Commit graph

Select branches

Hide pull requests

fix/forgejo-home

master

#1

#2

Mono Color

• f37222d4fb
  
  fix(scan): harden frontend analysis trvon 2026-07-28 11:57:38 -04:00
• faad55be6d
  
  ci: validate setup script builds trvon 2026-07-28 11:20:29 -04:00
• 75e3e09cbf
  
  fix(rust): dedupe cargo wrapper output trvon 2026-07-28 00:38:56 -04:00
• f0ece0794a
  
  feat(eval): add manifest project runner trvon 2026-07-27 23:18:03 -04:00
• a96163675d
  
  fix(detect): suppress dead-code false positives trvon 2026-07-23 21:25:14 -04:00
• 7032334b25
  
  perf(detect): accelerate clone scoring trvon 2026-07-23 14:54:38 -04:00
• eedaa16c4f
  
  fix(swift): clean frontend test warning trvon 2026-07-20 14:55:52 -04:00
• 0073f8bd9a
  
  fix(fuzz): match relative ASan paths trvon 2026-07-20 14:53:14 -04:00
• 0daac178bf
  
  feat(detect): broaden security coverage trvon 2026-07-20 14:53:04 -04:00
• 45b31c6b5a
  
  feat(swift): harden SIL scanner trvon 2026-07-20 14:52:50 -04:00
• f749f44d92
  
  feat(rust): improve security provenance trvon 2026-07-20 14:52:42 -04:00
• af62fa3428
  
  fix(build): restore frontend meson layout trvon 2026-07-20 14:52:27 -04:00
• 584fedddb2
  
  feat(frontend): harden language backend wiring trvon 2026-07-20 14:51:52 -04:00
• 1509eefcf8
  
  docs: align Fold agent guidance trvon 2026-07-20 14:51:29 -04:00
• 2dcbdbc75d
  
  feat: harden Fold quality guard trvon 2026-07-13 15:05:35 -04:00
• 8d053f4727
  
  feat: checkpoint. Bug fixes and good improvements trvon 2026-07-10 09:59:49 -04:00
• 661157e648
  
  feat(cli): add scan scopes + complexity detector trvon 2026-06-22 09:09:43 -04:00
• 1914d8284e
  
  feat: many improvements and bug fixes trvon 2026-06-12 13:25:11 -04:00
• 50230c809b
  
  checkpoint trvon 2026-06-04 20:20:29 -04:00
• b08410a4dd
  
  feat: extend Rust/Swift IR encoders, add locationless filter, embedded skill trvon 2026-06-02 16:00:42 -04:00
• 374aa7475d
  
  many good updates for binary and SAST / DAST scanning trvon 2026-06-02 12:39:03 -04:00
• fe5eb68871
  
  fix: real-binary chain validation — gadget discovery, target priority, robustness trvon 2026-06-01 13:13:08 -04:00
• b18f1890b1
  
  feat: write-what-where /bin/sh planting + conditional gadget handling (Part 3c) trvon 2026-06-01 11:46:42 -04:00
• 68ea402a6e
  
  feat: semantics-driven ROP chain planner (Part 3b) trvon 2026-06-01 11:41:07 -04:00
• e3344cbdb3
  
  feat: per-gadget symbolic effects (Part 3a) trvon 2026-06-01 11:23:57 -04:00
• 75f9d41210
  
  feat: transitive write-loop overflow summaries (Part 2) trvon 2026-06-01 11:04:39 -04:00
• c08081a016
  
  feat: vendor x86-64 + 32-bit SLEIGH; precise SSA def-use; write-loop FP guard trvon 2026-06-01 10:34:28 -04:00
• 2ffa58c50f
  
  feat: ROP chain synthesis attached to binary buffer-overflow findings (Part B) trvon 2026-06-01 09:34:37 -04:00
• c70cac8230
  
  feat: interprocedural write-loop buffer-overflow detection (Part A) trvon 2026-06-01 09:24:02 -04:00
• a5488f210e
  
  feat: attach ROP/exploit gadgets to binary buffer-overflow findings trvon 2026-06-01 08:58:16 -04:00
• 5b5fd7dbc6
  
  feat: binary stack-buffer-overflow detection via SSA P-Code trvon 2026-06-01 00:09:07 -04:00
• 6846ebd738
  
  chore: ignore Claude workspace state trvon 2026-05-31 23:06:18 -04:00
• c10b99961f
  
  fix(binary): bound r2 security scans trvon 2026-05-31 22:49:56 -04:00
• b60c3a4db5
  
  fix(binary): cut base64-blob string FPs (mangle-shaped + alphabet table) trvon 2026-05-31 21:22:21 -04:00
• d742a49d28
  
  build: finish dead-encoder removal refs + meson build fixes trvon 2026-05-31 21:22:20 -04:00
• 79596f2f81
  
  feat(binary): null-deref via stack memory model in P-Code encoder trvon 2026-05-31 20:57:10 -04:00
• b560e696ba
  
