Tom Hvitved
|
fe18e0e414
|
Merge pull request #20997 from paldepind/rust/fix-expected
Rust: Accept changes to expected files
|
2025-12-09 14:25:36 +01:00 |
|
Tom Hvitved
|
a5f513f178
|
Merge pull request #20954 from hvitved/rust/stats-more-calls
Rust: Include more calls in DB quality metrics
|
2025-12-09 14:14:07 +01:00 |
|
Simon Friis Vindum
|
53ad3282c3
|
Rust: Accept changes to expected files
|
2025-12-09 14:01:31 +01:00 |
|
Tom Hvitved
|
0280771c51
|
Merge pull request #20953 from hvitved/rust/data-flow-call-models
Rust: Model more data flow constructs as calls using MaD
|
2025-12-08 15:22:02 +01:00 |
|
Geoffrey White
|
24852c6664
|
Merge pull request #20966 from geoffw0/lifetimetest
Rust: Fix FPs from rust/access-after-lifetime-ended
|
2025-12-08 09:03:51 +00:00 |
|
Tom Hvitved
|
5a5679bd51
|
Rust: Taint flow through operations using MaD
|
2025-12-05 09:19:03 +01:00 |
|
Tom Hvitved
|
57bca5ca9b
|
Rust: Include more calls in DB quality metrics
|
2025-12-05 09:15:26 +01:00 |
|
Simon Friis Vindum
|
1a19df2044
|
Merge pull request #20950 from paldepind/rust/ti-raw-pointer
Rust: Type inference for raw pointers
|
2025-12-05 09:06:13 +01:00 |
|
Geoffrey White
|
b7402fef09
|
Merge remote-tracking branch 'upstream/main' into lifetimetest
|
2025-12-04 17:33:39 +00:00 |
|
Geoffrey White
|
32e9fdfe19
|
Rust: Fix the false positives.
|
2025-12-04 17:19:41 +00:00 |
|
Geoffrey White
|
8594c7a29a
|
Rust: Add test for rust/access-after-lifetime-ended FP involving generic calls.
|
2025-12-04 15:28:15 +00:00 |
|
Geoffrey White
|
2665d8395a
|
Merge pull request #20939 from geoffw0/saltmodel
Rust: Add heuristic sinks for passwords, initialization vectors etc
|
2025-12-03 18:01:48 +00:00 |
|
Simon Friis Vindum
|
236df0ab65
|
Rust: Accept changes to expected files
|
2025-12-02 15:07:54 +01:00 |
|
Simon Friis Vindum
|
c15e12c9ff
|
Rust: Accept test changes
|
2025-12-02 14:43:51 +01:00 |
|
Geoffrey White
|
450403883b
|
Rust: Add test cases for a small number of FPs we see.
|
2025-12-01 12:39:18 +00:00 |
|
Geoffrey White
|
e834e8665a
|
Rust: Remove one of the cases that is causing FP results in MRVA.
|
2025-12-01 12:39:16 +00:00 |
|
Geoffrey White
|
bb50e9fb40
|
Rust: Add heuristic sinks for rust/hard-coded-cryptographic-value.
|
2025-12-01 12:39:12 +00:00 |
|
Tom Hvitved
|
4bfe1a81dc
|
Rust: Update expected test output following rebase
|
2025-12-01 11:38:50 +01:00 |
|
Tom Hvitved
|
6b003580d1
|
Rust: Improve handling of implicit derefs/borrows in data flow
|
2025-12-01 11:34:01 +01:00 |
|
Geoffrey White
|
8e099480ab
|
Rust: Add tests for heuristics.
|
2025-11-28 18:02:41 +00:00 |
|
Simon Friis Vindum
|
86eb949673
|
Merge pull request #20902 from paldepind/rust/xss-query
Rust: Add new query for XSS vulnerabilities
|
2025-11-28 09:09:14 +01:00 |
|
Simon Friis Vindum
|
7278bc75ca
|
Rust: Remove unused function in XSS tests
|
2025-11-26 08:57:47 +01:00 |
|
Simon Friis Vindum
|
9ae4c14ffb
|
Rust: Address PR feedback
|
2025-11-25 14:20:17 +01:00 |
|
Geoffrey White
|
1c2d8bb70e
|
Merge pull request #20851 from geoffw0/access-invalid-pointer-fp
Rust: Improve rust/access-invalid-pointer
|
2025-11-25 09:49:07 +00:00 |
|
Simon Friis Vindum
|
9e2bf76a7f
|
Rust: Add XSS sinks for Actix and Warp
|
2025-11-24 15:46:25 +01:00 |
|
Simon Friis Vindum
|
ae9c753371
|
Rust: Add XSS query
|
2025-11-24 15:46:24 +01:00 |
|
Simon Friis Vindum
|
0f4561efc3
|
Rust: Add XSS examples
|
2025-11-24 15:46:23 +01:00 |
|
Geoffrey White
|
993154ed57
|
Rust: Avoid duplicating sinks.
