Release Notes for Engine Pack 9.4.5
Engine Pack 9.4.5 contains the following engine deliverables and enhancements:
Installation Notes
Warning
In a distributed environment, the relevant Engine Pack must also be installed on the CxManager host to update the SQL database.
Notice
Engine Packs are cumulative and include previous Engine Pack updates.
For more information about Engine Pack installation, see The New Delivery Model for Checkmarx SAST.
New Improved Scan Flow Improvements
Groovy language is now supported.
Support now includes the following Java methods: Iterable.iterator and Iterator.next().
Languages and Frameworks
All supported code Languages and Frameworks versions can be found at
Supported Code Languages and Frameworks for Engine Pack 9.4.5.
Scala
Finagle is an extensible RPC system for the JVM, used to construct high-concurrency servers. Finagle implements uniform client and server APIs for several protocols, and is designed for high performance and concurrency.
We are introducing brand new support for Finagle.
CSharp and .Net Core improvements
In 9.4.5 we improved CSharp queries to partially support the latest .NET Core versions 5 and 6:
CSharp_Medium_Threat/Buffer_Overflow
Updated general queries to support new hashing methods. The changes affect the following queries:
Updated the general IO (input/output) file queries affecting the following:
RPG Improvements
In 9.4.5 we added support for Display Files and in addition, several parsing exceptions were also fixed.
The following queries were updated mainly for inputs coming from Display Files:
RPG_High_Risk/SQL_Injection
RPG_Medium_Threat/Reflected_Path_Traversal
RPG_Low_Visibility/Integer_Overflow
Presets
OWASP ASVS Compliance
A new preset and a new category for the OWASP ASVS were added, allowing you to track the results and check for compliance.
CWE Top 25
A new preset and a new category for CWE Top 25 were added, allowing you to track the results and check for compliance.
MISRA C 2012
The MISRA C 2012 preset for C Coding Standards, which was added in 9.4.4, has been improved with additional rules. The preset now contains new and improved queries for Rules 6.1 to 6.2, 7.4, 8.1 to 8.8, and 8.10. In the upcoming version, the preset will be improved with additional queries and extended rules coverage.
Component Upgrades
The EngineService was upgrade to .NET Core 6.
Since the Engine Pack installer validates the prerequisites the silent mode upgrade will fail if the .NET Core 6 is not installed.