mirror of
https://github.com/github/codeql.git
synced 2025-12-17 01:03:14 +01:00
839 B
839 B
Improvements to Java analysis
Changes to existing queries
| Query | Expected impact | Change |
|---|---|---|
Equals method does not inspect argument type (java/unchecked-cast-in-equals) |
Fewer false positive and more true positive results | Precision has been improved by doing a bit of inter-procedural analysis and relying less on ad-hoc method names. |
Changes to QL libraries
- The virtual dispatch library has been updated to give more precise dispatch
targets for
Object.toString()calls. This affects all security queries and removes false positives that arose from paths through impossibletoString()calls.