Skip to content

Commit 0729e42

Browse files
committed
C++: Update metadata based on cwe-scores
Though the codeql/cwe-scores update-queries.py script did not make any changes on its own, I looked up the score of the CWEs that @geoffw0 suggested using the explain.py script. As discussed elsewhere, this should be more of a warning than a recommendation.
1 parent ce1e4ad commit 0729e42

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

cpp/ql/src/Critical/MissingCheckScanf.ql

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -3,11 +3,11 @@
33
* @description Failing to check that a call to 'scanf' actually writes to an
44
* output variable can lead to unexpected behavior at reading time.
55
* @kind problem
6-
* @problem.severity recommendation
7-
* @security-severity 4.5
6+
* @problem.severity warning
7+
* @security-severity 7.5
88
* @precision medium
99
* @id cpp/missing-check-scanf
10-
* @tags security
10+
* @tags security cwe-252 cwe-253
1111
*/
1212

1313
import cpp

0 commit comments

Comments
 (0)