Skip to content

9.9
Compare
Choose a tag to compare
@SonarTech SonarTech released this 04 Sep 14:17
9.9.0.77355
a1541b1
This commit was created on github.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Verified
Learn about vigilant mode.

Hello everyone!

This release is focused on improving the symbolic execution engine to increase the issue accuracy.
We also deleted rule S2255 as its deprecation period came to an end.

Deleted Rules:

False Positives

  • 7859 - [C#, VB.NET] Fix S2589/S4158: Do not consider a collection not to be empty if a remove method was called.
  • 6158 - [C#, VB.NET] Fix S2259 FP: Recognize NotNull results of String methods

False Negatives

  • 7910 - [C#] Fix S112 FN: When using null-coalesce operator.
  • 7861 - [C#, VB.NET] Fix S4158 FN: If a collection is cleared, mark the collection as empty.
  • 7780 - [C#, VB.NET] Fix S2589 FN: Track numerical constant patterns.
  • 7704 - [C#, VB.NET] Fix FN S2583/S2589 when Equals is invoked with bool or number parameters.

Other improvements

  • Modify rule S3776 - Change the remediation cost from constant to analogous to the excess over the complexity threshold.
  • 7825 - Update RSPEC before the 9.9 release.
Assets 6
Loading