A powerful and user-friendly binary analysis platform!
This report summarizes scanner evidence for angr/angr, a Python project with 9,138 GitHub stars. SynthScan examined 510,868 lines of code across 2046 source files, recording 8713 pattern matches distributed across 25 syntactic categories. The legacy adjusted pattern signal is 19.3 (Elevated pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 5365 finding(s).
Are imports declared and package/API names verified? 2815 finding(s).
Are wrappers, guards, and repeated structures necessary? 4201 finding(s).
Which changes need focused human review? 8713 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 8713 distinct pattern matches across 25 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/test_fuzzer.py | 175 | def test_fuzzer_mixed_inmem_corpus_ondisk_solutions(self): | CODE |
| LOW | tests/test_fuzzer.py | 193 | def test_fuzzer_mixed_ondisk_corpus_inmem_solutions(self): | CODE |
| LOW | tests/test_fuzzer.py | 213 | def test_havoc_mutator_config(self): | CODE |
| LOW | tests/test_fuzzer.py | 237 | def test_deterministic_mutator_finds_solution(self): | CODE |
| LOW | tests/test_fuzzer.py | 262 | def test_deterministic_mutator_no_crash(self): | CODE |
| LOW | tests/test_fuzzer.py | 287 | def test_deterministic_mutator_sequence(self): | CODE |
| LOW | tests/test_fuzzer.py | 318 | def test_tls_access_without_tls_is_crash(self): | CODE |
| LOW | tests/test_fuzzer.py | 359 | def test_symbolic_memory_visible_in_icicle(self): | CODE |
| LOW | tests/test_fuzzer.py | 374 | def test_concrete_libc_start_main_hook(self): | CODE |
| LOW | tests/test_fuzzer.py | 411 | def test_vuln_stacksmash_deterministic(self): | CODE |
| LOW | tests/test_fuzzer.py | 484 | def test_custom_engine_instance(self): | CODE |
| LOW | tests/test_fuzzer.py | 504 | def test_custom_engine_finds_solution(self): | CODE |
| LOW | tests/test_fuzzer.py | 527 | def test_invalid_engine_rejected(self): | CODE |
| LOW | tests/common.py | 59 | def requires_binaries_private(func): | CODE |
| LOW | tests/common.py | 151 | def run_simple_unicorn_congruency_check(thing: Project | bytes | str, arch: str = "AMD64", depth: int = 1): | CODE |
| LOW | tests/common.py | 175 | def print_decompilation_result(dec): | CODE |
| LOW | tests/common.py | 199 | def complete_calling_conventions_for(proj: Project, func_addrs: Iterable[int], **kwargs) -> None: | CODE |
| LOW | tests/common.py | 241 | def load_project_with_scoped_cfg( | CODE |
| LOW | tests/common.py | 327 | def function_extents_from_eh_frame(proj: Project) -> dict[int, int]: | CODE |
| LOW | tests/common.py | 434 | def _merged_regions_with_sizes(addr_sizes: Iterable[tuple[int, int]]) -> list[tuple[int, int]]: | CODE |
| LOW | tests/test_calling_conventions.py | 68 | def test_arm_empty_struct_argument_uses_an_integer_slot(self): | CODE |
| LOW | tests/test_calling_conventions.py | 81 | def test_opaque_cpp_class_returns_are_placed_like_integers(self): | CODE |
| LOW | tests/test_calling_conventions.py | 143 | def test_arg_locs_union_without_sized_members(self): | CODE |
| LOW | tests/test_calling_conventions.py | 158 | def test_microsoft_fastcall_large_arg(self): | CODE |
| LOW | tests/test_calling_conventions.py | 329 | def test_simcc_arg_locs_returnty_unresolved_simtyperef(self): | CODE |
| LOW | tests/test_calling_conventions.py | 340 | def test_simcc_arg_locs_returnty_typeref_without_size(self): | CODE |
| LOW | tests/test_calling_conventions.py | 356 | def test_next_arg_lays_a_typeref_out_as_the_type_it_names(self): | CODE |
| LOW | tests/test_calling_conventions.py | 452 | def test_arm_linux_syscall_argument_registers(self): | CODE |
| LOW | tests/test_calling_conventions.py | 574 | def test_microsoft_fastcall_aggregate_return(self): | CODE |
| LOW | tests/test_project.py | 18 | def test_negative_entry_is_rejected(self): | CODE |
| LOW⚡ | tests/test_cli.py | 166 | def test_disassemble_specific_functions(self): | CODE |
| LOW⚡ | tests/test_cli.py | 172 | def test_disassemble_function_by_address(self): | CODE |
| LOW⚡ | tests/test_cli.py | 179 | def test_decompile_interactive_summary(self): | CODE |
| LOW⚡ | tests/test_cli.py | 189 | def test_disassemble_interactive_summary(self): | CODE |
| LOW⚡ | tests/test_cli.py | 196 | def test_decompile_missing_function_raises(self): | CODE |
| LOW⚡ | tests/test_cli.py | 201 | def test_decompile_catch_exceptions_missing_function(self): | CODE |
| LOW⚡ | tests/test_cli.py | 209 | def test_disassemble_missing_function(self): | CODE |
| LOW⚡ | tests/test_cli.py | 216 | def test_decompile_no_decompilable_functions(self): | CODE |
| LOW⚡ | tests/test_cli.py | 256 | def test_decompile_syntax_highlighting(self): | CODE |
| LOW⚡ | tests/test_cli.py | 266 | def test_decompile_syntax_highlighting_multiple(self): | CODE |
| LOW⚡ | tests/test_cli.py | 275 | def test_disassemble_base_addr(self): | CODE |
| LOW⚡ | tests/test_cli.py | 280 | def test_disassemble_missing_address(self): | CODE |
| LOW⚡ | tests/test_cli.py | 287 | def test_decompile_catch_exceptions_noninteractive(self): | CODE |
| LOW⚡ | tests/test_cli.py | 293 | def test_decompile_catch_exceptions_error(self): | CODE |
| LOW⚡ | tests/test_cli.py | 303 | def test_disassemble_catch_exceptions_error(self): | CODE |
| LOW⚡ | tests/test_cli.py | 323 | def test_disassemble_catch_exceptions_noninteractive(self): | CODE |
| LOW⚡ | tests/test_cli.py | 329 | def test_decompile_no_functions_noninteractive(self): | CODE |
| LOW⚡ | tests/test_cli.py | 335 | def test_disassemble_no_functions_noninteractive(self): | CODE |
| LOW⚡ | tests/test_cli.py | 340 | def test_decompile_syntax_highlighting_catch_exceptions(self): | CODE |
| LOW | tests/test_cli.py | 148 | def test_syntax_highlighting_no_colors_flag(self): | CODE |
| LOW | tests/test_cli.py | 229 | def test_decompile_scope_to_functions_by_name(self): | CODE |
| LOW | tests/test_cli.py | 351 | def test_blob_requires_required_args(self): | CODE |
| LOW | tests/test_cli.py | 363 | def test_disassemble_blob_loader_options(self): | CODE |
| LOW | tests/test_cli.py | 392 | def test_decompile_blob_loader_options(self): | CODE |
| LOW | tests/claripy/test_unsat_core.py | 52 | def test_unsat_core_not_enabled(self): | CODE |
| LOW | tests/claripy/test_unsat_core.py | 105 | def test_unsat_core_composite(self): | CODE |
| LOW | tests/claripy/test_unsat_core.py | 127 | def test_unsat_core_composite_on_sat(self): | CODE |
| LOW⚡ | tests/claripy/test_verbatim_annotations.py | 48 | def test_operations_propagate_child_relocatable_annotations(self): | CODE |
| LOW⚡ | tests/claripy/test_verbatim_annotations.py | 54 | def test_clear_annotations_is_verbatim(self): | CODE |
| LOW⚡ | tests/claripy/test_verbatim_annotations.py | 60 | def test_remove_annotation_drops_inherited_annotation(self): | CODE |
| 3519 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | setup.py | 2 | CODE | |
| LOW | native/angr/scripts/gen_vexop_names.py | 12 | CODE | |
| LOW | corpus_tests/conftest.py | 6 | CODE | |
| LOW | corpus_tests/test_corpus.py | 6 | CODE | |
| LOW | tests/test_fuzzer.py | 1 | CODE | |
| LOW | tests/common.py | 1 | CODE | |
| LOW | tests/test_load_shellcode.py | 2 | CODE | |
| LOW | tests/test_calling_conventions.py | 3 | CODE | |
| LOW | tests/test_project.py | 3 | CODE | |
| LOW | tests/test_cli.py | 3 | CODE | |
| LOW | tests/claripy/test_unsat_core.py | 1 | CODE | |
| LOW | tests/claripy/conftest.py | 1 | CODE | |
| LOW | tests/claripy/conftest.py | 5 | CODE | |
| LOW | tests/claripy/test_bv_ops.py | 1 | CODE | |
| LOW | tests/claripy/test_vsa_simplify_solving.py | 6 | CODE | |
| LOW | tests/claripy/test_hybrid_approximate_first.py | 1 | CODE | |
| LOW | tests/claripy/test_simplify_construction.py | 1 | CODE | |
| LOW | tests/claripy/test_solver_subclass.py | 1 | CODE | |
| LOW | tests/claripy/test_get_bytes.py | 1 | CODE | |
| LOW | tests/claripy/test_bool_ops.py | 1 | CODE | |
| LOW | tests/claripy/test_canonicalize.py | 1 | CODE | |
| LOW | tests/claripy/test_smtlib.py | 1 | CODE | |
| LOW | tests/claripy/test_vsa_bv_ops.py | 6 | CODE | |
| LOW | tests/claripy/test_solver_split.py | 1 | CODE | |
| LOW | tests/claripy/test_replacement_solver.py | 1 | CODE | |
| LOW | tests/claripy/test_solver_dedup.py | 1 | CODE | |
| LOW | tests/claripy/test_fp_ops.py | 1 | CODE | |
| LOW | tests/claripy/test_vsa_bool_ops.py | 6 | CODE | |
| LOW | tests/claripy/test_batch_eval.py | 1 | CODE | |
| LOW | tests/claripy/test_unknown_annotation_identity.py | 1 | CODE | |
| LOW | tests/claripy/test_composite_unsat.py | 1 | CODE | |
| LOW | tests/claripy/test_repr.py | 1 | CODE | |
| LOW | tests/claripy/test_string_ops.py | 1 | CODE | |
| LOW | tests/claripy/test_solver_cacheless.py | 1 | CODE | |
| LOW | tests/procedures/test_stub_procedure_args.py | 3 | CODE | |
| LOW | tests/procedures/test_project_resolve_simproc.py | 3 | CODE | |
| LOW | tests/procedures/test_sim_procedure.py | 3 | CODE | |
| LOW | tests/procedures/test_syscall_none_prototype.py | 3 | CODE | |
| LOW | tests/procedures/posix/test_getenv.py | 4 | CODE | |
| LOW | tests/procedures/posix/test_sim_time.py | 3 | CODE | |
| LOW | tests/procedures/posix/test_unlink.py | 3 | CODE | |
| LOW | tests/procedures/posix/test_pthread.py | 3 | CODE | |
| LOW | tests/procedures/posix/test_pwrite_pread.py | 3 | CODE | |
| LOW | tests/procedures/posix/test_chroot.py | 3 | CODE | |
| LOW | tests/procedures/libc/test_strcasecmp.py | 3 | CODE | |
| LOW | tests/procedures/libc/test_string.py | 3 | CODE | |
| LOW | tests/procedures/libc/test_sprintf.py | 3 | CODE | |
| LOW | tests/procedures/libc/test_scanf.py | 2 | CODE | |
| LOW | tests/procedures/libc/test_strtol.py | 2 | CODE | |
| LOW | tests/procedures/libc/test_sscanf.py | 2 | CODE | |
| LOW | tests/procedures/libc/test_fgets.py | 3 | CODE | |
| LOW | tests/procedures/linux_kernel/test_lseek.py | 2 | CODE | |
| LOW | tests/procedures/glibc/test_ctype_locale.py | 3 | CODE | |
| LOW | tests/ailment/test_utils.py | 2 | CODE | |
| LOW | tests/ailment/test_expression.py | 2 | CODE | |
| LOW | tests/ailment/test_expression_markers.py | 4 | CODE | |
| LOW | tests/ailment/test_statement_markers.py | 8 | CODE | |
| LOW | tests/ailment/test_block_walker.py | 1 | CODE | |
| LOW | tests/ailment/test_serialize.py | 6 | CODE | |
| LOW | tests/ailment/test_hash_eq_contract.py | 15 | CODE | |
| 2675 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | native/angr/scripts/gen_vexop_names.py | 27 | CODE | |
| LOW | tests/common.py | 75 | CODE | |
| LOW | tests/common.py | 241 | CODE | |
| LOW | tests/common.py | 327 | CODE | |
| LOW | tests/types/test_types.py | 549 | CODE | |
| LOW | tests/types/test_types.py | 557 | CODE | |
| LOW | tests/serialization/test_db.py | 742 | CODE | |
| LOW | tests/utils/test_interval_map_cow.py | 99 | CODE | |
| LOW | tests/utils/test_interval_map_cow.py | 122 | CODE | |
| LOW | …e_plugins/functions/test_function_spill_equivalence.py | 23 | CODE | |
| LOW | tests/engines/vex/test_vex.py | 362 | CODE | |
| LOW | tests/analyses/test_s_liveness.py | 46 | CODE | |
| LOW | tests/analyses/test_s_liveness.py | 64 | CODE | |
| LOW | tests/analyses/test_variablerecovery.py | 82 | CODE | |
| LOW | tests/analyses/test_vfg.py | 184 | CODE | |
| LOW | tests/analyses/test_typehoon_constraint_subset.py | 21 | CODE | |
| LOW | tests/analyses/test_typehoon.py | 833 | CODE | |
| LOW | tests/analyses/test_callsite_maker.py | 26 | CODE | |
| LOW | tests/analyses/test_stack_pointer_tracker.py | 107 | CODE | |
| LOW | tests/analyses/test_regionidentifier.py | 53 | CODE | |
| LOW | …lyses/reaching_definitions/test_reachingdefinitions.py | 116 | CODE | |
| LOW | tests/analyses/decompiler/test_structured_codegen.py | 249 | CODE | |
