v2.62.0

Release summary

• No new queries were added for this release

• The following changes have been made for this release:

• RULE-5-13-4, M2-13-3 - UnsignedIntegerLiteralsNotAppropriatelySuffixed.ql, MissingUSuffix.ql:

  • Remove FPs in user-defined literals and template instantiations.

• M2-13-3 - cpp/autosar/missing-u-suffix:

  • Remove FPs in user-defined literals and template instantiations.

• INT30-C - UnsignedIntegerOperationsWrapAround.ql:

  • Fixed false positives for /= and %= assignments.

• RULE-8-20-1 - UnsignedOperationWithConstantOperandsWraps.ql:

  • Fixed false positives for /= and %= assignments.
    A7-5-2, RULE-8-2-10: FunctionsCallThemselvesEitherDirectlyOrIndirectly.ql:
    • Fix false positives where callers of recursive functions were incorrectly reported as recursive. Only calls that participate in a recursive cycle are now reported.

• RULE-0-0-1 - UnreachableStatement.ql:

  • Fixed false positives caused by orphan BasicBlock nodes (disconnected from the CFG) that represent expressions rather than statements. These artifacts are generated by the GCC extractor for functions involving virtual calls returning std::variant-based types with non-trivially-destructible alternatives.

• RULE-6-9-2, A3-9-1 - VariableWidthIntegerTypesUsed.qll:

  • Fixed false positives for variables declared with auto or decltype(auto) where the deduced type resolves through fixed-width typedefs (e.g., std::uint32_t) to a built-in integer type. The programmer never wrote a variable-width type name in these cases.

Supported versions

• The LGTM pack is not supported on any released version of LGTM without support from GitHub Professional Services.
• The Code Scanning pack is supported when:
  • Using the CodeQL CLI version 2.21.4 in conjunction with a copy of the CodeQL standard library for C++ (github/codeql) set to the tag codeql-cli/v2.21.4.
  • Using the CodeQL Action or CodeQL runner with the codeql-bundle-v2.21.4.