From 074894298c53a94bb2aa40be187177e14300f8e6 Mon Sep 17 00:00:00 2001 From: Geoffrey White <40627776+geoffw0@users.noreply.github.com> Date: Fri, 31 Aug 2018 16:15:53 +0100 Subject: [PATCH] CPP: Adjust precisions for the CWE-190 queries. --- cpp/ql/src/Security/CWE/CWE-190/ArithmeticTainted.ql | 2 +- cpp/ql/src/Security/CWE/CWE-190/IntegerOverflowTainted.ql | 1 + 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/cpp/ql/src/Security/CWE/CWE-190/ArithmeticTainted.ql b/cpp/ql/src/Security/CWE/CWE-190/ArithmeticTainted.ql index 647d96e85c3..2c60591de62 100644 --- a/cpp/ql/src/Security/CWE/CWE-190/ArithmeticTainted.ql +++ b/cpp/ql/src/Security/CWE/CWE-190/ArithmeticTainted.ql @@ -4,7 +4,7 @@ * not validated can cause overflows. * @kind problem * @problem.severity warning - * @precision medium + * @precision low * @id cpp/tainted-arithmetic * @tags security * external/cwe/cwe-190 diff --git a/cpp/ql/src/Security/CWE/CWE-190/IntegerOverflowTainted.ql b/cpp/ql/src/Security/CWE/CWE-190/IntegerOverflowTainted.ql index 3bb064086d8..c219bbfe104 100644 --- a/cpp/ql/src/Security/CWE/CWE-190/IntegerOverflowTainted.ql +++ b/cpp/ql/src/Security/CWE/CWE-190/IntegerOverflowTainted.ql @@ -5,6 +5,7 @@ * @kind problem * @id cpp/integer-overflow-tainted * @problem.severity warning + * @precision low * @tags security * external/cwe/cwe-190 * external/cwe/cwe-197