Commit Graph

85907 Commits

Author SHA1 Message Date
Michael Nebel
16bfcc3882 C#: Update language test expected output files to .NET 10. 2025-12-11 11:34:52 +01:00
Michael Nebel
4c3176ef1a C#: Update integration tests to target and request .NET 10. 2025-12-11 11:34:50 +01:00
Michael Nebel
66aaa62ad9 C#: Manually update the existing stubs to target .NET 10. 2025-12-11 11:34:46 +01:00
Michael Nebel
ff3d2d5b8d C#: Update stub generator script to target .NET 10. 2025-12-11 11:34:39 +01:00
Michael Nebel
9e395936dc C#: Update extractor to target .NET 10. 2025-12-11 11:34:38 +01:00
Michael Nebel
682195bd57 C#: Update workflows. 2025-12-11 11:34:36 +01:00
Michael Nebel
cf43c6170a C#: Update Paket version and dependencies. 2025-12-11 11:34:34 +01:00
Michael Nebel
3c0e3c4336 C#: Remove custom rules_dotnet 0.19.2. 2025-12-11 11:34:33 +01:00
Michael Nebel
aa964362ef C#: Update rules_dotnet to 0.21.5. 2025-12-11 11:34:28 +01:00
Michael Nebel
577a2e1974 C#: Copy the 0.19.2 custom rules_dotnet. 2025-12-11 11:34:21 +01:00
Simon Friis Vindum
8c39472d73 Rust: Add change note for reads as taint steps 2025-12-11 09:09:12 +01:00
Tom Hvitved
d5a95a8099 Rust: Strengthen isNotInstantiationOf uses 2025-12-10 20:48:21 +01:00
Tom Hvitved
f30a3b3712 Rust: Add type inference blowup test 2025-12-10 20:48:18 +01:00
Geoffrey White
f1d241f810 Rust: Accept test change. 2025-12-10 18:22:59 +00:00
Geoffrey White
6ca90a2d62 Rust: Change note. 2025-12-10 16:56:26 +00:00
Geoffrey White
c160a1f658 Rust: Fix common FPs for rust/unused-variable and rust/unused-value. 2025-12-10 16:56:24 +00:00
Anders Schack-Mulligen
000f2c345e Merge pull request #21001 from aschackmull/guards/generalise-validationwrapper
Guards: Generalise ValidationWrapper to support GuardValue-based BarrierGuards
2025-12-10 15:52:53 +01:00
Simon Friis Vindum
c6d2047827 Rust: Update expected files 2025-12-10 15:05:36 +01:00
Taus
d2c7147480 Python: Add new test 2025-12-10 13:52:13 +00:00
Taus
6af9fd816f Python: Make space for new test 2025-12-10 13:51:20 +00:00
Simon Friis Vindum
efbc0934c4 Rust: Do not use types to limit lifting of reads to taint steps 2025-12-10 14:35:24 +01:00
Simon Friis Vindum
fe37e3d9be Rust: Address PR feedback 2025-12-10 14:35:23 +01:00
Simon Friis Vindum
273eb19b88 Rust: Apply suggestions from code review
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com>
2025-12-10 14:35:22 +01:00
Simon Friis Vindum
5ba4e30c20 Rust: Exclude range start and end from field taint steps 2025-12-10 14:35:20 +01:00
Simon Friis Vindum
647bed9e2f Rust: Add extensible predicate to exclude fields and block fieldless enum types 2025-12-10 14:35:19 +01:00
Simon Friis Vindum
6fcd8d194a Rust: Refactor flow summary implementation 2025-12-10 14:35:18 +01:00
Simon Friis Vindum
047ea10a9a Rust: Update tests and expected files 2025-12-10 14:35:17 +01:00
Simon Friis Vindum
0f97e7e29d Rust: Remov unneeded model 2025-12-10 14:35:16 +01:00
Simon Friis Vindum
8a0e5b5675 Rust: Lift content reads as taint steps 2025-12-10 14:35:14 +01:00
Simon Friis Vindum
cd721b85e9 Merge pull request #20941 from paldepind/rust/invalid-pointer-barriers
Rust: Reduce the number of sinks in `DereferenceSink`
2025-12-10 14:22:05 +01:00
Anders Schack-Mulligen
eaa96864f7 Java: Extend test to cover assertion-like barrier guards. 2025-12-10 12:23:52 +01:00
Anders Schack-Mulligen
9cd2247b91 Java: expose support for more general BarrierGuards. 2025-12-10 12:23:52 +01:00
Anders Schack-Mulligen
09058e48aa Guards: Rename -WithState to Parameterized-. 2025-12-10 12:23:51 +01:00
Anders Schack-Mulligen
ebb989962c Guards: Generalise ValidationWrapper to support GuardValue-based BarrierGuards. 2025-12-10 12:23:51 +01:00
Simon Friis Vindum
c5a44cf8ff Rust: Accept changes to expected files 2025-12-10 11:35:32 +01:00
Geoffrey White
506a1ea0b8 Rust: Add test case for rust/access-after-lifetime-ended involving an invalidated reference. 2025-12-10 11:35:31 +01:00
Simon Friis Vindum
ade7815125 Rust: Add change note 2025-12-10 11:35:29 +01:00
Simon Friis Vindum
7d1acbcb87 Rust: Restrict the scope of DereferenceSink to dereferences of raw pointers 2025-12-10 11:35:28 +01:00
Simon Friis Vindum
4a1abc7beb Merge pull request #21007 from hvitved/rust/update-expected
Rust: Update expected test output
2025-12-10 11:19:37 +01:00
Geoffrey White
fa02842d30 Rust: Accept consistency check changes. 2025-12-10 10:16:22 +00:00
Tom Hvitved
30b903604d Rust: Update expected test output 2025-12-10 11:02:04 +01:00
Jeroen Ketema
3cabcfef75 Swift: Skip -scan-dependencies compiler calls
These do not produce any useful data and just crash our frontend.
2025-12-10 10:11:41 +01:00
Jeroen Ketema
e9aa6ddf53 Swift: Strip more unsupported arguments
We had customer reports where these occur in practise, although we have not
observed these ourselves in frontend calls.
2025-12-10 10:08:21 +01:00
Geoffrey White
819a12216e Merge branch 'main' into copilot/add-ecb-cbc-test-cases 2025-12-10 08:56:20 +00:00
Taus
e6e05012c8 Python: Add change note 2025-12-09 22:55:40 +00:00
Taus
ad68a5e4e9 Python: Add modelling for zstd.compression
See https://docs.python.org/3/library/compression.zstd.html for
information about this library.

As far as I can tell, the `zstd` library is not vulnerable to things
like ZipSlip, but it _could_ be vulnerable to a decompression bomb
attack, so I extended those models accordingly.
2025-12-09 22:52:16 +00:00
Joe Farebrother
94fcee5340 minor formatting tweak 2025-12-09 14:15:36 +00:00
Joe Farebrother
d0cd4ee959 Add change note 2025-12-09 14:13:38 +00:00
Joe Farebrother
d98e660803 Test fixes + more tests 2025-12-09 14:13:28 +00:00
Joe Farebrother
1d61da51a6 Generate stubs 2025-12-09 14:13:02 +00:00