Skip to content

Conversation

@zlaski-semmle
Copy link
Contributor

This PR is a companion to #1251 and deals strictly with the changelog entry for the 1.22 release. I've added a note about the increased precision of the new cpp/non-constant-format query.

Please let me know if the wording is incorrect or if this PR is unnecessary altogether.

|----------------------------|------------------------|------------------------------------------------------------------|
| Expression has no effect (`cpp/useless-expression`) | Fewer false positive results | Calls to functions with the `weak` attribute are no longer considered to be side effect free, because they could be overridden with a different implementation at link time. |
| Suspicious pointer scaling (`cpp/suspicious-pointer-scaling`) | Lower precision | The precision of this query has been reduced to "medium". This coding pattern is used intentionally and safely in a number of real-world projects. Results are no longer displayed on LGTM unless you choose to display them. |
| Non-constant format string (`cpp/non-constant-format`) | Higher precision | Rewritten using the taint-tracking library; should also improve performance in batched runs. |
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please change "Higher precision" to "Fewer false positive results" for consistency.

Somebody (me?) has written "Lower precision" above to mean "Lower @precision", which is something very different. I'm open to changing "Lower precision" to something less ambiguous.

|----------------------------|------------------------|------------------------------------------------------------------|
| Expression has no effect (`cpp/useless-expression`) | Fewer false positive results | Calls to functions with the `weak` attribute are no longer considered to be side effect free, because they could be overridden with a different implementation at link time. |
| Suspicious pointer scaling (`cpp/suspicious-pointer-scaling`) | Lower precision | The precision of this query has been reduced to "medium". This coding pattern is used intentionally and safely in a number of real-world projects. Results are no longer displayed on LGTM unless you choose to display them. |
| Non-constant format string (`cpp/non-constant-format`) | Higher precision | Rewritten using the taint-tracking library; should also improve performance in batched runs. |
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Did you actually measure a performance improvement on the last stage? Otherwise let's drop the claim about improved performance.

@jbj jbj merged commit f8722f9 into github:master Jul 3, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants