Merge branch `next` and update CodeQL to v2.23.3 by mbaluda · Pull Request #1149 · github/codeql-coding-standards

mbaluda · 2026-06-24T21:27:19Z

Description

This pull request upgrades CodeQL dependencies, updates dataflow and concurrency imports to use newer modules, and refines several rule implementations for improved accuracy and maintainability. The changes ensure compatibility with the latest CodeQL libraries and enhance the precision of certain queries.

Dependency and Import Upgrades:

Upgraded codeql/cpp-all to version 6.0.0 and updated several other CodeQL dependencies to their latest versions in both qlpack.yml and codeql-pack.lock.yml. Also added codeql/controlflow as a new dependency. [1] [2]
Replaced imports of semmle.code.cpp.dataflow.DataFlow and semmle.code.cpp.dataflow.TaintTracking with semmle.code.cpp.dataflow.new.DataFlow and semmle.code.cpp.dataflow.new.TaintTracking across all rule files, ensuring use of the latest dataflow libraries. [1] [2] [3] [4] [5] [6] [7] [8] [9] [10]
Updated concurrency-related imports from codingstandards.cpp.Concurrency to codingstandards.cpp.ConcurrencyNew throughout the codebase. [1] [2] [3] [4] [5] [6] [7]

These changes collectively modernize the codebase, improve compatibility with the latest CodeQL features, and enhance the precision and maintainability of CERT C rules.

Change request type

Release or process automation (GitHub workflows, internal scripts)
Internal documentation
External documentation
Query files (.ql, .qll, .qls or unit tests)
External scripts (analysis report or other code shipped as part of a release)

Rules with added or modified queries

No rules added
Queries have been added for the following rules:
- rule number here
Queries have been modified for the following rules:
- Several queries have been refactored to compile with CodeQL v2.23.3

Release change checklist

A change note (development_handbook.md#change-notes) is required for any pull request which modifies:

The structure or layout of the release artifacts.
The evaluation performance (memory, execution time) of an existing query.
The results of an existing query in any circumstance.

If you are only adding new rule queries, a change note is not required.

Author: Is a change note required?

Yes
No

🚨🚨🚨
Reviewer: Confirm that format of shared queries (not the .qll file, the
.ql file that imports it) is valid by running them within VS Code.

Confirmed

Reviewer: Confirm that either a change note is not required or the change note is required and has been added.

Confirmed

Query development review checklist

For PRs that add new queries or modify existing queries, the following checklist should be completed by both the author and reviewer:

Author

Have all the relevant rule package description files been checked in?
Have you verified that the metadata properties of each new query is set appropriately?
Do all the unit tests contain both "COMPLIANT" and "NON_COMPLIANT" cases?
Are the alert messages properly formatted and consistent with the style guide?
Have you run the queries on OpenPilot and verified that the performance and results are acceptable?
As a rule of thumb, predicates specific to the query should take no more than 1 minute, and for simple queries be under 10 seconds. If this is not the case, this should be highlighted and agreed in the code review process.
Does the query have an appropriate level of in-query comments/documentation?
Have you considered/identified possible edge cases?
Does the query not reinvent features in the standard library?
Can the query be simplified further (not golfed!)

Reviewer

Have all the relevant rule package description files been checked in?
Have you verified that the metadata properties of each new query is set appropriately?
Do all the unit tests contain both "COMPLIANT" and "NON_COMPLIANT" cases?
Are the alert messages properly formatted and consistent with the style guide?
Have you run the queries on OpenPilot and verified that the performance and results are acceptable?
As a rule of thumb, predicates specific to the query should take no more than 1 minute, and for simple queries be under 10 seconds. If this is not the case, this should be highlighted and agreed in the code review process.
Does the query have an appropriate level of in-query comments/documentation?
Have you considered/identified possible edge cases?
Does the query not reinvent features in the standard library?
Can the query be simplified further (not golfed!)

Update expected test results after frontend update

Update MISRA queries and tests after merging location tables

C++: accept new test results after QL changes

Observe that `sizeof(...)` might not occur as a dataflow node if it has a parent node with a concrete value. That value will be a dataflow node instead. Hence, the query has be changed to check for expressions where `sizeof(...)` is a child of an expression with a concrete value.

Note that we now properly report the offending cast instead of the expression that is being cast.

As it is the dataflow used by `asctime` that is relevant, and not the pointer, use the indirect expression.

Convert a number of queries to use the new dataflow library

Update expected test results for MSC33-C

These use the new dataflow library

Since the new dataflow library uses use-use dataflow and not def-use dataflow, we now need to check for definitions. Note that these queries can probably be improved by using a dataflow configuration - possibly limited to the local context of a function by including `DataFlow::FeatureEqualSourceSinkCallContext`

…low library

…ow library

Copilot

Pull request overview

This PR updates the repository to target CodeQL CLI v2.23.3 (including upgrading CodeQL packs such as codeql/cpp-all), migrates many queries to newer dataflow/concurrency modules, and refreshes test expectations accordingly.

Changes:

Bump CodeQL CLI support and upgrade CodeQL pack dependencies/lockfiles (notably codeql/cpp-all: 6.0.0).
Migrate multiple C/C++ queries to semmle.code.cpp.dataflow.new.* and codingstandards.cpp.ConcurrencyNew.
Update unit tests and .expected outputs to reflect new library behavior and warning/output changes.

Checklist items not satisfied / uncertain:

Change note exists but is incorrect (mentions 2.16.6 instead of 2.23.3).
Shared query output format validation in VS Code: not confirmed here.
Performance/results validation (OpenPilot) is not evidenced here.

Show a summary per file

File	Description
supported_codeql_configs.json	Bump supported CodeQL CLI to 2.23.3.
scripts/generate_modules/queries/qlpack.yml	Upgrade generator pack dependency versions.
scripts/generate_modules/queries/codeql-pack.lock.yml	Refresh generator pack lockfile deps.
cpp/report/src/qlpack.yml	Upgrade report pack dependency versions.
cpp/report/src/codeql-pack.lock.yml	Refresh report pack lockfile deps.
cpp/misra/test/rules/RULE-8-2-8/test.cpp	Adjust MISRA test annotations.
cpp/misra/test/rules/RULE-8-2-8/PointerToIntegralCast.expected	Update expected findings for RULE-8-2-8.
cpp/misra/test/rules/RULE-19-2-2/test.cpp	Update include-directive test annotation.
cpp/misra/test/rules/RULE-19-2-2/InvalidIncludeDirective.expected	Add expected finding for new test case.
cpp/misra/test/rules/RULE-15-1-3/NonExplicitConversionMember.expected	Update expected operator text.
cpp/misra/test/codeql-pack.lock.yml	Refresh MISRA test pack lockfile deps.
cpp/misra/src/rules/RULE-8-7-1/PointerArithmeticFormsAnInvalidPointer.ql	Update import to newer SSA internals module.
cpp/misra/src/rules/RULE-0-1-1/UnnecessaryWriteToLocalObject.ql	Migrate to `dataflow.new` import.
cpp/misra/src/qlpack.yml	Upgrade MISRA pack dependency versions.
cpp/misra/src/codeql-pack.lock.yml	Refresh MISRA pack lockfile deps.
cpp/common/test/rules/unusedtypedeclarations/UnusedTypeDeclarations.expected	Update expected locations/results.
cpp/common/test/rules/unusedtypedeclarations/test.cpp	Adjust unused-type test annotations.
cpp/common/test/rules/throwingoperatornewreturnsnull/ThrowingOperatorNewReturnsNull.expected	Update path-problem graph output.
cpp/common/test/rules/movedfromobjectsunspecifiedstate/MovedFromObjectsUnspecifiedState.expected	Update expected node selection.
cpp/common/test/rules/donotsubtractpointersaddressingdifferentarrays/DoNotSubtractPointersAddressingDifferentArrays.expected	Update path-problem graph output.
cpp/common/test/rules/danglingcapturewhenreturninglambdaobject/DanglingCaptureWhenReturningLambdaObject.expected	Update expected results (dedup).
cpp/common/test/rules/constlikereturnvalue/ConstLikeReturnValue.expected	Update path-problem graph output.
cpp/common/test/codeql-pack.lock.yml	Refresh common C++ test pack lockfile deps.
cpp/common/src/qlpack.yml	Upgrade common C++ pack dependency versions.
cpp/common/src/codingstandards/cpp/standardlibrary/STLContainers.qll	Switch to newer taint tracking module.
cpp/common/src/codingstandards/cpp/standardlibrary/FileStreams.qll	Switch to newer taint tracking module.
cpp/common/src/codingstandards/cpp/SmartPointers.qll	Switch to `dataflow.new` import.
cpp/common/src/codingstandards/cpp/rules/wrapspuriousfunctioninloop/WrapSpuriousFunctionInLoop.qll	Switch to `ConcurrencyNew`.
cpp/common/src/codingstandards/cpp/rules/useonlyarrayindexingforpointerarithmetic/UseOnlyArrayIndexingForPointerArithmetic.qll	Switch to `dataflow.new` import.
cpp/common/src/codingstandards/cpp/rules/unusedtypedeclarations/UnusedTypeDeclarations.qll	Update template-parameter type usage.
cpp/common/src/codingstandards/cpp/rules/unsignedoperationwithconstantoperandswraps/UnsignedOperationWithConstantOperandsWraps.qll	Update guard-condition logic.
cpp/common/src/codingstandards/cpp/rules/unnecessaryexposedidentifierdeclarationshared/UnnecessaryExposedIdentifierDeclarationShared.qll	Update template-parameter type usage.
cpp/common/src/codingstandards/cpp/rules/throwingoperatornewreturnsnull/ThrowingOperatorNewReturnsNull.qll	Switch to `dataflow.new` import.
cpp/common/src/codingstandards/cpp/rules/stringnumberconversionmissingerrorcheck/StringNumberConversionMissingErrorCheck.qll	Switch to newer taint tracking module.
cpp/common/src/codingstandards/cpp/rules/preventdeadlockbylockinginpredefinedorder/PreventDeadlockByLockingInPredefinedOrder.qll	Switch to `ConcurrencyNew`.
cpp/common/src/codingstandards/cpp/rules/preservesafetywhenusingconditionvariables/PreserveSafetyWhenUsingConditionVariables.qll	Switch to `ConcurrencyNew`.
cpp/common/src/codingstandards/cpp/rules/predicatefunctionobjectsshouldnotbemutable/PredicateFunctionObjectsShouldNotBeMutable.qll	Switch to `dataflow.new` import.
cpp/common/src/codingstandards/cpp/rules/placementnewnotproperlyaligned/PlacementNewNotProperlyAligned.qll	Remove unused deprecated dataflow import.
cpp/common/src/codingstandards/cpp/rules/placementnewinsufficientstorage/PlacementNewInsufficientStorage.qll	Remove unused deprecated dataflow import.
cpp/common/src/codingstandards/cpp/rules/ownedpointervaluestoredinunrelatedsmartpointer/OwnedPointerValueStoredInUnrelatedSmartPointer.qll	Switch to newer taint tracking module.
cpp/common/src/codingstandards/cpp/rules/onlyfreememoryallocateddynamicallyshared/OnlyFreeMemoryAllocatedDynamicallyShared.qll	Switch to `dataflow.new` import.
cpp/common/src/codingstandards/cpp/rules/nonvoidfunctiondoesnotreturn/NonVoidFunctionDoesNotReturn.qll	Update template-parameter type usage.
cpp/common/src/codingstandards/cpp/rules/nonconstantformat/NonConstantFormat.qll	Switch to newer taint tracking module.
cpp/common/src/codingstandards/cpp/rules/multipleglobalormemberdeclarators/MultipleGlobalOrMemberDeclarators.qll	Update template-parameter type usage.
cpp/common/src/codingstandards/cpp/rules/movedfromobjectsunspecifiedstate/MovedFromObjectsUnspecifiedState.qll	Update dataflow modeling to new API.
cpp/common/src/codingstandards/cpp/rules/joinordetachthreadonlyonce/JoinOrDetachThreadOnlyOnce.qll	Switch to `ConcurrencyNew`.
cpp/common/src/codingstandards/cpp/rules/iofstreammissingpositioning/IOFstreamMissingPositioning.qll	Switch to newer taint tracking module.
cpp/common/src/codingstandards/cpp/rules/invalidatedenvstringpointers/InvalidatedEnvStringPointers.qll	Switch to `dataflow.new` import.
cpp/common/src/codingstandards/cpp/rules/guardaccesstobitfields/GuardAccessToBitFields.qll	Switch to `ConcurrencyNew`.
cpp/common/src/codingstandards/cpp/rules/functionerroneousreturnvaluenottested/FunctionErroneousReturnValueNotTested.qll	Update guard-condition logic + dataflow.
cpp/common/src/codingstandards/cpp/rules/donotuserelationaloperatorswithdifferingarrays/DoNotUseRelationalOperatorsWithDifferingArrays.qll	Switch to `dataflow.new` + add barrier.
cpp/common/src/codingstandards/cpp/rules/donotsubtractpointersaddressingdifferentarrays/DoNotSubtractPointersAddressingDifferentArrays.qll	Switch to `dataflow.new` + add barrier.
cpp/common/src/codingstandards/cpp/rules/donotpassaliasedpointertorestrictqualifiedparamshared/DoNotPassAliasedPointerToRestrictQualifiedParamShared.qll	Switch to `dataflow.new` import.
cpp/common/src/codingstandards/cpp/rules/donotaccessaclosedfile/DoNotAccessAClosedFile.qll	Update dataflow modeling to new API.
cpp/common/src/codingstandards/cpp/rules/danglingcapturewhenreturninglambdaobject/DanglingCaptureWhenReturningLambdaObject.qll	Update dataflow modeling to new API.
cpp/common/src/codingstandards/cpp/rules/danglingcapturewhenmovinglambdaobject/DanglingCaptureWhenMovingLambdaObject.qll	Switch to `dataflow.new` import.
cpp/common/src/codingstandards/cpp/rules/containeraccesswithoutrangecheck/ContainerAccessWithoutRangeCheck.qll	Switch to `dataflow.new` import.
cpp/common/src/codingstandards/cpp/rules/constlikereturnvalue/ConstLikeReturnValue.qll	Switch to `dataflow.new` import.
cpp/common/src/codingstandards/cpp/rules/basicstringmaynotbenullterminated/BasicStringMayNotBeNullTerminated.qll	Switch to new taint/dataflow nodes.
cpp/common/src/codingstandards/cpp/ReadErrorsAndEOF.qll	Switch to `dataflow.new` import.
cpp/common/src/codingstandards/cpp/Overflow.qll	Adjust taint-tracking import visibility.
cpp/common/src/codingstandards/cpp/OutOfBounds.qll	Remove unused deprecated dataflow import.
cpp/common/src/codingstandards/cpp/Loops.qll	Update unknown-location handling logic.
cpp/common/src/codingstandards/cpp/Iterators.qll	Switch to new taint tracking + imports.
cpp/common/src/codingstandards/cpp/Identifiers.qll	Update template-parameter type usage.
cpp/common/src/codingstandards/cpp/FgetsErrorManagement.qll	Switch to `dataflow.new` import.
cpp/common/src/codingstandards/cpp/Expr.qll	Switch to `dataflow.new` import.
cpp/common/src/codingstandards/cpp/deadcode/UnusedVariables.qll	Update template-parameter type usage.
cpp/common/src/codingstandards/cpp/ConstHelpers.qll	Switch to `dataflow.new` import.
cpp/common/src/codingstandards/cpp/ConcurrencyNew.qll	New module aggregating updated concurrency libs.
cpp/common/src/codingstandards/cpp/concurrency/ThreadSpecificStorageNew.qll	New TSS modeling using `dataflow.new`.
cpp/common/src/codingstandards/cpp/Allocations.qll	Switch to `dataflow.new` import.
cpp/common/src/codingstandards/cpp/AccessPath.qll	Switch to `dataflow.new` import.
cpp/common/src/codeql-pack.lock.yml	Refresh common C++ pack lockfile deps.
cpp/cert/test/rules/MSC51-CPP/BadlySeededRandomNumberGenerator.expected	Remove deprecation warnings from expected output.
cpp/cert/test/rules/MEM52-CPP/DetectAndHandleMemoryAllocationErrors.expected	Remove deprecation warnings from expected output.
cpp/cert/test/rules/CTR56-CPP/DoNotUsePointerArithmeticOnPolymorphicObjects.expected	Refresh path-problem graph output.
cpp/cert/test/rules/CTR53-CPP/UseValidIteratorRanges.expected	Remove deprecation warnings from expected output.
cpp/cert/test/rules/CTR52-CPP/GuaranteeGenericCppLibraryFunctionsDoNotOverflow.expected	Remove deprecation warnings from expected output.
cpp/cert/test/codeql-pack.lock.yml	Refresh CERT C++ test pack lockfile deps.
cpp/cert/src/rules/MSC51-CPP/BadlySeededRandomNumberGenerator.ql	Switch to newer taint tracking module.
cpp/cert/src/rules/MEM52-CPP/DetectAndHandleMemoryAllocationErrors.ql	Switch to `dataflow.new` + update guard checks.
cpp/cert/src/rules/EXP50-CPP/DoNotDependOnTheOrderOfEvaluationForSideEffectsInFunctionCallsAsFunctionArguments.ql	Remove unused deprecated dataflow import.
cpp/cert/src/rules/CTR56-CPP/DoNotUsePointerArithmeticOnPolymorphicObjects.ql	Switch to `dataflow.new` import.
cpp/cert/src/rules/CTR55-CPP/DoNotUseAnAdditiveOperatorOnAnIterator.ql	Update guard-node casting for new libs.
cpp/cert/src/rules/CTR53-CPP/UseValidIteratorRanges.ql	Switch to `dataflow.new` import.
cpp/cert/src/rules/CTR52-CPP/GuaranteeGenericCppLibraryFunctionsDoNotOverflow.ql	Switch to newer taint tracking module.
cpp/cert/src/rules/CON56-CPP/LockedALockedNonRecursiveMutexAudit.ql	Switch to `ConcurrencyNew`.
cpp/cert/src/rules/CON56-CPP/DoNotSpeculativelyLockALockedNonRecursiveMutex.ql	Switch to `ConcurrencyNew`.
cpp/cert/src/qlpack.yml	Upgrade CERT C++ pack dependency versions.
cpp/cert/src/codeql-pack.lock.yml	Refresh CERT C++ pack lockfile deps.
cpp/autosar/test/rules/M9-3-1/ConstMemberFunctionReturnsNonConstPointer.expected	Remove deprecation warnings from expected output.
cpp/autosar/test/rules/M3-9-3/UnderlyingBitRepresentationsOfFloatingPointValuesUsed.expected	Remove deprecation warnings from expected output.
cpp/autosar/test/rules/A9-3-1/ReturnsNonConstRawPointersOrReferencesToPrivateOrProtectedData.expected	Remove deprecation warnings from expected output.
cpp/autosar/test/rules/A8-4-9/InOutParametersDeclaredAsTNotModified.expected	Remove deprecation warnings from expected output.
cpp/autosar/test/rules/A8-4-12/UniquePtrPassedToFunctionWithImproperSemantics.expected	Remove deprecation warnings from expected output.
cpp/autosar/test/rules/A8-4-11/SmartPointerAsParameterWithoutLifetimeSemantics.expected	Remove deprecation warnings from expected output.
cpp/autosar/test/rules/A7-5-1/InvalidFunctionReturnType.expected	Remove deprecation warnings from expected output.
cpp/autosar/test/rules/A5-1-7/LambdaPassedToTypeid.expected	Refresh path-problem graph output.
cpp/autosar/test/rules/A5-1-7/LambdaPassedToDecltype.expected	Remove deprecation warnings from expected output.
cpp/autosar/test/rules/A5-0-4/PointerArithmeticUsedWithPointersToNonFinalClasses.expected	Refresh path-problem graph output.
cpp/autosar/test/rules/A27-0-4/CStyleStringsUsed.expected	Remove deprecation warnings from expected output.
cpp/autosar/test/rules/A20-8-4/SharedPointerUsedWithNoOwnershipSharing.expected	Remove deprecation warnings from expected output.
cpp/autosar/test/rules/A18-9-4/ArgumentToForwardSubsequentlyUsed.expected	Remove deprecation warnings from expected output.
cpp/autosar/test/rules/A15-2-2/ConstructorErrorLeavesObjectInInvalidState.expected	Remove deprecation warnings from expected output.
cpp/autosar/test/rules/A15-1-3/ThrownExceptionsShouldBeUnique.expected	Remove deprecation warnings from expected output.
cpp/autosar/test/rules/A13-5-3/UserDefinedConversionOperatorsShouldNotBeUsed.expected	Update expected operator text.
cpp/autosar/test/rules/A13-2-1/AssignmentOperatorReturnThis.expected	Remove deprecation warnings from expected output.
cpp/autosar/test/rules/A13-1-3/UserDefinedLiteralsOperatorsShallOnlyPerformConversionOfPassedParameters.expected	Remove deprecation warnings from expected output.
cpp/autosar/test/codeql-pack.lock.yml	Refresh AUTOSAR test pack lockfile deps.
cpp/autosar/src/rules/M9-3-1/ConstMemberFunctionReturnsNonConstPointer.ql	Switch to `dataflow.new` + update node modeling.
cpp/autosar/src/rules/M5-0-17/PointerSubtractionOnDifferentArrays.ql	Switch to `dataflow.new` + add barrier.
cpp/autosar/src/rules/M3-9-3/UnderlyingBitRepresentationsOfFloatingPointValuesUsed.ql	Switch to `dataflow.new` import.
cpp/autosar/src/rules/A9-3-1/ReturnsNonConstRawPointersOrReferencesToPrivateOrProtectedData.ql	Switch to `dataflow.new` import.
cpp/autosar/src/rules/A8-4-9/InOutParametersDeclaredAsTNotModified.ql	Switch to `dataflow.new` import.
cpp/autosar/src/rules/A8-4-12/UniquePtrPassedToFunctionWithImproperSemantics.ql	Switch to `dataflow.new` import.
cpp/autosar/src/rules/A8-4-11/SmartPointerAsParameterWithoutLifetimeSemantics.ql	Switch to `dataflow.new` import.
cpp/autosar/src/rules/A7-5-1/InvalidFunctionReturnType.ql	Switch to `dataflow.new` import.
cpp/autosar/src/rules/A5-1-7/LambdaPassedToTypeid.ql	Switch to `dataflow.new` + sink modeling.
cpp/autosar/src/rules/A5-1-7/LambdaPassedToDecltype.ql	Switch to `dataflow.new` import.
cpp/autosar/src/rules/A5-0-4/PointerArithmeticUsedWithPointersToNonFinalClasses.ql	Switch to `dataflow.new` import.
cpp/autosar/src/rules/A4-7-1/IntegerExpressionLeadToDataLoss.ql	Update guard-condition logic.
cpp/autosar/src/rules/A27-0-4/CStyleStringsUsed.ql	Switch to `dataflow.new` import.
cpp/autosar/src/rules/A20-8-4/SharedPointerUsedWithNoOwnershipSharing.ql	Update dataflow modeling to new API.
cpp/autosar/src/rules/A18-9-4/ArgumentToForwardSubsequentlyUsed.ql	Switch to `dataflow.new` + def node modeling.
cpp/autosar/src/rules/A15-2-2/ConstructorErrorLeavesObjectInInvalidState.ql	Add global flow config for new/delete tracking.
cpp/autosar/src/rules/A15-1-3/ThrownExceptionsShouldBeUnique.ql	Switch to `dataflow.new` import.
cpp/autosar/src/rules/A13-2-1/AssignmentOperatorReturnThis.ql	Switch to `dataflow.new` import.
cpp/autosar/src/rules/A13-1-3/UserDefinedLiteralsOperatorsShallOnlyPerformConversionOfPassedParameters.ql	Switch to newer taint tracking module.
cpp/autosar/src/qlpack.yml	Upgrade AUTOSAR pack dependency versions.
cpp/autosar/src/codeql-pack.lock.yml	Refresh AUTOSAR pack lockfile deps.
change_notes/2026-06-25-upgrade-to-2.23.3.md	Add change note for CodeQL upgrade.
c/misra/test/rules/RULE-22-7/EofShallBeComparedWithUnmodifiedReturnValues.expected	Remove deprecation warnings from expected output.
c/misra/test/rules/RULE-22-4/AttemptToWriteToAReadOnlyStream.expected	Remove deprecation warnings from expected output.
c/misra/test/rules/RULE-22-3/FileOpenForReadAndWriteOnDifferentStreams.expected	Remove deprecation warnings from expected output.
c/misra/test/rules/RULE-2-4/UnusedTagDeclaration.expected	Update expected results after behavior change.
c/misra/test/rules/RULE-2-4/test.c	Reformat comments / adjust annotations.
c/misra/test/rules/RULE-17-5/ArrayFunctionArgumentNumberOfElements.expected	Remove deprecation warnings from expected output.
c/misra/test/rules/RULE-13-2/UnsequencedAtomicReads.expected	Remove deprecation warnings from expected output.
c/misra/test/codeql-pack.lock.yml	Refresh MISRA C test pack lockfile deps.
c/misra/src/rules/RULE-22-7/EofShallBeComparedWithUnmodifiedReturnValues.ql	Switch to `dataflow.new` import.
c/misra/src/rules/RULE-22-4/AttemptToWriteToAReadOnlyStream.ql	Switch to `dataflow.new` import.
c/misra/src/rules/RULE-22-3/FileOpenForReadAndWriteOnDifferentStreams.ql	Switch to `dataflow.new` import.
c/misra/src/rules/RULE-22-20/ThreadStoragePointerInitializedInsideThread.ql	Switch to `ConcurrencyNew`.
c/misra/src/rules/RULE-22-20/ThreadStorageNotInitializedBeforeUse.ql	Switch to `ConcurrencyNew`.
c/misra/src/rules/RULE-22-19/ConditionVariableUsedWithMultipleMutexes.ql	Switch to `ConcurrencyNew`.
c/misra/src/rules/RULE-22-18/NonRecursiveMutexRecursivelyLockedAudit.ql	Switch to `ConcurrencyNew`.
c/misra/src/rules/RULE-22-18/NonRecursiveMutexRecursivelyLocked.ql	Switch to `ConcurrencyNew`.
c/misra/src/rules/RULE-22-17/InvalidOperationOnUnlockedMutex.ql	Switch to `ConcurrencyNew`.
c/misra/src/rules/RULE-22-15/ThreadResourceDisposedBeforeThreadsJoined.ql	Switch to `ConcurrencyNew`.
c/misra/src/rules/RULE-22-14/MutexNotInitializedBeforeUse.ql	Switch to `ConcurrencyNew`.
c/misra/src/rules/RULE-22-14/MutexInitWithInvalidMutexType.ql	Switch to `ConcurrencyNew`.
c/misra/src/rules/RULE-22-14/MutexInitializedInsideThread.ql	Switch to `ConcurrencyNew`.
c/misra/src/rules/RULE-22-13/ThreadingObjectWithInvalidStorageDuration.ql	Switch to `ConcurrencyNew`.
c/misra/src/rules/RULE-22-12/NonstandardUseOfThreadingObject.ql	Switch to `ConcurrencyNew`.
c/misra/src/rules/RULE-21-14/MemcmpUsedToCompareNullTerminatedStrings.ql	Switch to new taint tracking + sinks.
c/misra/src/rules/RULE-18-6/ThreadLocalObjectAddressCopiedToGlobalObject.ql	Switch to `ConcurrencyNew`.
c/misra/src/rules/RULE-17-5/ArrayFunctionArgumentNumberOfElements.ql	Switch to `dataflow.new` + sink modeling.
c/misra/src/rules/RULE-13-2/UnsequencedAtomicReads.ql	Switch to newer taint tracking module.
c/misra/src/rules/DIR-5-3/ThreadCreatedByThread.ql	Switch to `ConcurrencyNew`.
c/misra/src/rules/DIR-5-3/BannedDynamicThreadCreation.ql	Switch to `ConcurrencyNew`.
c/misra/src/qlpack.yml	Upgrade MISRA C pack dependency versions.
c/misra/src/codeql-pack.lock.yml	Refresh MISRA C pack lockfile deps.
c/common/test/rules/onlyfreememoryallocateddynamicallyshared/OnlyFreeMemoryAllocatedDynamicallyShared.expected	Refresh path-problem graph output.
c/common/test/rules/donotuserelationaloperatorswithdifferingarrays/DoNotUseRelationalOperatorsWithDifferingArrays.expected	Refresh path-problem graph output.
c/common/test/rules/donotsubtractpointersaddressingdifferentarrays/DoNotSubtractPointersAddressingDifferentArrays.expected	Refresh path-problem graph output.
c/common/test/rules/constlikereturnvalue/ConstLikeReturnValue.expected	Refresh path-problem graph output.
c/common/test/codeql-pack.lock.yml	Refresh common C test pack lockfile deps.
c/common/src/qlpack.yml	Upgrade common C pack dependency versions.