  fix(test): drop binary_bb_encoder references from test_binary_bb_observer trvon 2026-05-31 20:56:55 -04:00
• 3fa6d0f562
  
  refactor(binary): delete dead abstract-block encoder (binary_bb_encoder) trvon 2026-05-31 20:38:14 -04:00
• c46797cb56
  
  feat(binary): wire P-Code scan into fold scan via decoupled hook (Phase 4, part 2) trvon 2026-05-31 20:28:48 -04:00
• 3338dad392
  
  feat(binary): whole-binary P-Code scan via r2 enumeration (Phase 4, part 1) trvon 2026-05-31 20:10:02 -04:00
• 1681acbee6
  
  feat(binary): dual-stream P-Code router + first end-to-end finding (Phase 3.5) trvon 2026-05-31 20:02:03 -04:00
• 15d32eaec8
  
  feat(binary): P-Code -> Z3 encoder MVP — div-by-zero (Phase 3) trvon 2026-05-31 19:51:05 -04:00
• bd1f289f06
  
  feat(binary): dual-mode Ghidra lifter (raw + SSA) -> fold::ir::pcode (Phase 2) trvon 2026-05-31 19:39:21 -04:00
• 79bec72091
  
  build(binary): meson wiring for vendored Ghidra decompiler (Phase 1) trvon 2026-05-31 17:39:44 -04:00
• 5152d0c9f7
  
  feat(binary): vendor Ghidra 12.1 decompiler + validate P-Code lifting (Phase 0-1) trvon 2026-05-31 17:32:47 -04:00
• f4f59ce23c
  
  feat(binary): constant-zero div-by-zero + null-deref over disassembly trvon 2026-05-31 15:02:43 -04:00
• 5294e6bdf9
  
  feat(binary): structural use-after-free / double-free over disassembly trvon 2026-05-31 14:49:10 -04:00
• 81db00d7c8
  
  feat(binary): detect bare secrets + API-key prefixes, filter build-path FP trvon 2026-05-31 14:10:33 -04:00
• 18cb853f3a
  
  fix(binary): strip _chk suffix so fortified imports are detected (CTF slice 1) trvon 2026-05-31 13:59:34 -04:00
• dd98730988
  
  docs: remaining loop-IR work + cross-frontend architecture finding trvon 2026-05-31 13:44:48 -04:00
• 2c4f5880e5
  
  fix(null-deref): path-sensitive &&/|| guard, not source-text (A1) trvon 2026-05-31 12:50:31 -04:00
• 080bf9655f
  
  feat(walker): affine (symbolic-bound) loop summarization + deterministic baseline trvon 2026-05-31 08:46:16 -04:00
• d73ba7ea8f
  
  feat(walker): counted-loop summarization with over-approx tagging (B2) trvon 2026-05-30 22:44:01 -04:00
• 513d7dea34
  
  refactor(walker): classify counted loops through ir::Loop (B1 slice 2) trvon 2026-05-30 18:21:17 -04:00
• 797759d0b6
  
  feat(ir): frontend-agnostic ir::Loop + clang lowering (B1 slice 1) trvon 2026-05-30 18:11:29 -04:00
• b693d8a038
  
  bench: tracked precision baseline + enforcing local drift gate trvon 2026-05-30 18:04:16 -04:00
• 4bc62d721a
  
  fix: scan namespaced/nested functions; timeout robustness; null-deref drift trvon 2026-05-30 18:04:15 -04:00
• 1dab3ddf92
  
  Root cause confirmed: namespace precheck prevents scanning trvon 2026-05-30 08:50:17 -04:00
• b0be70e46d
  
  feat: structured counterexample field populated from Z3 models trvon 2026-05-30 01:29:35 -04:00
• dcbbba73ff
  
  fix: interprocedural buffer-bound pre-pass verification + test trvon 2026-05-30 00:48:07 -04:00
• 6348820f92
  
  audit: binary scan timeout root cause — repeated aaa per session trvon 2026-05-30 00:26:15 -04:00
• 3e89a18ccd
  
  fix: wire llvm-ar into meson native file so tests can rebuild trvon 2026-05-30 00:13:10 -04:00
• 4345e88e52
  
  fix: CXXThrowExpr support in symbolic encoder applyStmt trvon 2026-05-30 00:05:44 -04:00
• 476e6fd7bf
  
  fix: add CXXThrowExpr support to symbolic encoder applyStmt trvon 2026-05-29 23:55:03 -04:00
• 0d63dbbd7e
  
  research+feat: interprocedural buffer-bound threading — pre-pass architecture trvon 2026-05-29 23:49:56 -04:00
• c3db07eda3
  
  fix: pass ParmVarDecl to OOB observer for interprocedural buffer tracking trvon 2026-05-29 23:40:25 -04:00
• 9be8deb4f6
  
  feat: enrich findings with path trace, counterexample, variable info trvon 2026-05-29 23:13:09 -04:00
• 95a5ddb462
  
  audit: CTF binary detector gap analysis — 5 gaps, projected 7%→70% trvon 2026-05-29 22:54:17 -04:00
• 8a465b6675
  
