{ "findings": [ { "confidence": "syntactic", "evidence": { "backend": "binary", "bail_reasons": [], "binary": { "matched_string": "", "offset": null, "section": ".plt", "vaddr": 17136480, "xref_function": "", "xref_vaddr": null }, "correlated_binary_vaddr": null, "correlation_kind": "", "detector_name": "dangerous-import", "has_cross_tu_corroboration": false, "has_source_binary_corroboration": false, "is_summary_backed": false, "latent": false, "latent_reason": "", "precondition_required": false, "proof_mode": "syntactic", "required_preconditions": [], "z3_queries": null, "z3_time_ms": null }, "id": "binary.dangerous-import.6e31b3cfbada5374.2", "kind": "deprecated-banned", "locations": [ { "column": 0, "file": "tests/fixtures/binary/cwe/cwe190_overflow.elf", "function": "", "line": 17136480 } ], "message": "Dangerous import 'imp.execve' detected in binary", "score": 0.9 }, { "confidence": "syntactic", "evidence": { "backend": "binary", "bail_reasons": [], "binary": { "matched_string": "/opt/homebrew/Cellar/zig/0", "offset": 7349, "section": ".rodata", "vaddr": 16784565, "xref_function": "", "xref_vaddr": null }, "correlated_binary_vaddr": null, "correlation_kind": "", "detector_name": "hardcoded-string", "has_cross_tu_corroboration": false, "has_source_binary_corroboration": false, "is_summary_backed": false, "latent": false, "latent_reason": "", "precondition_required": false, "proof_mode": "syntactic", "required_preconditions": [], "z3_queries": null, "z3_time_ms": null }, "id": "binary.hardcoded-string.1bce1e131c6c9a31.3", "kind": "hardcoded-credential", "locations": [ { "column": 0, "file": "tests/fixtures/binary/cwe/cwe190_overflow.elf", "function": "", "line": 16784565 } ], "message": "Hardcoded base64-blob in binary string: /opt/homebrew/Cellar/zig/0", "score": 0.65 }, { "confidence": "heuristic", "evidence": { "backend": "binary", "bail_reasons": [], "correlated_binary_vaddr": null, "correlation_kind": "cross-detector:binary-security", "detector_name": "binary-security", "has_cross_tu_corroboration": false, "has_source_binary_corroboration": false, "is_summary_backed": false, "latent": false, "latent_reason": "", "precondition_required": false, "proof_mode": "heuristic", "required_preconditions": [], "z3_queries": null, "z3_time_ms": null }, "id": "binary.binary-security.15a3d5d3e1d0d2.0", "kind": "taint-track", "locations": [ { "column": 0, "file": "tests/fixtures/binary/cwe/cwe190_overflow.elf", "function": "fcn.0102c290", "line": 16958096 } ], "message": "Function calls potentially unsafe routine 'call sym.imp.malloc'", "score": 0.82 } ], "output_version": 1, "tool": { "name": "fold", "version": "0.1.0+61ee0b5f4f79.dirty" } }