Merge pull request #16982 from MathiasVP/promote-unsigned-difference-…

…expression-compared-zero-to-code-scanning C++: Promote `cpp/unsigned-difference-expression-compared-zero` to Code Scanning
github · Jul 25, 2024 · 30abc95 · 30abc95
2 parents 9d75782 + 4d3377b
commit 30abc95
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 1 deletion.
diff --git a/cpp/ql/src/Security/CWE/CWE-191/UnsignedDifferenceExpressionComparedZero.ql b/cpp/ql/src/Security/CWE/CWE-191/UnsignedDifferenceExpressionComparedZero.ql
@@ -5,7 +5,7 @@
  * @id cpp/unsigned-difference-expression-compared-zero
  * @problem.severity warning
  * @security-severity 9.8
- * @precision medium
+ * @precision high
  * @tags security
  *       correctness
  *       external/cwe/cwe-191

diff --git a/...c/change-notes/2024-07-11-unsigned-difference-expression-compared-zero-query.md b/...c/change-notes/2024-07-11-unsigned-difference-expression-compared-zero-query.md
@@ -0,0 +1,4 @@
+---
+category: queryMetadata
+---
+* The precision of `cpp/unsigned-difference-expression-compared-zero` ("Unsigned difference expression compared to zero") has been increased to `high`. As a result, it will be run by default as part of the Code Scanning suite.