  feat: BinaryBBObserver — Z3-proved binary findings + unit tests trvon 2026-05-29 21:55:48 -04:00
• b9af5afb63
  
  feat: BinaryBBObserver — Z3-proved binary vulnerability findings trvon 2026-05-29 21:55:09 -04:00
• 6f73c75d5d
  
  feat: extend binary dangerous import list — 22 functions with CWE annotations trvon 2026-05-29 21:36:45 -04:00
• eb85913f6e
  
  eval: CTF loop 2 — 3.7%→7.4% detection, 2x improvement trvon 2026-05-29 21:30:38 -04:00
• 5a4d27d60e
  
  audit: loop 2 priorities — top 5 by ROI across all backends trvon 2026-05-29 21:25:10 -04:00
• 0a078e002a
  
  feat: Binary Phase 3 — basic block → Z3 expression encoder trvon 2026-05-29 21:16:25 -04:00
• a85c2fabf3
  
  feat: Binary Phase 3 — basic block → Z3 expression encoder trvon 2026-05-29 21:16:00 -04:00
• a64ad7b267
  
  feat: BinaryIR detector pipeline — serialize + detect from tree trvon 2026-05-29 21:07:55 -04:00
• a6450c536c
  
  feat: BinaryIR type system — BinaryExprKind + BinaryIRTree trvon 2026-05-29 21:01:45 -04:00
• e3f1302922
  
  feat: BinaryIR type system — BinaryExprKind + BinaryIRTree trvon 2026-05-29 21:01:21 -04:00
• c0726ccb90
  
  fix: narrow binary file-path detection to security paths only trvon 2026-05-29 20:46:29 -04:00
• b4fa3c834d
  
  feat: binary hardcoded string detection — URLs, passwords, keys, paths trvon 2026-05-29 20:41:51 -04:00
• 8af924dd47
  
  research: binary analysis tools — Ghidra P-code, angr, r2 levels trvon 2026-05-29 20:24:00 -04:00
• f4e3d32fcb
  
  audit: binary backend test coverage — 35% coverage, 8 failure points trvon 2026-05-29 20:22:37 -04:00
• d40707c6a7
  
  design: BinaryIR + BinaryDetector pipeline v2 trvon 2026-05-29 20:22:02 -04:00
• 45c92b49d3
  
  fix: setup.sh Conan build_type — use bash if/fi instead of sed \u trvon 2026-05-29 20:21:17 -04:00
• 9c20455d64
  
  fix: macOS BSD sed \u replacement for Conan build_type trvon 2026-05-29 20:19:31 -04:00
• 9161ed2b98
  
  eval: CTF binary scan — 3.7% binary detection vs 66.7% source trvon 2026-05-29 20:03:07 -04:00
• 5105d9eed4
  
  feat: Sprint 3 — clone hash cache (SQLite, mtime invalidation, 0 miss rate) trvon 2026-05-29 17:23:20 -04:00
• b8f3a2bad6
  
  feat: Sprint 3 — clone detector incremental hash cache trvon 2026-05-29 17:22:57 -04:00
• 7d0ce70c93
  
  feat: Sprint 3 — SQL injection taint Z3 detector (650 lines) trvon 2026-05-29 16:56:56 -04:00
• b9595774b7
  
  feat: Sprint 2 complete — use-after-move + iterator invalidation Z3 detectors trvon 2026-05-29 15:23:38 -04:00
• 97ef69fea1
  
  feat: Sprint 2 — use-after-move Z3 detector (~490 lines) trvon 2026-05-29 15:21:33 -04:00
• 77d000a8bb
  
  feat: Sprint 1 — all 4 detectors + TU pre-filter trvon 2026-05-29 14:33:58 -04:00
• cd62034f33
  
  feat: Sprint 1 complete — format string + deprecated API detectors trvon 2026-05-29 14:33:23 -04:00
• a795cd308e
  
  feat: Sprint 1 — weak crypto + deprecated API + format string + hardcoded credential detectors trvon 2026-05-29 14:29:43 -04:00
• 592a6b4acd
  
  docs: fold runtime performance profile — Z3 is not the bottleneck trvon 2026-05-29 14:05:03 -04:00
• e9e23227cb
  
  docs: fold expansion roadmap — 4 sprints, security + performance + utility trvon 2026-05-29 13:20:34 -04:00
• 706c86013e
  
  docs: CTF binary validation corpus — 7 challenges to test fold binary analysis trvon 2026-05-29 13:19:39 -04:00
• f80d30cf28
  
  chore: add Infer config to suppress known-safe FP patterns trvon 2026-05-29 12:50:36 -04:00
• d7258c4021
  
  docs: Z3 multi-solver portfolio research — Bitwuzla 5.1x faster on BV trvon 2026-05-29 10:10:53 -04:00
• ec8492431c
  
  docs: Semgrep C/C++ gap matrix — ~80 rules vs fold 11 detectors trvon 2026-05-29 10:06:52 -04:00