Tom Hvitved
|
38a572dfa0
|
Rust: Run codegen
|
2025-12-03 20:47:05 +01:00 |
|
Geoffrey White
|
2665d8395a
|
Merge pull request #20939 from geoffw0/saltmodel
Rust: Add heuristic sinks for passwords, initialization vectors etc
|
2025-12-03 18:01:48 +00:00 |
|
Simon Friis Vindum
|
299fed5901
|
Rust: Apply fixes from code review
|
2025-12-03 13:04:54 +01:00 |
|
Simon Friis Vindum
|
a05d0a906c
|
Rust: Add change note for raw pointer type inference
|
2025-12-03 11:56:54 +01:00 |
|
Geoffrey White
|
3028e5dac0
|
Rust: CallExpr -> Call.
|
2025-12-02 17:31:35 +00:00 |
|
github-actions[bot]
|
085faa2bdb
|
Post-release preparation for codeql-cli-2.23.7
|
2025-12-02 16:39:43 +00:00 |
|
github-actions[bot]
|
a045b317ac
|
Release preparation for version 2.23.7
|
2025-12-02 15:31:27 +00:00 |
|
Simon Friis Vindum
|
ea1b0a8476
|
Rust: Fix path resolution for raw pointer types
|
2025-12-02 14:43:52 +01:00 |
|
Simon Friis Vindum
|
785025f1e3
|
Rust: Type inference for raw pointers
|
2025-12-02 14:43:50 +01:00 |
|
Tom Hvitved
|
7378fbc567
|
Rust: Restructure classes representing calls
|
2025-12-02 10:08:04 +01:00 |
|
Tom Hvitved
|
b350a000e3
|
Rust: Add DB upgrade script
|
2025-12-01 20:59:30 +01:00 |
|
Tom Hvitved
|
a2782a12f2
|
Rust: Run codegen
|
2025-12-01 20:59:28 +01:00 |
|
Tom Hvitved
|
464d2cd5fc
|
Merge pull request #20891 from hvitved/rust/data-flow-implicit-deref-borrow
Rust: Improve handling of implicit derefs/borrows in data flow
|
2025-12-01 19:03:55 +01:00 |
|
github-actions[bot]
|
19a13467e0
|
Release preparation for version 2.23.7
|
2025-12-01 16:07:37 +00:00 |
|
Simon Friis Vindum
|
87d6a60814
|
Merge pull request #20924 from paldepind/rust/struct-field-tostring
Rust: Implement `toString` for struct fields and visibility
|
2025-12-01 14:52:23 +01:00 |
|
Geoffrey White
|
e834e8665a
|
Rust: Remove one of the cases that is causing FP results in MRVA.
|
2025-12-01 12:39:16 +00:00 |
|
Geoffrey White
|
bb50e9fb40
|
Rust: Add heuristic sinks for rust/hard-coded-cryptographic-value.
|
2025-12-01 12:39:12 +00:00 |
|
Tom Hvitved
|
6ddb9c784c
|
Merge pull request #20853 from hvitved/rust/path-resolution-impl-self
Rust: Refine `Self` resolution inside `impl` blocks
|
2025-12-01 12:50:30 +01:00 |
|
Tom Hvitved
|
d8177274a8
|
Rust: Improve handling of deref expressions in data flow
|
2025-12-01 11:34:06 +01:00 |
|
Tom Hvitved
|
4255f7f560
|
Address review comments
|
2025-12-01 11:34:03 +01:00 |
|
Tom Hvitved
|
6b003580d1
|
Rust: Improve handling of implicit derefs/borrows in data flow
|
2025-12-01 11:34:01 +01:00 |
|
Simon Friis Vindum
|
1fe7e2ec45
|
Rust: Change concat to strictconcat
|
2025-12-01 10:35:43 +01:00 |
|
Tom Hvitved
|
34f3892c35
|
Rust: Extend Self resolution logic to all item kinds
|
2025-12-01 09:58:27 +01:00 |
|
Tom Hvitved
|
77df65f2bc
|
Address review comment
|
2025-12-01 09:07:47 +01:00 |
|
Simon Friis Vindum
|
86eb949673
|
Merge pull request #20902 from paldepind/rust/xss-query
Rust: Add new query for XSS vulnerabilities
|
2025-11-28 09:09:14 +01:00 |
|
Geoffrey White
|
e8cb6b8f54
|
Rust: Fix a couple of comments.
