C++: add .def to exceptions to AV rule 32

[redsun82]

This is used as textual includes in several projects for macro metaprogramming, for example in llvm-project and in swift (and since some time in our internal codebase as well).

[MathiasVP]

LGTM once we have a successful DCA run!

[redsun82]

LGTM once we have a successful DCA run!

Do you know which DCA query suite contains this query?

[redsun82]

LGTM once we have a successful DCA run!

Do you know which DCA query suite contains this query?

silly me, I can just manually select this one query :)

[jketema]

Isn't the query just in the nightly suite?

[MathiasVP]

Isn't the query just in the nightly suite?

It should be, yes. You can check by running codeql resolve queries path-to-the-nightly-suite (and when I run it the query does indeed appear on the list).

[redsun82]

still it's ok to manually select the query if the PR only affects that one query, right?

[jketema]

Preferably you'll run the nightly suite, as that'll show whether there are any adverse consequences due to your change and the way queries interact (I expect this to be pretty boring here).

[redsun82]

DCA shows one repository with less alerts, which were indeed false positives (including .def files for macro metaprogramming).