GoKawiilOpen Device Partnership and Microsoft release Call Graph Analyzer for Rust
The Open Device Partnership, working with Microsoft, has built and released the Call Graph Analyzer (CGA), a tool that extracts a callgraph from monomorphized MIR to identify which functions in a compiled Rust binary can panic. Running 'cargo cga check' on a codebase surfaces specific call sites, such as a strict_sub call, that could trigger a panic.
GoKawiil's interpretation of the reporting above, not reported fact.
Panics represent unrecoverable error paths in Rust programs, and tracing which functions can trigger them has long been a hard static-analysis problem, according to the post. By tying panic detection directly to compiled MIR rather than source-level heuristics, CGA could give developers a more precise way to audit safety-critical or embedded Rust code, though the post notes this approach also has tradeoffs compared with existing methods.
- CGA extracts a callgraph from monomorphized MIR to trace panic-causing functions.
- It was developed jointly by the Open Device Partnership and Microsoft.
- The tool is run via 'cargo cga check' and flags specific panic-risk call sites in code.
Source: tweedegolf.nl, 2026-10-28
Published there as: “Finding Panics with Call Graph Analyzer”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.