Michael Nebel
aa964362ef
C#: Update rules_dotnet to 0.21.5.
2025-12-11 11:34:28 +01:00
Michael Nebel
577a2e1974
C#: Copy the 0.19.2 custom rules_dotnet.
2025-12-11 11:34:21 +01:00
Simon Friis Vindum
8c39472d73
Rust: Add change note for reads as taint steps
2025-12-11 09:09:12 +01:00
Tom Hvitved
d5a95a8099
Rust: Strengthen isNotInstantiationOf uses
2025-12-10 20:48:21 +01:00
Tom Hvitved
f30a3b3712
Rust: Add type inference blowup test
2025-12-10 20:48:18 +01:00
Geoffrey White
f1d241f810
Rust: Accept test change.
2025-12-10 18:22:59 +00:00
Geoffrey White
6ca90a2d62
Rust: Change note.
2025-12-10 16:56:26 +00:00
Geoffrey White
c160a1f658
Rust: Fix common FPs for rust/unused-variable and rust/unused-value.
2025-12-10 16:56:24 +00:00
Anders Schack-Mulligen
000f2c345e
Merge pull request #21001 from aschackmull/guards/generalise-validationwrapper
...
Guards: Generalise ValidationWrapper to support GuardValue-based BarrierGuards
2025-12-10 15:52:53 +01:00
Simon Friis Vindum
c6d2047827
Rust: Update expected files
2025-12-10 15:05:36 +01:00
Taus
d2c7147480
Python: Add new test
2025-12-10 13:52:13 +00:00
Taus
6af9fd816f
Python: Make space for new test
2025-12-10 13:51:20 +00:00
Simon Friis Vindum
efbc0934c4
Rust: Do not use types to limit lifting of reads to taint steps
2025-12-10 14:35:24 +01:00
Simon Friis Vindum
fe37e3d9be
Rust: Address PR feedback
2025-12-10 14:35:23 +01:00
Simon Friis Vindum
273eb19b88
Rust: Apply suggestions from code review
...
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com >
2025-12-10 14:35:22 +01:00
Simon Friis Vindum
5ba4e30c20
Rust: Exclude range start and end from field taint steps
2025-12-10 14:35:20 +01:00
Simon Friis Vindum
647bed9e2f
Rust: Add extensible predicate to exclude fields and block fieldless enum types
2025-12-10 14:35:19 +01:00
Simon Friis Vindum
6fcd8d194a
Rust: Refactor flow summary implementation
2025-12-10 14:35:18 +01:00
Simon Friis Vindum
047ea10a9a
Rust: Update tests and expected files
2025-12-10 14:35:17 +01:00
Simon Friis Vindum
0f97e7e29d
Rust: Remov unneeded model
2025-12-10 14:35:16 +01:00
Simon Friis Vindum
8a0e5b5675
Rust: Lift content reads as taint steps
2025-12-10 14:35:14 +01:00
Simon Friis Vindum
cd721b85e9
Merge pull request #20941 from paldepind/rust/invalid-pointer-barriers
...
Rust: Reduce the number of sinks in `DereferenceSink`
2025-12-10 14:22:05 +01:00
Anders Schack-Mulligen
eaa96864f7
Java: Extend test to cover assertion-like barrier guards.
2025-12-10 12:23:52 +01:00
Anders Schack-Mulligen
9cd2247b91
Java: expose support for more general BarrierGuards.
2025-12-10 12:23:52 +01:00
Anders Schack-Mulligen
09058e48aa
Guards: Rename -WithState to Parameterized-.
2025-12-10 12:23:51 +01:00
Anders Schack-Mulligen
ebb989962c
Guards: Generalise ValidationWrapper to support GuardValue-based BarrierGuards.
2025-12-10 12:23:51 +01:00
Simon Friis Vindum
c5a44cf8ff
Rust: Accept changes to expected files
2025-12-10 11:35:32 +01:00
Geoffrey White
506a1ea0b8
Rust: Add test case for rust/access-after-lifetime-ended involving an invalidated reference.
2025-12-10 11:35:31 +01:00
Simon Friis Vindum
ade7815125
Rust: Add change note
2025-12-10 11:35:29 +01:00
Simon Friis Vindum
7d1acbcb87
Rust: Restrict the scope of DereferenceSink to dereferences of raw pointers
2025-12-10 11:35:28 +01:00
Simon Friis Vindum
4a1abc7beb
Merge pull request #21007 from hvitved/rust/update-expected
...
Rust: Update expected test output
2025-12-10 11:19:37 +01:00
Geoffrey White
fa02842d30
Rust: Accept consistency check changes.
2025-12-10 10:16:22 +00:00
Tom Hvitved
30b903604d
Rust: Update expected test output
2025-12-10 11:02:04 +01:00
Jeroen Ketema
3cabcfef75
Swift: Skip -scan-dependencies compiler calls
...
These do not produce any useful data and just crash our frontend.
2025-12-10 10:11:41 +01:00
Jeroen Ketema
e9aa6ddf53
Swift: Strip more unsupported arguments
...
We had customer reports where these occur in practise, although we have not
observed these ourselves in frontend calls.
2025-12-10 10:08:21 +01:00
Geoffrey White
819a12216e
Merge branch 'main' into copilot/add-ecb-cbc-test-cases
2025-12-10 08:56:20 +00:00
Taus
e6e05012c8
Python: Add change note
2025-12-09 22:55:40 +00:00
Taus
ad68a5e4e9
Python: Add modelling for zstd.compression
...
See https://docs.python.org/3/library/compression.zstd.html for
information about this library.
As far as I can tell, the `zstd` library is not vulnerable to things
like ZipSlip, but it _could_ be vulnerable to a decompression bomb
attack, so I extended those models accordingly.
2025-12-09 22:52:16 +00:00
Joe Farebrother
94fcee5340
minor formatting tweak
2025-12-09 14:15:36 +00:00
Joe Farebrother
d0cd4ee959
Add change note
2025-12-09 14:13:38 +00:00
Joe Farebrother
d98e660803
Test fixes + more tests
2025-12-09 14:13:28 +00:00
Joe Farebrother
1d61da51a6
Generate stubs
2025-12-09 14:13:02 +00:00
Joe Farebrother
a594ca9de8
Add tests
2025-12-09 14:12:45 +00:00
Joe Farebrother
41b94e7031
Add spring websocket handler models
2025-12-09 14:12:39 +00:00
Tom Hvitved
fe18e0e414
Merge pull request #20997 from paldepind/rust/fix-expected
...
Rust: Accept changes to expected files
2025-12-09 14:25:36 +01:00
Tom Hvitved
a5f513f178
Merge pull request #20954 from hvitved/rust/stats-more-calls
...
Rust: Include more calls in DB quality metrics
2025-12-09 14:14:07 +01:00
Simon Friis Vindum
53ad3282c3
Rust: Accept changes to expected files
2025-12-09 14:01:31 +01:00
Owen Mansel-Chan
cf19586516
Merge pull request #20993 from github/dependabot/go_modules/go/extractor/extractor-dependencies-955632e86c
...
Bump the extractor-dependencies group in /go/extractor with 2 updates
2025-12-09 09:36:16 +00:00
Anders Schack-Mulligen
139dc0acaf
Merge pull request #20922 from aschackmull/csharp/object-initializer
...
C#: Replace initializer splitting with an ObjectInitMethod.
2025-12-09 10:35:02 +01:00
yoff
5c6d83ed65
Merge pull request #20877 from joefarebrother/python-tornado-websocket
...
Python: Add models for websocket handlers for Tornado
2025-12-09 10:08:59 +01:00
