{ "findings": [ { "confidence": "syntactic", "evidence": { "backend": "binary", "bail_reasons": [], "binary": { "matched_string": "", "offset": null, "section": ".plt", "vaddr": 17136320, "xref_function": "", "xref_vaddr": null }, "correlated_binary_vaddr": null, "correlation_kind": "", "detector_name": "dangerous-import", "has_cross_tu_corroboration": false, "has_source_binary_corroboration": false, "is_summary_backed": false, "latent": false, "latent_reason": "", "precondition_required": false, "proof_mode": "syntactic", "required_preconditions": [], "z3_queries": null, "z3_time_ms": null }, "id": "binary.dangerous-import.12c6526e14a3e09e.3", "kind": "deprecated-banned", "locations": [ { "column": 0, "file": "tests/fixtures/binary/cwe/clean.elf", "function": "", "line": 17136320 } ], "message": "Dangerous import 'imp.strncpy' detected in binary", "score": 0.9 }, { "confidence": "syntactic", "evidence": { "backend": "binary", "bail_reasons": [], "binary": { "matched_string": "", "offset": null, "section": ".plt", "vaddr": 17136640, "xref_function": "", "xref_vaddr": null }, "correlated_binary_vaddr": null, "correlation_kind": "", "detector_name": "dangerous-import", "has_cross_tu_corroboration": false, "has_source_binary_corroboration": false, "is_summary_backed": false, "latent": false, "latent_reason": "", "precondition_required": false, "proof_mode": "syntactic", "required_preconditions": [], "z3_queries": null, "z3_time_ms": null }, "id": "binary.dangerous-import.5820d627412e53ff.4", "kind": "deprecated-banned", "locations": [ { "column": 0, "file": "tests/fixtures/binary/cwe/clean.elf", "function": "", "line": 17136640 } ], "message": "Dangerous import 'imp.execve' detected in binary", "score": 0.9 }, { "confidence": "syntactic", "evidence": { "backend": "binary", "bail_reasons": [], "binary": { "matched_string": "/opt/homebrew/Cellar/zig/0", "offset": 7339, "section": ".rodata", "vaddr": 16784555, "xref_function": "", "xref_vaddr": null }, "correlated_binary_vaddr": null, "correlation_kind": "", "detector_name": "hardcoded-string", "has_cross_tu_corroboration": false, "has_source_binary_corroboration": false, "is_summary_backed": false, "latent": false, "latent_reason": "", "precondition_required": false, "proof_mode": "syntactic", "required_preconditions": [], "z3_queries": null, "z3_time_ms": null }, "id": "binary.hardcoded-string.62527725c8108ce2.5", "kind": "hardcoded-credential", "locations": [ { "column": 0, "file": "tests/fixtures/binary/cwe/clean.elf", "function": "", "line": 16784555 } ], "message": "Hardcoded base64-blob in binary string: /opt/homebrew/Cellar/zig/0", "score": 0.65 }, { "confidence": "heuristic", "evidence": { "backend": "binary", "bail_reasons": [], "correlated_binary_vaddr": null, "correlation_kind": "", "detector_name": "binary-security", "has_cross_tu_corroboration": false, "has_source_binary_corroboration": false, "is_summary_backed": false, "latent": false, "latent_reason": "", "precondition_required": false, "proof_mode": "heuristic", "required_preconditions": [], "z3_queries": null, "z3_time_ms": null }, "id": "binary.binary-security.5bc8982e8d9e5636.0", "kind": "taint-track", "locations": [ { "column": 0, "file": "tests/fixtures/binary/cwe/clean.elf", "function": "fcn.010177b0", "line": 16873392 } ], "message": "Function calls potentially unsafe routine 'call sym.imp.strncpy'", "score": 0.82 }, { "confidence": "heuristic", "evidence": { "backend": "binary", "bail_reasons": [], "correlated_binary_vaddr": null, "correlation_kind": "cross-detector:binary-security", "detector_name": "binary-security", "has_cross_tu_corroboration": false, "has_source_binary_corroboration": false, "is_summary_backed": false, "latent": false, "latent_reason": "", "precondition_required": false, "proof_mode": "heuristic", "required_preconditions": [], "z3_queries": null, "z3_time_ms": null }, "id": "binary.binary-security.e4c47304bd4a82ee.1", "kind": "taint-track", "locations": [ { "column": 0, "file": "tests/fixtures/binary/cwe/clean.elf", "function": "fcn.0102c320", "line": 16958240 } ], "message": "Function calls potentially unsafe routine 'call sym.imp.malloc'", "score": 0.82 } ], "output_version": 1, "tool": { "name": "fold", "version": "0.1.0+61ee0b5f4f79.dirty" } }