|
2025-11-27 09:24:34 +00:00 |
|
Tom Hvitved
|
f0cac321b2
|
Merge pull request #20236 from hvitved/rust/type-inference-async-dyn-future
Rust: Model `async` return types as `dyn Future`
|
2025-11-27 09:41:02 +01:00 |
|
Simon Friis Vindum
|
d88cfe98f8
|
Rust: Implement toString for struct fields and visibility
|
2025-11-27 09:35:31 +01:00 |
|
Tom Hvitved
|
a9b58b8db3
|
Rust: Model async return types as dyn Future
|
2025-11-26 21:03:03 +01:00 |
|
Simon Friis Vindum
|
329df20e55
|
Rust: Fix typo
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
|
2025-11-26 15:48:34 +01:00 |
|
Simon Friis Vindum
|
815af34c66
|
Rust: Add additional barriers to queries
|
2025-11-26 14:54:11 +01:00 |
|
Simon Friis Vindum
|
081ab499c2
|
Rust: Add barrier for fieldless enum types
|
2025-11-26 14:46:58 +01:00 |
|
Simon Friis Vindum
|
6050a0e1a8
|
Rust: Split boolean from number barriers
|
2025-11-26 14:45:31 +01:00 |
|
Simon Friis Vindum
|
1c8cc39a6a
|
Merge pull request #20906 from paldepind/rust/enum-fieldless
Rust: Add predicates for fieldless and unit-only enums
|
2025-11-26 12:52:28 +01:00 |
|
Tom Hvitved
|
7e5131891c
|
Rust: Special-case Self::AssocType in path resolution
|
2025-11-26 11:50:35 +01:00 |
|
Simon Friis Vindum
|
9ae4c14ffb
|
Rust: Address PR feedback
|
2025-11-25 14:20:17 +01:00 |
|
Simon Friis Vindum
|
4f13ae3fc9
|
Rust: Add qldoc
|
2025-11-25 13:35:14 +01:00 |
|
Simon Friis Vindum
|
50e8d0ca20
|
Rust: Add isFieldless and isUnitOnly to Enum
|
2025-11-25 13:35:11 +01:00 |
|
Simon Friis Vindum
|
b4ae58871a
|
Rust: Tweak existing isStruct predicates
|
2025-11-25 13:35:10 +01:00 |
|
Geoffrey White
|
1c2d8bb70e
|
Merge pull request #20851 from geoffw0/access-invalid-pointer-fp
Rust: Improve rust/access-invalid-pointer
|
2025-11-25 09:49:07 +00:00 |
|
Geoffrey White
|
daead038ab
|
Merge pull request #20829 from geoffw0/cert-checks
Rust: New Query rust/disabled-certificate-check
|
2025-11-24 15:21:58 +00:00 |
|
Simon Friis Vindum
|
9e2bf76a7f
|
Rust: Add XSS sinks for Actix and Warp
|
2025-11-24 15:46:25 +01:00 |
|
Simon Friis Vindum
|
ae9c753371
|
Rust: Add XSS query
|
2025-11-24 15:46:24 +01:00 |
|
Tom Hvitved
|
551e7ada5c
|
Rust: Refine Self resolution inside impl blocks
|
2025-11-24 14:53:00 +01:00 |
|
Tom Hvitved
|
43111b8eaa
|
Merge pull request #20716 from hvitved/rust/path-resolution-variable-impl
Rust: Path resolution before variable resolution
|
2025-11-24 13:08:53 +01:00 |
|
Tom Hvitved
|
ac644b257a
|
Merge pull request #20848 from hvitved/rust/ranked-forex-rename
Rust: Use `ToIndex` instead of `FromIndex` in ranked `forex` predicates
|
2025-11-24 13:05:58 +01:00 |
|
Tom Hvitved
|
b16f8c20a9
|
Update rust/ql/lib/codeql/rust/internal/PathResolution.qll
Co-authored-by: Simon Friis Vindum <paldepind@github.com>
|
2025-11-23 19:05:24 +01:00 |
|
Geoffrey White
|
b62968fa0f
|
Rust: Spelling.
|
2025-11-22 09:22:33 +00:00 |
|
Geoffrey White
|
993154ed57
|
Rust: Avoid duplicating sinks.
|
2025-11-21 19:34:16 +00:00 |
|
Geoffrey White
|
eb674d08d6
|
Rust: Reinstate the original function names model but call it a heuristic now.
|
2025-11-21 18:46:12 +00:00 |
|