| LOW | tests/analyses/decompiler/test_bounded_switches.py | 72 | CODE | |
| LOW | tests/analyses/decompiler/test_bounded_switches.py | 90 | CODE | |
| LOW | …ts/analyses/decompiler/test_variable_nondeterminism.py | 69 | CODE | |
| LOW | tests/analyses/decompiler/test_call_clobber_defs.py | 49 | CODE | |
| LOW | tests/analyses/decompiler/test_go_type_descriptors.py | 68 | CODE | |
| LOW | tests/analyses/decompiler/test_go_type_descriptors.py | 183 | CODE | |
| LOW | tests/analyses/decompiler/test_outliner.py | 23 | CODE | |
| LOW | tests/analyses/decompiler/test_outliner.py | 89 | CODE | |
| LOW | tests/analyses/decompiler/test_outliner.py | 234 | CODE | |
| LOW | tests/analyses/decompiler/test_outliner.py | 327 | CODE | |
| LOW | tests/analyses/decompiler/test_ccall_rewriting.py | 912 | CODE | |
| LOW | …s/analyses/decompiler/test_dephication_interference.py | 38 | CODE | |
| LOW | …s/analyses/decompiler/test_dephication_interference.py | 64 | CODE | |
| LOW | …s/analyses/decompiler/test_dephication_interference.py | 72 | CODE | |
| LOW | tests/analyses/decompiler/test_pattern_match.py | 616 | CODE | |
| LOW | tests/analyses/decompiler/test_pattern_match.py | 628 | CODE | |
| LOW | docs/conf.py | 154 | CODE | |
| LOW | angr/state_hierarchy.py | 207 | CODE | |
| LOW | angr/callable.py | 129 | CODE | |
| LOW | angr/sim_type.py | 4052 | CODE | |
| LOW | angr/sim_type.py | 4192 | CODE | |
| LOW | angr/sim_type.py | 4503 | CODE | |
| LOW | angr/sim_type.py | 69 | CODE | |
| LOW | angr/sim_type.py | 178 | CODE | |
| LOW | angr/sim_type.py | 210 | CODE | |
| LOW | angr/sim_type.py | 2119 | CODE | |
| LOW | angr/sim_type.py | 2766 | CODE | |
| LOW | angr/sim_manager.py | 676 | CODE | |
| LOW | angr/sim_manager.py | 696 | CODE | |
| LOW | angr/blade.py | 135 | CODE | |
| LOW | angr/blade.py | 248 | CODE | |
| LOW | angr/blade.py | 350 | CODE | |
| LOW | angr/calling_conventions.py | 944 | CODE | |
| LOW | angr/calling_conventions.py | 1154 | CODE | |
| LOW | angr/calling_conventions.py | 1899 | CODE | |
| LOW | angr/calling_conventions.py | 1961 | CODE | |
| LOW | angr/calling_conventions.py | 1991 | CODE | |
| LOW | angr/calling_conventions.py | 2034 | CODE | |
| 1265 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | tests/analyses/decompiler/test_rust_misc_passes.py | 43 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/analyses/decompiler/test_rust_misc_passes.py | 45 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/analyses/decompiler/test_rust_misc_passes.py | 66 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/analyses/decompiler/test_rust_misc_passes.py | 68 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/analyses/decompiler/test_rust_misc_passes.py | 97 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/analyses/decompiler/test_rust_misc_passes.py | 99 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/analyses/decompiler/test_fp.py | 692 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | tests/analyses/decompiler/test_fp.py | 694 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | tests/analyses/decompiler/test_fp.py | 730 | # ====================================================================== | COMMENT |
| MEDIUM⚡ | tests/analyses/decompiler/test_fp.py | 737 | # ====================================================================== | COMMENT |
| MEDIUM⚡ | tests/analyses/decompiler/test_fp.py | 882 | # ====================================================================== | COMMENT |
| MEDIUM⚡ | tests/analyses/decompiler/test_fp.py | 885 | # ====================================================================== | COMMENT |
| MEDIUM⚡ | tests/analyses/decompiler/test_fp.py | 1422 | # ====================================================================== | COMMENT |
| MEDIUM⚡ | tests/analyses/decompiler/test_fp.py | 1425 | # ====================================================================== | COMMENT |
| MEDIUM⚡ | tests/analyses/decompiler/test_fp.py | 1435 | # ====================================================================== | COMMENT |
| MEDIUM⚡ | tests/analyses/decompiler/test_fp.py | 1438 | # ====================================================================== | COMMENT |
| MEDIUM⚡ | tests/analyses/decompiler/test_fp.py | 1502 | # ====================================================================== | COMMENT |
| MEDIUM⚡ | tests/analyses/decompiler/test_fp.py | 1504 | # ====================================================================== | COMMENT |
| MEDIUM⚡ | tests/analyses/decompiler/test_fp.py | 1615 | # ====================================================================== | COMMENT |
| MEDIUM | tests/analyses/decompiler/test_fp.py | 161 | # ====================================================================== | COMMENT |
| MEDIUM | tests/analyses/decompiler/test_fp.py | 163 | # ====================================================================== | COMMENT |
| MEDIUM | tests/analyses/decompiler/test_fp.py | 196 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM | tests/analyses/decompiler/test_fp.py | 198 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM | tests/analyses/decompiler/test_fp.py | 383 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM | tests/analyses/decompiler/test_fp.py | 385 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM | tests/analyses/decompiler/test_fp.py | 551 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM | tests/analyses/decompiler/test_fp.py | 553 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM | tests/analyses/decompiler/test_fp.py | 811 | # ====================================================================== | COMMENT |
| MEDIUM | tests/analyses/decompiler/test_fp.py | 817 | # ====================================================================== | COMMENT |
| MEDIUM | tests/analyses/decompiler/test_fp.py | 901 | # ====================================================================== | COMMENT |
| MEDIUM | tests/analyses/decompiler/test_fp.py | 906 | # ====================================================================== | COMMENT |
| MEDIUM | tests/analyses/decompiler/test_fp.py | 942 | # ====================================================================== | COMMENT |
| MEDIUM | tests/analyses/decompiler/test_fp.py | 944 | # ====================================================================== | COMMENT |
| MEDIUM | tests/analyses/decompiler/test_fp.py | 1322 | # ====================================================================== | COMMENT |
| MEDIUM | tests/analyses/decompiler/test_fp.py | 1325 | # ====================================================================== | COMMENT |
| MEDIUM | tests/analyses/decompiler/test_fp.py | 1346 | # ====================================================================== | COMMENT |
| MEDIUM | tests/analyses/decompiler/test_fp.py | 1349 | # ====================================================================== | COMMENT |
| MEDIUM | tests/analyses/decompiler/test_fp.py | 1373 | # ====================================================================== | COMMENT |
| MEDIUM | tests/analyses/decompiler/test_fp.py | 1375 | # ====================================================================== | COMMENT |
| MEDIUM | tests/analyses/decompiler/test_fp.py | 1468 | # ====================================================================== | COMMENT |
| MEDIUM | tests/analyses/decompiler/test_fp.py | 1473 | # ====================================================================== | COMMENT |
| MEDIUM⚡ | …ts/analyses/decompiler/test_ssa_addr_taken_stackvar.py | 176 | # │ │ │ │ │ │ │ │ │ ╭────────────╴│ 46ae69 jne 0x46aed0 | COMMENT |
| MEDIUM⚡ | …ts/analyses/decompiler/test_ssa_addr_taken_stackvar.py | 186 | # │ │ │ │ │ │ │ │ │ │ ╭──────────╴│ 46ae79 jne 0x46aed0 | COMMENT |
| MEDIUM⚡ | …ts/analyses/decompiler/test_ssa_addr_taken_stackvar.py | 196 | # │ │ │ │ │ │ │ │ │ │ │ ╭──────────╴46ae89 je 0x46aed2 | COMMENT |
| MEDIUM⚡ | …ts/analyses/decompiler/test_ssa_addr_taken_stackvar.py | 199 | # │ │ │ │ │ │ │ │ │ │ │ │ ╭──────╴46ae8e jmp 0x46aec3 | COMMENT |
| MEDIUM⚡ | …ts/analyses/decompiler/test_ssa_addr_taken_stackvar.py | 244 | # │ │ │ ╰▸╰▸╰──────▸╰────▸╰▸╰──────▸╰▸46aed2 mov al, bl | COMMENT |
| MEDIUM⚡ | …ts/analyses/decompiler/test_ssa_addr_taken_stackvar.py | 247 | # │ │ ╰──────────────────────────▸│ 46aed6 lea eax, [ebp-0x34] | COMMENT |
| MEDIUM⚡ | …ts/analyses/decompiler/test_ssa_addr_taken_stackvar.py | 256 | # ╰▸╰────────────────────────────▸│ │ 46aee4 xor al, al | COMMENT |
| MEDIUM | …ts/analyses/decompiler/test_ssa_addr_taken_stackvar.py | 49 | # ╭────────────▸│ │ 46ad5e mov dword ptr [ebp-0x40], eax | COMMENT |
| MEDIUM | …ts/analyses/decompiler/test_ssa_addr_taken_stackvar.py | 51 | # ╭────────────╴│ │ │ 46ad64 jae 0x46aee4 | COMMENT |
| MEDIUM | …ts/analyses/decompiler/test_ssa_addr_taken_stackvar.py | 100 | # │ ╭────────╴│ │ 46adce je 0x46aed6 | COMMENT |
| MEDIUM | …ts/analyses/decompiler/test_ssa_addr_taken_stackvar.py | 142 | # │ │ │ │ │ │ │ │ ╭──────────────╴│ │ 46ae2a jmp 0x46aec3 | COMMENT |
| MEDIUM | …ts/analyses/decompiler/test_ssa_addr_taken_stackvar.py | 156 | # │ │ │ │ │ │ │ │ ╭────────────────╴46ae45 je 0x46aed2 | COMMENT |
| MEDIUM⚡ | tests/analyses/decompiler/test_peephole_fp.py | 207 | # ====================================================================== | COMMENT |
| MEDIUM⚡ | tests/analyses/decompiler/test_peephole_fp.py | 211 | # ====================================================================== | COMMENT |
| MEDIUM⚡ | tests/analyses/decompiler/test_peephole_fp.py | 214 | # ====================================================================== | COMMENT |
| MEDIUM⚡ | tests/analyses/decompiler/test_peephole_fp.py | 216 | # ====================================================================== | COMMENT |
| MEDIUM⚡ | tests/analyses/decompiler/test_peephole_fp.py | 326 | # ====================================================================== | COMMENT |
| MEDIUM⚡ | tests/analyses/decompiler/test_peephole_fp.py | 328 | # ====================================================================== | COMMENT |
| MEDIUM | tests/analyses/decompiler/test_peephole_fp.py | 50 | # ====================================================================== | COMMENT |
| 89 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | setup.py | 160 | except ModuleNotFoundError: | CODE |
| HIGH | tests/claripy/test_vsa_simplify_solving.py | 302 | except AssertionError: | CODE |
| HIGH | tests/storage/test_relro_perm.py | 30 | except angr.errors.SimSegfaultException: | CODE |
| HIGH | …ons/test_spilling_function_dict_concurrent_eviction.py | 40 | except KeyError: | CODE |
| HIGH | tests/analyses/test_rust_type_hints.py | 28 | except TypeError: | CODE |
| HIGH | …st_complete_calling_conventions_concurrent_eviction.py | 39 | except RuntimeError: | CODE |
| HIGH | tests/analyses/decompiler/test_errors.py | 45 | except BadOptimizerException: | CODE |
| HIGH | tests/analyses/decompiler/test_region_overlay.py | 521 | except networkx.NetworkXError: | CODE |
| HIGH | angr/vaults.py | 119 | except KeyError: | CODE |
| HIGH | angr/state_hierarchy.py | 103 | except networkx.NetworkXError: | CODE |
| HIGH | angr/state_hierarchy.py | 219 | except ReferenceError: | CODE |
| HIGH | angr/calling_conventions.py | 1597 | except StopIteration: | CODE |
| HIGH | angr/procedures/java/__init__.py | 24 | except KeyError: | CODE |
| HIGH | angr/angrdb/db.py | 293 | except (json.JSONDecodeError, TypeError): | CODE |
| HIGH | angr/angrdb/db.py | 305 | except (json.JSONDecodeError, TypeError): | CODE |
| HIGH | angr/go/utils/version.py | 51 | except KeyError: | CODE |
| HIGH | …gr/rust/analyses/rust_calling_convention/pathfinder.py | 118 | except NetworkXError: | CODE |
