- 237 findings: 230 clones (97% macro-generated), 7 security (all FP) - composite_observer.hpp: #1 clone source (intentional macro forwarding) - Security findings all confirmed FP: guarded argv, conditional comp - Suppressions file: .fold-suppressions for reproducible clean scans
23 lines
925 B
Text
23 lines
925 B
Text
# fold self-scan suppressions — these are intentional patterns in our own codebase.
|
|
# Format: <ruleId> <file-pattern> [reason]
|
|
|
|
# composite_observer.hpp: macro-generated forwarding methods — intentional design
|
|
fold.clone include/fold/cli/composite_observer.hpp
|
|
|
|
# taint_track.hpp: hash/eq function objects — same structure by design
|
|
fold.clone include/fold/detect/taint_track.hpp
|
|
|
|
# scan_runner.cpp: multiple Backend implementations share factory structure
|
|
fold.clone src/cli/scan_runner.cpp
|
|
|
|
# encoder.cpp: encodeExpr dispatch is intentionally repetitive
|
|
fold.equiv src/symbolic/encoder.cpp
|
|
|
|
# main.cpp: CLI flag parsing has guarded argv access (line 316)
|
|
fold.null-deref src/cli/main.cpp
|
|
|
|
# fold_swift.cpp: argv access guarded by argc check (line 212)
|
|
fold.null-deref tools/fold-swift/fold_swift.cpp
|
|
|
|
# encoder_callee_names.cpp: conditional compilation branches
|
|
fold.dead-branch src/symbolic/encoder_callee_names.cpp
|