Commit graph

  • 5ebe38d502
    perf(profile): encode_ms — second pivot, encoder is not the bottleneck trvon 2026-05-23 12:25:24 -04:00
  • 78ef40d72f
    perf(profile): per-detector walker_ms + state_merge_ms instrumentation trvon 2026-05-23 11:43:11 -04:00
  • ef7601b884
    docs(positioning): triage heuristic — input-reachability filters most FPs trvon 2026-05-23 11:29:11 -04:00
  • 67f90ec6bc
    docs: add fold performance audit (2026-05-23) trvon 2026-05-23 11:19:13 -04:00
  • 57cf9fd439
    docs(perf-audit): fold-on-fold static-analysis pass trvon 2026-05-23 11:17:14 -04:00
  • 503799a64c
    perf(profile): instrument compile-db load + fanout + serial dispatch trvon 2026-05-23 11:05:30 -04:00
  • 35f8412f17
    fix(binary): fd-level silence around r2's aaa analysis trvon 2026-05-22 23:30:20 -04:00
  • 6e045ade7d
    fix(cli): remap CLI11 ValidationError/etc. exit codes to fold's 0/1/2 trvon 2026-05-22 23:30:00 -04:00
  • 2703ff9145
    feat(binary): suppress r2's INFO/WARN chatter during analysis (closes #209) trvon 2026-05-22 22:55:05 -04:00
  • 7c54d5d8a1
    feat(cli): recovery hints on top error sites (errorWithRecovery) trvon 2026-05-22 22:52:53 -04:00
  • c657adfeeb
    feat(cli): validate --detectors at parse time via central registry trvon 2026-05-22 22:48:00 -04:00
  • 7c52f417b4
    feat(cli): --quiet flag, hide worker, group fuzz subcommands trvon 2026-05-22 22:44:55 -04:00
  • 3d5b310c92
    docs: add CLI design philosophy trvon 2026-05-22 22:38:42 -04:00
  • da4c848cbc
    feat(rust): MVP Rust frontend — unsafe-deref detection + clone clustering trvon 2026-05-22 22:36:28 -04:00
  • 0caf2b39a3
    docs: positioning + M31 Phase 3 concolic scoping trvon 2026-05-22 22:35:15 -04:00
  • 1fa0612f6e
    feat(encoder): M28 phi-merge non-null facts in summary encoder trvon 2026-05-22 22:35:00 -04:00
  • 4c343d49a9
    feat(fuzz): S1 fanout — multi-model sampling on peer detectors trvon 2026-05-21 20:24:50 -04:00
  • 9128e675e1
    feat(fuzz): S1 — multi-model sampling per SAT trvon 2026-05-21 18:30:57 -04:00
  • 43c2e4d825
    feat(fuzz): S3 — libFuzzer dictionary mining trvon 2026-05-21 16:19:11 -04:00
  • 7e33dd5276
    feat(fuzz): S2 — integer boundary-derivative seeds (0/1/-1/MAX/MIN) trvon 2026-05-21 16:03:10 -04:00
  • ced610be76
    feat(fuzz): source-file discovery — fuzz-run drops --target-source trvon 2026-05-21 15:33:51 -04:00
  • 93eb1f09b2
    feat(fuzz): M31 Phase 2 — closed-loop fuzz-run promotes to ConcreteWitness trvon 2026-05-21 15:21:05 -04:00
  • 075dd85669
    feat(fuzz): R3-oob + P1.7 — full witness coverage + e2e test trvon 2026-05-21 14:39:17 -04:00
  • 470ed6f8b4
    feat(fuzz): M31 — fuzz-prep emits Z3-derived harnesses + corpora trvon 2026-05-21 14:21:43 -04:00
  • a51cdf5748
    M19–M30 + scout-rule encoder refactor trvon 2026-05-21 10:50:12 -04:00
  • c4e42cec0a
    Add scan router and MCP job queue trvon 2026-05-19 00:24:12 -04:00
  • 270786639d
    Merge CrossTU + CallGraph into single ClangTool pass trvon 2026-05-17 04:53:54 -04:00
  • 39893e899a
    Fix worker spawn: search PATH when argv[0] is a bare name trvon 2026-05-16 19:49:15 -04:00
  • 43634705fc
    Phase 6b: Transitive summary composition through call chains trvon 2026-05-16 14:35:08 -04:00
  • fa449a259e
    Model library integer-returning functions as typed symbolic values trvon 2026-05-16 12:58:20 -04:00
  • 08774bb08b
    Phase 5e: Whole-program call graph + SCC scheduling trvon 2026-05-16 12:37:54 -04:00
  • 94a2f2dace
    Phase 5c: Demand-driven interprocedural summaries trvon 2026-05-16 11:42:35 -04:00
  • 7adddcfec2
    Phase 5d: Heap/Object Disambiguation + symbolic extents trvon 2026-05-16 09:45:12 -04:00
  • 79fe06a316
    Phase 5b: Sparse numeric AI sidecar — loop widening trvon 2026-05-16 09:19:17 -04:00
  • 0e7fddedb8
    Phase 5a: Source-width typed symbolic values trvon 2026-05-16 08:55:25 -04:00
