Geoffrey White
2665d8395a
Merge pull request #20939 from geoffw0/saltmodel
...
Rust: Add heuristic sinks for passwords, initialization vectors etc
2025-12-03 18:01:48 +00:00
Anders Schack-Mulligen
78e1879c9e
Use more flowTo.
2025-12-03 14:12:08 +01:00
Simon Friis Vindum
299fed5901
Rust: Apply fixes from code review
2025-12-03 13:04:54 +01:00
Simon Friis Vindum
a05d0a906c
Rust: Add change note for raw pointer type inference
2025-12-03 11:56:54 +01:00
Geoffrey White
3028e5dac0
Rust: CallExpr -> Call.
2025-12-02 17:31:35 +00:00
github-actions[bot]
085faa2bdb
Post-release preparation for codeql-cli-2.23.7
2025-12-02 16:39:43 +00:00
github-actions[bot]
a045b317ac
Release preparation for version 2.23.7
2025-12-02 15:31:27 +00:00
Simon Friis Vindum
236df0ab65
Rust: Accept changes to expected files
2025-12-02 15:07:54 +01:00
Simon Friis Vindum
ea1b0a8476
Rust: Fix path resolution for raw pointer types
2025-12-02 14:43:52 +01:00
Simon Friis Vindum
c15e12c9ff
Rust: Accept test changes
2025-12-02 14:43:51 +01:00
Simon Friis Vindum
785025f1e3
Rust: Type inference for raw pointers
2025-12-02 14:43:50 +01:00
Simon Friis Vindum
3e7a7d541b
Rust: Include certain types in type inference tests
2025-12-02 13:16:33 +01:00
Simon Friis Vindum
6a2502c97a
Rust: Add type inference tests for raw pointers
2025-12-02 13:14:09 +01:00
Tom Hvitved
7378fbc567
Rust: Restructure classes representing calls
2025-12-02 10:08:04 +01:00
Tom Hvitved
666855dbd7
Shared: Improvements to content-sensitive model generation
2025-12-01 21:23:14 +01:00
Tom Hvitved
3e5ea5664c
Rust: Add DB downgrade script
2025-12-01 20:59:31 +01:00
Tom Hvitved
b350a000e3
Rust: Add DB upgrade script
2025-12-01 20:59:30 +01:00
Tom Hvitved
a2782a12f2
Rust: Run codegen
2025-12-01 20:59:28 +01:00
Tom Hvitved
b40353f88f
Rust: Remove CallExprBase and elaborate QL doc
2025-12-01 20:59:26 +01:00
Tom Hvitved
464d2cd5fc
Merge pull request #20891 from hvitved/rust/data-flow-implicit-deref-borrow
...
Rust: Improve handling of implicit derefs/borrows in data flow
2025-12-01 19:03:55 +01:00
github-actions[bot]
19a13467e0
Release preparation for version 2.23.7
2025-12-01 16:07:37 +00:00
Óscar San José
1cc5b3444a
Fix date format in change note file
2025-12-01 15:39:37 +01:00
Simon Friis Vindum
87d6a60814
Merge pull request #20924 from paldepind/rust/struct-field-tostring
...
Rust: Implement `toString` for struct fields and visibility
2025-12-01 14:52:23 +01:00
Geoffrey White
c64f19f6eb
Rust: Change note.
2025-12-01 12:39:19 +00:00
Geoffrey White
450403883b
Rust: Add test cases for a small number of FPs we see.
2025-12-01 12:39:18 +00:00
Geoffrey White
e834e8665a
Rust: Remove one of the cases that is causing FP results in MRVA.
2025-12-01 12:39:16 +00:00
Geoffrey White
faf69b821b
Rust: Add sinks as barriers to prevent duplicate results.
2025-12-01 12:39:13 +00:00
Geoffrey White
bb50e9fb40
Rust: Add heuristic sinks for rust/hard-coded-cryptographic-value.
2025-12-01 12:39:12 +00:00
Tom Hvitved
6ddb9c784c
Merge pull request #20853 from hvitved/rust/path-resolution-impl-self
...
Rust: Refine `Self` resolution inside `impl` blocks
2025-12-01 12:50:30 +01:00
Tom Hvitved
4bfe1a81dc
Rust: Update expected test output following rebase
2025-12-01 11:38:50 +01:00
Tom Hvitved
d8177274a8
Rust: Improve handling of deref expressions in data flow
2025-12-01 11:34:06 +01:00
Tom Hvitved
4255f7f560
Address review comments
2025-12-01 11:34:03 +01:00
Tom Hvitved
6b003580d1
Rust: Improve handling of implicit derefs/borrows in data flow
2025-12-01 11:34:01 +01:00
Tom Hvitved
9b25a3112d
Rust: Use TaintFlow instead of ValueFlow in tests
2025-12-01 11:33:57 +01:00
Tom Hvitved
d45f8f7236
Rust: Document overlapping function resoltion with test cases
2025-12-01 11:16:15 +01:00
Simon Friis Vindum
1fe7e2ec45
Rust: Change concat to strictconcat
2025-12-01 10:35:43 +01:00
Tom Hvitved
34f3892c35
Rust: Extend Self resolution logic to all item kinds
2025-12-01 09:58:27 +01:00
Tom Hvitved
250d15aef2
Rust: More path resolution tests
2025-12-01 09:54:22 +01:00
Tom Hvitved
77df65f2bc
Address review comment
2025-12-01 09:07:47 +01:00
Geoffrey White
8e099480ab
Rust: Add tests for heuristics.
2025-11-28 18:02:41 +00:00
Simon Friis Vindum
86eb949673
Merge pull request #20902 from paldepind/rust/xss-query
...
Rust: Add new query for XSS vulnerabilities
2025-11-28 09:09:14 +01:00
Simon Friis Vindum
1e305851ee
Rust: Accept changes to expected files
2025-11-27 11:48:36 +01:00
Simon Friis Vindum
97dad2db17
Rust: Apply suggestions from docs review
...
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com >
2025-11-27 11:43:41 +01:00
Geoffrey White
e8cb6b8f54
Rust: Fix a couple of comments.
2025-11-27 09:24:34 +00:00
Tom Hvitved
f0cac321b2
Merge pull request #20236 from hvitved/rust/type-inference-async-dyn-future
...
Rust: Model `async` return types as `dyn Future`
2025-11-27 09:41:02 +01:00
Simon Friis Vindum
d88cfe98f8
Rust: Implement toString for struct fields and visibility
2025-11-27 09:35:31 +01:00
Simon Friis Vindum
8b32679475
Merge pull request #20921 from paldepind/rust/barrier-tweaks
...
Rust: Tweaks and improvements to data flow barriers
2025-11-27 08:56:04 +01:00
Tom Hvitved
a9b58b8db3
Rust: Model async return types as dyn Future
2025-11-26 21:03:03 +01:00
Simon Friis Vindum
329df20e55
Rust: Fix typo
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2025-11-26 15:48:34 +01:00
Felicity Chapman
caf6b950ac
Remove trailing periods from @name metadata in query files
...
Fixed 73 .ql query files where the @name metadata contained an ending period.
This ensures consistency with the CodeQL query metadata style guidelines.
2025-11-26 14:29:51 +00:00