c/common/src/codingstandards/c/Signal.qll	Switch to `dataflow.new` import.
c/common/src/codingstandards/c/OutOfBounds.qll	Remove unused deprecated dataflow import.
c/common/src/codingstandards/c/initialization/GlobalInitializationAnalysis.qll	Switch to `ConcurrencyNew`.
c/common/src/codingstandards/c/Extensions.qll	Narrow/adjust extension detection logic.
c/common/src/codeql-pack.lock.yml	Refresh common C pack lockfile deps.
c/cert/test/rules/STR31-C/StringsHasSufficientSpaceForTheNullTerminator.expected	Remove deprecation warnings from expected output.
c/cert/test/rules/SIG35-C/DoNotReturnFromAComputationalExceptionHandler.expected	Remove deprecation warnings from expected output.
c/cert/test/rules/SIG30-C/CallOnlyAsyncSafeFunctionsWithinSignalHandlers.expected	Remove deprecation warnings from expected output.
c/cert/test/rules/MSC33-C/DoNotPassInvalidDataToTheAsctimeFunction.expected	Remove deprecation warnings from expected output.
c/cert/test/rules/MEM36-C/DoNotModifyAlignmentOfMemoryWithRealloc.expected	Refresh path-problem graph output.
c/cert/test/rules/MEM35-C/InsufficientMemoryAllocatedForObject.expected	Update warning line locations/expected output.
c/cert/test/rules/INT31-C/test.c	Update test annotations for conversions.
c/cert/test/rules/INT31-C/IntegerConversionCausesDataLoss.expected	Add expected results for new cases.
c/cert/test/rules/FIO45-C/ToctouRaceConditionsWhileAccessingFiles.expected	Remove deprecation warnings from expected output.
c/cert/test/rules/FIO44-C/OnlyUseValuesForFsetposThatAreReturnedFromFgetpos.expected	Remove deprecation warnings from expected output.
c/cert/test/rules/FIO40-C/ResetStringsOnFgetsOrFgetwsFailure.expected	Remove deprecation warnings from expected output.
c/cert/test/rules/EXP30-C/DependenceOnOrderOfFunctionArgumentsForSideEffects.expected	Remove deprecation warnings from expected output.
c/cert/test/rules/ERR33-C/DetectAndHandleStandardLibraryErrors.expected	Remove deprecation warnings from expected output.
c/cert/test/rules/ERR32-C/DoNotRelyOnIndeterminateValuesOfErrno.expected	Remove deprecation warnings from expected output.
c/cert/test/rules/ERR30-C/SetlocaleMightSetErrno.expected	Remove deprecation warnings from expected output.
c/cert/test/rules/ERR30-C/ErrnoReadBeforeReturn.expected	Remove deprecation warnings from expected output.
c/cert/test/rules/DCL30-C/AppropriateStorageDurationsFunctionReturn.expected	Refresh expected sink selection.
c/cert/test/rules/CON34-C/ThreadObjectStorageDurationsNotInitialized.expected	Remove deprecation warnings from expected output.
c/cert/test/rules/CON34-C/AppropriateThreadObjectStorageDurations.expected	Remove deprecation warnings from expected output.
c/cert/test/rules/CON30-C/CleanUpThreadSpecificStorage.expected	Remove deprecation warnings from expected output.
c/cert/test/rules/ARR39-C/DoNotAddOrSubtractAScaledIntegerToAPointer.expected	Refresh path-problem graph output.
c/cert/test/rules/ARR37-C/DoNotUsePointerArithmeticOnNonArrayObjectPointers.expected	Refresh path-problem graph output.
c/cert/test/codeql-pack.lock.yml	Refresh CERT C test pack lockfile deps.
c/cert/src/rules/STR31-C/StringsHasSufficientSpaceForTheNullTerminator.ql	Switch to newer taint tracking module.
c/cert/src/rules/SIG35-C/DoNotReturnFromAComputationalExceptionHandler.ql	Switch to `dataflow.new` import.
c/cert/src/rules/SIG30-C/CallOnlyAsyncSafeFunctionsWithinSignalHandlers.ql	Switch to `dataflow.new` import.
c/cert/src/rules/MSC33-C/DoNotPassInvalidDataToTheAsctimeFunction.ql	Switch to `dataflow.new` + add sink helper.
c/cert/src/rules/MEM36-C/DoNotModifyAlignmentOfMemoryWithRealloc.ql	Switch to `dataflow.new` import.
c/cert/src/rules/MEM35-C/InsufficientMemoryAllocatedForObject.ql	Remove direct deprecated taint import.
c/cert/src/rules/FIO45-C/ToctouRaceConditionsWhileAccessingFiles.ql	Switch to `dataflow.new` import.
c/cert/src/rules/FIO44-C/OnlyUseValuesForFsetposThatAreReturnedFromFgetpos.ql	Switch to `dataflow.new` + new node modeling.
c/cert/src/rules/FIO40-C/ResetStringsOnFgetsOrFgetwsFailure.ql	Switch to `dataflow.new` import.
c/cert/src/rules/FIO37-C/SuccessfulFgetsOrFgetwsMayReturnAnEmptyString.ql	Switch to `dataflow.new` import.
c/cert/src/rules/EXP40-C/DoNotModifyConstantObjects.ql	Switch to `dataflow.new` import.
c/cert/src/rules/EXP37-C/DoNotCallFunctionPointerWithIncompatibleType.ql	Switch to `dataflow.new` + add type guard.
c/cert/src/rules/EXP36-C/DoNotCastPointerToMoreStrictlyAlignedPointerType.ql	Switch to `dataflow.new` import.
c/cert/src/rules/EXP30-C/DependenceOnOrderOfFunctionArgumentsForSideEffects.ql	Switch to newer taint tracking module.
c/cert/src/rules/EXP16-C/DoNotCompareFunctionPointersToConstantValues.ql	Update implicit comparison modeling.
c/cert/src/rules/ERR33-C/DetectAndHandleStandardLibraryErrors.ql	Switch to `dataflow.new` import.
c/cert/src/rules/ERR32-C/DoNotRelyOnIndeterminateValuesOfErrno.ql	Switch to `dataflow.new` import.
c/cert/src/rules/ERR30-C/SetlocaleMightSetErrno.ql	Switch to `dataflow.new` import.
c/cert/src/rules/ERR30-C/ErrnoReadBeforeReturn.ql	Switch to `dataflow.new` import.
c/cert/src/rules/DCL30-C/AppropriateStorageDurationsFunctionReturn.ql	Switch to `dataflow.new` + new sink modeling.
c/cert/src/rules/CON41-C/WrapFunctionsThatCanFailSpuriouslyInLoop.ql	Switch to `ConcurrencyNew`.
c/cert/src/rules/CON40-C/AtomicVariableTwiceInExpression.ql	Switch to `ConcurrencyNew`.
c/cert/src/rules/CON37-C/DoNotCallSignalInMultithreadedProgram.ql	Switch to `ConcurrencyNew`.
c/cert/src/rules/CON34-C/ThreadObjectStorageDurationsNotInitialized.ql	Switch to `ConcurrencyNew` + `dataflow.new`.
c/cert/src/rules/CON34-C/AppropriateThreadObjectStorageDurations.ql	Switch to `ConcurrencyNew` + `dataflow.new`.
c/cert/src/rules/CON33-C/RaceConditionsWhenUsingLibraryFunctions.ql	Switch to `ConcurrencyNew`.
c/cert/src/rules/CON30-C/CleanUpThreadSpecificStorage.ql	Switch to `ConcurrencyNew` + `dataflow.new` and refactor flow config.
c/cert/src/rules/ARR39-C/DoNotAddOrSubtractAScaledIntegerToAPointer.ql	Switch to newer taint tracking + refine scaled expr.
c/cert/src/rules/ARR37-C/DoNotUsePointerArithmeticOnNonArrayObjectPointers.ql	Switch to `dataflow.new` import.
c/cert/src/qlpack.yml	Upgrade CERT C pack dependency versions.
c/cert/src/codeql-pack.lock.yml	Refresh CERT C pack lockfile deps.
.gitignore	Ignore `*.qlx` artifacts.

