Skip to content

Conversation

@jbj
Copy link
Contributor

@jbj jbj commented Nov 30, 2018

With this PR, I think the change notes cover all the improvements we've made from 1.18 to 1.19. I've looked through all the PRs against this repo by myself, @dave-bartolomeo and @rdmarsh2 to see what was missing from the change notes.

The next step is that @felicity-semmle edits the change notes for consistency, language, etc.

@jbj jbj added the C++ label Nov 30, 2018
@jbj jbj added this to the 1.19 milestone Nov 30, 2018
@jbj jbj requested a review from a team as a code owner November 30, 2018 14:41
@jbj
Copy link
Contributor Author

jbj commented Nov 30, 2018

I just sneaked a deprecation notice into this PR, along with a change note for it. There's unfortunately no way to deprecate a qll file, so the deprecation is in text only.

| Memory is never freed | Fewer false positive results | This query now accounts for C++ _placement new_, which returns a pointer that does not need to be freed. |
| Missing return statement (`cpp/missing-return`) | Visible by default | The precision of this query has been increased from 'medium' to 'high', which makes it visible by default in LGTM. It was 'medium' in release 1.17 and 1.18 because it had false positives due to an extractor bug that was fixed in 1.18. |
| Missing return statement | Fewer false positive results | The query is now produces correct results when a function returns a template-dependent type, or makes a non-returning call to another function. |
| Multiplication result converted to larger type (`cpp/integer-multiplication-cast-to-long`) | Fewer false positive results | Char-typed numbers are no longer considered to potentially large. |
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

to -> to be?

| Missing return statement (`cpp/missing-return`) | Visible by default | The precision of this query has been increased from 'medium' to 'high', which makes it visible by default in LGTM. It was 'medium' in release 1.17 and 1.18 because it had false positives due to an extractor bug that was fixed in 1.18. |
| Missing return statement | Fewer false positive results | The query is now produces correct results when a function returns a template-dependent type, or makes a non-returning call to another function. |
| Multiplication result converted to larger type (`cpp/integer-multiplication-cast-to-long`) | Fewer false positive results | Char-typed numbers are no longer considered to potentially large. |
| Non-virtual destructor in base class (`cpp/virtual-destructor`) | Fewer false positive results | This query was renamed from "No virtual destructor" and moved from file name `AV Rule 78.ql` to `NonVirtualDestructorInBaseClass.ql`. The new version ignores base classes with non-public destructors since we consider those to be adequately protected. |
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I don't like the phrasing "renamed" and "moved" here as it suggests that AV Rule 78.ql no longer exists. I think we should say that it was "copied".

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I agree. I also find my explanation here to be more convoluted that it ought to be.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I've attempted to update the explanation now. I made it more precise but possibly even more convoluted.

@geoffw0
Copy link
Contributor

geoffw0 commented Dec 3, 2018

👍

Presumably this needs a review from someone in @Semmle/doc.

Copy link
Contributor

@geoffw0 geoffw0 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM.

@geoffw0 geoffw0 merged commit 436ee55 into github:rc/1.19 Dec 3, 2018
cklin pushed a commit that referenced this pull request May 23, 2022
Suites: Switch to the `queries` directive
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants