm,codescanning
---
category: newQuery
---
* A new `cpp/very-likely-overruning-write` query has been added to the default query suite for C/C++. The query reports some results that were formerly flagged by `cpp/overruning-write`.