Geoffrey White
|
506a1ea0b8
|
Rust: Add test case for rust/access-after-lifetime-ended involving an invalidated reference.
|
2025-12-10 11:35:31 +01:00 |
|
Simon Friis Vindum
|
ade7815125
|
Rust: Add change note
|
2025-12-10 11:35:29 +01:00 |
|
Simon Friis Vindum
|
7d1acbcb87
|
Rust: Restrict the scope of DereferenceSink to dereferences of raw pointers
|
2025-12-10 11:35:28 +01:00 |
|
Tom Hvitved
|
30b903604d
|
Rust: Update expected test output
|
2025-12-10 11:02:04 +01:00 |
|
Tom Hvitved
|
fe18e0e414
|
Merge pull request #20997 from paldepind/rust/fix-expected
Rust: Accept changes to expected files
|
2025-12-09 14:25:36 +01:00 |
|
Tom Hvitved
|
a5f513f178
|
Merge pull request #20954 from hvitved/rust/stats-more-calls
Rust: Include more calls in DB quality metrics
|
2025-12-09 14:14:07 +01:00 |
|
Simon Friis Vindum
|
53ad3282c3
|
Rust: Accept changes to expected files
|
2025-12-09 14:01:31 +01:00 |
|
Tom Hvitved
|
31b184a404
|
Rust: Exclude deref expressions on raw pointers from call resolution stats
|
2025-12-09 08:54:51 +01:00 |
|
Tom Hvitved
|
0280771c51
|
Merge pull request #20953 from hvitved/rust/data-flow-call-models
Rust: Model more data flow constructs as calls using MaD
|
2025-12-08 15:22:02 +01:00 |
|
Tom Hvitved
|
57ce2ee749
|
Address review comments
|
2025-12-08 13:27:36 +01:00 |
|
Simon Friis Vindum
|
cd6429a39e
|
Merge pull request #20969 from paldepind/rust/dispath-default-trait
Rust: Do not dispatch to all implementations when trait target is accurate
|
2025-12-08 10:45:55 +01:00 |
|
Tom Hvitved
|
bfa37b8488
|
Fix typo
|
2025-12-08 10:17:47 +01:00 |
|
Geoffrey White
|
24852c6664
|
Merge pull request #20966 from geoffw0/lifetimetest
Rust: Fix FPs from rust/access-after-lifetime-ended
|
2025-12-08 09:03:51 +00:00 |
|
Óscar San José
|
bc6133de5c
|
Merge branch 'main' of https://github.com/github/codeql into oscarsj/merge-back-rc-3.20
|
2025-12-05 19:31:47 +01:00 |
|
Geoffrey White
|
108db75124
|
Update rust/ql/lib/codeql/rust/security/AccessAfterLifetimeExtensions.qll
Co-authored-by: Simon Friis Vindum <paldepind@github.com>
|
2025-12-05 13:19:38 +00:00 |
|
Simon Friis Vindum
|
f200dba7dd
|
Rust: Add change note
|
2025-12-05 14:12:58 +01:00 |
|
Simon Friis Vindum
|
fa4b212020
|
Rust: Fix grammar
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
|
2025-12-05 14:03:29 +01:00 |
|
Simon Friis Vindum
|
5888ed30bd
|
Rust: Do not dispatch to all implementations when trait target is accurate
|
2025-12-05 13:01:22 +01:00 |
|
Tom Hvitved
|
12a6dcc4ff
|
Rust: Remove some predicates
|
2025-12-05 12:50:36 +01:00 |
|
Simon Friis Vindum
|
59ce721f7d
|
Rust: Add global data flow example
|
2025-12-05 09:38:22 +01:00 |
|
Tom Hvitved
|
5a5679bd51
|
Rust: Taint flow through operations using MaD
|
2025-12-05 09:19:03 +01:00 |
|
Tom Hvitved
|
41916640c3
|
Rust: Taint flow tests for operations
|
2025-12-05 09:19:02 +01:00 |
|
Tom Hvitved
|
294c489fd8
|
Rust: Handle x[y] expressions as *.index(y) calls in data flow
|
2025-12-05 09:18:59 +01:00 |
|
Tom Hvitved
|
e72c8acb6c
|
Rust: Add data flow tests for collections
|
2025-12-05 09:16:57 +01:00 |
|
Tom Hvitved
|
09461e9cb6
|
Merge pull request #20967 from hvitved/rust/call-refactor-fix
Rust: Call refactor follow-up fixes
|
2025-12-05 09:16:18 +01:00 |
|
Tom Hvitved
|
57bca5ca9b
|
Rust: Include more calls in DB quality metrics
|
2025-12-05 09:15:26 +01:00 |
|
Simon Friis Vindum
|
1a19df2044
|
Merge pull request #20950 from paldepind/rust/ti-raw-pointer
Rust: Type inference for raw pointers
|
2025-12-05 09:06:13 +01:00 |
|
Tom Hvitved
|
be1d756de4
|
Rust: Call refactor follow-up fixes
|
2025-12-04 21:15:28 +01:00 |
|
Geoffrey White
|
4109848927
|
Rust: Clean up following merge.
