codeql icon indicating copy to clipboard operation
codeql copied to clipboard

False positive for cs/dereferenced-value-is-always-null in CSharp

Open wwwjwww opened this issue 1 year ago • 2 comments

Description of the false positive

Hi, I wonder if this is a false positive in cs/dereferenced-value-is-always-null. From my understanding, the program would never run L975.

Code samples or links to source code image

wwwjwww avatar Apr 10 '24 10:04 wwwjwww

Hi again @wwwjwww 👋

Thanks for reporting this one as well. Based on the code in the screenshot, this does look like a false positive to me. We will track this internally, but addressing false positives is not currently a product priority, so I can't say when this may get looked into -- especially since this is a correctness query, not a security one.

mbg avatar Apr 10 '24 11:04 mbg

Thanks!

wwwjwww avatar Apr 16 '24 03:04 wwwjwww