github/codeql

False Negative: DoubleCheckedLocking.ql misses non-volatile lazy initialization once the null checks are split across locals, helpers, or early returns.

#21542

· Carlson-JLQ opened

on Mar 22, 2026

False Negative: ContradictoryTypeChecks.ql misses impossible subtype checks once the false branch is expressed through aliases or lambdas.

#21541

· Carlson-JLQ opened

on Mar 22, 2026

False Negative: ContinueInFalseLoop.ql misses `do ... while(false)` loops once `false` is stored in a local.

#21540

· Carlson-JLQ opened

on Mar 22, 2026

False Negative: ContainsTypeMismatch.ql misses mismatched collection lookups once the receiver is routed through a raw alias.

#21539

· Carlson-JLQ opened

on Mar 22, 2026

False Negative: ContainerSizeCmpZero.ql misses impossible size checks once `length()` or `size()` is copied into locals.

#21538

· Carlson-JLQ opened

on Mar 22, 2026

False Negative: ConstantLoopCondition.ql misses loops whose exit condition stays constant after being wrapped in helpers.

#21537

· Carlson-JLQ opened

on Mar 22, 2026

False Negative: ConstantExpAppearsNonConstant.ql misses expressions that stay constant after trivial local rewrites.

#21536

· Carlson-JLQ opened

on Mar 22, 2026

False Negative: CompareIdenticalValues.ql misses self-comparisons once the same value is routed through aliases or tiny helper methods.

#21535

· Carlson-JLQ opened

on Mar 22, 2026

False Negative: CloseWriter.ql misses leaked wrapped streams when the close is skipped by an early return or hidden in a factory.

question

#21534

· Carlson-JLQ opened

on Mar 22, 2026

False Positive: CloseSql.ql reports a ResultSet that is already scoped by try-with-resources on its parent Statement.

question

#21533

· Carlson-JLQ opened

on Mar 22, 2026

False Negative: CloseReader.ql misses unclosed streams once construction moves into helpers or alternate APIs.

question

#21532

· Carlson-JLQ opened

on Mar 22, 2026

False Negative: CloseSql.ql misses leaked JDBC resources once the allocation site is split across helper calls or `getResultSet()`.

question

#21531

· Carlson-JLQ opened

on Mar 22, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

False Negative: DoubleCheckedLocking.ql misses non-volatile lazy initialization once the null checks are split across locals, helpers, or early returns.

False Negative: ContradictoryTypeChecks.ql misses impossible subtype checks once the false branch is expressed through aliases or lambdas.

False Negative: ContinueInFalseLoop.ql misses `do ... while(false)` loops once `false` is stored in a local.

False Negative: ContainsTypeMismatch.ql misses mismatched collection lookups once the receiver is routed through a raw alias.

False Negative: ContainerSizeCmpZero.ql misses impossible size checks once `length()` or `size()` is copied into locals.

False Negative: ConstantLoopCondition.ql misses loops whose exit condition stays constant after being wrapped in helpers.

False Negative: ConstantExpAppearsNonConstant.ql misses expressions that stay constant after trivial local rewrites.

False Negative: CompareIdenticalValues.ql misses self-comparisons once the same value is routed through aliases or tiny helper methods.

False Negative: CloseWriter.ql misses leaked wrapped streams when the close is skipped by an early return or hidden in a factory.

False Positive: CloseSql.ql reports a ResultSet that is already scoped by try-with-resources on its parent Statement.

False Negative: CloseReader.ql misses unclosed streams once construction moves into helpers or alternate APIs.

False Negative: CloseSql.ql misses leaked JDBC resources once the allocation site is split across helper calls or `getResultSet()`.

Issues

Search results