JavaScript is not currently enabled, but is required for full CodeSonar manual search and browse functionality.
If you are viewing this file in your hub's Web GUI, enable JavaScript in your browser: you will also need it for GUI functionality.
If you opened this file directly from disk, your browser may be directly suppressing JavaScript functionality: certain browsers perform this suppression on local files (but not files delivered by web servers) for security reasons.
| CodeSonar® 9.2p0 | CONFIDENTIAL | CodeSecure Inc |
Every warning class is associated with a Significance value that provides a high-level indication of the purpose of the class and the likely severity of vulnerabilities of that class.
Every warning class is associated with one of the following Significance values: security, reliability, redundancy, style, diagnostic. Significance provides a high level indication of the purpose of the class.
Significance is also broadly correlated with the severity of a particular class of warning. For example, most users will consider a code vulnerability that can lead to a security problem to be more severe than a coding style issue. The available Significance values are shown in the table below in order of severity (most-severe first).
| Significance Value | Description |
|---|---|
| security | A security vulnerability. |
| reliability | A code correctness issue. |
| redundancy | Redundant code; may indicate a logic error. |
| style | A violation of one or more coding style guidelines. |
| diagnostic | The class is purely informative: warnings do not indicate vulnerabilities, they indicate the locations of events or artifacts of interest. |
Significance is available in the following contexts.
| Web GUI: Display | All tables of warning classes (Analysis:Warnings, Warning Search Results, Warning Cluster) have a Significance column. By default, this column is visible. |
|---|---|
| Web GUI: Search |
Significance is searchable:
|
| Creating Custom Warning Classes | All mechanisms for creating a custom warning class require you to specify a Significance value for the new class. |
| CodeSonar Manual | Significance values for built-in classes are shown in the tables below. The documentation pages for individual warning classes also note the corresponding Significance values. |
The following tables show all built-in CodeSonar warning classes, grouped by Significance.
To report problems with this documentation, please visit https://support.codesecure.com/.