fd4a68dfff
Unit + integration coverage for the session's work: incremental project graph/index, pcode encoder, unreachable/dead-branch, equiv/cross-TU, div-by-zero/sign-conversion/int-truncation, use-after-free, quality-precision, scan-router profile, source TU runner, detector plan, and the eval fixtures.
193 lines
5.6 KiB
JSON
193 lines
5.6 KiB
JSON
{
|
|
"findings": [
|
|
{
|
|
"confidence": "syntactic",
|
|
"evidence": {
|
|
"backend": "binary",
|
|
"bail_reasons": [],
|
|
"binary": {
|
|
"matched_string": "",
|
|
"offset": null,
|
|
"section": ".plt",
|
|
"vaddr": 17136320,
|
|
"xref_function": "",
|
|
"xref_vaddr": null
|
|
},
|
|
"correlated_binary_vaddr": null,
|
|
"correlation_kind": "",
|
|
"detector_name": "dangerous-import",
|
|
"has_cross_tu_corroboration": false,
|
|
"has_source_binary_corroboration": false,
|
|
"is_summary_backed": false,
|
|
"latent": false,
|
|
"latent_reason": "",
|
|
"precondition_required": false,
|
|
"proof_mode": "syntactic",
|
|
"required_preconditions": [],
|
|
"z3_queries": null,
|
|
"z3_time_ms": null
|
|
},
|
|
"id": "binary.dangerous-import.12c6526e14a3e09e.3",
|
|
"kind": "deprecated-banned",
|
|
"locations": [
|
|
{
|
|
"column": 0,
|
|
"file": "tests/fixtures/binary/cwe/clean.elf",
|
|
"function": "<import>",
|
|
"line": 17136320
|
|
}
|
|
],
|
|
"message": "Dangerous import 'imp.strncpy' detected in binary",
|
|
"score": 0.9
|
|
},
|
|
{
|
|
"confidence": "syntactic",
|
|
"evidence": {
|
|
"backend": "binary",
|
|
"bail_reasons": [],
|
|
"binary": {
|
|
"matched_string": "",
|
|
"offset": null,
|
|
"section": ".plt",
|
|
"vaddr": 17136640,
|
|
"xref_function": "",
|
|
"xref_vaddr": null
|
|
},
|
|
"correlated_binary_vaddr": null,
|
|
"correlation_kind": "",
|
|
"detector_name": "dangerous-import",
|
|
"has_cross_tu_corroboration": false,
|
|
"has_source_binary_corroboration": false,
|
|
"is_summary_backed": false,
|
|
"latent": false,
|
|
"latent_reason": "",
|
|
"precondition_required": false,
|
|
"proof_mode": "syntactic",
|
|
"required_preconditions": [],
|
|
"z3_queries": null,
|
|
"z3_time_ms": null
|
|
},
|
|
"id": "binary.dangerous-import.5820d627412e53ff.4",
|
|
"kind": "deprecated-banned",
|
|
"locations": [
|
|
{
|
|
"column": 0,
|
|
"file": "tests/fixtures/binary/cwe/clean.elf",
|
|
"function": "<import>",
|
|
"line": 17136640
|
|
}
|
|
],
|
|
"message": "Dangerous import 'imp.execve' detected in binary",
|
|
"score": 0.9
|
|
},
|
|
{
|
|
"confidence": "syntactic",
|
|
"evidence": {
|
|
"backend": "binary",
|
|
"bail_reasons": [],
|
|
"binary": {
|
|
"matched_string": "/opt/homebrew/Cellar/zig/0",
|
|
"offset": 7339,
|
|
"section": ".rodata",
|
|
"vaddr": 16784555,
|
|
"xref_function": "",
|
|
"xref_vaddr": null
|
|
},
|
|
"correlated_binary_vaddr": null,
|
|
"correlation_kind": "",
|
|
"detector_name": "hardcoded-string",
|
|
"has_cross_tu_corroboration": false,
|
|
"has_source_binary_corroboration": false,
|
|
"is_summary_backed": false,
|
|
"latent": false,
|
|
"latent_reason": "",
|
|
"precondition_required": false,
|
|
"proof_mode": "syntactic",
|
|
"required_preconditions": [],
|
|
"z3_queries": null,
|
|
"z3_time_ms": null
|
|
},
|
|
"id": "binary.hardcoded-string.62527725c8108ce2.5",
|
|
"kind": "hardcoded-credential",
|
|
"locations": [
|
|
{
|
|
"column": 0,
|
|
"file": "tests/fixtures/binary/cwe/clean.elf",
|
|
"function": "<binary-string>",
|
|
"line": 16784555
|
|
}
|
|
],
|
|
"message": "Hardcoded base64-blob in binary string: /opt/homebrew/Cellar/zig/0",
|
|
"score": 0.65
|
|
},
|
|
{
|
|
"confidence": "heuristic",
|
|
"evidence": {
|
|
"backend": "binary",
|
|
"bail_reasons": [],
|
|
"correlated_binary_vaddr": null,
|
|
"correlation_kind": "",
|
|
"detector_name": "binary-security",
|
|
"has_cross_tu_corroboration": false,
|
|
"has_source_binary_corroboration": false,
|
|
"is_summary_backed": false,
|
|
"latent": false,
|
|
"latent_reason": "",
|
|
"precondition_required": false,
|
|
"proof_mode": "heuristic",
|
|
"required_preconditions": [],
|
|
"z3_queries": null,
|
|
"z3_time_ms": null
|
|
},
|
|
"id": "binary.binary-security.5bc8982e8d9e5636.0",
|
|
"kind": "taint-track",
|
|
"locations": [
|
|
{
|
|
"column": 0,
|
|
"file": "tests/fixtures/binary/cwe/clean.elf",
|
|
"function": "fcn.010177b0",
|
|
"line": 16873392
|
|
}
|
|
],
|
|
"message": "Function calls potentially unsafe routine 'call sym.imp.strncpy'",
|
|
"score": 0.82
|
|
},
|
|
{
|
|
"confidence": "heuristic",
|
|
"evidence": {
|
|
"backend": "binary",
|
|
"bail_reasons": [],
|
|
"correlated_binary_vaddr": null,
|
|
"correlation_kind": "cross-detector:binary-security",
|
|
"detector_name": "binary-security",
|
|
"has_cross_tu_corroboration": false,
|
|
"has_source_binary_corroboration": false,
|
|
"is_summary_backed": false,
|
|
"latent": false,
|
|
"latent_reason": "",
|
|
"precondition_required": false,
|
|
"proof_mode": "heuristic",
|
|
"required_preconditions": [],
|
|
"z3_queries": null,
|
|
"z3_time_ms": null
|
|
},
|
|
"id": "binary.binary-security.e4c47304bd4a82ee.1",
|
|
"kind": "taint-track",
|
|
"locations": [
|
|
{
|
|
"column": 0,
|
|
"file": "tests/fixtures/binary/cwe/clean.elf",
|
|
"function": "fcn.0102c320",
|
|
"line": 16958240
|
|
}
|
|
],
|
|
"message": "Function calls potentially unsafe routine 'call sym.imp.malloc'",
|
|
"score": 0.82
|
|
}
|
|
],
|
|
"output_version": 1,
|
|
"tool": {
|
|
"name": "fold",
|
|
"version": "0.1.0+61ee0b5f4f79.dirty"
|
|
}
|
|
}
|