docs/data/reusables/code-scanning/codeql-query-tables/cpp.md

{% rowheaders %}

Query name	Related CWEs	Default	Extended	{% data variables.copilot.copilot_autofix_short %}
Bad check for overflow of integer addition	190, 192	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Badly bounded write	120, 787, 805	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Call to memset may be deleted	014	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Call to alloca in a loop	770	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Call to function with fewer arguments than declared parameters	234, 685	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Cast between HRESULT and a Boolean type	253	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Cast from char* to wchar_t*	704	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "x" aria-label="Not included" %}
CGI script vulnerable to cross-site scripting	079	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Cleartext storage of sensitive information in file	260, 313	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Cleartext transmission of sensitive information	319, 359	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Dangerous use of 'cin'	676	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Exposure of system data to an unauthorized control sphere	497	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "x" aria-label="Not included" %}
Failure to use HTTPS URLs	319, 345	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
File opened with O_CREAT flag but without mode argument	732	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Incorrect return-value check for a 'scanf'-like function	253	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Iterator to expired container	416, 664	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Likely overrunning write	120, 787, 805	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Mismatching new/free or malloc/delete	401	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
No space for zero terminator	131, 120, 122	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Pointer overflow check	758	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Potential double free	415	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "x" aria-label="Not included" %}
Potential use after free	416	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Potentially overflowing call to snprintf	190, 253	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Potentially unsafe call to strncat	788, 676, 119, 251	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Redundant null check due to previous dereference	476	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Returning stack-allocated memory	825	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Setting a DACL to NULL in a SECURITY_DESCRIPTOR	732	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Signed overflow check	128, 190	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Static array access may cause overflow	119, 131	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Time-of-check time-of-use filesystem race condition	367	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Too few arguments to formatting function	234, 685	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Uncontrolled data in arithmetic expression	190, 191	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Uncontrolled data in SQL query	089	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "x" aria-label="Not included" %}
Uncontrolled data used in OS command	078, 088	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "x" aria-label="Not included" %}
Uncontrolled format string	134	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Unsafe use of this in constructor	670	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Unsigned difference expression compared to zero	191	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Upcast array used in pointer arithmetic	119, 843	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Use of a broken or risky cryptographic algorithm	327	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "x" aria-label="Not included" %}
Use of a cryptographic algorithm with insufficient key size	326	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Use of a version of OpenSSL with Heartbleed	327, 788	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Use of dangerous function	242, 676	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Use of expired stack-address	825	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Use of string after lifetime ends	416, 664	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Use of unique pointer after lifetime ends	416, 664	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
XML external entity expansion	611	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Array offset used before range check	120, 125	{% octicon "x" aria-label="Not included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Authentication bypass by spoofing	290	{% octicon "x" aria-label="Not included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "x" aria-label="Not included" %}
boost::asio TLS settings misconfiguration	326	{% octicon "x" aria-label="Not included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
boost::asio use of deprecated hardcoded protocol	327	{% octicon "x" aria-label="Not included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Call to memory access function may overflow buffer	119, 121, 122, 126	{% octicon "x" aria-label="Not included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Certificate not checked	295	{% octicon "x" aria-label="Not included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Certificate result conflation	295	{% octicon "x" aria-label="Not included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Cleartext storage of sensitive information in an SQLite database	313	{% octicon "x" aria-label="Not included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Cleartext storage of sensitive information in buffer	312	{% octicon "x" aria-label="Not included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Comma before misleading indentation	1078, 670	{% octicon "x" aria-label="Not included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Comparison of narrow type with wide type in loop condition	190, 197, 835	{% octicon "x" aria-label="Not included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
File created without restricting permissions	732	{% octicon "x" aria-label="Not included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Incorrect 'not' operator usage	480	{% octicon "x" aria-label="Not included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Incorrect allocation-error handling	570, 252, 755	{% octicon "x" aria-label="Not included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Invalid pointer dereference	119, 125, 193, 787	{% octicon "x" aria-label="Not included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Missing return-value check for a 'scanf'-like function	252, 253	{% octicon "x" aria-label="Not included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Multiplication result converted to larger type	190, 192, 197, 681	{% octicon "x" aria-label="Not included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Non-constant format string	134	{% octicon "x" aria-label="Not included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Not enough memory allocated for array of pointer type	131, 122	{% octicon "x" aria-label="Not included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Not enough memory allocated for pointer type	131, 122	{% octicon "x" aria-label="Not included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
NULL application name with an unquoted path in call to CreateProcess	428	{% octicon "x" aria-label="Not included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Overrunning write	119, 131	{% octicon "x" aria-label="Not included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Possibly wrong buffer size in string copy	676, 119, 251	{% octicon "x" aria-label="Not included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Potential exposure of sensitive system data to an unauthorized control sphere	497	{% octicon "x" aria-label="Not included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Potentially overrunning write	120, 787, 805	{% octicon "x" aria-label="Not included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Potentially overrunning write with float to string conversion	120, 787, 805	{% octicon "x" aria-label="Not included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Potentially uninitialized local variable	665, 457	{% octicon "x" aria-label="Not included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Potentially unsafe use of strcat	676, 120, 251	{% octicon "x" aria-label="Not included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Suspicious 'sizeof' use	467	{% octicon "x" aria-label="Not included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Suspicious add with sizeof	468	{% octicon "x" aria-label="Not included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Suspicious pointer scaling	468	{% octicon "x" aria-label="Not included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "x" aria-label="Not included" %}
Suspicious pointer scaling to void	468	{% octicon "x" aria-label="Not included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Type confusion	843	{% octicon "x" aria-label="Not included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Unbounded write	120, 787, 805	{% octicon "x" aria-label="Not included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Uncontrolled allocation size	190, 789	{% octicon "x" aria-label="Not included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Uncontrolled data used in path expression	022, 023, 036, 073	{% octicon "x" aria-label="Not included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Uncontrolled process operation	114	{% octicon "x" aria-label="Not included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Unterminated variadic call	121	{% octicon "x" aria-label="Not included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Untrusted input for a condition	807	{% octicon "x" aria-label="Not included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Use of potentially dangerous function	676	{% octicon "x" aria-label="Not included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}
Wrong type of arguments to formatting function	686	{% octicon "x" aria-label="Not included" %}	{% octicon "check" aria-label="Included" %}	{% octicon "check" aria-label="Included" %}

{% endrowheaders %}