Commit graph

Select branches

Hide pull requests

fix/forgejo-home

master

#1

#2

Mono Color

• a598e9dd96
  
  docs: Facebook Infer gap matrix — ~30 checkers vs fold 10 detectors trvon 2026-05-29 10:06:12 -04:00
• 5d81aa5b98
  
  docs: CodeQL C/C++ gap matrix — ~200 queries vs fold 29 detectors trvon 2026-05-29 10:04:26 -04:00
• 27bb4d807f
  
  docs: code quality detector opportunities — API misuse, exception safety, concurrency, deprecated APIs trvon 2026-05-29 10:03:25 -04:00
• d2755e4d79
  
  build: update nightly toolchain pin to 2026-05-28 (rustc 1.98.0) trvon 2026-05-29 09:48:22 -04:00
• 156dfa4642
  
  build: add -march=native for ARM64 NEON / CPU-specific optimization trvon 2026-05-28 21:12:41 -04:00
• cb600dbac9
  
  feat: IR language discriminator + Clang node kinds (Phase 3, multi-language IR) trvon 2026-05-28 20:55:54 -04:00
• 5d8b288719
  
  feat: Rust interprocedural symbolic summary caching (Phase 2, Rust-CLang parity) trvon 2026-05-28 20:41:29 -04:00
• 192387b406
  
  feat: wire MIR control flow into Rust Z3 encoder (Phase 2, Rust-CLang parity) trvon 2026-05-28 20:40:12 -04:00
• 2f3a8c037f
  
  feat: path predicate tracking in Rust Z3 encoder (Phase 1, Rust-CLang parity) trvon 2026-05-28 20:16:39 -04:00
• 10b9b81ef9
  
  feat: known-safe path prefix recognition for Rust detectors trvon 2026-05-28 20:09:36 -04:00
• 04642c46af
  
  docs: rustc internals research for HIR/MIR analysis in fold-rust trvon 2026-05-28 20:09:14 -04:00
• 585ae4e4ab
  
  docs: clang API research, multi-language IR patterns, Rust-Clang parity gap analysis trvon 2026-05-28 20:08:38 -04:00
• cabd242faa
  
  fix: uninit-read — skip exception variables (isExceptionVariable check) trvon 2026-05-28 17:27:23 -04:00
• 4d85fbccff
  
  fix: uninit-read — skip declarations with initializers (hasInit check) trvon 2026-05-28 17:19:02 -04:00
• f63fb06862
  
  chore: fix clang warnings — missing switch cases + unused function trvon 2026-05-28 17:09:22 -04:00
• b1fe2bddec
  
  feat: Phase 3 Z3 detector — memory-leak via HeapModel path tracking trvon 2026-05-28 17:02:59 -04:00
• 33134a189d
  
  feat: Phase 2 Z3 detectors — use-after-free, double-free, redundant-store trvon 2026-05-28 16:35:48 -04:00
• 5b88ed3344
  
  feat: Phase 1 Z3 detectors — always-condition, uninit-read, unreachable-code trvon 2026-05-28 16:05:34 -04:00
• 3beaef2958
  
  build: fold-rust now build_by_default + install via custom_target trvon 2026-05-28 13:03:02 -04:00
• 74b10224b1
  
  fix: filter ts_rs codegen from path-traversal (eliminates 45% FPs) trvon 2026-05-28 12:48:22 -04:00
• ee49900f01
  
  fix: filter augment_args from command-injection (eliminates 69% FPs) trvon 2026-05-28 12:47:19 -04:00
• b79f964a59
  
  feat: intra-procedural taint origin tracking for Rust detectors trvon 2026-05-28 12:20:07 -04:00
• 7f024fe607
  
  refactor: expose CompositeSafetyObserver::observers() for testability trvon 2026-05-28 10:50:36 -04:00
• ffaa70573a
  
  chore: add self-scan suppressions file + dogfood results trvon 2026-05-28 10:49:02 -04:00
• 20e74df72b
  
  feat: C++ vtable fuzzing — discoverVtableTargets + vtable-dispatch harnesses trvon 2026-05-28 10:44:33 -04:00
• f45bce34ac
  
  fix: objc_msgSend — lang filter + _OBJC_CLASS_ verification + Swift IR kinds + vtable fuzzing trvon 2026-05-28 10:36:25 -04:00
• 18ce5a6050
  
  docs: Swift/C++ ABI, fuzzing, IR, MIR research for multi-language pipeline trvon 2026-05-28 10:28:41 -04:00
• d2408405d3
  
  feat: objc_msgSend harness wiring in fuzz-prep for Swift binaries trvon 2026-05-28 09:19:16 -04:00
• 3ca6e0c176
  
  feat: ObjC msgSend harness generator + Swift test fixture trvon 2026-05-28 09:14:15 -04:00
• 6f07fa25cc
  
  fix: filter Swift symbols from binary fuzz + bump budget to 120-600s trvon 2026-05-28 09:08:32 -04:00
• d22dff4aa2
  
