Skip to content

Commit cae74a9

Browse files
committed
Declarations7: add implementation notes and lib description
also rm accidental leftover expected file
1 parent 1f9e4e7 commit cae74a9

File tree

6 files changed

+11
-25
lines changed

6 files changed

+11
-25
lines changed

c/cert/src/rules/DCL39-C/InformationLeakageAcrossTrustBoundariesC.md

+1-1
Original file line numberDiff line numberDiff line change
@@ -285,7 +285,7 @@ Search for [vulnerabilities](https://wiki.sei.cmu.edu/confluence/display/c/BB.+D
285285

286286
## Implementation notes
287287

288-
None
288+
The rule does not detect cases where fields may have uninitialized padding but are initialized via an initializer.
289289

290290
## References
291291

cpp/cert/src/rules/DCL55-CPP/InformationLeakageAcrossTrustBoundaries.md

+1-1
Original file line numberDiff line numberDiff line change
@@ -310,7 +310,7 @@ Search for [vulnerabilities](https://wiki.sei.cmu.edu/confluence/display/cpluspl
310310

311311
## Implementation notes
312312

313-
None
313+
The rule does not detect cases where fields may have uninitialized padding but are initialized via an initializer.
314314

315315
## References
316316

cpp/common/src/codingstandards/cpp/rules/informationleakageacrossboundaries/InformationLeakageAcrossBoundaries.qll

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
/**
2-
* Provides a library which includes a `problems` predicate for reporting....
2+
* Provides a library which includes a `problems` predicate for reporting potential information leakage across trust boundaries, relating to uninitialized memory in structs.
33
*/
44

55
import cpp

cpp/common/test/rules/informationleakageacrossboundaries/InformationLeakageAcrossTrustBoundaries.expected

-20
This file was deleted.

rule_packages/c/Declarations7.json

+4-1
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,10 @@
1515
"shared_implementation_short_name": "InformationLeakageAcrossBoundaries",
1616
"tags": [
1717
"security"
18-
]
18+
],
19+
"implementation_scope": {
20+
"description": "The rule does not detect cases where fields may have uninitialized padding but are initialized via an initializer."
21+
}
1922
}
2023
],
2124
"title": "Avoid information leakage when passing a structure across a trust boundary"

rule_packages/cpp/Uninitialized.json

+4-1
Original file line numberDiff line numberDiff line change
@@ -42,7 +42,10 @@
4242
"shared_implementation_short_name": "InformationLeakageAcrossBoundaries",
4343
"tags": [
4444
"security"
45-
]
45+
],
46+
"implementation_scope": {
47+
"description": "The rule does not detect cases where fields may have uninitialized padding but are initialized via an initializer."
48+
}
4649
}
4750
],
4851
"title": "Avoid information leakage when passing a class object across a trust boundary"

0 commit comments

Comments
 (0)