v2.41.0

Release summary

• New queries added for the following rule packages: DeadCode2
• The following changes have been made for this release:
  • RULE-10-1, RULE-10-3, RULE-10-4, RULE-10-5, RULE-10-6, RULE-10-7, RULE-10-8, RULE-12-2 - OperandsOfAnInappropriateEssentialType.ql, AssignmentOfIncompatibleEssentialType.ql, OperandsWithMismatchedEssentialTypeCategory.ql, InappropriateEssentialTypeCast.ql, AssignmentToWiderEssentialType,ql, ImplicitConversionOfCompositeExpression.ql, InappropriateCastOfCompositeExpression.ql:
    • False positives and false negatives removed due to fixing incorrect essential type of the binary bitwise operations ^, | and &. Previously the standard type was used, instead of applying the essential type rules which dictate that if both arguments have the same signedness, the essential type will have the same signedness and a rank equal to the larger of the two operands.
  • M7-5-1, RULE-6-8-2 - FunctionReturnAutomaticVarCondition.ql, ReturnReferenceOrPointerToAutomaticLocalVariable.ql:
    • Remove false positives for member and global variables reported under this rule.
  • A7-1-2 - FunctionMissingConstexpr.ql
    • Address false positives by removing the query - the rule is not intended to cover functions.

Supported versions

• The LGTM pack is not supported on any released version of LGTM without support from GitHub Professional Services.
• The Code Scanning pack is supported when:
  • Using the CodeQL CLI version 2.18.4 in conjunction with a copy of the CodeQL standard library for C++ (github/codeql) set to the tag codeql-cli/v2.18.4.
  • Using the CodeQL Action or CodeQL runner with the codeql-bundle-v2.18.4.

Appendix: MISRA-C-2012 new queries

New queries added to cover the following rules:

• RULE-2-8 - UnusedObjectDefinition.ql, UnusedObjectDefinitionStrict.ql