df9ba76c85f56a7df4ee23fc4d7ca790257ef90f
71%

Ran 17 Jul 2026 08:50PM UTC

Jobs 1

Files 32

Run time 1min

Badge

Embed ▾

Committed 17 Jul 2026 08:45PM UTC coverage: 70.48%. Remained the same

Build # df9ba76c85f56a7df4ee23fc4d7ca790257ef90f

Build Type

push

github

Committed by

dimitarvp

Commit Message

persist blob UAF finding, remove Miri repro crate

The blob-teardown use-after-move fixed in b1c60b4 was proven UB by an
interim, non-workspace Miri pattern-model crate under
native/xqlitenif/miri. That crate carried the only durable account of
the exact mechanism, so its knowledge must outlive it.

Fold the full finding into the XqliteBlob doc comment — the rusqlite
deref chain, why the C sqlite3* survives connection close while only
the Rust wrapper dangles, the Miri confirmation, and a standing warning
never to store a rusqlite Blob or Session wrapper that dereferences
&Connection in Drop. REVIEW_LEDGER "Run 2" stays the audit record and
now records the crate's removal.

With the finding persisted, remove the interim crate; nothing in the
build referenced it.

Coverage Stats

573 of 813 relevant lines covered (70.48%)

36.55 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	df9ba76c85f56a7df4ee23fc4d7ca790257ef90f.1	17 Jul 2026 08:50PM UTC	32	70.48	GitHub Action Run

dimitarvp / xqlite / df9ba76c85f56a7df4ee23fc4d7ca790257ef90f
71%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build df9ba76c85f56a7df4ee23fc4d7ca790257ef90f

dimitarvp / xqlite / df9ba76c85f56a7df4ee23fc4d7ca790257ef90f 71%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build df9ba76c85f56a7df4ee23fc4d7ca790257ef90f

dimitarvp / xqlite / df9ba76c85f56a7df4ee23fc4d7ca790257ef90f
71%

README BADGES
x