| HIGH | …gr/rust/analyses/rust_calling_convention/pathfinder.py | 134 | except NetworkXError: | CODE |
| HIGH | angr/utils/mp.py | 88 | except OSError: | CODE |
| HIGH | angr/exploration_techniques/tracer.py | 514 | except AngrTracerError: | CODE |
| HIGH | angr/simos/linux.py | 107 | except NotImplementedError: | CODE |
| HIGH | angr/storage/file.py | 242 | except AttributeError: | CODE |
| HIGH | angr/storage/memory_mixins/convenient_mappings_mixin.py | 72 | except SimMemoryMissingError: | CODE |
| HIGH | …orage/memory_mixins/paged_memory/paged_memory_mixin.py | 385 | except SimMemoryError: | CODE |
| HIGH | …orage/memory_mixins/paged_memory/paged_memory_mixin.py | 408 | except KeyError: | CODE |
| HIGH | …storage/memory_mixins/paged_memory/pages/ultra_page.py | 205 | except StopIteration: | CODE |
| HIGH | angr/knowledge_plugins/labels.py | 26 | except AttributeError: | CODE |
| HIGH | …/knowledge_plugins/key_definitions/live_definitions.py | 801 | except SimMemoryMissingError: | CODE |
| HIGH | …/knowledge_plugins/key_definitions/live_definitions.py | 811 | except KeyError: | CODE |
| HIGH | angr/knowledge_plugins/cfg/cfg_model.py | 997 | except StopIteration: | CODE |
| HIGH | angr/knowledge_plugins/cfg/cfg_model.py | 463 | except (KeyError, IndexError, StopIteration): | CODE |
| HIGH | angr/knowledge_plugins/functions/function_manager.py | 146 | except KeyError: | CODE |
| HIGH | angr/knowledge_plugins/functions/function_manager.py | 243 | except KeyError: | CODE |
| HIGH | angr/knowledge_plugins/functions/function_manager.py | 382 | except KeyError: | CODE |
| HIGH | angr/knowledge_plugins/functions/function_manager.py | 1409 | except ValueError: | CODE |
| HIGH | angr/knowledge_plugins/functions/function_manager.py | 1366 | except KeyError: | CODE |
| HIGH | angr/engines/__init__.py | 66 | except ImportError: | CODE |
| HIGH | angr/engines/vex/lifter.py | 320 | except StopIteration: | CODE |
| HIGH | angr/engines/vex/claripy/ccall.py | 1208 | except KeyError: | CODE |
| HIGH | angr/engines/vex/heavy/resilience.py | 58 | except UnsupportedIROpError: | CODE |
| HIGH | angr/engines/pcode/lifter.py | 1352 | except StopIteration: | CODE |
| HIGH | angr/state_plugins/light_registers.py | 94 | except KeyError: | CODE |
| HIGH | angr/state_plugins/posix.py | 434 | except SimSolverError: | CODE |
| HIGH | angr/state_plugins/posix.py | 491 | except SimSolverError: | CODE |
| HIGH | angr/state_plugins/history.py | 306 | except ReferenceError: | CODE |
| HIGH | angr/analyses/reassembler.py | 2355 | except KeyError: | CODE |
| HIGH | angr/analyses/vfg.py | 800 | except SimValueError: | CODE |
| HIGH | angr/analyses/veritesting.py | 487 | except (AngrError, SimError): | CODE |
| HIGH | angr/analyses/stack_pointer_tracker.py | 284 | except KeyError: | CODE |
| HIGH | angr/analyses/stack_pointer_tracker.py | 293 | except KeyError: | CODE |
| HIGH | angr/analyses/stack_pointer_tracker.py | 1025 | except CouldNotResolveException: | CODE |
| HIGH | angr/analyses/stack_pointer_tracker.py | 822 | except CouldNotResolveException: | CODE |
| HIGH | angr/analyses/stack_pointer_tracker.py | 944 | except CouldNotResolveException: | CODE |
| HIGH | angr/analyses/soot_class_hierarchy.py | 82 | except KeyError: | CODE |
| HIGH | angr/analyses/ddg.py | 757 | except (SimUnsatError, SimSolverModeError, ZeroDivisionError): | CODE |
| HIGH | angr/analyses/disassembly.py | 72 | except KeyError: | CODE |
| HIGH | angr/analyses/disassembly.py | 837 | except KeyError: | CODE |
| HIGH | angr/analyses/disassembly.py | 955 | except KeyError: | CODE |
| HIGH | angr/analyses/disassembly.py | 1080 | except KeyError: | CODE |
| HIGH | angr/analyses/loop_analysis.py | 143 | except KeyError: | CODE |
| 34 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | native/angr/src/icicle.rs | 598 | self.vm.cpu.mem.modified.iter().copied().collect() | CODE |
| CRITICAL | tests/exploration_techniques/test_oppologist.py | 19 | angr.engines.vex.claripy.irop.operations.clear() | CODE |
| CRITICAL | tests/exploration_techniques/test_oppologist.py | 28 | angr.engines.vex.claripy.irop.operations.update(old_ops) | CODE |
| CRITICAL⚡ | tests/analyses/decompiler/test_decompiler.py | 871 | result = angr.analyses.decompiler.structured_codegen.c.CConstant.str_to_c_str(_input) | CODE |
| CRITICAL | tests/analyses/decompiler/test_rust_decompiler.py | 312 | isinstance(ty, RustSimType) for ty in proj.kb.dec_variables.global_manager.variable_to_types.values() | CODE |
| CRITICAL | tests/analyses/decompiler/test_rust_decompiler.py | 325 | isinstance(ty, RustSimType) for ty in proj.kb.dec_variables.global_manager.variable_to_types.values() | CODE |
| CRITICAL | tests/analyses/decompiler/test_go_decompiler.py | 503 | found = {v.name: v.addr for v in self.proj.kb.go_globals.variables.values()} | CODE |
| CRITICAL | angr/procedures/java_jni/__init__.py | 48 | return self.state.project.loader.extern_object.allocate(size=size) | CODE |
| CRITICAL | angr/simos/linux.py | 442 | self.project.loader.extern_object.memory.pack_word( | CODE |
| CRITICAL | angr/storage/memory_mixins/name_resolution_mixin.py | 33 | "cc_dep1", angr.engines.vex.claripy.ccall._get_flags(self.state) | CODE |
| CRITICAL | angr/storage/memory_mixins/name_resolution_mixin.py | 39 | self.store("cc_dep1", angr.engines.vex.claripy.ccall._get_flags(self.state)) | CODE |
| CRITICAL⚡ | angr/knowledge_plugins/variables/variable_manager.py | 945 | reg_ = self.manager._kb._project.arch.registers.get(reg) | CODE |
| CRITICAL | angr/knowledge_plugins/functions/function.py | 1075 | b = self._function_manager._kb._project.factory.block(addr) | CODE |
| CRITICAL | angr/knowledge_plugins/functions/function.py | 1085 | b = self._function_manager._kb._project.factory.block(addr) | CODE |
| CRITICAL | angr/state_plugins/unicorn_engine.py | 615 | if not h.setup_imports(unicorn.unicorn_py3.unicorn.uclib._name.encode()): | CODE |
| CRITICAL | angr/state_plugins/jni_references.py | 48 | opaque_ref = self.state.project.loader.extern_object.allocate() | CODE |
| CRITICAL | angr/analyses/bindiff.py | 1045 | for name, addr in self.project.loader.main_object.plt.items(): | CODE |
| CRITICAL | angr/analyses/boyscout.py | 46 | for start_, data in self.project.loader.main_object.memory.backers(): | CODE |
| CRITICAL | angr/analyses/soot_class_hierarchy.py | 41 | for cls in self.project.loader.main_object.classes.values(): | CODE |
| CRITICAL | angr/analyses/soot_class_hierarchy.py | 48 | for cls in self.project.loader.main_object.classes.values(): | CODE |
| CRITICAL | angr/analyses/soot_class_hierarchy.py | 67 | for cls in self.project.loader.main_object.classes.values(): | CODE |
| CRITICAL | angr/analyses/callee_cleanup_finder.py | 16 | starts = [imp.resolvedby.rebased_addr for imp in self.project.loader.main_object.imports.values()] | CODE |
| CRITICAL | angr/analyses/deobfuscator/string_obf_finder.py | 172 | pred for pred in self.project.kb.functions.callgraph.predecessors(func.addr) if pred != func.addr | CODE |
| CRITICAL | angr/analyses/deobfuscator/string_obf_finder.py | 470 | pred for pred in self.project.kb.functions.callgraph.predecessors(func.addr) if pred != func.addr | CODE |
| CRITICAL | angr/analyses/reaching_definitions/rd_state.py | 425 | cfg = self.analysis.project.kb.cfgs.get_most_accurate() | CODE |
| CRITICAL | angr/analyses/reaching_definitions/engine_ail.py | 308 | prototype = self.state.analysis.subject.content.get_prototype(getattr(self.state.analysis, "flavor", None)) | CODE |
| CRITICAL | angr/analyses/reaching_definitions/function_handler.py | 366 | data.function = state.analysis.project.kb.functions.get(data.address, None) | CODE |
| CRITICAL | angr/analyses/reaching_definitions/function_handler.py | 430 | if (data.symbol is None and state.analysis.project.loader.main_object.contains_addr(data.address)) or ( | CODE |
| CRITICAL | angr/analyses/cfg/cfg_fast.py | 3228 | security_cookie_addr = self.project.loader.main_object.load_config.get("SecurityCookie", None) | CODE |
| CRITICAL | angr/analyses/cfg/cfg_fast_soot.py | 98 | for cls in self.project.loader.main_object.classes.values(): | CODE |
| CRITICAL | angr/analyses/decompiler/decompiler.py | 204 | cfg = self.func._function_manager._kb.cfgs.get_most_accurate() | CODE |
| CRITICAL | angr/analyses/decompiler/structured_codegen/go.py | 10486 | data = self._codegen.project.loader.memory.load(md.addr, n) | CODE |
| CRITICAL | …ler/optimization_passes/win_stack_canary_simplifier.py | 41 | self._security_cookie_addr = self.project.loader.main_object.load_config.get("SecurityCookie", None) | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | tests/procedures/glibc/test_ctype_locale.py | 0 | following is the description from linuxfoundation.org: the __ctype_b_loc() function shall return a pointer into an array | STRING |
| HIGH | angr/procedures/glibc/__ctype_toupper_loc.py | 0 | following is the description from linuxfoundation.org: the __ctype_b_loc() function shall return a pointer into an array | STRING |
| HIGH | angr/procedures/glibc/__ctype_tolower_loc.py | 0 | following is the description from linuxfoundation.org: the __ctype_b_loc() function shall return a pointer into an array | STRING |
| HIGH | angr/procedures/glibc/__ctype_b_loc.py | 0 | following is the description from linuxfoundation.org: the __ctype_b_loc() function shall return a pointer into an array | STRING |
| HIGH | angr/angrdb/serializers/labels.py | 0 | :param session: :param dbknowledgebase db_kb: :param knowledgebase kb: :return: | STRING |
| HIGH | angr/angrdb/serializers/bookmarks.py | 0 | :param session: :param dbknowledgebase db_kb: :param knowledgebase kb: :return: | STRING |
| HIGH | angr/angrdb/serializers/comments.py | 0 | :param session: :param dbknowledgebase db_kb: :param knowledgebase kb: :return: | STRING |
| HIGH | angr/analyses/decompiler/structured_codegen/c.py | 0 | represents a program construct in c. acts as the base class for all other representation constructions. | STRING |
| HIGH | angr/analyses/decompiler/structured_codegen/go.py | 0 | represents a program construct in c. acts as the base class for all other representation constructions. | STRING |
| HIGH | angr/analyses/decompiler/structured_codegen/rust.py | 0 | represents a program construct in c. acts as the base class for all other representation constructions. | STRING |
| HIGH | angr/analyses/decompiler/structured_codegen/c.py | 0 | creates the c representation of the code and displays it by constructing a large string. this function is called by each | STRING |
| HIGH | angr/analyses/decompiler/structured_codegen/go.py | 0 | creates the c representation of the code and displays it by constructing a large string. this function is called by each | STRING |
| HIGH | angr/analyses/decompiler/structured_codegen/rust.py | 0 | creates the c representation of the code and displays it by constructing a large string. this function is called by each | STRING |
| HIGH | angr/analyses/decompiler/structured_codegen/c.py | 0 | an uninterpreted name to display in the decompilation output. pretty much always represents an error? | STRING |
| HIGH | angr/analyses/decompiler/structured_codegen/go.py | 0 | an uninterpreted name to display in the decompilation output. pretty much always represents an error? | STRING |
| HIGH | angr/analyses/decompiler/structured_codegen/rust.py | 0 | an uninterpreted name to display in the decompilation output. pretty much always represents an error? | STRING |
| HIGH | angr/analyses/decompiler/structured_codegen/c.py | 0 | govariable represents access to a variable with the specified type (`variable_type`). `variable` must be a simvariable. | STRING |
