1869 Commits

Author	SHA1	Message	Date
Tom Hvitved	a5f513f178	Merge pull request #20954 from hvitved/rust/stats-more-calls ... Rust: Include more calls in DB quality metrics	2025-12-09 14:14:07 +01:00
Tom Hvitved	0280771c51	Merge pull request #20953 from hvitved/rust/data-flow-call-models ... Rust: Model more data flow constructs as calls using MaD	2025-12-08 15:22:02 +01:00
Tom Hvitved	57ce2ee749	Address review comments	2025-12-08 13:27:36 +01:00
Simon Friis Vindum	cd6429a39e	Merge pull request #20969 from paldepind/rust/dispath-default-trait ... Rust: Do not dispatch to all implementations when trait target is accurate	2025-12-08 10:45:55 +01:00
Geoffrey White	24852c6664	Merge pull request #20966 from geoffw0/lifetimetest ... Rust: Fix FPs from rust/access-after-lifetime-ended	2025-12-08 09:03:51 +00:00
Óscar San José	bc6133de5c	Merge branch 'main' of https://github.com/github/codeql into oscarsj/merge-back-rc-3.20	2025-12-05 19:31:47 +01:00
Geoffrey White	108db75124	Update rust/ql/lib/codeql/rust/security/AccessAfterLifetimeExtensions.qll ... Co-authored-by: Simon Friis Vindum <paldepind@github.com>	2025-12-05 13:19:38 +00:00
Simon Friis Vindum	f200dba7dd	Rust: Add change note	2025-12-05 14:12:58 +01:00
Simon Friis Vindum	fa4b212020	Rust: Fix grammar ... Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>	2025-12-05 14:03:29 +01:00
Simon Friis Vindum	5888ed30bd	Rust: Do not dispatch to all implementations when trait target is accurate	2025-12-05 13:01:22 +01:00
Tom Hvitved	12a6dcc4ff	Rust: Remove some predicates	2025-12-05 12:50:36 +01:00
Tom Hvitved	5a5679bd51	Rust: Taint flow through operations using MaD	2025-12-05 09:19:03 +01:00
Tom Hvitved	294c489fd8	Rust: Handle x[y] expressions as *.index(y) calls in data flow	2025-12-05 09:18:59 +01:00
Tom Hvitved	e72c8acb6c	Rust: Add data flow tests for collections	2025-12-05 09:16:57 +01:00
Tom Hvitved	09461e9cb6	Merge pull request #20967 from hvitved/rust/call-refactor-fix ... Rust: Call refactor follow-up fixes	2025-12-05 09:16:18 +01:00
Tom Hvitved	57bca5ca9b	Rust: Include more calls in DB quality metrics	2025-12-05 09:15:26 +01:00
Simon Friis Vindum	1a19df2044	Merge pull request #20950 from paldepind/rust/ti-raw-pointer ... Rust: Type inference for raw pointers	2025-12-05 09:06:13 +01:00
Tom Hvitved	be1d756de4	Rust: Call refactor follow-up fixes	2025-12-04 21:15:28 +01:00
Geoffrey White	4109848927	Rust: Clean up following merge.	2025-12-04 17:55:34 +00:00
Geoffrey White	b7402fef09	Merge remote-tracking branch 'upstream/main' into lifetimetest	2025-12-04 17:33:39 +00:00
Geoffrey White	32e9fdfe19	Rust: Fix the false positives.	2025-12-04 17:19:41 +00:00
Tom Hvitved	8b89e15dfa	Merge pull request #20863 from hvitved/rust/call-refactor ... Rust: Restructure classes representing calls	2025-12-04 17:02:17 +01:00
Simon Friis Vindum	27ddc813af	Rust: Cleanup of raw pointer types based in PR feedback	2025-12-04 16:41:28 +01:00
Tom Hvitved	bc6d38ebb4	Address review comments	2025-12-04 10:38:47 +01:00
Tom Hvitved	38a572dfa0	Rust: Run codegen	2025-12-03 20:47:05 +01:00
Geoffrey White	2665d8395a	Merge pull request #20939 from geoffw0/saltmodel ... Rust: Add heuristic sinks for passwords, initialization vectors etc	2025-12-03 18:01:48 +00:00
Simon Friis Vindum	299fed5901	Rust: Apply fixes from code review	2025-12-03 13:04:54 +01:00
Simon Friis Vindum	a05d0a906c	Rust: Add change note for raw pointer type inference	2025-12-03 11:56:54 +01:00
Geoffrey White	3028e5dac0	Rust: CallExpr -> Call.	2025-12-02 17:31:35 +00:00
github-actions[bot]	085faa2bdb	Post-release preparation for codeql-cli-2.23.7	2025-12-02 16:39:43 +00:00
github-actions[bot]	a045b317ac	Release preparation for version 2.23.7	2025-12-02 15:31:27 +00:00
Simon Friis Vindum	ea1b0a8476	Rust: Fix path resolution for raw pointer types	2025-12-02 14:43:52 +01:00
Simon Friis Vindum	785025f1e3	Rust: Type inference for raw pointers	2025-12-02 14:43:50 +01:00
Tom Hvitved	7378fbc567	Rust: Restructure classes representing calls	2025-12-02 10:08:04 +01:00
Tom Hvitved	b350a000e3	Rust: Add DB upgrade script	2025-12-01 20:59:30 +01:00
Tom Hvitved	a2782a12f2	Rust: Run codegen	2025-12-01 20:59:28 +01:00
Tom Hvitved	464d2cd5fc	Merge pull request #20891 from hvitved/rust/data-flow-implicit-deref-borrow ... Rust: Improve handling of implicit derefs/borrows in data flow	2025-12-01 19:03:55 +01:00
github-actions[bot]	19a13467e0	Release preparation for version 2.23.7	2025-12-01 16:07:37 +00:00
Simon Friis Vindum	87d6a60814	Merge pull request #20924 from paldepind/rust/struct-field-tostring ... Rust: Implement `toString` for struct fields and visibility	2025-12-01 14:52:23 +01:00
Geoffrey White	e834e8665a	Rust: Remove one of the cases that is causing FP results in MRVA.	2025-12-01 12:39:16 +00:00
Geoffrey White	bb50e9fb40	Rust: Add heuristic sinks for rust/hard-coded-cryptographic-value.	2025-12-01 12:39:12 +00:00
Tom Hvitved	6ddb9c784c	Merge pull request #20853 from hvitved/rust/path-resolution-impl-self ... Rust: Refine `Self` resolution inside `impl` blocks	2025-12-01 12:50:30 +01:00
Tom Hvitved	d8177274a8	Rust: Improve handling of deref expressions in data flow	2025-12-01 11:34:06 +01:00
Tom Hvitved	4255f7f560	Address review comments	2025-12-01 11:34:03 +01:00
Tom Hvitved	6b003580d1	Rust: Improve handling of implicit derefs/borrows in data flow	2025-12-01 11:34:01 +01:00
Simon Friis Vindum	1fe7e2ec45	Rust: Change concat to strictconcat	2025-12-01 10:35:43 +01:00
Tom Hvitved	34f3892c35	Rust: Extend Self resolution logic to all item kinds	2025-12-01 09:58:27 +01:00
Tom Hvitved	77df65f2bc	Address review comment	2025-12-01 09:07:47 +01:00
Simon Friis Vindum	86eb949673	Merge pull request #20902 from paldepind/rust/xss-query ... Rust: Add new query for XSS vulnerabilities	2025-11-28 09:09:14 +01:00
Geoffrey White	e8cb6b8f54	Rust: Fix a couple of comments.	2025-11-27 09:24:34 +00:00