JavaScript is not currently enabled, but is required for full CodeSonar manual search and browse functionality.

If you are viewing this file in your hub's Web GUI, enable JavaScript in your browser: you will also need it for GUI functionality.

If you opened this file directly from disk, your browser may be directly suppressing JavaScript functionality: certain browsers perform this suppression on local files (but not files delivered by web servers) for security reasons.

CodeSonar® 9.2p0 CONFIDENTIAL CodeSecure Inc

CodeSonar Warning Class Significance

Every warning class is associated with a Significance value that provides a high-level indication of the purpose of the class and the likely severity of vulnerabilities of that class.



About Significance

Every warning class is associated with one of the following Significance values: security, reliability, redundancy, style, diagnostic. Significance provides a high level indication of the purpose of the class.

Significance is also broadly correlated with the severity of a particular class of warning. For example, most users will consider a code vulnerability that can lead to a security problem to be more severe than a coding style issue. The available Significance values are shown in the table below in order of severity (most-severe first).

Significance Value Description
security A security vulnerability.
reliability A code correctness issue.
redundancy Redundant code; may indicate a logic error.
style A violation of one or more coding style guidelines.
diagnostic The class is purely informative: warnings do not indicate vulnerabilities, they indicate the locations of events or artifacts of interest.

Using Significance

Significance is available in the following contexts.

Web GUI: Display All tables of warning classes (Analysis:Warnings, Warning Search Results, Warning Cluster) have a Significance column. By default, this column is visible.
Web GUI: Search Significance is searchable:
Creating Custom Warning Classes All mechanisms for creating a custom warning class require you to specify a Significance value for the new class.
CodeSonar Manual Significance values for built-in classes are shown in the tables below. The documentation pages for individual warning classes also note the corresponding Significance values.

Warning Classes By Significance

The following tables show all built-in CodeSonar warning classes, grouped by Significance.

Significance: C/C++, Ada, Java, and C# warning classes

SignificanceWarning Classes
C/C++ Ada Java C#
diagnostic
      redundancy
          reliability
          security
          style

          Significance: Go, Kotlin, Python, Rust, JavaScript, and TypeScript warning classes

          SignificanceWarning Classes
          Go Kotlin Python Rust JavaScript TypeScript
          diagnostic
                    redundancy
                    reliability
                    security
                        style
                         

                        To report problems with this documentation, please visit https://support.codesecure.com/.