Martin Vogel aa2b60be7d Fix 29 CodeQL alerts: command injection, snprintf overflow, TOCTOU races ...

- Command injection (CRITICAL): validate shell args before system() in
  update command's unzip and version-check calls
- TOCTOU cli.c: use open(O_CREAT, 0755) + fdopen() to set permissions
  atomically instead of fopen() + chmod() after close
- TOCTOU pass_envscan.c: open file first, then fstat() on fd to check
  size, eliminating stat-then-open race window
- Overflowing snprintf (11 locations): clamp offset after each append
  to prevent unsigned underflow on truncation in cypher.c, store.c,
  http_server.c, test_c_lsp.c
- Add CBM_SNPRINTF_APPEND macro in str_util.h for future safe appends
- CodeQL: remove pull_request trigger (only scan push to main)
- CodeQL gate: increase timeout from 30 to 45 minutes
- Add fuzz testing script (random JSON-RPC + Cypher mutations)
- 12 Scorecard governance alerts dismissed (not code vulnerabilities)

2026-03-21 22:18:31 +01:00

..

test_ac.c

Resolve all clang-tidy, cppcheck, and clang-format warnings across 94 files

2026-03-15 22:37:34 +01:00

test_arena.c

Remove macOS-internal headers inserted by clang-tidy (breaks Linux/GCC)

2026-03-18 01:52:05 +01:00

test_c_lsp.c

Fix 29 CodeQL alerts: command injection, snprintf overflow, TOCTOU races

2026-03-21 22:18:31 +01:00

test_cli.c

Restore session auto-detect + auto-index + config CLI from Go

2026-03-19 20:13:17 +01:00

test_configlink.c

Fix Windows test compilation: mkdtemp, mkdir, setenv, pipe compat

2026-03-18 19:19:42 +01:00

test_cypher.c

Replace vmem with mimalloc global allocator, add extraction-phase prescan, fix __init__.py QN collision

2026-03-17 22:05:57 +01:00

test_discover.c

Skip 12 discover tests on Windows (use Unix shell commands)

2026-03-19 03:19:06 +01:00

test_dyn_array.c

Resolve all clang-tidy, cppcheck, and clang-format warnings across 94 files

2026-03-15 22:37:34 +01:00

test_extraction.c

Fix Swift call extraction: 0 CALLS edges (#43)

2026-03-20 14:46:46 +01:00

test_framework.h

Replace vmem with mimalloc global allocator, add extraction-phase prescan, fix __init__.py QN collision

2026-03-17 22:05:57 +01:00

test_gitignore.c

Fix 12 more Windows test failures: mkstemp, temp paths, TRE config

2026-03-19 02:58:03 +01:00

test_go_lsp.c

Resolve all clang-tidy, cppcheck, and clang-format warnings across 94 files

2026-03-15 22:37:34 +01:00

test_graph_buffer.c

Resolve all clang-tidy, cppcheck, and clang-format warnings across 94 files

2026-03-15 22:37:34 +01:00

test_hash_table.c

Resolve all clang-tidy, cppcheck, and clang-format warnings across 94 files

2026-03-15 22:37:34 +01:00

test_httplink.c

Port FastAPI Depends() + DLL resolve edge tracking (PR #66)

2026-03-20 19:19:12 +01:00

test_infrascan.c

Add C-native pipeline with blocking clang-tidy, cppcheck, clang-format linting

2026-03-15 19:26:12 +01:00

test_integration.c

Fix Windows test compilation: mkdtemp, mkdir, setenv, pipe compat

2026-03-18 19:19:42 +01:00

test_language.c

Fix 12 more Windows test failures: mkstemp, temp paths, TRE config

2026-03-19 02:58:03 +01:00

test_log.c

Fix Windows test compilation: mkdtemp, mkdir, setenv, pipe compat

2026-03-18 19:19:42 +01:00

test_lz4.c

Resolve all clang-tidy, cppcheck, and clang-format warnings across 94 files

2026-03-15 22:37:34 +01:00

test_main.c

fix(store): keep WAL journal mode during bulk write to prevent DB corruption on crash

2026-03-19 17:21:48 -05:00

test_mcp.c

Merge PR #79: Fix VS Code compatibility (schema, install, protocol negotiation)

2026-03-20 19:52:59 +01:00

test_mem.c

Fix Windows test compilation: mkdtemp, mkdir, setenv, pipe compat

2026-03-18 19:19:42 +01:00

test_parallel.c

Fix Windows test compilation: mkdtemp, mkdir, setenv, pipe compat

2026-03-18 19:19:42 +01:00

test_pipeline.c

Remove DLL resolve tracking (Windows Defender false positive)

2026-03-21 13:47:10 +01:00

test_platform.c

Add C-native pipeline with blocking clang-tidy, cppcheck, clang-format linting

2026-03-15 19:26:12 +01:00

test_registry.c

Replace vmem with mimalloc global allocator, add extraction-phase prescan, fix __init__.py QN collision

2026-03-17 22:05:57 +01:00

test_sqlite_writer.c

Fix 12 more Windows test failures: mkstemp, temp paths, TRE config

2026-03-19 02:58:03 +01:00

test_store_arch.c

Resolve all clang-tidy, cppcheck, and clang-format warnings across 94 files

2026-03-15 22:37:34 +01:00

test_store_bulk.c

Fix Windows bulk test + dual MCP config location + CONTRIBUTING.md

2026-03-20 20:32:38 +01:00

test_store_edges.c

Resolve all clang-tidy, cppcheck, and clang-format warnings across 94 files

2026-03-15 22:37:34 +01:00

test_store_nodes.c

Fix all memory leaks, vendor sqlite3, add Docker test infrastructure

2026-03-18 16:28:27 +01:00

test_store_search.c

Fix flaky parallelism test, skip 4 remaining Windows compat issues

2026-03-19 03:34:36 +01:00

test_str_intern.c

Resolve all clang-tidy, cppcheck, and clang-format warnings across 94 files

2026-03-15 22:37:34 +01:00

test_str_util.c

Resolve all clang-tidy, cppcheck, and clang-format warnings across 94 files

2026-03-15 22:37:34 +01:00

test_traces.c

Resolve all clang-tidy, cppcheck, and clang-format warnings across 94 files

2026-03-15 22:37:34 +01:00

test_ui.c

Fix Windows UI config tests: replace system("mkdir -p") with cbm_mkdir_p()

2026-03-19 03:48:10 +01:00

test_vmem.c

Full Windows portability: proper implementations, not stubs

2026-03-18 18:47:43 +01:00

test_watcher.c

Fix cbm_mkdtemp: enlarge all test buffers to 256 bytes

2026-03-19 02:38:02 +01:00

test_worker_pool.c

Fix flaky parallelism test, skip 4 remaining Windows compat issues

2026-03-19 03:34:36 +01:00