| HIGH | angr/analyses/decompiler/structured_codegen/rust.py | 0 | govariable represents access to a variable with the specified type (`variable_type`). `variable` must be a simvariable. | STRING |
| HIGH | angr/analyses/decompiler/structured_codegen/go.py | 0 | govariable represents access to a variable with the specified type (`variable_type`). `variable` must be a simvariable. | STRING |
| HIGH | angr/analyses/decompiler/structured_codegen/c.py | 0 | format an integer using the format setup of the current node. :param value: the integer value to format. :return: the fo | STRING |
| HIGH | angr/analyses/decompiler/structured_codegen/go.py | 0 | format an integer using the format setup of the current node. :param value: the integer value to format. :return: the fo | STRING |
| HIGH | angr/analyses/decompiler/structured_codegen/rust.py | 0 | format an integer using the format setup of the current node. :param value: the integer value to format. :return: the fo | STRING |
| HIGH | angr/analyses/decompiler/structured_codegen/c.py | 0 | ideally all dirty expressions should be handled and converted to proper conversions during conversion from vex to ail. e | STRING |
| HIGH | angr/analyses/decompiler/structured_codegen/go.py | 0 | ideally all dirty expressions should be handled and converted to proper conversions during conversion from vex to ail. e | STRING |
| HIGH | angr/analyses/decompiler/structured_codegen/rust.py | 0 | ideally all dirty expressions should be handled and converted to proper conversions during conversion from vex to ail. e | STRING |
| HIGH | angr/analyses/decompiler/structured_codegen/c.py | 0 | a class to represent all objects that can be closed by it's correspodning character. examples: (), {}, [] | STRING |
| HIGH | angr/analyses/decompiler/structured_codegen/go.py | 0 | a class to represent all objects that can be closed by it's correspodning character. examples: (), {}, [] | STRING |
| HIGH | angr/analyses/decompiler/structured_codegen/rust.py | 0 | a class to represent all objects that can be closed by it's correspodning character. examples: (), {}, [] | STRING |
| HIGH | angr/analyses/decompiler/structured_codegen/c.py | 0 | a class to represent the type information of fixed-size array lengths. examples: in "char foo[20]", this would be the "[ | STRING |
| HIGH | angr/analyses/decompiler/structured_codegen/go.py | 0 | a class to represent the type information of fixed-size array lengths. examples: in "char foo[20]", this would be the "[ | STRING |
| HIGH | angr/analyses/decompiler/structured_codegen/rust.py | 0 | a class to represent the type information of fixed-size array lengths. examples: in "char foo[20]", this would be the "[ | STRING |
| HIGH | angr/analyses/decompiler/structured_codegen/c.py | 0 | re-render text and re-generate all sorts of mapping information. | STRING |
| HIGH | angr/analyses/decompiler/structured_codegen/go.py | 0 | re-render text and re-generate all sorts of mapping information. | STRING |
| HIGH | angr/analyses/decompiler/structured_codegen/rust.py | 0 | re-render text and re-generate all sorts of mapping information. | STRING |
| HIGH | angr/analyses/decompiler/structured_codegen/c.py | 0 | render decompilation notes. :return: a string containing all notes. | STRING |
| HIGH | angr/analyses/decompiler/structured_codegen/go.py | 0 | render decompilation notes. :return: a string containing all notes. | STRING |
| HIGH | angr/analyses/decompiler/structured_codegen/rust.py | 0 | render decompilation notes. :return: a string containing all notes. | STRING |
| HIGH | angr/analyses/decompiler/structured_codegen/c.py | 0 | return a reference to a govariable instance with special handling of arrays and array pointers. :param cvar: the govaria | STRING |
| HIGH | angr/analyses/decompiler/structured_codegen/rust.py | 0 | return a reference to a govariable instance with special handling of arrays and array pointers. :param cvar: the govaria | STRING |
| HIGH | angr/analyses/decompiler/structured_codegen/go.py | 0 | return a reference to a govariable instance with special handling of arrays and array pointers. :param cvar: the govaria | STRING |
| HIGH | angr/analyses/decompiler/structured_codegen/c.py | 0 | before calling this fixer class, pointer arithmetics are purely integer-based and ignoring the pointer type. for example | STRING |
| HIGH | angr/analyses/decompiler/structured_codegen/go.py | 0 | before calling this fixer class, pointer arithmetics are purely integer-based and ignoring the pointer type. for example | STRING |
| HIGH | angr/analyses/decompiler/structured_codegen/rust.py | 0 | before calling this fixer class, pointer arithmetics are purely integer-based and ignoring the pointer type. for example | STRING |
| HIGH | angr/analyses/decompiler/ssailification/rewriting.py | 0 | :param node: the current node. :param state: the analysis state. :return: a tuple: (any changes occur, successor state) | STRING |
| HIGH | angr/analyses/decompiler/ssailification/traversal.py | 0 | :param node: the current node. :param state: the analysis state. :return: a tuple: (any changes occur, successor state) | STRING |
| HIGH | angr/analyses/decompiler/dephication/graph_rewriting.py | 0 | :param node: the current node. :param state: the analysis state. :return: a tuple: (any changes occur, successor state) | STRING |
| HIGH | angr/analyses/decompiler/region_simplifiers/goto.py | 0 | :param conditionnode node: :param successor: :return: | STRING |
| HIGH | angr/analyses/decompiler/region_simplifiers/if_.py | 0 | :param conditionnode node: :param successor: :return: | STRING |
| HIGH | …nalyses/decompiler/region_simplifiers/cascading_ifs.py | 0 | :param conditionnode node: :param successor: :return: | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | corpus_tests/scripts/gh_create_branch.sh | 120 | # Create the new ref. | COMMENT |
| MEDIUM | tests/claripy/test_unsat_core.py | 11 | # Create a solver with unsat_core enabled | COMMENT |
| MEDIUM | tests/claripy/test_bv_ops.py | 248 | # Create a value with known bit patterns | COMMENT |
| MEDIUM | tests/claripy/test_bv_ops.py | 366 | # Create a value with a single bit set | COMMENT |
| MEDIUM | tests/claripy/test_vsa_simplify_solving.py | 253 | # Create a new solver to not pollute the main one | COMMENT |
| MEDIUM⚡ | tests/claripy/test_get_bytes.py | 248 | # Create a value with alternating bytes | COMMENT |
| MEDIUM⚡ | tests/claripy/test_get_bytes.py | 255 | # Create a value with sequential bytes | COMMENT |
| MEDIUM | tests/claripy/test_bool_ops.py | 212 | # Create a constraint to resolve the symbolic condition | COMMENT |
| MEDIUM | tests/claripy/test_vsa_bv_ops.py | 867 | # Create a singleton SI | COMMENT |
| MEDIUM | tests/claripy/test_vsa_bv_ops.py | 990 | # Create a fresh SI for division to avoid attribute errors if the last operation returned a BV | COMMENT |
| MEDIUM | tests/procedures/posix/test_unlink.py | 18 | # Create a file 'test' | COMMENT |
| MEDIUM | tests/procedures/linux_kernel/test_lseek.py | 32 | # Create a file | COMMENT |
| MEDIUM | tests/procedures/linux_kernel/test_lseek.py | 69 | # Create a file | COMMENT |
| MEDIUM | tests/procedures/linux_kernel/test_lseek.py | 96 | # Create a file | COMMENT |
| MEDIUM | tests/procedures/linux_kernel/test_lseek.py | 150 | # Create a file | COMMENT |
| MEDIUM | tests/procedures/linux_kernel/test_lseek.py | 165 | # Create a file | COMMENT |
| MEDIUM | tests/angrdb/test_angrdb_load_missing_binary.py | 36 | # Create a project from the temporary copy and dump it | COMMENT |
| MEDIUM | tests/types/test_enum_inference.py | 56 | # Create an enum type | COMMENT |
| MEDIUM | tests/types/test_enum_inference.py | 135 | # Define the enum type for the parameter | STRING |
| MEDIUM | tests/types/test_enum_inference.py | 205 | # Create a complex enum | COMMENT |
| MEDIUM | tests/knowledge_plugins/test_variable_manager.py | 34 | # Create a VariableManagerInternal and generate some variable idents | COMMENT |
| MEDIUM | tests/state_plugins/posix/test_posix.py | 13 | # Create a state first | COMMENT |
| MEDIUM | tests/state_plugins/posix/test_posix.py | 16 | # Create a file | COMMENT |
| MEDIUM | tests/analyses/test_variablerecovery.py | 88 | # Create a temporary KnowledgeBase instance | COMMENT |
| MEDIUM | tests/analyses/test_cdg.py | 26 | # Create a project with a random binary - it will not be used anyways | COMMENT |
| MEDIUM | tests/analyses/test_cdg.py | 33 | # Create the CDG analysis | COMMENT |
| MEDIUM | tests/analyses/test_cdg.py | 61 | # Create a TemporaryNode for each node | COMMENT |
| MEDIUM | tests/analyses/test_cdg.py | 125 | # Create the mock post-dom graph | COMMENT |
| MEDIUM | tests/analyses/cfg/test_cfg_patching.py | 142 | # Define the data region and run analysis for function reconstruction | COMMENT |
| MEDIUM | tests/analyses/decompiler/test_decompiler.py | 4085 | # This function is expected to emit some (referenced) struct typedefs; if it stops doing so | STRING |
| MEDIUM | angr/sim_options.py | 1 | # This module contains the analysis options. | COMMENT |
| MEDIUM | angr/angrdb/db.py | 272 | # Create the project | COMMENT |
| MEDIUM | angr/utils/graph.py | 500 | # Create the end_node, too | COMMENT |
| MEDIUM | angr/simos/cgc.py | 47 | # Create the CGC plugin | COMMENT |
| MEDIUM | angr/simos/windows.py | 250 | # Create a LDR_MODULE, we'll handle the links later... | COMMENT |
| MEDIUM | angr/mcp/server.py | 62 | # Create the FastMCP server instance | COMMENT |
| MEDIUM | angr/knowledge_plugins/functions/function_manager.py | 61 | # Create a new function | COMMENT |
| MEDIUM | angr/state_plugins/sim_action.py | 1 | # This module contains data structures for handling memory, code, and register references. | COMMENT |
| MEDIUM | angr/analyses/cdg.py | 156 | # Create the normalized_cfg without the annoying ContainerNodes | COMMENT |
| MEDIUM | angr/analyses/vsa_ddg.py | 272 | # Create an edge between def site and use site | COMMENT |
| MEDIUM | angr/analyses/vfg.py | 551 | # Create the initial state | COMMENT |
| MEDIUM | angr/analyses/vfg.py | 882 | # Create a new call stack for the successor | COMMENT |
| MEDIUM | angr/analyses/deobfuscator/api_obf_type2_finder.py | 144 | # Create a label | COMMENT |
| MEDIUM | angr/analyses/deobfuscator/api_obf_type2_finder.py | 149 | # Create a variable | COMMENT |
| MEDIUM | angr/analyses/cfg/cfg_fast.py | 1027 | # Create the segment list | COMMENT |
| MEDIUM | angr/analyses/cfg/cfg_fast.py | 1977 | # Create a read-only memory view in loader for faster data loading | COMMENT |
| MEDIUM | angr/analyses/cfg/cfg_fast.py | 2027 | # Create an initial state. Store it to self so we can use it globally. | COMMENT |
| MEDIUM | angr/analyses/cfg/cfg_fast.py | 6473 | # Create a CFG node, and add it to the graph | COMMENT |
| MEDIUM | angr/analyses/cfg/cfg_emulated.py | 556 | # Create a common end node for all nodes whose out_degree is 0 | COMMENT |
| MEDIUM | angr/analyses/cfg/cfg_emulated.py | 1220 | # Create the CFGNode object | COMMENT |
| MEDIUM | angr/analyses/cfg/cfg_emulated.py | 1840 | # Create the new call stack of target block | COMMENT |
| MEDIUM | angr/analyses/cfg/cfg_emulated.py | 1842 | # Create the callstack suffix | COMMENT |
| MEDIUM | angr/analyses/cfg/cfg_emulated.py | 2136 | # Create a return site for current function | COMMENT |
| MEDIUM | angr/analyses/cfg/cfg_emulated.py | 2144 | # Create a returning edge in the caller function | COMMENT |
| MEDIUM | angr/analyses/cfg/cfg_emulated.py | 2677 | # Create a partial CFG first | COMMENT |
| MEDIUM | angr/analyses/cfg/cfg_emulated.py | 3097 | # Create the function if it doesn't exist | COMMENT |
| MEDIUM | angr/analyses/cfg/cfg_base.py | 1441 | # Create a new one | COMMENT |
