You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: cpp/ql/src/CHANGELOG.md
+2-1Lines changed: 2 additions & 1 deletion
Original file line number
Diff line number
Diff line change
@@ -7,9 +7,10 @@
7
7
### Minor Analysis Improvements
8
8
9
9
* The "Cleartext transmission of sensitive information" (`cpp/cleartext-transmission`) query has been further improved to reduce false positive results, and upgraded from `medium` to `high` precision.
10
+
* The "Cleartext transmission of sensitive information" (`cpp/cleartext-transmission`) query now finds more results, where a password is stored in a struct field or class member variable.
10
11
* The `cpp/cleartext-storage-file` query has been improved, removing false positives where data is written to a standard output stream.
11
12
* The `cpp/cleartext-storage-buffer` query has been updated to use the `semmle.code.cpp.dataflow.TaintTracking` library.
12
-
* The "Cleartext transmission of sensitive information" (`cpp/cleartext-transmission`) query now finds more results, where a password is stored in a struct field or class member variable.
13
+
* The `cpp/world-writable-file-creation` query now only detects `open` and `openat` calls with the `O_CREAT`or `O_TMPFILE` flag.
Copy file name to clipboardExpand all lines: cpp/ql/src/change-notes/released/0.0.9.md
+2-1Lines changed: 2 additions & 1 deletion
Original file line number
Diff line number
Diff line change
@@ -7,6 +7,7 @@
7
7
### Minor Analysis Improvements
8
8
9
9
* The "Cleartext transmission of sensitive information" (`cpp/cleartext-transmission`) query has been further improved to reduce false positive results, and upgraded from `medium` to `high` precision.
10
+
* The "Cleartext transmission of sensitive information" (`cpp/cleartext-transmission`) query now finds more results, where a password is stored in a struct field or class member variable.
10
11
* The `cpp/cleartext-storage-file` query has been improved, removing false positives where data is written to a standard output stream.
11
12
* The `cpp/cleartext-storage-buffer` query has been updated to use the `semmle.code.cpp.dataflow.TaintTracking` library.
12
-
* The "Cleartext transmission of sensitive information" (`cpp/cleartext-transmission`) query now finds more results, where a password is stored in a struct field or class member variable.
13
+
* The `cpp/world-writable-file-creation` query now only detects `open` and `openat` calls with the `O_CREAT`or `O_TMPFILE` flag.
0 commit comments