  feat: return value checking with ASan shadow sentinel trvon 2026-05-27 23:18:48 -04:00
• e61821e5b7
  
  feat: return-checking harnesses + Rust unsafe-audit command trvon 2026-05-27 23:12:43 -04:00
• ee3392931c
  
  feat: param type inference + internal fuzz targets for binary harnesses trvon 2026-05-27 22:59:13 -04:00
• 93439bff4c
  
  fix: Rust IR encoder — signedness threading + Member handling trvon 2026-05-27 22:38:12 -04:00
• faeca6bf6d
  
  fix: fork path predicate for &&/|| short-circuit (H1, FP-class-D) trvon 2026-05-27 22:30:48 -04:00
• 811aab5254
  
  docs: Z3 symbolic encoder robustness audit (31 files, 7 fixes ranked by ROI) trvon 2026-05-27 21:15:38 -04:00
• b9381a6ab3
  
  feat: adaptive fuzz budget + corpus seeding for binary harnesses trvon 2026-05-27 21:04:00 -04:00
• 1ee5fe06ed
  
  feat: add --extra-arg flag for vendored-header workarounds trvon 2026-05-27 20:42:18 -04:00
• 642d2a012e
  
  fix: ABI default params=3, SARIF kind field, size guard for zero-param trvon 2026-05-27 20:09:20 -04:00
• fb57ab0e2b
  
  fix: ABI inference debug, binary --target-source skip, dlopen -ldl trvon 2026-05-27 19:43:03 -04:00
• a36801cf8e
  
  perf: Z3 LRU cache, batch observers, fold-rust body cache, ripgrep benchmark trvon 2026-05-27 19:06:21 -04:00
• 98f02a4f4c
  
  feat: architecture expansion — summary cache, observer interface, AI pre-pass trvon 2026-05-27 18:20:51 -04:00
• 56550a93a1
  
  feat: symex-fuzz landscape, SWAN SIL parser, Juliet expansion, FP scoring trvon 2026-05-27 18:00:06 -04:00
• 9bdd989b7e
  
  fix: binary harness_file, -I path resolution, caller-context schema trvon 2026-05-27 17:34:52 -04:00
• 9bdcd9f7a0
  
  feat: audit fixes — complexity, CLI UX, MCP parity, binary fuzz trvon 2026-05-27 16:29:39 -04:00
• ffc7917957
  
  feat: symbolic IR, swift backend, binary-to-fuzz pipeline, SARIF fixes trvon 2026-05-27 15:29:14 -04:00
• 95aac8209c
  
  feat: expand rust security scanner coverage trvon 2026-05-27 11:32:05 -04:00
• ce1c353847
  
  feat: harden security scanner routing trvon 2026-05-27 10:36:57 -04:00
• b4c80b32b8
  
  docs: capture library-expansion follow-ups in plan doc trvon 2026-05-26 09:21:20 -04:00
• 1dc20ca920
  
  docs(matrix): mark C4 unscheduled -- wrong-tool FP trvon 2026-05-26 09:16:03 -04:00
• 5acc896eef
  
  docs(matrix): mark C3 unscheduled -- sized wrong, no forcing function trvon 2026-05-26 09:15:18 -04:00
• 55e1d53a9c
  
  docs(matrix): mark C1 unscheduled -- no forcing function trvon 2026-05-26 09:13:48 -04:00
• 63e519fb8a
  
  docs(matrix): mark Z9 unscheduled -- infrastructure absent trvon 2026-05-26 09:12:52 -04:00
• 644a6b6b2d
  
  docs(matrix): link Z4 curl baseline JSON trvon 2026-05-26 09:12:10 -04:00
• da7e072028
  
  perf(symbolic): model memcpy/memmove via z3::lambda (Z4) trvon 2026-05-26 08:47:20 -04:00
• 0f462e5b73
  
  docs(matrix): mark C10 unscheduled -- architectural-mismatch FP trvon 2026-05-25 23:11:59 -04:00
• a791230552
  
  feat(report): C9 FixIts + unified-diff --fix-output trvon 2026-05-25 16:40:43 -04:00
• d6e76f45ab
  
  docs(matrix): mark C6 unscheduled -- current-state FP trvon 2026-05-25 12:16:48 -04:00
• 48dac13d53
  
  feat(detect): uninit-local-read detector (C5 wiring) trvon 2026-05-25 11:52:20 -04:00
• 95b1ae777b
  
  docs(matrix): mark Z6 unscheduled -- infrastructure FP trvon 2026-05-25 11:25:41 -04:00
• d410bb7ba7
  
  feat(fuzz): refine SAT models for smaller integer witnesses (Z5) trvon 2026-05-25 11:22:38 -04:00
• 071f469d1d
  
  docs(matrix): batch audit -- Z3 FP, Z4 site correction trvon 2026-05-25 10:13:55 -04:00
• 72bc61f2c4
  
  Document library expansion audit results trvon 2026-05-25 09:55:55 -04:00
• 43827fa780
  
  docs(matrix): mark Z2 unscheduled -- design FP trvon 2026-05-25 09:55:37 -04:00
• c29a290be2
  