| MEDIUM | angr/analyses/cfg/cfg_base.py | 3129 | # Create an IndirectJump instance | COMMENT |
| MEDIUM | angr/analyses/cfg/indirect_jump_resolvers/jumptable.py | 1097 | # Create the annotated CFG; shared by the precheck and the slice execution below | COMMENT |
| MEDIUM | angr/analyses/cfg/indirect_jump_resolvers/jumptable.py | 1160 | # Create the slicecutor | COMMENT |
| 6 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | tests/analyses/decompiler/test_go_codegen_handlers.py | 170 | (bop("LogicalAnd", bop("CmpLT", a, b), bop("CmpLT", b, c)), "a < b && b < c"), | CODE |
| HIGH | tests/sim/test_ail_exec.py | 163 | state.callstack.push(top_frame) | CODE |
| HIGH | tests/sim/test_ail_exec.py | 212 | state.callstack.push(top_frame) | CODE |
| HIGH | tests/sim/test_ail_exec.py | 256 | state.callstack.push(top_frame) | CODE |
| HIGH | tests/sim/test_ail_exec.py | 317 | state.callstack.push(top_frame) | CODE |
| HIGH | tests/sim/test_ail_exec.py | 367 | state.callstack.push(top_frame) | CODE |
| HIGH⚡ | tests/sim/test_ail_exec.py | 422 | state.callstack.push(AILCallStack(func_addr=0xDEADBEEF)) | CODE |
| HIGH⚡ | tests/sim/test_ail_exec.py | 425 | state.callstack.push(top_frame) | CODE |
| HIGH | tests/sim/test_ail_exec.py | 458 | state.callstack.push(top_frame) | CODE |
| HIGH | angr/procedures/java_jni/string_operations.py | 30 | # if isCopy is not null, store JNI_TRUE at that address | COMMENT |
| HIGH | angr/procedures/java_jni/array_operations.py | 166 | # if isCopy is not null, store JNI_TRUE at that address | COMMENT |
| HIGH | angr/procedures/posix/fdopen.py | 76 | return claripy.If(fd_int == fd_concr, file_struct_ptr, null) | CODE |
| HIGH | angr/procedures/libc/fopen.py | 64 | return claripy.If(fd == fd_concr, file_struct_ptr, null) | CODE |
| HIGH | angr/go/optimization_passes/stdlib_folder.py | 495 | ``if p := e.next; e.list != nil && p != &e.list.root { r = p } else { r = nil }`` -> ``r = e.Next()`` | STRING |
| HIGH | angr/simos/javavm.py | 158 | state.callstack.push(new_frame) | CODE |
| HIGH | angr/engines/soot/engine.py | 262 | state.callstack.push(state.callstack.copy()) | CODE |
| HIGH | angr/engines/ail/engine_light.py | 296 | self.frame.push(new_frame) | CODE |
| HIGH | angr/engines/ail/setup.py | 59 | state.callstack.push(top_frame) | CODE |
| HIGH | angr/state_plugins/callstack.py | 277 | return self.push(frame) | CODE |
| HIGH | angr/state_plugins/callstack.py | 412 | self.push(new_frame) | CODE |
| HIGH | angr/state_plugins/heap/heap_ptmalloc.py | 288 | pointer). Returns None if ptr is null. | STRING |
| HIGH | angr/state_plugins/heap/heap_ptmalloc.py | 291 | :returns: a pointer to the base of the associated heap chunk, or None if ptr is null | STRING |
| HIGH | angr/analyses/typehoon/simple_solver.py | 1509 | a <:b && b <: a ==> a == b | STRING |
| HIGH | angr/analyses/reaching_definitions/engine_vex.py | 267 | l.debug("Memory address undefined, ins_addr = %#x.", self.ins_addr) | CODE |
| HIGH | angr/analyses/reaching_definitions/engine_vex.py | 484 | l.debug("Memory address undefined, ins_addr = %#x.", self.ins_addr) | CODE |
| HIGH | angr/analyses/decompiler/region_identifier.py | 340 | # not dominate its latching nodes, so the natural loop is undefined; slice from the head to the latching | COMMENT |
| HIGH | angr/analyses/decompiler/structured_codegen/c.py | 1066 | set(name_to_structtypes.keys()) # type: ignore[possibly-undefined] | CODE |
| HIGH | angr/analyses/decompiler/structured_codegen/go.py | 1026 | set(name_to_structtypes.keys()) # type: ignore[possibly-undefined] | CODE |
| HIGH | …r/analyses/decompiler/ccall_rewriters/rewriter_base.py | 338 | adc: ``argL + argR <u argL || argL + argR + oldC <u argL + argR``; sbb: ``argL <u argR || oldC && argL == argR`` | STRING |
| HIGH | …r/analyses/decompiler/ccall_rewriters/rewriter_base.py | 338 | adc: ``argL + argR <u argL || argL + argR + oldC <u argL + argR``; sbb: ``argL <u argR || oldC && argL == argR`` | STRING |
| HIGH | …tions/invert_negated_logical_conjuction_disjunction.py | 15 | NAME = "!(A && B) => A || B; !(A || B) => A && B" | CODE |
| HIGH | …tions/invert_negated_logical_conjuction_disjunction.py | 15 | NAME = "!(A && B) => A || B; !(A || B) => A && B" | CODE |
| HIGH | angr/analyses/decompiler/counters/boolean_counter.py | 16 | In the case of: `if (a || (b && c))`, it will count 2 Boolean operators. | STRING |
| HIGH | angr/analyses/s_reaching_definitions/s_rda_model.py | 178 | # --- reconcile extern (used-but-undefined) definitions to match a full rebuild --- | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | native/clarirs-core/src/cache.rs | 61 | /// this cache stores weak references to the AST nodes; the value is a | COMMENT |
| LOW | native/clarirs-core/src/algorithms/canonicalize.rs | 1 | #![allow(clippy::mutable_key_type)] | COMMENT |
| LOW | native/clarirs-core/src/algorithms/canonicalize.rs | 21 | /// let ast2 = ctx.add(&ctx.bvs("a", 64)?, &ctx.bvs("b", 64)?)?; | COMMENT |
| LOW | native/clarirs-core/src/algorithms/canonicalize.rs | 41 | /// | COMMENT |
| LOW | native/clarirs-core/src/algorithms/excavate_ite.rs | 21 | &self.context().excavate_ite_cache, | COMMENT |
| LOW | native/clarirs-core/src/algorithms/walk.rs | 1 | use crate::cache::Cache; | COMMENT |
| LOW | native/clarirs-core/src/solver_mixins/model_cache.rs | 81 | /// | COMMENT |
| LOW | native/clarirs-core/src/solver_mixins/replacement.rs | 1 | use std::collections::HashMap; | COMMENT |
| LOW | native/clarirs-core/src/solver/hybrid.rs | 1 | use std::collections::BTreeSet; | COMMENT |
| LOW | native/clarirs-core/src/solver/mod.rs | 61 | COMMENT | |
| LOW | native/clarirs-z3/src/solver.rs | 541 | COMMENT | |
| LOW | native/clarirs-vsa/src/strided_interval.rs | 3621 | #[test] | COMMENT |
| LOW | native/unicornlib/log.c | 21 | #include "log.h" | COMMENT |
| LOW | native/unicornlib/sim_unicorn.hpp | 1 | #ifndef SIM_UNICORN_HPP | COMMENT |
| LOW | native/unicornlib/sim_unicorn.hpp | 601 | // List of all memory writes and their taint status | COMMENT |
| LOW | native/unicornlib/unicorn_dynamic.c | 1 | #include <stdbool.h> | COMMENT |
| LOW | native/unicornlib/log.h | 21 | COMMENT | |
| LOW | native/unicornlib/log.h | 61 | void logLog(enum llevel_t ll, const char *fn, int ln, bool perr, const char *fmt, ...) | COMMENT |
| LOW | native/unicornlib/sim_unicorn.cpp | 1 | #define __STDC_FORMAT_MACROS 1 | COMMENT |
| LOW | native/unicornlib/sim_unicorn.cpp | 221 | // and it got split into multiple parts. unicorn will only call this hook for the | COMMENT |
| LOW | native/angr/src/cfg_graph.rs | 1 | //! Packed, segmented storage for the whole-program CFG graph (`CFGModel.graph`). | COMMENT |
| LOW | native/angr/src/claripy/ast/bool.rs | 321 | #[pyfunction(name = "false")] | COMMENT |
| LOW | native/angr/src/claripy/ast/bool.rs | 421 | COMMENT | |
| LOW | native/angr/src/claripy/ast/base.rs | 201 | match max_depth { | COMMENT |
| LOW | native/angr/src/claripy/ast/repr.rs | 1 | //! Human-readable rendering of claripy ASTs. | COMMENT |
| LOW | native/angr/src/ailment/vex_ffi.rs | 1 | //! Raw FFI mirrors of the libVEX C structures, plus runtime resolution of | COMMENT |
| LOW | native/angr/src/ailment/vex_ffi.rs | 501 | /// the converter; we only declare the prefix we read. Because `vex_lift` | COMMENT |
| LOW | native/angr/src/ailment/ail_stmt.rs | 1 | //! Fat-enum design for AIL Statements. | COMMENT |
| LOW | native/angr/src/ailment/ail_stmt.rs | 761 | COMMENT | |
| LOW | native/angr/src/ailment/ail_stmt.rs | 781 | /// compared via ``AilExpression::matches`` rather than ``likes``, | COMMENT |
| LOW | native/angr/src/ailment/ail_stmt.rs | 1881 | COMMENT | |
| LOW | native/angr/src/ailment/tags.rs | 1 | //! Tags storage for AIL objects. | COMMENT |
| LOW | native/angr/src/ailment/const_value.rs | 101 | Self::Float(v) => format!("{}", v), | COMMENT |
| LOW | native/angr/src/ailment/enums.rs | 461 | 8 => Self::CAS, | COMMENT |
| LOW | native/angr/src/ailment/mod.rs | 101 | /// | COMMENT |
| LOW | native/angr/src/ailment/mod.rs | 121 | /// Const-generic parameters may only be integers, ``bool`` or ``char`` | COMMENT |
| LOW | native/angr/src/ailment/mod.rs | 161 | // --------------------------------------------------------------------------- | COMMENT |
| LOW | native/angr/src/ailment/mod.rs | 181 | /// - **Well-distributed** -- Python uses the result as a dict / set | COMMENT |
| LOW | native/angr/src/ailment/ail_expr.rs | 1 | //! ``AilExpression`` fat-enum + single ``Expression`` pyclass. | COMMENT |
| LOW | native/angr/src/ailment/ail_expr.rs | 61 | } | COMMENT |
| LOW | native/angr/src/ailment/ail_expr.rs | 161 | // Variant payload | COMMENT |
| LOW | native/angr/src/ailment/ail_expr.rs | 341 | }, | COMMENT |
| LOW | native/angr/src/ailment/ail_expr.rs | 421 | COMMENT | |
| LOW | native/angr/src/ailment/ail_expr.rs | 561 | COMMENT | |
| LOW | native/angr/src/ailment/ail_expr.rs | 581 | /// ``category`` so callers keep passing the same shape they always did | COMMENT |
| LOW | native/angr/src/ailment/ail_expr.rs | 741 | /// ``vvar`` is a ``VirtualVariable`` AilExpression (or ``None``). | COMMENT |
| LOW | native/angr/src/ailment/ail_expr.rs | 761 | pub struct AilExpression { | COMMENT |
| LOW | native/angr/src/ailment/ail_expr.rs | 1141 | e.header.depth = e.compute_depth(); | COMMENT |
| LOW | native/angr/src/ailment/ail_expr.rs | 1161 | } | COMMENT |
| LOW | native/angr/src/ailment/ail_expr.rs | 2021 | pub fn cached_hash_or_compute(&self) -> i64 { | COMMENT |
| LOW | native/angr/src/ailment/ail_expr.rs | 2041 | /// Children are compared under the *same* `MODE`. That is what makes | COMMENT |
| LOW | native/angr/src/ailment/ail_expr.rs | 2561 | /// Structural-with-identity equality. Two expressions ``likes`` each | COMMENT |
| LOW | native/angr/src/ailment/ail_expr.rs | 2581 | pub fn likes(&self, other: &AilExpression) -> bool { | COMMENT |
| LOW | native/angr/src/ailment/ail_expr.rs | 2601 | /// classes declare ``matches = likes`` and only a handful override. | COMMENT |
| LOW | native/angr/src/ailment/ail_expr.rs | 5201 | // --------------------------------------------------------------------------- | COMMENT |
| LOW | native/angr/src/ailment/ail_expr.rs | 5401 | // --------------------------------------------------------------------------- | COMMENT |
| LOW | native/angr/src/ailment/vexop.rs | 1 | //! Full Rust port of `angr.engines.vex.claripy.irop.vexop_to_simop` (the | COMMENT |
| LOW | native/angr/src/ailment/convert_vex.rs | 1 | //! Rust port of `angr.ailment.converter_vex` (the VEX -> AIL converter). | COMMENT |
| LOW | native/angr/src/ailment/convert_vex.rs | 341 | let name: Option<String> = res.extract()?; | COMMENT |
| LOW | tests/procedures/libc/test_string.py | 761 | s.add_constraints(cm == 0) | COMMENT |
| 103 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/analyses/decompiler/test_structured_codegen.py | 469 | def _set_returnty(self, returnty) -> None: | CODE |
| LOW | angr/codenode.py | 67 | def set_owner(self, func) -> None: | CODE |
| LOW | angr/procedures/definitions/__init__.py | 248 | def set_prototype(self, name, proto: SimTypeFunction) -> None: | CODE |
| LOW | angr/procedures/definitions/__init__.py | 257 | def set_prototypes(self, protos: dict[str, SimTypeFunction]) -> None: | CODE |
| LOW | angr/procedures/definitions/__init__.py | 651 | def set_prototype(self, abi: str, name: str, proto: SimTypeFunction) -> None: # type: ignore | CODE |
| LOW | angr/procedures/definitions/__init__.py | 662 | def set_prototypes(self, abi: str, protos: dict[str, SimTypeFunction]) -> None: # type: ignore | CODE |
| LOW | angr/ailment/_deepcopy.py | 36 | __all__ = [ | CODE |
