2dcbdbc75d
Preserve source, binary, and runtime evidence boundaries while making precision and performance regressions reproducible. - decompose analysis orchestration into bounded modules - add differential, metamorphic, organic, and Yams change-time gates - fix detector, P-Code, fuzz sanitizer, and report identity precision
26 lines
752 B
JSON
26 lines
752 B
JSON
{
|
|
"schema_version": 1,
|
|
"case_id": "binary-scanner-vs-writer",
|
|
"case_type": "negative-near-miss",
|
|
"origin": "synthetic",
|
|
"backend": "binary",
|
|
"name": "binary_scanner_vs_writer",
|
|
"description": "Portable binary P-Code golden: read-only scanners adjacent to safe writers must not become OOB findings.",
|
|
"build_source": "fixtures/scanner_vs_writer.c",
|
|
"compiler": "cc",
|
|
"cflags": ["-O1", "-g0", "-fno-stack-protector"],
|
|
"detectors": "security",
|
|
"expect": {
|
|
"require_physical_location": true,
|
|
"require_backend": true,
|
|
"max_by_rule": {
|
|
"fold.oob-access": 0
|
|
},
|
|
"must_not_report": [
|
|
{
|
|
"ruleId": "fold.oob-access",
|
|
"messageRegex": "memchr|strstr|strchr|memcpy|strncpy"
|
|
}
|
|
]
|
|
}
|
|
}
|