  Reduce Curl high-signal false positives trvon 2026-05-25 09:49:07 -04:00
• 6b5cae57a3
  
  docs(matrix): mark Z1 unscheduled -- measured FP on curl trvon 2026-05-25 09:47:48 -04:00
• 07a39e73a7
  
  perf(symbolic): compact serialised summaries via z3 let-bindings trvon 2026-05-25 09:19:13 -04:00
• 1a7b6c1302
  
  feat(detect): deprecated-api detector via clang::Decl::isDeprecated trvon 2026-05-25 00:47:38 -04:00
• 634607e1ea
  
  perf(security): add detector sink slicing hooks trvon 2026-05-24 23:45:12 -04:00
• 3c02c123f6
  
  feat(symbolic): /*@ requires p != null */ contract seeding trvon 2026-05-24 23:31:32 -04:00
• 64247e9409
  
  docs: library-expansion matrix for Z3 + Clang opportunities trvon 2026-05-24 23:03:02 -04:00
• 84a3126c35
  
  feat(symbolic): wrap clang::UninitVariablesAnalysis trvon 2026-05-24 23:02:39 -04:00
• 42c5936e22
  
  perf(security): cache unsat cores in sign_conversion + int_truncation trvon 2026-05-24 23:01:29 -04:00
• 58f392899c
  
  Add precision-preserving profiling prechecks trvon 2026-05-24 20:31:55 -04:00
• 783d83cc45
  
  Deduplicate null callsites and honor loop aliases trvon 2026-05-24 20:02:53 -04:00
• 6c38999e60
  
  Honor validated divisors and bounded snprintf trvon 2026-05-24 19:55:43 -04:00
• 2c8263fc1c
  
  Recognize bounded divisor and index patterns trvon 2026-05-24 19:41:27 -04:00
• b3d7791aed
  
  Skip pointer arithmetic overflow summaries trvon 2026-05-24 19:17:07 -04:00
• 473dcb8a79
  
  Avoid UI helper arithmetic summaries trvon 2026-05-24 18:48:37 -04:00
• e3cd897aa9
  
  Suppress bounded local counter overflow FPs trvon 2026-05-24 18:30:38 -04:00
• d9477545a0
  
  Use promoted arithmetic widths trvon 2026-05-24 18:18:11 -04:00
• 57f13a7643
  
  docs(build): canonical BUILD.md with per-platform deps trvon 2026-05-24 18:11:31 -04:00
• 600f8020a6
  
  build(setup): portable LLVM detection on Linux trvon 2026-05-24 17:41:04 -04:00
• 0a92540b63
  
  Prove positive derived divisors trvon 2026-05-24 13:03:45 -04:00
• 9fd5b2b1ec
  
  ci(docker): linux validation harness mirroring GitHub Actions trvon 2026-05-23 21:54:47 -04:00
• 68326d617f
  
  fix(dead-statement): skip system-header function bodies trvon 2026-05-23 21:54:27 -04:00
• 976b667e45
  
  Improve Clang guard handling trvon 2026-05-23 21:47:53 -04:00
• 9707b35872
  
  Propagate positive divisor initializers trvon 2026-05-23 21:23:17 -04:00
• 03d93c0830
  
  Refine divisor guards with Clang AST patterns trvon 2026-05-23 21:06:37 -04:00
• 106fc07fe7
  
  Use AST guards for divisor precision trvon 2026-05-23 20:50:13 -04:00
• 331a68467c
  
  Optimize security detectors and add quality gates trvon 2026-05-23 20:42:05 -04:00
• 386f700575
  
  refactor(symbolic): extract z3_helpers (supportsParam, collectConjuncts) trvon 2026-05-23 15:48:03 -04:00
• db1a1d556e
  
  refactor(detect): drop duplicate mixHash, use fold::mix64 trvon 2026-05-23 15:41:43 -04:00
• 159e71ec1a
  
  bench: 5-run post-cache baseline for the curl workload trvon 2026-05-23 15:17:16 -04:00
• 9d08cb73a9
  
  docs(perf-audit): update fold-on-fold triage with dead-statement fix outcome trvon 2026-05-23 14:51:01 -04:00
• 8895d50015
  
  fix(dead-statement): filter range-for + structured-binding FPs trvon 2026-05-23 14:48:38 -04:00
• 28c5155bfa
  
  docs(perf-audit): point at bench/perf_audit_run.py for future PRs trvon 2026-05-23 13:25:59 -04:00
• 21886984af
  
  bench: multi-run perf measurement harness with median+IQR trvon 2026-05-23 13:25:21 -04:00
• 52218478f9
  
  perf(walker): cache collectWrittenVars per Stmt (audit remediation #1) trvon 2026-05-23 13:02:06 -04:00
• 8c154612b9
  
  perf(profile): hook_ms — fourth pivot, walker bookkeeping IS the cost trvon 2026-05-23 12:41:54 -04:00