| LOW | angr/ailment/converter_vex.py | 5 | __all__ = ["VEXIRSBConverter"] | CODE |
| LOW | angr/ailment/tagged_object.py | 94 | __all__ = ["TagDict", "TaggedObject"] | CODE |
| LOW | angr/ailment/statement.py | 262 | __all__ = [ | CODE |
| LOW | angr/ailment/__init__.py | 64 | __all__ = [ | CODE |
| LOW | angr/ailment/block.py | 7 | __all__ = ["Block"] | CODE |
| LOW | angr/ailment/expression.py | 714 | __all__ = [ | CODE |
| LOW | angr/ailment/manager.py | 5 | __all__ = ["Manager"] | CODE |
| LOW | angr/misc/telemetry.py | 56 | __all__ = ["Status", "StatusCode", "get_current_span", "get_tracer"] | CODE |
| LOW | angr/angrdb/serializers/funcs.py | 167 | def _set_cfg_node_function_addresses(cfg_model, func_addr: int, block_addrs) -> None: | CODE |
| LOW | angr/go/knowledge_plugins/__init__.py | 7 | __all__ = ["GoGlobals", "GoSignatures", "GoTypes"] | CODE |
| LOW | angr/go/knowledge_plugins/go_signatures.py | 627 | def set_closure_context(self, addr: int, type_str: str) -> None: | CODE |
| LOW | angr/go/analyses/runtime_globals.py | 199 | __all__ = [ | CODE |
| LOW | angr/go/analyses/block_scan.py | 247 | __all__ = [ | CODE |
| LOW | angr/go/optimization_passes/boxing_rewriter.py | 887 | def _set_result_type(self, call: Call, type_name: str, arg_type: str | None = None) -> None: | CODE |
| LOW | angr/go/optimization_passes/runtime_rewriter.py | 367 | def _set_prototype(self, call: Call, args: list[SimType | None], returnty: SimType | None) -> None: | CODE |
| LOW | angr/go/optimization_passes/string_compares.py | 375 | def _settle_constant_branches(self, block: Block, target: Block) -> None: | CODE |
| LOW | angr/go/optimization_passes/atomic_rewriter.py | 706 | def set_prototype(self, call: Call) -> None: | CODE |
| LOW | angr/rust/mixins/cfg_transformation_mixin.py | 6 | __all__ = ["CFGTransformationMixin"] | CODE |
| LOW | angr/rust/mixins/dfa_mixin.py | 6 | __all__ = ["DFAMixin"] | CODE |
| LOW | angr/rust/mixins/ssa_variable_mixin.py | 6 | __all__ = ["SSAVariableMixin"] | CODE |
| LOW | angr/rust/mixins/srda_mixin.py | 6 | __all__ = ["SRDAMixin"] | CODE |
| LOW | angr/rust/mixins/__init__.py | 6 | __all__ = [ | CODE |
| LOW | angr/rust/mixins/cfa_mixin.py | 6 | __all__ = ["CFAMixin"] | CODE |
| LOW | angr/rust/utils/ail.py | 17 | __all__ = [ | CODE |
| LOW | angr/rust/knowledge_plugins/__init__.py | 10 | __all__ = [ | CODE |
| LOW | angr/rust/analyses/rust_calling_convention/__init__.py | 7 | __all__ = [ | CODE |
| LOW | …gr/rust/optimization_passes/combo_register_rewriter.py | 6 | __all__ = ["ComboRegisterRewriter"] | CODE |
| LOW | angr/rust/optimization_passes/utils.py | 13 | __all__ = [ | CODE |
| LOW | angr/rust/optimization_passes/ret_expr_rewriter.py | 6 | __all__ = ["RetExprRewriter"] | CODE |
| LOW | angr/utils/json_utils.py | 34 | __all__ = ["json_decode", "json_encode"] | CODE |
| LOW | angr/mcp/__init__.py | 57 | __all__ = [ | CODE |
| LOW | …ge/memory_mixins/paged_memory/pages/symbolic_bitmap.py | 81 | def set_range(self, start: int, stop: int) -> None: | CODE |
| LOW | angr/knowledge_plugins/patterns.py | 165 | def set_enabled(self, name: str, enabled: bool) -> None: | CODE |
| LOW | angr/knowledge_plugins/comments.py | 121 | def set_kind(self, addr: int, kind: CommentKind | None) -> None: | CODE |
| LOW | angr/knowledge_plugins/cfg/spilling_cfg.py | 1570 | def set_rtdb(self, rtdb: RuntimeDb | None) -> None: | CODE |
| LOW | angr/knowledge_plugins/cfg/types.py | 16 | __all__ = ["CFGENODE_K", "CFGNODE_K", "CFG_ADDR_TYPES", "SOOTNODE_K", "K"] | CODE |
| LOW | angr/knowledge_plugins/variables/variable_manager.py | 1468 | def set_unified_variable(self, variable: SimVariable, unified: SimVariable) -> None: | CODE |
| LOW | angr/knowledge_plugins/variables/variable_manager.py | 1596 | def set_global_manager(self, flavor: str | None, manager: VariableManagerInternal) -> None: | CODE |
| LOW | angr/knowledge_plugins/rtdb/__init__.py | 5 | __all__ = ["RuntimeDb"] | CODE |
| LOW | angr/knowledge_plugins/functions/soot_function.py | 472 | def update_func_block_count(self) -> None: | CODE |
| LOW | angr/knowledge_plugins/functions/function_manager.py | 1456 | def set_function_returning(self, addr: K, v: bool | None) -> None: | CODE |
| LOW | angr/knowledge_plugins/functions/function_manager.py | 1511 | def set_func_block_count(self, addr: K, count: int) -> None: | CODE |
| LOW | angr/knowledge_plugins/functions/function_manager.py | 1553 | def set_from_signature(self, addr: K, from_signature: str | None) -> None: | CODE |
| LOW | angr/knowledge_plugins/functions/function.py | 577 | def set_prototype_source(self, flavor: str | None, source: PrototypeSource) -> None: | CODE |
| LOW | angr/knowledge_plugins/functions/function.py | 848 | def set_edge_outside(self, src: CodeNode, dst: CodeNode, outside: bool) -> None: | CODE |
| LOW | angr/knowledge_plugins/functions/function.py | 856 | def _set_edge_confirmed(self, src: int, dst: int, confirmed: bool) -> None: | CODE |
| LOW | angr/knowledge_plugins/functions/function.py | 923 | def set_edge_confirmed(self, src: CodeNode, dst: CodeNode, confirmed: bool) -> None: | CODE |
| LOW | angr/knowledge_plugins/functions/function.py | 1292 | def _set_legacy_state(self, state: dict) -> None: | CODE |
| LOW | angr/knowledge_plugins/functions/function.py | 1741 | def update_func_block_count(self) -> None: | CODE |
| LOW | angr/engines/__init__.py | 38 | __all__ = [ | CODE |
| LOW | angr/engines/pcode/emulate.py | 162 | def _set_value(self, varnode: Varnode, value: BV) -> None: | CODE |
| LOW | angr/engines/ail/__init__.py | 6 | __all__ = [ | CODE |
| LOW | angr/state_plugins/inspect.py | 297 | def _set_inspect_attrs(self, **kwargs: dict[str, Any]) -> None: | CODE |
| 58 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | corpus_tests/test_corpus.py | 56 | except Exception: # pylint:disable=broad-exception-caught | CODE |
| LOW | corpus_tests/README.md | 127 | except Exception as e: | CODE |
| LOW | tests/common.py | 183 | except Exception: # pylint:disable=broad-exception-caught | CODE |
| LOW | tests/common.py | 352 | except Exception: # pylint:disable=broad-exception-caught | CODE |
| LOW | tests/test_calling_conventions.py | 353 | except Exception as e: # pylint: disable=broad-exception-caught | CODE |
| LOW⚡ | tests/ailment/test_irsb.py | 266 | except Exception: | CODE |
| LOW⚡ | tests/ailment/test_irsb.py | 270 | except Exception: | CODE |
| LOW⚡ | tests/ailment/test_irsb.py | 279 | except Exception: | CODE |
| LOW⚡ | tests/ailment/test_irsb.py | 285 | except Exception: | CODE |
| LOW | tests/ailment/test_irsb.py | 346 | except Exception: | CODE |
| LOW | tests/knowledge_plugins/cfg/test_cfg_graph.py | 417 | except Exception as ex: # pylint:disable=broad-exception-caught | CODE |
| MEDIUM | tests/knowledge_plugins/cfg/test_cfg_graph.py | 412 | def reader(): | CODE |
| LOW | …sts/analyses/decompiler/test_known_patterns_library.py | 830 | except Exception: # pylint:disable=broad-except | CODE |
| LOW⚡ | tests/analyses/decompiler/test_outliner.py | 266 | except Exception: # pylint:disable=broad-except | CODE |
| LOW | tests/analyses/decompiler/test_outliner.py | 285 | except Exception: # pylint:disable=broad-except | CODE |
| LOW | tests/analyses/decompiler/test_outliner.py | 312 | except Exception: # pylint:disable=broad-except | CODE |
| LOW | tests/analyses/decompiler/test_outliner.py | 343 | except Exception: # pylint:disable=broad-except | CODE |
| LOW | tests/analyses/decompiler/test_outliner.py | 358 | except Exception: # pylint:disable=broad-except | CODE |
| LOW | angr/llm_client.py | 180 | except Exception as ex: # pylint:disable=broad-exception-caught | CODE |
| LOW | angr/__main__.py | 266 | except Exception as e: # pylint:disable=broad-exception-caught | CODE |
| LOW | angr/__main__.py | 462 | except Exception as e: # pylint:disable=broad-exception-caught | CODE |
| LOW | angr/procedures/definitions/parse_glibc.py | 58 | except Exception as ex: # pylint: disable=broad-exception-caught | CODE |
| LOW⚡ | angr/misc/bug_report.py | 50 | except Exception as e: # pylint: disable=broad-except | CODE |
| MEDIUM⚡ | angr/misc/bug_report.py | 51 | print(f"An error occurred importing {m}: {e}") | CODE |
| LOW⚡ | angr/misc/bug_report.py | 57 | except Exception: # pylint: disable-broad-except | CODE |
| LOW | angr/misc/bug_report.py | 83 | except Exception: # pylint: disable=broad-except | CODE |
| LOW | angr/misc/bug_report.py | 99 | except Exception as e: # pylint: disable=broad-except | CODE |
| LOW | angr/misc/bug_report.py | 105 | except Exception as e: # pylint: disable=broad-except | CODE |
| LOW | angr/angrdb/db.py | 64 | except Exception as ex: | CODE |
| LOW | angr/angrdb/db.py | 74 | except Exception: | CODE |
| LOW | angr/angrdb/serializers/structured_code.py | 105 | except Exception: # pylint:disable=broad-exception-caught | CODE |
| LOW | angr/go/typehoon/hints.py | 52 | except Exception: # pylint:disable=broad-exception-caught | CODE |
| LOW | angr/go/typehoon/hints.py | 108 | except Exception: # pylint:disable=broad-exception-caught | CODE |
| LOW | angr/go/utils/multiword.py | 84 | except Exception: # pylint:disable=broad-exception-caught | CODE |
| LOW | angr/go/utils/types.py | 54 | except Exception: # pylint:disable=broad-exception-caught | CODE |
| LOW | angr/go/knowledge_plugins/go_types.py | 36 | except Exception as e: # pylint:disable=broad-exception-caught | CODE |
| LOW | angr/go/knowledge_plugins/go_types.py | 78 | except Exception as e: # pylint:disable=broad-exception-caught | CODE |
| LOW | angr/go/knowledge_plugins/go_signatures.py | 370 | except Exception as e: # pylint:disable=broad-exception-caught | CODE |
| LOW | angr/go/knowledge_plugins/go_signatures.py | 622 | except Exception: # pylint:disable=broad-exception-caught | CODE |
| LOW | angr/go/knowledge_plugins/go_signatures.py | 661 | except Exception: # pylint:disable=broad-exception-caught | CODE |
| LOW | angr/go/knowledge_plugins/go_globals.py | 40 | except Exception: # pylint:disable=broad-exception-caught | CODE |
| LOW | angr/go/knowledge_plugins/go_globals.py | 45 | except Exception: # pylint:disable=broad-exception-caught | CODE |
| LOW | angr/go/analyses/type_descriptors.py | 804 | except Exception: # pylint:disable=broad-exception-caught | CODE |
| LOW | angr/go/analyses/runtime_globals.py | 185 | except Exception: # pylint:disable=broad-exception-caught | CODE |
| LOW | angr/go/analyses/block_scan.py | 50 | except Exception: # pylint:disable=broad-exception-caught | CODE |
| LOW | angr/go/analyses/block_scan.py | 60 | except Exception: # pylint:disable=broad-exception-caught | CODE |
| LOW | angr/go/analyses/package_variables.py | 94 | except Exception: # pylint:disable=broad-exception-caught | CODE |
| LOW | angr/go/optimization_passes/builtin_rewriter.py | 808 | except Exception: # pylint:disable=broad-exception-caught | CODE |
| LOW | angr/go/optimization_passes/builtin_rewriter.py | 3109 | except Exception: # pylint:disable=broad-exception-caught | CODE |
| LOW | angr/go/optimization_passes/result_widener.py | 158 | except Exception: # pylint:disable=broad-exception-caught | CODE |
| LOW | angr/go/optimization_passes/result_widener.py | 251 | except Exception: # pylint:disable=broad-exception-caught | CODE |
| LOW | angr/go/optimization_passes/global_types.py | 85 | except Exception: # pylint:disable=broad-exception-caught | CODE |
| LOW | angr/go/optimization_passes/stack_inits.py | 774 | except Exception: # pylint:disable=broad-exception-caught | CODE |
| LOW | angr/go/optimization_passes/stack_inits.py | 796 | except Exception: # pylint:disable=broad-exception-caught | CODE |
| LOW | angr/go/optimization_passes/multi_value.py | 247 | except Exception: # pylint:disable=broad-exception-caught | CODE |