|
2025-11-21 19:34:16 +00:00 |
|
Geoffrey White
|
0ea28b4026
|
Rust: Test .expected changes.
|
2025-11-21 18:57:06 +00:00 |
|
Geoffrey White
|
80615056c0
|
Merge remote-tracking branch 'upstream/main' into cert-checks
|
2025-11-21 18:40:40 +00:00 |
|
Geoffrey White
|
03fc4cb0aa
|
Merge remote-tracking branch 'upstream/main' into access-invalid-pointer-fp
|
2025-11-21 17:39:56 +00:00 |
|
Geoffrey White
|
9db1722060
|
Rust: Accept consistency check changes.
|
2025-11-21 17:35:34 +00:00 |
|
Geoffrey White
|
ace7a77fd6
|
Rust: Switch to MaD models.
|
2025-11-21 16:27:52 +00:00 |
|
Geoffrey White
|
785754ec65
|
Rust: Switch the query to taint flow, since some taint summaries are relevant now.
|
2025-11-21 15:02:29 +00:00 |
|
Geoffrey White
|
aca7877be2
|
Rust: Add some missing path / file metadata models.
|
2025-11-21 15:02:25 +00:00 |
|
Geoffrey White
|
2da0814f65
|
Rust: Add test case involving taint.
|
2025-11-21 14:39:15 +00:00 |
|
Geoffrey White
|
41a6bf079d
|
Rust: Add barrier for null pointer checks to the query.
|
2025-11-17 15:00:22 +00:00 |
|
Geoffrey White
|
d804229158
|
Rust: Add missing model.
|
2025-11-17 14:41:14 +00:00 |
|
Geoffrey White
|
6c3566ab52
|
Rust: It turns out we need test cases for immutable pointers as well.
|
2025-11-17 14:32:57 +00:00 |
|
Tom Hvitved
|
8455663255
|
Rust: Speedup AccessAfterLifetime.ql
|
2025-11-15 15:21:03 +01:00 |
|
Tom Hvitved
|
e69ff0d5e8
|
Rust: Restrict type propagation into arguments
|
2025-11-14 09:44:58 +01:00 |
|
Geoffrey White
|
e0f0305ace
|
Rust: Add test cases for rust/access-invalid-pointer based on real world FPs.
|
2025-11-13 16:07:22 +00:00 |
|
Tom Hvitved
|
467bd541d2
|
Merge pull request #20770 from hvitved/rust/attribute-macro-expansion-filter
Rust: Remove elements superseded by attribute macro expansions
|
2025-11-12 19:52:09 +01:00 |
|
Geoffrey White
|
c77eef39e2
|
Rust: Convert the query to a path-problem with global data flow.
|
2025-11-12 16:21:46 +00:00 |
|
Geoffrey White
|
209f394b5e
|
Rust: Fix the alert message.
|
2025-11-12 15:51:03 +00:00 |
|
Geoffrey White
|
f8ef48b924
|
Rust: Add query test.
|
2025-11-12 15:44:15 +00:00 |
|
Geoffrey White
|
8624f9c660
|
Merge pull request #20749 from github/copilot/add-secure-cookie-test-cases
Add test coverage for actix-web, poem, and http-types cookie secure attribute
|
2025-11-11 09:26:26 +00:00 |
|
Tom Hvitved
|
c81f5f5190
|
Rust: Remove elements superseded by attribute macro expansions
|
2025-11-10 09:18:58 +01:00 |
|
Geoffrey White
|
680870dbf3
|
Rust: Fix after merge.
|
2025-11-06 09:39:51 +00:00 |
|
Geoffrey White
|
1ce787a185
|
Merge branch 'main' into mv3
|
2025-11-06 09:23:01 +00:00 |
|