|
2025-12-04 17:55:34 +00:00 |
|
Geoffrey White
|
b7402fef09
|
Merge remote-tracking branch 'upstream/main' into lifetimetest
|
2025-12-04 17:33:39 +00:00 |
|
Geoffrey White
|
3cdbef71f1
|
Rust: Change note.
|
2025-12-04 17:25:34 +00:00 |
|
Geoffrey White
|
32e9fdfe19
|
Rust: Fix the false positives.
|
2025-12-04 17:19:41 +00:00 |
|
Tom Hvitved
|
8b89e15dfa
|
Merge pull request #20863 from hvitved/rust/call-refactor
Rust: Restructure classes representing calls
|
2025-12-04 17:02:17 +01:00 |
|
Simon Friis Vindum
|
27ddc813af
|
Rust: Cleanup of raw pointer types based in PR feedback
|
2025-12-04 16:41:28 +01:00 |
|
Geoffrey White
|
8594c7a29a
|
Rust: Add test for rust/access-after-lifetime-ended FP involving generic calls.
|
2025-12-04 15:28:15 +00:00 |
|
Tom Hvitved
|
bc6d38ebb4
|
Address review comments
|
2025-12-04 10:38:47 +01:00 |
|
Anders Schack-Mulligen
|
607ad1f886
|
Merge pull request #20961 from aschackmull/dataflow/flowfrom
Dataflow: Add flowFrom predicates to mirror flowTo.
|
2025-12-04 10:09:29 +01:00 |
|
Tom Hvitved
|
38a572dfa0
|
Rust: Run codegen
|
2025-12-03 20:47:05 +01:00 |
|
Tom Hvitved
|
a707527022
|
Address review comments in annotations.py
|
2025-12-03 20:46:30 +01:00 |
|
Geoffrey White
|
2665d8395a
|
Merge pull request #20939 from geoffw0/saltmodel
Rust: Add heuristic sinks for passwords, initialization vectors etc
|
2025-12-03 18:01:48 +00:00 |
|
Anders Schack-Mulligen
|
78e1879c9e
|
Use more flowTo.
|
2025-12-03 14:12:08 +01:00 |
|
Simon Friis Vindum
|
299fed5901
|
Rust: Apply fixes from code review
|
2025-12-03 13:04:54 +01:00 |
|
Simon Friis Vindum
|
a05d0a906c
|
Rust: Add change note for raw pointer type inference
|
2025-12-03 11:56:54 +01:00 |
|
Geoffrey White
|
3028e5dac0
|
Rust: CallExpr -> Call.
|
2025-12-02 17:31:35 +00:00 |
|
github-actions[bot]
|
085faa2bdb
|
Post-release preparation for codeql-cli-2.23.7
|
2025-12-02 16:39:43 +00:00 |
|
github-actions[bot]
|
a045b317ac
|
Release preparation for version 2.23.7
|
2025-12-02 15:31:27 +00:00 |
|
Simon Friis Vindum
|
236df0ab65
|
Rust: Accept changes to expected files
|
2025-12-02 15:07:54 +01:00 |
|
Simon Friis Vindum
|
ea1b0a8476
|
Rust: Fix path resolution for raw pointer types
|
2025-12-02 14:43:52 +01:00 |
|
Simon Friis Vindum
|
c15e12c9ff
|
Rust: Accept test changes
|
2025-12-02 14:43:51 +01:00 |
|
Simon Friis Vindum
|
785025f1e3
|
Rust: Type inference for raw pointers
|
2025-12-02 14:43:50 +01:00 |
|