Copilot's findings

Files reviewed: 239/240 changed files
Comments generated: 7

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

codeql-coding-standards-automation · 2026-06-26T19:24:13Z

🏁 Beep Boop! Performance testing complete! See below for performance of the last 3 runs vs your PR. Times are based on predicate performance. You can find full graphs and stats in the PR that was created for this test in the release engineering repo.


Release                            : v2.60.0
Platform                           : x86-linux
Language                           : cpp
Total_Serialized_Execution_Time_Ms : 4440651
Mean_Predicate_Execution_Time_Ms   : 62.29170407361688
Median_Predicate_Execution_Time_Ms : 0.0
Standard_Deviation_Ms              : 569.4574578020323
Total_Serialized_Execution_Time_s  : 4440.651
Mean_Query_Execution_Time_s        : 0.0622917040736168
Median_Predicate_Execution_Time_s  : 0.0
Percentile95_Ms                    : 159.0
Number_of_Predicates               : 71288

Release                            : v2.60.0
Platform                           : x86-windows
Language                           : c
Total_Serialized_Execution_Time_Ms : 3326599
Mean_Predicate_Execution_Time_Ms   : 64.96502363004335
Median_Predicate_Execution_Time_Ms : 0.0
Standard_Deviation_Ms              : 512.262910554225
Total_Serialized_Execution_Time_s  : 3326.599
Mean_Query_Execution_Time_s        : 0.0649650236300433
Median_Predicate_Execution_Time_s  : 0.0
Percentile95_Ms                    : 185.0
Number_of_Predicates               : 51206

Release                            : v2.60.0
Platform                           : x86-windows
Language                           : cpp
Total_Serialized_Execution_Time_Ms : 4817689
Mean_Predicate_Execution_Time_Ms   : 67.30966119455117
Median_Predicate_Execution_Time_Ms : 1.0
Standard_Deviation_Ms              : 458.1131446697552
Total_Serialized_Execution_Time_s  : 4817.689
Mean_Query_Execution_Time_s        : 0.0673096611945511
Median_Predicate_Execution_Time_s  : 0.001
Percentile95_Ms                    : 227.0
Number_of_Predicates               : 71575

Release                            : v2.60.0
Platform                           : x86-linux
Language                           : c
Total_Serialized_Execution_Time_Ms : 2651790
Mean_Predicate_Execution_Time_Ms   : 51.91241533221096
Median_Predicate_Execution_Time_Ms : 0.0
Standard_Deviation_Ms              : 542.373048121457
Total_Serialized_Execution_Time_s  : 2651.79
Mean_Query_Execution_Time_s        : 0.0519124153322109
Median_Predicate_Execution_Time_s  : 0.0
Percentile95_Ms                    : 139.0
Number_of_Predicates               : 51082

Release                            : v2.61.0
Platform                           : x86-linux
Language                           : cpp
Total_Serialized_Execution_Time_Ms : 4615626
Mean_Predicate_Execution_Time_Ms   : 64.84988900441172
Median_Predicate_Execution_Time_Ms : 0.0
Standard_Deviation_Ms              : 574.4148904892992
Total_Serialized_Execution_Time_s  : 4615.626
Mean_Query_Execution_Time_s        : 0.0648498890044117
Median_Predicate_Execution_Time_s  : 0.0
Percentile95_Ms                    : 165.0
Number_of_Predicates               : 71174

Release                            : v2.61.0
Platform                           : x86-windows
Language                           : c
Total_Serialized_Execution_Time_Ms : 3266370
Mean_Predicate_Execution_Time_Ms   : 63.90362718628947
Median_Predicate_Execution_Time_Ms : 0.0
Standard_Deviation_Ms              : 503.1579843913974
Total_Serialized_Execution_Time_s  : 3266.37
Mean_Query_Execution_Time_s        : 0.0639036271862894
Median_Predicate_Execution_Time_s  : 0.0
Percentile95_Ms                    : 191.0
Number_of_Predicates               : 51114

Release                            : v2.61.0
Platform                           : x86-windows
Language                           : cpp
Total_Serialized_Execution_Time_Ms : 4756186
Mean_Predicate_Execution_Time_Ms   : 66.62911337433282
Median_Predicate_Execution_Time_Ms : 1.0
Standard_Deviation_Ms              : 451.0173047967091
Total_Serialized_Execution_Time_s  : 4756.186
Mean_Query_Execution_Time_s        : 0.0666291133743328
Median_Predicate_Execution_Time_s  : 0.001
Percentile95_Ms                    : 208.0
Number_of_Predicates               : 71383

Release                            : v2.61.0
Platform                           : x86-linux
Language                           : c
Total_Serialized_Execution_Time_Ms : 2784651
Mean_Predicate_Execution_Time_Ms   : 54.388777124553215
Median_Predicate_Execution_Time_Ms : 0.0
Standard_Deviation_Ms              : 610.0917903271135
Total_Serialized_Execution_Time_s  : 2784.651
Mean_Query_Execution_Time_s        : 0.0543887771245532
Median_Predicate_Execution_Time_s  : 0.0
Percentile95_Ms                    : 142.0
Number_of_Predicates               : 51199

Release                            : 1149
Platform                           : x86-linux
Language                           : c
Total_Serialized_Execution_Time_Ms : 2876047
Mean_Predicate_Execution_Time_Ms   : 52.68160753210118
Median_Predicate_Execution_Time_Ms : 0.0
Standard_Deviation_Ms              : 650.7770625397736
Total_Serialized_Execution_Time_s  : 2876.047
Mean_Query_Execution_Time_s        : 0.0526816075321011
Median_Predicate_Execution_Time_s  : 0.0
Percentile95_Ms                    : 134.0
Number_of_Predicates               : 54593

Release                            : 1149
Platform                           : x86-linux
Language                           : cpp
Total_Serialized_Execution_Time_Ms : 8857776
Mean_Predicate_Execution_Time_Ms   : 116.00020953378731
Median_Predicate_Execution_Time_Ms : 0.0
Standard_Deviation_Ms              : 6355.639344762244
Total_Serialized_Execution_Time_s  : 8857.776
Mean_Query_Execution_Time_s        : 0.1160002095337873
Median_Predicate_Execution_Time_s  : 0.0
Percentile95_Ms                    : 176.0
Number_of_Predicates               : 76360

🏁 Below are the slowest predicates for the last 2 releases vs this PR.


