Skip to content

Rust muncher limitations + sensitive info leakage #1

Open
@rimutaka

Description

@rimutaka

Limitations

The Rust Muncher should be a bit more detailed and accurate. The initial implementation cut a few corners.

  1. for X in Y {...} - make this a single construct in keywords as opposed to separate for and in
  2. Add documentation block comments as a separate trackable structure. We can only track block comments that don't show as docs. /// and //! are tracked as docs, but /** ... **/ is not.
  3. Reliably parsing use is too hard because it can be nested and multiline. Skipped for now.
  4. Cargo.toml regex picks up lines with version and edition from [package] section because we can't look only in a certain part of the file. I couldn't construct a regex to exclude those two.

Potential sensitive data leakage

Local libs are included in the report. E.g. stackmuncher_lib = { version = "0.2", path = "../../stm_app/stackmuncher_lib" } includes stackmuncher_lib.

This probably affects other languages. The problem here is in the parent path. It should be logged as a separate issue.

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't workingprivacySensitive data or identity info leakage

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions