hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-27 01:35:13 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
628f85aebcf23ee9a7a944c8ca8d00aefc00b8eb
codeql/java/ql/lib/change-notes/2026-03-28-tainted-arithmetic-bounds-check.md

363 B
Raw Blame History

category
category
minorAnalysis
  • The java/tainted-arithmetic query no longer flags arithmetic expressions that are used directly as an operand of a comparison in if-condition bounds-checking patterns. For example, if (off + len > array.length) is now recognized as a bounds check rather than a potentially vulnerable computation, reducing false positives.