| LOW | angr/go/optimization_passes/multi_value.py | 305 | except Exception: # pylint:disable=broad-exception-caught | CODE |
| LOW | angr/go/optimization_passes/prototypes.py | 44 | except Exception: # pylint:disable=broad-exception-caught | CODE |
| LOW | angr/go/optimization_passes/closure_context.py | 44 | except Exception: # pylint:disable=broad-exception-caught | CODE |
| LOW | angr/go/optimization_passes/boxing_rewriter.py | 798 | except Exception: # pylint:disable=broad-exception-caught | CODE |
| LOW | angr/go/optimization_passes/boxing_rewriter.py | 880 | except Exception: # pylint:disable=broad-exception-caught | CODE |
| 62 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/common.py | 241 | CODE | |
| LOW | tests/exploration_techniques/test_tracer.py | 15 | CODE | |
| LOW | tests/exploration_techniques/test_tracer.py | 71 | CODE | |
| LOW | angr/callable.py | 30 | CODE | |
| LOW | angr/sim_type.py | 2617 | CODE | |
| LOW | angr/sim_manager.py | 73 | CODE | |
| LOW | angr/sim_manager.py | 281 | CODE | |
| LOW | angr/sim_manager.py | 381 | CODE | |
| LOW | angr/blade.py | 27 | CODE | |
| LOW | angr/factory.py | 239 | CODE | |
| LOW | angr/factory.py | 312 | CODE | |
| LOW | angr/factory.py | 336 | CODE | |
| LOW | angr/factory.py | 357 | CODE | |
| LOW | angr/sim_state.py | 98 | CODE | |
| LOW | angr/block.py | 205 | CODE | |
| LOW | angr/project.py | 130 | CODE | |
| LOW | angr/sim_procedure.py | 118 | CODE | |
| LOW | angr/go/typehoon/typehoon.py | 22 | CODE | |
| LOW | angr/go/analyses/type_descriptors.py | 122 | CODE | |
| LOW | angr/distributed/server.py | 29 | CODE | |
| LOW | angr/rust/typehoon/typehoon.py | 21 | CODE | |
| LOW | angr/exploration_techniques/spiller.py | 148 | CODE | |
| LOW | angr/exploration_techniques/loop_seer.py | 21 | CODE | |
| LOW | angr/exploration_techniques/tracer.py | 161 | CODE | |
| LOW | angr/simos/simos.py | 91 | CODE | |
| LOW | angr/storage/file.py | 183 | CODE | |
| LOW | angr/storage/memory_mixins/hex_dumper_mixin.py | 11 | CODE | |
| LOW | …memory_mixins/regioned_memory/regioned_memory_mixin.py | 44 | CODE | |
| LOW | …gr/knowledge_plugins/propagations/propagation_model.py | 32 | CODE | |
| LOW | angr/knowledge_plugins/propagations/states.py | 77 | CODE | |
| LOW | angr/knowledge_plugins/propagations/states.py | 353 | CODE | |
| LOW | angr/knowledge_plugins/propagations/states.py | 404 | CODE | |
| LOW | …/knowledge_plugins/key_definitions/live_definitions.py | 112 | CODE | |
| LOW | angr/knowledge_plugins/cfg/indirect_jump.py | 67 | CODE | |
| LOW | angr/knowledge_plugins/cfg/cfg_node.py | 77 | CODE | |
| LOW | angr/knowledge_plugins/cfg/cfg_node.py | 476 | CODE | |
| LOW | angr/knowledge_plugins/functions/function.py | 233 | CODE | |
| LOW | angr/engines/vex/lifter.py | 77 | CODE | |
| LOW | angr/engines/vex/heavy/heavy.py | 84 | CODE | |
| LOW | angr/engines/pcode/lifter.py | 637 | CODE | |
| LOW | angr/engines/pcode/lifter.py | 151 | CODE | |
| LOW | angr/engines/pcode/lifter.py | 461 | CODE | |
| LOW | angr/engines/pcode/lifter.py | 579 | CODE | |
| LOW | angr/engines/pcode/lifter.py | 1062 | CODE | |
| LOW | angr/engines/pcode/lifter.py | 1105 | CODE | |
| LOW | angr/state_plugins/unicorn_engine.py | 640 | CODE | |
| LOW | angr/state_plugins/solver.py | 376 | CODE | |
| LOW | angr/state_plugins/posix.py | 119 | CODE | |
| LOW | angr/analyses/reassembler.py | 1215 | CODE | |
| LOW | angr/analyses/vfg.py | 307 | CODE | |
| LOW | angr/analyses/complete_calling_conventions.py | 64 | CODE | |
| LOW | angr/analyses/typehoon/typehoon.py | 38 | CODE | |
| LOW | …r/analyses/variable_recovery/variable_recovery_fast.py | 94 | CODE | |
| LOW | …r/analyses/variable_recovery/variable_recovery_fast.py | 290 | CODE | |
| LOW | angr/analyses/variable_recovery/engine_ail.py | 47 | CODE | |
| LOW | …r/analyses/variable_recovery/variable_recovery_base.py | 202 | CODE | |
| LOW | angr/analyses/calling_convention/calling_convention.py | 122 | CODE | |
| LOW | angr/analyses/propagator/propagator.py | 44 | CODE | |
| LOW | angr/analyses/reaching_definitions/rd_state.py | 76 | CODE | |
| LOW | …/analyses/reaching_definitions/reaching_definitions.py | 51 | CODE | |
| 29 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/claripy/test_vsa_bv_ops.py | 779 | # Check if the range covers the expected min/max values | COMMENT |
| LOW | tests/claripy/test_vsa_bv_ops.py | 958 | # Check if values between intervals are included (precision loss) | COMMENT |
| LOW | tests/claripy/test_vsa_bv_ops.py | 1013 | # Check if at least some expected values are in the result | COMMENT |
| LOW | tests/analyses/test_ddg_global_var_dependencies.py | 56 | # Check if we are storing a constant to a variable with constant address | COMMENT |
| LOW | tests/analyses/test_ddg_global_var_dependencies.py | 61 | # Check if we are storing the specified constant to the specified variable address | COMMENT |
| LOW | tests/analyses/decompiler/test_decompiler.py | 5956 | # Check if Reference(reg_vvar) exists | STRING |
| LOW | angr/emulator.py | 101 | # Check if there is a breakpoint at the current address | COMMENT |
| LOW | angr/emulator.py | 106 | # Check if we've already executed the requested number of instructions | COMMENT |
| LOW | angr/procedures/linux_kernel/unlink.py | 17 | # Check if entity exists before attempting to unlink | COMMENT |
| LOW | angr/concretization_strategies/any_named.py | 19 | # Check if a variable already exists | COMMENT |
| LOW | angr/concretization_strategies/signed_add.py | 25 | # Check if negative argument | COMMENT |
| LOW | …ses/rust_calling_convention/rust_calling_convention.py | 241 | # Check if discriminant 0 has any concrete overflow value | COMMENT |
| LOW | angr/utils/graph.py | 130 | elif child not in finished: # Check if the child has not been finished | CODE |
| LOW | angr/utils/graph.py | 394 | self._reverse = reverse # Set it to True to generate a post-dominator tree. | CODE |
| LOW | angr/exploration_techniques/driller_core.py | 96 | # Check if the state is unsat even if we remove preconstraints. | COMMENT |
| LOW | angr/knowledge_plugins/functions/function_manager.py | 385 | # Check if spilled to LMDB | COMMENT |
| LOW | angr/knowledge_plugins/functions/function_manager.py | 474 | # Check if we need to evict (but not during loading) | COMMENT |
| LOW | angr/analyses/reassembler.py | 341 | # Check if the address points to a function by checking the plt of main binary | COMMENT |
| LOW | angr/analyses/reassembler.py | 603 | # Check if this is a reference to code | COMMENT |
| LOW | angr/analyses/vfg.py | 936 | # Check if this return is inside our pending returns list | COMMENT |
| LOW | angr/analyses/vfg.py | 943 | # Check if we have reached a fix-point | COMMENT |
| LOW | angr/analyses/disassembly.py | 325 | # Check if this is a number or an identifier. | COMMENT |
| LOW | angr/analyses/disassembly.py | 367 | # Check if we are inside braces or parentheses. Do not forget | COMMENT |
| LOW | angr/analyses/calling_convention/calling_convention.py | 1356 | # Check if this block has FP conversion ops (F64toI32S etc.) | COMMENT |
| LOW | angr/analyses/calling_convention/calling_convention.py | 1428 | # Check if callee has any double parameters | COMMENT |
| LOW | angr/analyses/calling_convention/calling_convention.py | 1552 | # Check if either half is passed individually to a callee | COMMENT |
| LOW | angr/analyses/calling_convention/calling_convention.py | 1991 | # Check if the value written to the return register comes from | COMMENT |
| LOW | angr/analyses/decompiler/clinic.py | 3077 | # Check if the callee returns a float type | COMMENT |
| LOW | angr/analyses/decompiler/ail_simplifier.py | 997 | # Check if the definition is an FP->FP widening (Conv(32F->64F)). | COMMENT |
| LOW | …decompiler/peephole_optimizations/concat_simplifier.py | 151 | # Check if we're extracting exactly the high part | COMMENT |
| LOW | …decompiler/peephole_optimizations/concat_simplifier.py | 192 | # Check if the mask extracts exactly the low part | COMMENT |
| LOW | …decompiler/peephole_optimizations/concat_simplifier.py | 236 | # Check if we're truncating to exactly the low part size | COMMENT |
| LOW | …decompiler/peephole_optimizations/concat_simplifier.py | 240 | # Check if we're truncating to less than the low part | COMMENT |
| LOW | angr/analyses/decompiler/structuring/phoenix.py | 811 | # Check if the while matcher would produce while(true): if the | COMMENT |
| LOW | …/analyses/decompiler/semantic_naming/boolean_naming.py | 65 | # Assign names to high-confidence boolean variables | COMMENT |
| LOW⚡ | …/analyses/decompiler/semantic_naming/boolean_naming.py | 86 | # Check if assigned a constant 0 or 1 | COMMENT |
| LOW⚡ | …/analyses/decompiler/semantic_naming/boolean_naming.py | 95 | # Check if assigned a comparison result | COMMENT |
| LOW⚡ | …/analyses/decompiler/semantic_naming/boolean_naming.py | 99 | # Check if assigned a logical operation result | COMMENT |
| LOW | …/analyses/decompiler/semantic_naming/boolean_naming.py | 187 | # Check if the source is a comparison | COMMENT |
| LOW | …compiler/semantic_naming/region_loop_counter_naming.py | 135 | # Check if this is a for-loop with an iterator | COMMENT |
| LOW | …compiler/semantic_naming/region_loop_counter_naming.py | 227 | # Check if the unified variable is already named | COMMENT |
| LOW | …lyses/decompiler/semantic_naming/call_result_naming.py | 165 | # Check if we have a naming rule for this function | COMMENT |
| LOW | …lyses/decompiler/semantic_naming/call_result_naming.py | 188 | # Check if we have a naming rule for this function | COMMENT |
| LOW | …/analyses/decompiler/semantic_naming/pointer_naming.py | 170 | # Check if one operand is a variable (the pointer) | COMMENT |
| LOW | angr/analyses/decompiler/semantic_naming/size_naming.py | 107 | # Check if we have size parameter info for this function | COMMENT |
| LOW | …lyses/decompiler/semantic_naming/array_index_naming.py | 91 | # Check if this is a Load with array-style addressing | COMMENT |
| LOW | angr/analyses/decompiler/semantic_naming/naming_base.py | 81 | # Check if variable already has a meaningful name (user-given, or from an earlier pattern) | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | native/angr/src/fuzzer/executor.rs | 65 | // Step 1: Copy the base state and run the apply function | COMMENT |
| LOW⚡ | native/angr/src/fuzzer/executor.rs | 73 | // Step 2: Get or create the engine (reuse across iterations) | COMMENT |
| LOW | native/angr/src/fuzzer/executor.rs | 145 | // Step 3: Handle the result | COMMENT |
| LOW | native/angr/src/fuzzer/executor.rs | 158 | // Step 4: Copy the edge map from edge_hitmap plugin to the observer to provide feedback | COMMENT |
| LOW | angr/keyed_region.py | 240 | # FIXME: we need to check if old_var still exists in the storage | COMMENT |
| LOW⚡ | angr/project.py | 184 | # Step 2: determine its CPU architecture, ideally falling back to CLE's guess | COMMENT |
| LOW⚡ | angr/project.py | 193 | # Step 3: Set some defaults and set the public and private properties | COMMENT |
| LOW⚡ | angr/project.py | 240 | # Step 4: determine the guest OS | COMMENT |
| LOW⚡ | angr/project.py | 250 | # Step 5: Set up the project's hubs | COMMENT |
| LOW⚡ | angr/project.py | 287 | # Step 7: Run OS-specific configuration | COMMENT |
| LOW⚡ | angr/project.py | 290 | # Step 8: LLM client (lazy-initialized from env vars on first access) | COMMENT |
| LOW | angr/project.py | 156 | # Step 1: Load the binary | COMMENT |
| LOW | angr/project.py | 276 | # Step 6: Register simprocedures as appropriate for library functions | COMMENT |
| LOW | angr/project.py | 347 | # Step 1: get the set of libraries we are allowed to use to resolve unresolved symbols | COMMENT |
| LOW | angr/project.py | 377 | # Step 2: Categorize every "import" symbol in each object. | COMMENT |
| LOW⚡ | angr/simos/javavm.py | 39 | # Step 1: find all native libs | COMMENT |
| LOW⚡ | angr/simos/javavm.py | 47 | # Step 2: determine and set the native SimOS | COMMENT |
| LOW⚡ | angr/simos/javavm.py | 68 | # Step 3: Match static JNI symbols from native libs | COMMENT |
| LOW⚡ | angr/simos/javavm.py | 75 | # Step 4: Allocate memory for the return hook | COMMENT |
| LOW⚡ | angr/simos/javavm.py | 80 | # Step 5: JNI interface functions | COMMENT |
| LOW | angr/storage/file.py | 275 | # Step 1: figure out a reasonable concrete size to use for the memory load | COMMENT |
| LOW⚡ | angr/engines/soot/engine.py | 378 | # Step 1: setup java callsite, but w/o storing arguments in memory | COMMENT |
| LOW⚡ | angr/engines/soot/engine.py | 381 | # Step 2: add JNI specific arguments to *args list | COMMENT |
| LOW⚡ | angr/engines/soot/engine.py | 400 | # Step 3: generate C prototype from java_method | COMMENT |
| LOW⚡ | angr/engines/soot/engine.py | 406 | # Step 3: create native invoke state | COMMENT |
| LOW | angr/analyses/calling_convention/fact_collector.py | 264 | # so we need to check if this register write is actually a no-op | COMMENT |
| LOW⚡ | angr/analyses/calling_convention/calling_convention.py | 1284 | # Step 1: merge 4-byte pairs that form doubles. | COMMENT |
| LOW⚡ | angr/analyses/calling_convention/calling_convention.py | 1290 | # Step 2: tag solitary 4-byte slots as floats when the function uses x87. | COMMENT |
| LOW⚡ | …compiler/semantic_naming/region_loop_counter_naming.py | 75 | # Step 1: Collect all LoopNodes from the region | COMMENT |
| LOW⚡ | …compiler/semantic_naming/region_loop_counter_naming.py | 78 | # Step 2: For each loop, identify the counter variable from iterator | COMMENT |
| LOW⚡ | …compiler/semantic_naming/region_loop_counter_naming.py | 81 | # Step 3: Assign names based on nesting depth | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | native/angr/src/fuzzer/executor.rs | 65 | // Step 1: Copy the base state and run the apply function | COMMENT |
| LOW⚡ | native/angr/src/fuzzer/executor.rs | 73 | // Step 2: Get or create the engine (reuse across iterations) | COMMENT |
| LOW | native/angr/src/fuzzer/executor.rs | 145 | // Step 3: Handle the result | COMMENT |
| LOW | native/angr/src/fuzzer/executor.rs | 158 | // Step 4: Copy the edge map from edge_hitmap plugin to the observer to provide feedback | COMMENT |
| LOW⚡ | angr/project.py | 184 | # Step 2: determine its CPU architecture, ideally falling back to CLE's guess | COMMENT |
| LOW⚡ | angr/project.py | 193 | # Step 3: Set some defaults and set the public and private properties | COMMENT |
| LOW⚡ | angr/project.py | 240 | # Step 4: determine the guest OS | COMMENT |
| LOW⚡ | angr/project.py | 250 | # Step 5: Set up the project's hubs | COMMENT |
| LOW⚡ | angr/project.py | 287 | # Step 7: Run OS-specific configuration | COMMENT |
| LOW⚡ | angr/project.py | 290 | # Step 8: LLM client (lazy-initialized from env vars on first access) | COMMENT |
| LOW | angr/project.py | 156 | # Step 1: Load the binary | COMMENT |
| LOW | angr/project.py | 276 | # Step 6: Register simprocedures as appropriate for library functions | COMMENT |
| LOW | angr/project.py | 347 | # Step 1: get the set of libraries we are allowed to use to resolve unresolved symbols | COMMENT |
| LOW | angr/project.py | 377 | # Step 2: Categorize every "import" symbol in each object. | COMMENT |
| LOW⚡ | angr/simos/javavm.py | 39 | # Step 1: find all native libs | COMMENT |
| LOW⚡ | angr/simos/javavm.py | 47 | # Step 2: determine and set the native SimOS | COMMENT |
| LOW⚡ | angr/simos/javavm.py | 68 | # Step 3: Match static JNI symbols from native libs | COMMENT |
| LOW⚡ | angr/simos/javavm.py | 75 | # Step 4: Allocate memory for the return hook | COMMENT |
| LOW⚡ | angr/simos/javavm.py | 80 | # Step 5: JNI interface functions | COMMENT |
| LOW | angr/storage/file.py | 275 | # Step 1: figure out a reasonable concrete size to use for the memory load | COMMENT |
| LOW⚡ | angr/engines/soot/engine.py | 378 | # Step 1: setup java callsite, but w/o storing arguments in memory | COMMENT |
| LOW⚡ | angr/engines/soot/engine.py | 381 | # Step 2: add JNI specific arguments to *args list | COMMENT |
| LOW⚡ | angr/engines/soot/engine.py | 400 | # Step 3: generate C prototype from java_method | COMMENT |
| LOW⚡ | angr/engines/soot/engine.py | 406 | # Step 3: create native invoke state | COMMENT |
| LOW⚡ | angr/analyses/calling_convention/calling_convention.py | 1284 | # Step 1: merge 4-byte pairs that form doubles. | COMMENT |
| LOW⚡ | angr/analyses/calling_convention/calling_convention.py | 1290 | # Step 2: tag solitary 4-byte slots as floats when the function uses x87. | COMMENT |
| LOW⚡ | …compiler/semantic_naming/region_loop_counter_naming.py | 75 | # Step 1: Collect all LoopNodes from the region | COMMENT |
| LOW⚡ | …compiler/semantic_naming/region_loop_counter_naming.py | 78 | # Step 2: For each loop, identify the counter variable from iterator | COMMENT |
| LOW⚡ | …compiler/semantic_naming/region_loop_counter_naming.py | 81 | # Step 3: Assign names based on nesting depth | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | tests/claripy/test_get_bytes.py | 247 | """Test get_byte and get_bytes with comprehensive bit patterns.""" | STRING |
| MEDIUM | tests/analyses/cfg/test_cfg_thumb_firmware.py | 23 | # In short, a very comprehensive high level test | COMMENT |
| MEDIUM | tests/analyses/decompiler/test_decompiler.py | 6270 | # No two structurally-identical struct definitions may be emitted (robust to struct renumbering). | STRING |
| MEDIUM | tests/analyses/decompiler/test_ccall_rewriting.py | 600 | # and the oracle share a model. Hardware-harness note: for LOGIC* ops, VEX's cc_dep1 is the | COMMENT |
| MEDIUM | angr/sim_state.py | 792 | # For AbstractMemory, we wanna utilize more information from VSA | COMMENT |
| LOW | angr/simos/javavm.py | 138 | # w/o JNI support, we can just use a blank state | COMMENT |
| LOW | angr/storage/memory_mixins/__init__.py | 227 | # create temporary values. we simply return a TOP value here. | COMMENT |
| LOW | angr/storage/memory_mixins/__init__.py | 248 | # create temporary values. we simply return a TOP value here. | COMMENT |
| LOW | angr/knowledge_plugins/functions/function.py | 2505 | # If a SimCC object is passed assume that this is sane and just use it | COMMENT |
| LOW | angr/state_plugins/trace_additions.py | 250 | # don't add constraints just add replacement | COMMENT |
| LOW | angr/analyses/veritesting.py | 528 | # if the cfg is cached, simply return the cached cfg | COMMENT |
| LOW | angr/analyses/reaching_definitions/engine_ail.py | 1007 | # TODO: can maybe be smarter about this. if we can determine that expr0 is never falsey, we can just return it, | COMMENT |
| LOW | …eaching_definitions/function_handler_library/string.py | 154 | # stub: just return the haystack pointer | COMMENT |
| LOW | angr/analyses/cfg/cfg_fast.py | 2626 | # if we can find one, just use it | COMMENT |
| LOW | angr/analyses/cfg/cfg_fast.py | 2752 | # we are out of the mapped memory range - just return | COMMENT |
| MEDIUM | angr/analyses/cfg/cfg_emulated.py | 2508 | # TODO: make this a real indirect jump resolver under the new paradigm | COMMENT |
| LOW | angr/analyses/cfg/cfg_emulated.py | 2754 | # We just use the ip, persistent registers, and jumpkind to initialize the original unsat state | COMMENT |
| LOW | angr/analyses/cfg/indirect_jump_resolvers/jumptable.py | 2453 | # if this AST has been initialized before, just use the cached addr | COMMENT |
| LOW | …mpiler/region_simplifiers/switch_cluster_simplifier.py | 442 | # just add it at the end | COMMENT |
| LOW | angr/analyses/decompiler/structuring/structurer_base.py | 657 | # we should use just add a break node | COMMENT |
| MEDIUM | …gr/analyses/decompiler/semantic_naming/orchestrator.py | 37 | # after structuring to leverage the structured LoopNode information. | COMMENT |
| LOW | …lyses/s_reaching_definitions/s_reaching_definitions.py | 157 | # just use all registers in the default calling convention because we don't know anything about | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | tests/analyses/decompiler/test_decompiler.py | 4702 | # In this version, true came with the function `get_charset_aliases`, compiled into the binary. | STRING |
| HIGH | angr/analyses/vfg.py | 1505 | # does not support. I'll create a terminating stub there | COMMENT |
| HIGH | angr/analyses/cfg/cfg_emulated.py | 2998 | # does not support. I'll create a terminating stub there | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | …erialization/test_decompilation_cache_serialization.py | 516 | dummy_key = (0xDEAD, "pseudocode") | CODE |
| LOW⚡ | …erialization/test_decompilation_cache_serialization.py | 525 | d[dummy_key] = dummy_cache | CODE |
| LOW⚡ | …erialization/test_decompilation_cache_serialization.py | 529 | assert dummy_key in d._spilled | CODE |
| LOW⚡ | …erialization/test_decompilation_cache_serialization.py | 530 | assert dummy_key not in d._unspillable | CODE |
| LOW⚡ | …erialization/test_decompilation_cache_serialization.py | 532 | back = d[dummy_key] | CODE |
| LOW | angr/utils/graph.py | 568 | vertices: list[Any] = [ContainerNode("placeholder")] | CODE |
| LOW | angr/utils/graph.py | 610 | vertices = [ContainerNode("placeholder")] | CODE |
| LOW⚡ | angr/analyses/proximity_graph.py | 148 | def __init__(self, dummy_value: str): | CODE |
| LOW⚡ | angr/analyses/proximity_graph.py | 150 | self.dummy_value = dummy_value | CODE |
| LOW⚡ | angr/analyses/proximity_graph.py | 154 | isinstance(other, UnknownProxiNode) and self.type_ == other.type_ and self.dummy_value == other.dummy_value | CODE |
| LOW⚡ | angr/analyses/proximity_graph.py | 158 | return hash((UnknownProxiNode, self.dummy_value)) | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | corpus_tests/README.md | 232 | -H "Authorization: Bearer <YOUR-TOKEN>" \ | CODE |
| HIGH | corpus_tests/README.md | 242 | -H "Authorization: Bearer <YOUR-TOKEN>" \ | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | angr/sim_type.py | 4087 | # Don't forget to update typedef types | COMMENT |
| MEDIUM | angr/procedures/libc/gets.py | 19 | "The use of gets in a program usually causes buffer overflows. You may want to adjust " | CODE |
| LOW | angr/engines/successors.py | 545 | # nuance: make sure to copy from the PREVIOUS state to the CURRENT one | COMMENT |
| LOW | angr/analyses/ddg.py | 1075 | # make sure to put it into the killing set | COMMENT |
| LOW | angr/analyses/ddg.py | 1134 | # make sure to put it into the killing set | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/engines/pcode/test_emulate.py | 577 | # TODO: Add tests for the following ops: | COMMENT |
| LOW | angr/engines/soot/statements/throw.py | 16 | # TODO: implement simprocedure to throw exception | COMMENT |
| LOW | angr/analyses/decompiler/block_similarity.py | 97 | # TODO: implement a check for when one is empty and other is jump. | COMMENT |
| LOW | …compiler/optimization_passes/return_duplicator_high.py | 54 | # TODO: implement a better check | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | angr/analyses/decompiler/known_patterns/finder.py | 2621 | # region has residue we cannot cut. A Jump is control-flow scaffolding | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | angr/analyses/decompiler/clinic.py | 2596 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | angr/exploration_techniques/tech_builder.py | 13 | def do_something(): | STRING |