From cac1bef6ea6c72631e8e74b50af900c9e1c70f91 Mon Sep 17 00:00:00 2001 From: Robert Marsh Date: Wed, 21 Apr 2021 11:58:14 -0700 Subject: [PATCH] C++: deprecate cpp/return-stack-allocated-object --- cpp/change-notes/2021-04-21-return-stack-allocated-object.md | 2 ++ cpp/ql/src/Critical/ReturnStackAllocatedObject.ql | 2 ++ 2 files changed, 4 insertions(+) create mode 100644 cpp/change-notes/2021-04-21-return-stack-allocated-object.md diff --git a/cpp/change-notes/2021-04-21-return-stack-allocated-object.md b/cpp/change-notes/2021-04-21-return-stack-allocated-object.md new file mode 100644 index 000000000000..1876f4cf5f7a --- /dev/null +++ b/cpp/change-notes/2021-04-21-return-stack-allocated-object.md @@ -0,0 +1,2 @@ +codescanning +* The 'Pointer to stack object used as return value' (cpp/return-stack-allocated-object) query has been deprecated, and any uses should be replaced with `Returning stack-allocated memory` (cpp/return-stack-allocated-memory). \ No newline at end of file diff --git a/cpp/ql/src/Critical/ReturnStackAllocatedObject.ql b/cpp/ql/src/Critical/ReturnStackAllocatedObject.ql index 353e51daa71a..e3873e487dd2 100644 --- a/cpp/ql/src/Critical/ReturnStackAllocatedObject.ql +++ b/cpp/ql/src/Critical/ReturnStackAllocatedObject.ql @@ -7,6 +7,8 @@ * @tags reliability * security * external/cwe/cwe-562 + * @deprecated This query is not suitable for production use and has been deprecated. Use + * cpp/return-stack-allocated-memory instead. */ import semmle.code.cpp.pointsto.PointsTo