mirror of
https://github.com/github/codeql.git
synced 2026-04-22 23:35:14 +02:00
C++: fix inc.qhelp files and change notes
This commit is contained in:
@@ -2,9 +2,7 @@
|
||||
"-//Semmle//qhelp//EN"
|
||||
"qhelp.dtd">
|
||||
<qhelp>
|
||||
<fragment>
|
||||
<recommendation>
|
||||
<p>Always control the length of buffer copy and buffer write operations. <code>strncpy</code> should be used over <code>strcpy</code>, <code>snprintf</code> over <code>sprintf</code>, and in other cases 'n-variant' functions should be preferred.</p>
|
||||
</recommendation>
|
||||
</fragment>
|
||||
</qhelp>
|
||||
|
||||
@@ -2,7 +2,6 @@
|
||||
"-//Semmle//qhelp//EN"
|
||||
"qhelp.dtd">
|
||||
<qhelp>
|
||||
<fragment>
|
||||
<references>
|
||||
|
||||
<li>CERT C Coding Standard: <a href="https://www.securecoding.cert.org/confluence/display/c/STR31-C.+Guarantee+that+storage+for+strings+has+sufficient+space+for+character+data+and+the+null+terminator">STR31-C. Guarantee that storage for strings has sufficient space for character data and the null terminator</a>.</li>
|
||||
@@ -12,5 +11,4 @@
|
||||
-->
|
||||
|
||||
</references>
|
||||
</fragment>
|
||||
</qhelp>
|
||||
|
||||
@@ -1,2 +1,4 @@
|
||||
lgtm,codescanning
|
||||
---
|
||||
category: newQuery
|
||||
---
|
||||
* A new `cpp/very-likely-overruning-write` query has been added to the default query suite for C/C++. The query reports some results that were formerly flagged by `cpp/overruning-write`.
|
||||
|
||||
Reference in New Issue
Block a user