Merge pull request #22471 from hvitved/rust/exclude-axum-state-steps

Rust: Exclude taint-read-steps for `axum::extract::state::State`

Author: hvitved

rust/ql/lib/codeql/rust/frameworks/axum.model.yml

@@ -20,4 +20,9 @@ extensions:
       - ["<axum::routing::method_routing::MethodRouter>::patch", "Argument[0].Parameter[0..7]", "remote", "manual"]
       # on
       - ["axum::routing::method_routing::on", "Argument[1].Parameter[0..7]", "remote", "manual"]
-      - ["<axum::routing::method_routing::MethodRouter>::on", "Argument[1].Parameter[0..7]", "remote", "manual"]
+      - ["<axum::routing::method_routing::MethodRouter>::on", "Argument[1].Parameter[0..7]", "remote", "manual"]
+  - addsTo:
+      pack: codeql/rust-all
+      extensible: excludeFieldTaintStep
+    data:
+      - ["axum::extract::state::State(0)"]

rust/ql/test/library-tests/dataflow/sources/web_frameworks/CONSISTENCY/TypeInferenceConsistency.expected

@@ -1,4 +1,4 @@
 nonUniqueCertainType
-| test.rs:131:30:131:39 | ...::get(...) |  |
-| test.rs:132:34:132:43 | ...::get(...) |  |
-| test.rs:133:30:133:39 | ...::get(...) |  |
+| test.rs:132:30:132:39 | ...::get(...) |  |
+| test.rs:133:34:133:43 | ...::get(...) |  |
+| test.rs:134:30:134:39 | ...::get(...) |  |