Java: Improve precision of MissingInstanceofInEquals.ql

This commit is contained in:
Anders Schack-Mulligen
2019-06-12 14:05:42 +02:00
parent a25acd0128
commit c199f2e8fe
2 changed files with 39 additions and 40 deletions

View File

@@ -0,0 +1,10 @@
# Improvements to Java analysis
## Changes to existing queries
| **Query** | **Expected impact** | **Change** |
|----------------------------|------------------------|------------------------------------------------------------------|
| Equals method does not inspect argument type (`java/unchecked-cast-in-equals`) | Fewer false positive and more true positive results | Precision has been improved by doing a bit of inter-procedural analysis and relying less on ad-hoc method names. |
## Changes to QL libraries