fd4a68dfff
Unit + integration coverage for the session's work: incremental project graph/index, pcode encoder, unreachable/dead-branch, equiv/cross-TU, div-by-zero/sign-conversion/int-truncation, use-after-free, quality-precision, scan-router profile, source TU runner, detector plan, and the eval fixtures.
121 lines
3.5 KiB
JSON
121 lines
3.5 KiB
JSON
{
|
|
"findings": [
|
|
{
|
|
"confidence": "syntactic",
|
|
"evidence": {
|
|
"backend": "binary",
|
|
"bail_reasons": [],
|
|
"binary": {
|
|
"matched_string": "",
|
|
"offset": null,
|
|
"section": ".plt",
|
|
"vaddr": 17136480,
|
|
"xref_function": "",
|
|
"xref_vaddr": null
|
|
},
|
|
"correlated_binary_vaddr": null,
|
|
"correlation_kind": "",
|
|
"detector_name": "dangerous-import",
|
|
"has_cross_tu_corroboration": false,
|
|
"has_source_binary_corroboration": false,
|
|
"is_summary_backed": false,
|
|
"latent": false,
|
|
"latent_reason": "",
|
|
"precondition_required": false,
|
|
"proof_mode": "syntactic",
|
|
"required_preconditions": [],
|
|
"z3_queries": null,
|
|
"z3_time_ms": null
|
|
},
|
|
"id": "binary.dangerous-import.6e31b3cfbada5374.2",
|
|
"kind": "deprecated-banned",
|
|
"locations": [
|
|
{
|
|
"column": 0,
|
|
"file": "tests/fixtures/binary/cwe/cwe190_overflow.elf",
|
|
"function": "<import>",
|
|
"line": 17136480
|
|
}
|
|
],
|
|
"message": "Dangerous import 'imp.execve' detected in binary",
|
|
"score": 0.9
|
|
},
|
|
{
|
|
"confidence": "syntactic",
|
|
"evidence": {
|
|
"backend": "binary",
|
|
"bail_reasons": [],
|
|
"binary": {
|
|
"matched_string": "/opt/homebrew/Cellar/zig/0",
|
|
"offset": 7349,
|
|
"section": ".rodata",
|
|
"vaddr": 16784565,
|
|
"xref_function": "",
|
|
"xref_vaddr": null
|
|
},
|
|
"correlated_binary_vaddr": null,
|
|
"correlation_kind": "",
|
|
"detector_name": "hardcoded-string",
|
|
"has_cross_tu_corroboration": false,
|
|
"has_source_binary_corroboration": false,
|
|
"is_summary_backed": false,
|
|
"latent": false,
|
|
"latent_reason": "",
|
|
"precondition_required": false,
|
|
"proof_mode": "syntactic",
|
|
"required_preconditions": [],
|
|
"z3_queries": null,
|
|
"z3_time_ms": null
|
|
},
|
|
"id": "binary.hardcoded-string.1bce1e131c6c9a31.3",
|
|
"kind": "hardcoded-credential",
|
|
"locations": [
|
|
{
|
|
"column": 0,
|
|
"file": "tests/fixtures/binary/cwe/cwe190_overflow.elf",
|
|
"function": "<binary-string>",
|
|
"line": 16784565
|
|
}
|
|
],
|
|
"message": "Hardcoded base64-blob in binary string: /opt/homebrew/Cellar/zig/0",
|
|
"score": 0.65
|
|
},
|
|
{
|
|
"confidence": "heuristic",
|
|
"evidence": {
|
|
"backend": "binary",
|
|
"bail_reasons": [],
|
|
"correlated_binary_vaddr": null,
|
|
"correlation_kind": "cross-detector:binary-security",
|
|
"detector_name": "binary-security",
|
|
"has_cross_tu_corroboration": false,
|
|
"has_source_binary_corroboration": false,
|
|
"is_summary_backed": false,
|
|
"latent": false,
|
|
"latent_reason": "",
|
|
"precondition_required": false,
|
|
"proof_mode": "heuristic",
|
|
"required_preconditions": [],
|
|
"z3_queries": null,
|
|
"z3_time_ms": null
|
|
},
|
|
"id": "binary.binary-security.15a3d5d3e1d0d2.0",
|
|
"kind": "taint-track",
|
|
"locations": [
|
|
{
|
|
"column": 0,
|
|
"file": "tests/fixtures/binary/cwe/cwe190_overflow.elf",
|
|
"function": "fcn.0102c290",
|
|
"line": 16958096
|
|
}
|
|
],
|
|
"message": "Function calls potentially unsafe routine 'call sym.imp.malloc'",
|
|
"score": 0.82
|
|
}
|
|
],
|
|
"output_version": 1,
|
|
"tool": {
|
|
"name": "fold",
|
|
"version": "0.1.0+61ee0b5f4f79.dirty"
|
|
}
|
|
}
|