mirror of
https://github.com/github/codeql.git
synced 2025-12-16 16:53:25 +01:00
689 B
689 B
5.2.3
Minor Analysis Improvements
- A bug has been fixed in the data flow analysis, which means that flow through calls using the
basequalifier may now be tracked more accurately. - Added summary models for
System.Xml.XmlReader,System.Xml.XmlTextReaderandSystem.Xml.XmlDictionaryReader. - Models-as-data summaries for byte and char arrays and pointers now treat the entire collection as tainted, reflecting their common use as string alternatives.
- The default taint tracking configuration now allows implicit reads from collections at sinks and in additional flow steps. This increases flow coverage for many taint tracking queries and helps reduce false negatives.