Merge pull request #22382 from geoffw0/nativetls

Rust: Update supported-frameworks.rst and add a few more native-tls models

Author: geoffw0

docs/codeql/reusables/supported-frameworks.rst

@@ -327,6 +327,7 @@ and the CodeQL library pack ``codeql/rust-all`` (`changelog <https://github.com/
    `actix-web <https://crates.io/crates/actix-web>`__, Web framework
    alloc, Standard library
    `async-std <https://crates.io/crates/async-std>`__, Asynchronous programming library
+   `axum <https://crates.io/crates/axum>`__, Web framework
    `biscotti <https://crates.io/crates/biscotti>`__, Cookie management
    `clap <https://crates.io/crates/clap>`__, Utility library
    `cookie <https://crates.io/crates/cookie>`__, Cookie management
@@ -341,6 +342,8 @@ and the CodeQL library pack ``codeql/rust-all`` (`changelog <https://github.com/
    `memchr <https://crates.io/crates/memchr>`__, Utility library
    `mysql <https://crates.io/crates/mysql>`__, Database
    `mysql_async <https://crates.io/crates/mysql_async>`__, Database
+   `native-tls <https://crates.io/crates/native-tls>`__, Network communicator
+   `async-native-tls <https://crates.io/crates/async-native-tls>`__, Network communicator
    `once_cell <https://crates.io/crates/once_cell>`__, Utility library
    `poem <https://crates.io/crates/poem>`__, Web framework
    `postgres <https://crates.io/crates/postgres>`__, Database

rust/ql/lib/change-notes/2026-08-19-native-tls-summary-models.md

@@ -0,0 +1,4 @@
+---
+category: minorAnalysis
+---
+* Added new flow summary models for the `native-tls`, `async-native-tls`, and `tokio-native-tls` crates.

rust/ql/lib/codeql/rust/frameworks/futures.model.yml

@@ -6,6 +6,7 @@ extensions:
       - ["futures_executor::local_pool::block_on", "Argument[0]", "ReturnValue", "value", "manual"]
       - ["<futures_util::io::buf_reader::BufReader>::new", "Argument[0]", "ReturnValue", "taint", "manual"]
       - ["<futures_util::io::AsyncReadExt>::read", "Argument[self].Reference", "Argument[0].Reference", "taint", "manual"]
+      - ["<futures_util::io::AsyncReadExt>::read_to_string", "Argument[self].Reference", "Argument[0].Reference", "taint", "manual"]
       - ["<futures_util::io::AsyncReadExt>::read_to_end", "Argument[self].Reference", "Argument[0].Reference", "taint", "manual"]
       - ["<futures_util::io::AsyncBufReadExt>::read_line", "Argument[self].Reference", "Argument[0].Reference", "taint", "manual"]
       - ["<futures_util::io::AsyncBufReadExt>::read_until", "Argument[self].Reference", "Argument[1].Reference", "taint", "manual"]

rust/ql/lib/codeql/rust/frameworks/native-tls.model.yml

@@ -7,3 +7,11 @@ extensions:
       - ["<native_tls::TlsConnectorBuilder>::danger_accept_invalid_hostnames", "Argument[0]", "disable-certificate", "manual"]
       - ["<async_native_tls::connect::TlsConnector>::danger_accept_invalid_certs", "Argument[0]", "disable-certificate", "manual"]
       - ["<async_native_tls::connect::TlsConnector>::danger_accept_invalid_hostnames", "Argument[0]", "disable-certificate", "manual"]
+  - addsTo:
+      pack: codeql/rust-all
+      extensible: summaryModel
+    data:
+      - ["<native_tls::TlsConnector>::connect", "Argument[1]", "ReturnValue.Field[core::result::Result::Ok(0)]", "taint", "manual"]
+      - ["<async_native_tls::connect::TlsConnector>::connect", "Argument[1]", "ReturnValue.Future.Field[core::result::Result::Ok(0)]", "taint", "manual"]
+      - ["async_native_tls::connect::connect", "Argument[1]", "ReturnValue.Future.Field[core::result::Result::Ok(0)]", "taint", "manual"]
+      - ["<tokio_native_tls::TlsConnector>::connect", "Argument[1]", "ReturnValue.Future.Field[core::result::Result::Ok(0)]", "taint", "manual"]