Release           : v2.61.0
Run               : 2026-06-16_14-01-24
Platform          : x86-windows
Language          : c
Suite             : cert-default
Predicate         : IncompatibleFunctionDeclaration::interestedInFunctions/4#95575433
Execution_Time_Ms : 28367

Release           : v2.61.0
Run               : 2026-06-16_14-01-24
Platform          : x86-windows
Language          : c
Suite             : misra-default
Predicate         : _Class::Class.getALinkTarget/0#dispred#29b2b38a#bf_Class::Class.getALinkTarget/0#dispred#29b2b38a#bf__#shared
Execution_Time_Ms : 23350

Release           : v2.61.0
Run               : 2026-06-16_14-01-24
Platform          : x86-windows
Language          : c
Suite             : misra-default
Predicate         : Macro::MacroInvocation.getAnAffectedElement/0#dispred#d1462297_10#join_rhs
Execution_Time_Ms : 33098

Release           : v2.61.0
Run               : 2026-06-16_14-01-24
Platform          : x86-linux
Language          : c
Suite             : misra-default
Predicate         : _Macro::Macro.getName/0#dispred#e28b3699_Preprocessor::PreprocessorBranchDirective#bcd2bde4#b_Prepro__#antijoin_rhs
Execution_Time_Ms : 49239

Release           : v2.61.0
Run               : 2026-06-16_14-01-24
Platform          : x86-linux
Language          : cpp
Suite             : autosar-default
Predicate         : VirtualDispatchPrototype::VirtualDispatch::cannotInheritHelper/4#7c75bd87
Execution_Time_Ms : 27715

Release           : v2.61.0
Run               : 2026-06-16_14-01-24
Platform          : x86-linux
Language          : cpp
Suite             : autosar-default
Predicate         : CharacterOutsideTheLanguageStandardBasicSourceCharacterSetUsedInTheSourceCode::getUniversalCharacterName/1#36dbaa42
Execution_Time_Ms : 29041

Release           : v2.61.0
Run               : 2026-06-16_14-01-24
Platform          : x86-windows
Language          : c
Suite             : misra-default
Predicate         : _Macro::Macro.getName/0#dispred#e28b3699_Preprocessor::PreprocessorBranchDirective#bcd2bde4#b_Prepro__#antijoin_rhs
Execution_Time_Ms : 32365

Release           : v2.61.0
Run               : 2026-06-16_14-01-24
Platform          : x86-windows
Language          : c
Suite             : misra-default
Predicate         : OutOfBounds::OOB::libraryFunctionNameParamTableSimpleString/5#6de8614f#cpe#1236
Execution_Time_Ms : 30727

Release           : v2.61.0
Run               : 2026-06-16_14-01-24
Platform          : x86-linux
Language          : c
Suite             : misra-default
Predicate         : QualifiedName::getUserTypeNameWithoutArgs/1#8cfc98e9
Execution_Time_Ms : 30647

Release           : v2.61.0
Run               : 2026-06-16_14-01-24
Platform          : x86-windows
Language          : cpp
Suite             : misra-default
Predicate         : IncompatibleFunctionDeclaration::interestedInFunctions/4#95575433
Execution_Time_Ms : 20639

Release           : v2.61.0
Run               : 2026-06-16_14-01-24
Platform          : x86-linux
Language          : c
Suite             : misra-default
Predicate         : OutOfBounds::OOB::libraryFunctionNameParamTable/5#79217c12
Execution_Time_Ms : 38785

Release           : v2.61.0
Run               : 2026-06-16_14-01-24
Platform          : x86-linux
Language          : c
Suite             : misra-default
Predicate         : _Class::Class.getALinkTarget/0#dispred#29b2b38a#bf_Class::Class.getALinkTarget/0#dispred#29b2b38a#bf__#shared
Execution_Time_Ms : 27762

Release           : v2.61.0
Run               : 2026-06-16_14-01-24
Platform          : x86-windows
Language          : cpp
Suite             : misra-default
Predicate         : QualifiedName::getUserTypeNameWithoutArgs/1#8cfc98e9
Execution_Time_Ms : 17638

Release           : v2.61.0
Run               : 2026-06-16_14-01-24
Platform          : x86-windows
Language          : cpp
Suite             : autosar-default
Predicate         : Dependency::dependsOnTransitive/2#cbda84a0
Execution_Time_Ms : 18772

Release           : v2.61.0
Run               : 2026-06-16_14-01-24
Platform          : x86-linux
Language          : cpp
Suite             : autosar-default
Predicate         : CheckedException::CheckedException#b0aa5ec8
Execution_Time_Ms : 28801

Release           : v2.61.0
Run               : 2026-06-16_14-01-24
Platform          : x86-linux
Language          : cpp
Suite             : autosar-default
Predicate         : QualifiedName::getUserTypeNameWithoutArgs/1#8cfc98e9
Execution_Time_Ms : 31182

Release           : v2.61.0
Run               : 2026-06-16_14-01-24
Platform          : x86-linux
Language          : cpp
Suite             : misra-default
Predicate         : Macro::MacroInvocation.getAnAffectedElement/0#dispred#d1462297_10#join_rhs
Execution_Time_Ms : 30704

Release           : v2.61.0
Run               : 2026-06-16_14-01-24
Platform          : x86-linux
Language          : c
Suite             : misra-default
Predicate         : OutOfBounds::OOB::libraryFunctionNameParamTableSimpleString/5#6de8614f#cpe#1236
Execution_Time_Ms : 43006

Release           : v2.61.0
Run               : 2026-06-16_14-01-24
Platform          : x86-windows
Language          : cpp
Suite             : misra-default
Predicate         : Macro::MacroInvocation.getAnAffectedElement/0#dispred#d1462297_10#join_rhs
Execution_Time_Ms : 38755

Release           : v2.61.0
Run               : 2026-06-16_14-01-24
Platform          : x86-windows
Language          : cpp
Suite             : autosar-default
Predicate         : FunctionEquivalence::typeSig/1#194ac728
Execution_Time_Ms : 25220

Release           : 1149
Run               : 2026-06-26_18-24-24
Platform          : x86-linux
Language          : c
Suite             : misra-default
Predicate         : OutOfBounds::OOB::libraryFunctionNameParamTableSimpleString/5#6de8614f#cpe#1236
Execution_Time_Ms : 36696

Release           : 1149
Run               : 2026-06-26_18-24-24
Platform          : x86-linux
Language          : cpp
Suite             : autosar-default
Predicate         : STLContainers::localTaint/2#d71eeced_10#join_rhs
Execution_Time_Ms : 1151798

Release           : 1149
Run               : 2026-06-26_18-24-24
Platform          : x86-linux
Language          : c
Suite             : misra-default
Predicate         : _Macro::Macro.getName/0#dispred#e28b3699_Preprocessor::PreprocessorBranchDirective#bcd2bde4#b_Prepro__#antijoin_rhs
Execution_Time_Ms : 36128

Release           : 1149
Run               : 2026-06-26_18-24-24
Platform          : x86-linux
Language          : c
Suite             : misra-default
Predicate         : Macro::MacroInvocation.getAnAffectedElement/0#dispred#d1462297_10#join_rhs
Execution_Time_Ms : 75594

Release           : 1149
Run               : 2026-06-26_18-24-24
Platform          : x86-linux
Language          : c
Suite             : misra-default
Predicate         : _Class::Class.getALinkTarget/0#dispred#29b2b38a#bf_Class::Class.getALinkTarget/0#dispred#29b2b38a#bf__#shared
Execution_Time_Ms : 37326

Release           : 1149
Run               : 2026-06-26_18-24-24
Platform          : x86-linux
Language          : c
Suite             : misra-default
Predicate         : HoldsForAllCopies::HoldsForAllCopies<DeadCode::DeadOperationInstance,Expr::Expr>::RelevantElement#acaf8a9e
Execution_Time_Ms : 39356

Release           : 1149
Run               : 2026-06-26_18-24-24
Platform          : x86-linux
Language          : cpp
Suite             : cert-default
Predicate         : STLContainers::localTaint/2#d71eeced
Execution_Time_Ms : 550074

Release           : 1149
Run               : 2026-06-26_18-24-24
Platform          : x86-linux
Language          : cpp
Suite             : misra-default
Predicate         : Macro::MacroInvocation.getAnAffectedElement/0#dispred#d1462297_10#join_rhs
Execution_Time_Ms : 84370

Release           : 1149
Run               : 2026-06-26_18-24-24
Platform          : x86-linux
Language          : cpp
Suite             : cert-default
Predicate         : STLContainers::localTaint/2#d71eeced_10#join_rhs
Execution_Time_Ms : 1030200

Release           : 1149
Run               : 2026-06-26_18-24-24
Platform          : x86-linux
Language          : cpp
Suite             : autosar-default
Predicate         : STLContainers::localTaint/2#d71eeced
Execution_Time_Ms : 590452

jketema and others added 30 commits March 6, 2025 13:52

Update expected test results after frontend update

1c82682

Merge pull request #865 from jketema/frontend-update

ce14612

Update expected test results after frontend update

Merge branch 'main' into next

d6b55ca

Update MISRA queries and tests after merging location tables

f07f569

Merge pull request #915 from jketema/loc-table-merge

3b4a91c

Update MISRA queries and tests after merging location tables

C++: accept new test results after QL changes

67adebb

Merge pull request #916 from IdrissRio/next

60c2e05

C++: accept new test results after QL changes

Merge remote-tracking branch 'upstream/main' into next

740bcd0

Comvert ARR37-C to use the new dataflow library

2089bcd

Convert ERR30-C to use the new dataflow library

8d73f3b

Convert FIO45-C to use the new dataflow library

7a1577e

Convert EXP36-C to the new datafow library

c5c6c58

Note that we now properly report the offending cast instead of the expression that is being cast.

Convert MSC33-C to the new dataflow library

8fdea49

As it is the dataflow used by `asctime` that is relevant, and not the pointer, use the indirect expression.

Convert MSC51-CPP to the new dataflow library

3289621

Convert CTR56-CPP to the new dataflow library

d20cd3a

Convert EXP51-CPP ot use the new dataflow library

77e8e0e

Conver M3-9-3 to use the new dataflow library

57b6091

Convert A9-3-1 to use the new dataflow library

357ee08

Convert A27-0-4 to use the new dataflow library

30114c5

Convert A5-0-4 to use the new dataflow library

d313bf2

Merge pull request #920 from jketema/jketema/dataflow

500e96a

Convert a number of queries to use the new dataflow library

Update expected test results for MSC33-C

8529fbb

Merge pull request #921 from jketema/jketema/dataflow

363faea

Update expected test results for MSC33-C

Create temporary copies of parts of the concurrency library

012ac3d

These use the new dataflow library

Convert CON30-C to use the new dataflow library

22b8860

Move queries not depending on dataflow over to ConcurrencyNew

1c1f3fb

Convert UseOnlyArrayIndexingForPointerArithmetic to use the new dataf…

3ba33c0

…low library

Convert StringNumberConversionMissingErrorCheck to use the new datafl…

e2d44a6

…ow library

mbaluda requested a review from a team June 25, 2026 15:05

Copilot started reviewing on behalf of mbaluda June 25, 2026 15:06 View session

Copilot AI reviewed Jun 25, 2026

View reviewed changes

Potential fix for pull request finding

1cea4ea

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

GitHub Advanced Security started work on behalf of mbaluda June 25, 2026 15:17 View session

GitHub Advanced Security finished work on behalf of mbaluda June 25, 2026 15:18

Potential fix for pull request finding

2031151

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

GitHub Advanced Security started work on behalf of mbaluda June 25, 2026 15:22 View session

GitHub Advanced Security finished work on behalf of mbaluda June 25, 2026 15:23

Fix formatting of cpp-all dependency in multiple qlpack.yml files

9d4ac96

GitHub Advanced Security started work on behalf of mbaluda June 25, 2026 15:24 View session

GitHub Advanced Security finished work on behalf of mbaluda June 25, 2026 15:25

FOrmat test case

610a27b

GitHub Advanced Security started work on behalf of mbaluda June 25, 2026 15:27 View session

GitHub Advanced Security finished work on behalf of mbaluda June 25, 2026 15:28

Refactor IndirectUninitializedNode to remove unused import

eb0c982

GitHub Advanced Security started work on behalf of mbaluda June 25, 2026 15:55 View session

GitHub Advanced Security finished work on behalf of mbaluda June 25, 2026 15:56

mbaluda marked this pull request as draft June 25, 2026 17:12

mbaluda removed the request for review from a team June 25, 2026 17:12

Fix expected file

a4ebed2

GitHub Advanced Security started work on behalf of mbaluda June 25, 2026 17:33 View session

GitHub Advanced Security finished work on behalf of mbaluda June 25, 2026 17:33

Fix performance issue in EXP37-C

0ce2c64

GitHub Advanced Security started work on behalf of mbaluda June 26, 2026 16:26 View session

GitHub Advanced Security finished work on behalf of mbaluda June 26, 2026 16:27

Fix query format

55b6f53

GitHub Advanced Security started work on behalf of mbaluda June 26, 2026 16:29 View session

GitHub Advanced Security finished work on behalf of mbaluda June 26, 2026 16:30

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Merge branch `next` and update CodeQL to v2.23.3#1149

Merge branch `next` and update CodeQL to v2.23.3#1149
mbaluda wants to merge 155 commits into
mainfrom
mbaluda-next

mbaluda commented Jun 24, 2026 •

edited

Loading

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

codeql-coding-standards-automation Bot commented Jun 26, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

6 participants

Uh oh!

Conversation

mbaluda commented Jun 24, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Description

Change request type

Rules with added or modified queries

Release change checklist

Query development review checklist

Author

Reviewer

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Copilot's findings

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

codeql-coding-standards-automation Bot commented Jun 26, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

6 participants

mbaluda commented Jun 24, 2026 •

edited

Loading