2dcbdbc75d
Preserve source, binary, and runtime evidence boundaries while making precision and performance regressions reproducible. - decompose analysis orchestration into bounded modules - add differential, metamorphic, organic, and Yams change-time gates - fix detector, P-Code, fuzz sanitizer, and report identity precision
31 lines
909 B
JSON
31 lines
909 B
JSON
{
|
|
"schema_version": 1,
|
|
"case_id": "binary-curl-pcode-fp-smoke",
|
|
"case_type": "negative-near-miss",
|
|
"origin": "organic",
|
|
"backend": "binary",
|
|
"name": "curl_pcode_fp_smoke",
|
|
"description": "Optional real-binary smoke for curl-derived P-Code false positives: guarded udiv and read-only/import-stub confusion must not appear as OOB/div findings.",
|
|
"binary": "/usr/bin/curl",
|
|
"skip_if_missing": true,
|
|
"detectors": "security",
|
|
"binary_max_functions": 64,
|
|
"expect": {
|
|
"require_physical_location": true,
|
|
"require_backend": true,
|
|
"max_by_rule": {
|
|
"fold.oob-access": 0,
|
|
"fold.div-by-zero": 0
|
|
},
|
|
"must_not_report": [
|
|
{
|
|
"ruleId": "fold.oob-access",
|
|
"messageRegex": "memcpy.*128-byte buffer|strncpy.*26-byte buffer"
|
|
},
|
|
{
|
|
"ruleId": "fold.div-by-zero",
|
|
"messageRegex": "100007c7c|division by zero"
|
|
}
|
|
]
|
|
}
|
|
}
|