)]}'
{
  "commit": "d27cf840cae1c9cb23ea2f4c41ffc62470fd08be",
  "tree": "521d812714ffcdef9045e49ab0331b0ff744943b",
  "parents": [
    "d8d4abdff9096a69ff59d96ac4a8dd0e19e5cbcc"
  ],
  "author": {
    "name": "Michael Kubacki",
    "email": "michael.kubacki@microsoft.com",
    "time": "Thu Nov 10 01:32:45 2022 +0800"
  },
  "committer": {
    "name": "Liming Gao",
    "email": "gaoliming@byosoft.com.cn",
    "time": "Fri Dec 23 13:52:00 2022 +0800"
  },
  "message": ".github/codeql/edk2.qls: Enable CWE 457, 676, and 758 queries\n\nThe previous commits fixed issues with these queries across various\npackages. Now that those are resolved, enable the queries in the\nedk2 query set so regressions can be found in the future.\n\nEnables:\n\n1. cpp/conditionallyuninitializedvariable\n   - CWE: https://cwe.mitre.org/data/definitions/457.html\n   - @name Conditionally uninitialized variable\n   - @description An initialization function is used to initialize a\n                  local variable, but the returned status code is\n                  not checked. The variable may be left in an\n                  uninitialized state, and reading the variable may\n                  result in undefined behavior.\n   - @kind problem\n   - @problem.severity warning\n   - @security-severity 7.8\n   - @id cpp/conditionally-uninitialized-variable\n   - @tags security\n     - external/cwe/cwe-457\n2. cpp/pointer-overflow-check\n   - CWE: https://cwe.mitre.org/data/definitions/758.html\n   - @name Pointer overflow check\n   - @description Adding a value to a pointer to check if it\n                  overflows relies on undefined behavior and\n                  may lead to memory corruption.\n   - @kind problem\n   - @problem.severity error\n   - @security-severity 2.1\n   - @precision high\n   - @id cpp/pointer-overflow-check\n   - @tags reliability\n     - security\n     - external/cwe/cwe-758\n3. cpp/potential-buffer-overflow\n   - CWE: https://cwe.mitre.org/data/definitions/676.html\n   - @name Potential buffer overflow\n   - @description Using a library function that does not check\n                  buffer bounds requires the surrounding program\n                  to be very carefully written to avoid buffer\n                  overflows.\n   - @kind problem\n   - @id cpp/potential-buffer-overflow\n   - @problem.severity warning\n   - @security-severity 10.0\n   - @tags reliability\n     - security\n     - external/cwe/cwe-676\n   - @deprecated This query is deprecated, use\n                 Potentially overrunning write\n                 (`cpp/overrunning-write`) and\n                 Potentially overrunning write with float to string\n                 conversion\n                 (`cpp/overrunning-write-with-float`) instead.\n\nNote that cpp/potential-buffer-overflow is deprecated. This query\nwill be updated to the succeeding queries in the next commit. The\nquery is used in this commit to show that we considered and tested\nthe query in history.\n\nCc: Sean Brogan \u003csean.brogan@microsoft.com\u003e\nCc: Michael Kubacki \u003cmikuback@linux.microsoft.com\u003e\nCc: Michael D Kinney \u003cmichael.d.kinney@intel.com\u003e\nSigned-off-by: Michael Kubacki \u003cmichael.kubacki@microsoft.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "ef9aae790f5f75346264fbb2f32b47b8b728bb6b",
      "old_mode": 33188,
      "old_path": ".github/codeql/edk2.qls",
      "new_id": "dc2d87764e93e15de93bb700e80ac1bfb036b674",
      "new_mode": 33188,
      "new_path": ".github/codeql/edk2.qls"
    }
  ]
}