Add change notes for ThreadResourceAbuse ArithExpr fix

ebickle · ebickle · commit 4dca396106b0 · 2023-10-06T14:31:37.000-07:00
diff --git a/java/ql/src/change-notes/2023-10-06-thread-resource-abuse-arithexpr.md b/java/ql/src/change-notes/2023-10-06-thread-resource-abuse-arithexpr.md
@@ -0,0 +1,5 @@
+---
+category: majorAnalysis
+---
+* The `java/thread-resource-abuse` experimental query has been improved to ensure that tained values flowing through arithmetic operations are preserved. For example, `Thread.sleep(untrustedInput * 1000)` will now be detected as a vulnerability.
+ 

-Original file line number
+Diff line change
@@ @@ -0,0 +1,5 @@ @@
 +---
 +category: majorAnalysis
 +---
 +* The `java/thread-resource-abuse` experimental query has been improved to ensure that tained values flowing through arithmetic operations are preserved. For example, `Thread.sleep(untrustedInput * 1000)` will now be detected as a vulnerability.
++