Gergő Magyar
|
bd20dde825
|
fix(taint): report inline and factory handler flows (#3612)
* fix(taint): cover inline and returned handlers (U8)
Join expression-handler CFG summaries to distinct graph functions without changing existing anonymous-owner identities. Keep named function expressions private to their lexical scope.
Related: #3489
* fix(ci): encode inline handler taint paths (U8)
Use codec-safe generated display names while preserving positional function identity. Verify persisted hop continuity and remove the repaired inline-flow accuracy allowance.
* fix: keep anonymous names unbound (U8)
* test: pin inline callback captures (U8)
* ci: run inline taint guard (U8)
* test: align inline handler contracts (U8)
Pin callback-owned call edges while preserving nested callable IDs and module-level HOC attribution. Assert repaired inline flows and the retained captured-closure limitation.
* ci: run native inline proofs on all OSes (U8)
Register real-worker identity/CFG and persisted explain cases on the existing Windows/macOS matrix. Charge explicit scheduling estimates without changing watchdogs or runtime behavior.
* test(taint): reject all enclosing factory sources
---------
Co-authored-by: Gergo Magyar <gergomagyar0@gmail.com>
|
2026-10-17 20:22:58 +00:00 |
|