Initial cargo checkct harness/driver

.github/workflows/checkct.yml

@@ -0,0 +1,25 @@
+name: cargo-checkct
+
+on:
+  pull_request:
+    paths-ignore:
+      - README.md
+  push:
+    branches:
+      - master
+    paths-ignore:
+      - README.md
+
+permissions:
+  contents: read
+
+jobs:
+  checkct:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v7
+      - uses: Ledger-Donjon/cargo-checkct@85271e5ce9eab9ba895c62c8b5d4129810a635a0
+        with:
+          directory: .
+          timeout: 120
+          checks: control-flow,memory-access

Cargo.toml

@@ -11,7 +11,7 @@ keywords = ["rsa", "encryption", "security", "crypto"]
 categories = ["cryptography"]
 readme = "README.md"
 rust-version = "1.87"
-exclude = ["marvin_toolkit/", "thirdparty/"]
+exclude = ["checkct/", "marvin_toolkit/", "thirdparty/"]
 
 [dependencies]
 const-oid = { version = "0.10", default-features = false }

checkct/.cargo/config.toml

@@ -0,0 +1,19 @@
+[build]
+# NOTE: can't test on Thumb-1 due to use of `Arc`
+target = [
+    "riscv32imac-unknown-none-elf",
+    "thumbv7em-none-eabihf",
+    "x86_64-unknown-linux-gnu",
+]
+
+[target.x86_64-unknown-linux-gnu]
+rustflags = [
+    "-C", "linker=rust-lld",
+    "-C", "linker-flavor=ld.lld",
+    "-C", "relocation-model=static",
+]
+
+[unstable]
+unstable-options = true
+build-std = ["core", "alloc", "panic_abort"]
+build-std-features = ["compiler-builtins-mem"]

checkct/.gitignore

@@ -0,0 +1 @@
+/target/

checkct/Cargo.toml

@@ -0,0 +1,7 @@
+[workspace]
+members = ["driver"]
+resolver = "2"
+
+[profile.release]
+debug = true
+panic = "abort"

checkct/checkct_macros/Cargo.toml

@@ -0,0 +1,14 @@
+#----- AUTOGENERATED BY CARGO-CHECKCT: DO NOT MODIFY -----
+[package]
+name = "checkct_macros"
+version = "0.1.0"
+publish = false
+edition = "2021"
+
+[lib]
+proc-macro = true
+
+[dependencies]
+proc-macro2 = "1.0.86"
+quote = "1.0.37"
+syn = { version = "2.0.77", features = ["full"] }