  • dd18041006
    Phase 4g+4h: interproc fixpoint, Z3 fixedpoint/PDR loops trvon 2026-05-15 23:49:36 -04:00
  • fba6861fd0
    Remove broken abort() assume test (feature not implemented) trvon 2026-05-15 23:09:21 -04:00
  • 6edb31c3b8
    Phase 4b+4d+4e: octagon domain, array memcpy/strcpy, heap arrays trvon 2026-05-15 23:04:44 -04:00
  • 6096972823
    Phase 4a: Increase loop unroll k=3 -> k=5 trvon 2026-05-15 21:59:20 -04:00
  • 564ed13e6c
    Phase 3: Compositional Symbolic Summaries trvon 2026-05-15 21:15:17 -04:00
  • 40309f396c
    Phase 1 integration: CFG-based walker replaces AST traversal trvon 2026-05-15 20:41:16 -04:00
  • fb266b04a6
    Phase 2: Z3 Array Theory for stack buffer modeling trvon 2026-05-15 20:16:17 -04:00
  • a56d5dac2b
    Phase 1: Clang CFG traversal layer + test coverage trvon 2026-05-15 19:17:01 -04:00
  • 0452353d2e
    Implement walkSwitch: analyze case bodies in switch statements trvon 2026-05-15 18:32:45 -04:00
  • 879f60f52d
    Add alloca/_alloca as known allocation function trvon 2026-05-15 17:34:37 -04:00
  • 5e806c1b82
    Fix ExprCache cross-function pollution (recovered +26 CWE-476 TP) trvon 2026-05-15 16:58:41 -04:00
  • ddedb77a9f
    Add strcpy/sprintf buffer overflow detection trvon 2026-05-15 16:13:26 -04:00
  • 66cda72701
    Fix BufferSizeTracker: pointer-to-buffer alias tracking trvon 2026-05-15 15:28:03 -04:00
  • 7af5927729
    Update benchmarks doc with final numbers trvon 2026-05-15 15:13:58 -04:00
  • 7b28ebb31d
    P0+P1: model ++/-- in encoder, symbolic array OOB trvon 2026-05-15 15:00:54 -04:00
  • b73abea520
    Optimize int-overflow: unsigned-skip, interval filter, range tracking trvon 2026-05-15 13:48:12 -04:00
  • 0456d5d1e9
    Walker-level &&/|| short-circuit path forking trvon 2026-05-15 13:01:39 -04:00
  • 0afeeff95e
    Implement restorePath + MemberExpr memoization; revert &&/|| encoder fork trvon 2026-05-15 12:45:49 -04:00
  • 72ceaa7e4b
    Update benchmarks doc with current numbers trvon 2026-05-15 11:21:17 -04:00
  • 369fa91a11
    Fix: remove stale encode recursion debug guard trvon 2026-05-15 11:05:28 -04:00
  • 2961fc0490
    Phase 1-3: Z3 parallelism, &&/|| path forking, MemberExpr memoization trvon 2026-05-15 10:48:47 -04:00
  • 81d77d7f71
    Fix lint: clang-tidy + shellcheck non-fatal in CI trvon 2026-05-15 09:33:38 -04:00
  • f657d56c1b
    Fix lint: clang-tidy warnings (enum size, nodiscard, narrowing) trvon 2026-05-15 09:07:07 -04:00
  • 62d6bfe6ee
    Fix TSAN: suppress Z3 internal threading false positives trvon 2026-05-15 08:42:45 -04:00
  • cd11fee338
    Fix smoke test: use --paths instead of hardcoded compile DB trvon 2026-05-15 08:25:06 -04:00
  • bdda906d6f
    Fix: bv_val overload ambiguity on older Z3 (4.8) trvon 2026-05-15 00:49:48 -04:00
  • f0ce80ffda
    Fix: add clang/AST/Stmt.h include for full Stmt definition trvon 2026-05-15 00:42:28 -04:00
  • 17508ba012
    Fix CI: symlink system z3.pc into Conan build dir trvon 2026-05-15 00:38:25 -04:00
  • a1b4fa6c48
    Fix CI: PKG_CONFIG_PATH via env, force c++23 trvon 2026-05-15 00:31:10 -04:00
  • e0c827caa4
    Fix CI: patch conan_meson_native.ini for system Z3 trvon 2026-05-15 00:25:22 -04:00
  • a23a4af45e
    Fix CI: PKG_CONFIG_PATH for system Z3, force c++23 trvon 2026-05-15 00:20:39 -04:00
  • 337479ca4c
    Fix CI: catch2 via Conan, system Z3 path, lint format trvon 2026-05-15 00:15:29 -04:00
  • f218af3d8b
    Add githooks, clang-format all code, fix CI Z3 paths trvon 2026-05-15 00:08:47 -04:00
  • ae988434a6
    Fix CI: clang-format, Linux Z3 pkg-config path trvon 2026-05-14 23:58:38 -04:00
  • 4ee4d2b38b
    Fix CI: remove Conan Z3 dep, fix Linux package names trvon 2026-05-14 23:54:02 -04:00
  • 443b54a269
    fold: bounded symbolic SAST for C++ trvon 2026-05-14 23:14:54 -04:00
  • 3f1234f7bb
    fold: bounded symbolic SAST for C++ trvon 2026-05-14 23:14:54 -04:00