Skip to content

Commit 1d786ab

Browse files
authored
Merge pull request github#2881 from rdmarsh2/ir-release-note
C++/Docs: release notes for IR taint tracking and GVN
2 parents 0cc3218 + 7a7444b commit 1d786ab

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

change-notes/1.24/analysis-cpp.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -46,3 +46,5 @@ The following changes in version 1.24 affect C/C++ analysis in all applications.
4646
the following improvements:
4747
* The library now models data flow through `strdup` and similar functions.
4848
* The library now models data flow through formatting functions such as `sprintf`.
49+
* The security pack taint tracking library (`semmle.code.cpp.security.TaintTracking`) uses a new intermediate representation. This provides a more precise analysis of pointers to stack variables and flow through parameters, improving the results of many security queries.
50+
* The global value numbering library (`semmle.code.cpp.valuenumbering.GlobalValueNumbering`) uses a new intermediate representation to provide a more precise analysis of heap allocated memory and pointers to stack variables.

0 commit comments

Comments
 (0)