We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent b087fde commit 500992cCopy full SHA for 500992c
go/ql/src/Security/CWE-681/IncorrectIntegerConversionQuery.qhelp
@@ -27,6 +27,11 @@ the bit size you specified when parsing the number.
27
If this is not possible, then add upper (and lower) bound checks specific to each type and
28
bit size (you can find the minimum and maximum value for each type in the <code>math</code> package).
29
</p>
30
+<p>
31
+Note that CodeQL is only able to identify bounds checks that compare against a constant value. When a variable
32
+is used in the comparison, CodeQL is unable to determine the value of the variable at runtime and will not
33
+recognize the bounds check.
34
+</p>
35
</recommendation>
36
37
<example>
0 commit comments