Gilles Querret comments

Results 184 comments of


                                            Gilles Querret

How to exclude defaults from cabl-security-rules:eu.rssw.cabl.security.ActiveX

Sure !

ClassNameCasing rule is not working as expected

Do you have this problem with SonarQube or SonarLint ?

ClassNameCasing rule is not working as expected

This rule is based on rcode. If the rcode is not available in the build directory, then the rule will not report an issue.

ClassNameCasing rule is not working as expected

Can you turn verbose mode in SonarQube analysis and verify the rcode is read correctly ?

VariableOverflow rule does not work for return value of static method

Reproduced.

Variable is read but never assigned not triggered when variable assigned /after/ read

Agree it should be detected, but this level of granularity is not available yet. We'd need to have better flow control to detect this case.

Variable is read but never assigned not triggered when variable assigned /after/ read

Code flow information is now available in the parse tree, so enhancement can now be implemented.

Conversion can overflow doesn't recognize direct Enum cast to INTEGER

Reproduced. In order to confirm, this is this code ? ``` def var rslt as integer. def var val as Progress.Reflect.AccessMode. val = Progress.Reflect.AccessMode:private. rslt = integer(val:GetValue()). rslt = val:GetValue()....

Conversion can overflow doesn't recognize direct Enum cast to INTEGER

It might be better to report usage of `INTEGER(objectReference)`, whether it is an enum or not. When it's not an enum, the returned value doesn't have any meaning outside of...

Conversion can overflow doesn't recognize direct Enum cast to INTEGER

> Reasons to use `INTEGER(val)` are that there's no "NPE" when val is an unknown value; the unknown value is simply returned. So until the `enumRef?:getValue()` syntax is available, it's...