angr/angr

19.1

Adjusted Score

19.1

Raw Score

100%

Time Factor

2026-08-28

Last Push

9.0K

Stars

Python

Language

359.0K

Lines of Code

1.6K

Files

6.3K

Pattern Hits

2026-08-29

Scan Date

0.05

HC Hit Rate

What These Metrics Mean

Adjusted Score: Primary synthetic code indicator. Raw score normalised per 1,000 lines of code and multiplied by the temporal discount factor. This is the definitive comparative metric — use it to rank repositories by AI authorship density.
Raw Score: The unmodified sum of all severity-weighted, context-multiplied pattern match scores before temporal discounting. Reflects the absolute signal strength independent of when the repository was last active.
Time Factor: The temporal discount multiplier (0–100%) applied to the raw score. Repositories last updated before ChatGPT's launch (Nov 2022) receive a 5% factor. Full signal is only assigned to repositories active in the post-adoption era (Jan 2024+).
Pattern Hits: Total count of individual pattern matches across all files and categories. A high hit count with a low score may indicate a very large codebase with isolated AI snippets; a low count with a high score indicates dense, concentrated AI signatures.
HC Hit Rate: High+Critical pattern hits per file, averaged across the repository. This orthogonal signal catches repositories where a few files are densely packed with high-severity AI tells — a strong indicator even when the normalised score appears moderate due to codebase size.
Lines of Code / Files: Total lines and files analysed. The scanner examines 94 file extensions. These denominators are used to normalise the score, enabling fair comparison between repositories of vastly different sizes.

Score History

This chart maps the temporal evolution of the adjusted synthetic code score across successive scan runs. An upward trajectory indicates ongoing incorporation of AI-generated code or expanding LLM-assisted scaffolding; a stable or declining trajectory may reflect active human refactoring, code removal, or the adoption of stricter authorship policies. The dashed secondary line (right axis) independently tracks total raw pattern hit count, which can diverge from the normalised score when codebase size changes significantly between scans.

Severity Breakdown

Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.

CRITICAL 30HIGH 44MEDIUM 165LOW 6031

Directory Score Breakdown

This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.

Pattern Findings

The scanner identified 6270 distinct pattern matches across 22 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.

Hyper-Verbose Identifiers2251 hits · 2246 pts

Severity	File	Line	Snippet	Context
LOW	tests/test_fuzzer.py	159	def test_fuzzer_mixed_inmem_corpus_ondisk_solutions(self):	STRING
LOW	tests/test_fuzzer.py	177	def test_fuzzer_mixed_ondisk_corpus_inmem_solutions(self):	STRING
LOW	tests/test_fuzzer.py	197	def test_havoc_mutator_config(self):	STRING
LOW	tests/test_fuzzer.py	221	def test_deterministic_mutator_finds_solution(self):	CODE
LOW	tests/test_fuzzer.py	246	def test_deterministic_mutator_no_crash(self):	CODE
LOW	tests/test_fuzzer.py	271	def test_deterministic_mutator_sequence(self):	CODE
LOW	tests/test_fuzzer.py	302	def test_tls_access_without_tls_is_crash(self):	CODE
LOW	tests/test_fuzzer.py	343	def test_symbolic_memory_visible_in_icicle(self):	CODE
LOW	tests/test_fuzzer.py	358	def test_concrete_libc_start_main_hook(self):	CODE
LOW	tests/test_fuzzer.py	395	def test_vuln_stacksmash_deterministic(self):	CODE
LOW	tests/common.py	59	def requires_binaries_private(func):	CODE
LOW	tests/common.py	151	def run_simple_unicorn_congruency_check(thing: Project \| bytes \| str, arch: str = "AMD64", depth: int = 1):	CODE
LOW	tests/common.py	175	def print_decompilation_result(dec):	CODE
LOW	tests/common.py	222	def load_project_with_scoped_cfg(	CODE
LOW	tests/common.py	308	def function_extents_from_eh_frame(proj: Project) -> dict[int, int]:	CODE
LOW	tests/common.py	415	def _merged_regions_with_sizes(addr_sizes: Iterable[tuple[int, int]]) -> list[tuple[int, int]]:	CODE
LOW	tests/test_calling_conventions.py	76	def test_microsoft_fastcall_large_arg(self):	CODE
LOW	tests/test_calling_conventions.py	247	def test_simcc_arg_locs_returnty_unresolved_simtyperef(self):	CODE
LOW⚡	tests/test_cli.py	166	def test_disassemble_specific_functions(self):	CODE
LOW⚡	tests/test_cli.py	172	def test_disassemble_function_by_address(self):	CODE
LOW⚡	tests/test_cli.py	179	def test_decompile_interactive_summary(self):	CODE
LOW⚡	tests/test_cli.py	189	def test_disassemble_interactive_summary(self):	CODE
LOW⚡	tests/test_cli.py	196	def test_decompile_missing_function_raises(self):	CODE
LOW⚡	tests/test_cli.py	201	def test_decompile_catch_exceptions_missing_function(self):	CODE
LOW⚡	tests/test_cli.py	209	def test_disassemble_missing_function(self):	CODE
LOW⚡	tests/test_cli.py	216	def test_decompile_no_decompilable_functions(self):	CODE
LOW⚡	tests/test_cli.py	247	def test_decompile_syntax_highlighting(self):	CODE
LOW⚡	tests/test_cli.py	257	def test_decompile_syntax_highlighting_multiple(self):	CODE
LOW⚡	tests/test_cli.py	266	def test_disassemble_base_addr(self):	CODE
LOW⚡	tests/test_cli.py	271	def test_disassemble_missing_address(self):	CODE
LOW⚡	tests/test_cli.py	278	def test_decompile_catch_exceptions_noninteractive(self):	CODE
LOW⚡	tests/test_cli.py	284	def test_decompile_catch_exceptions_error(self):	CODE
LOW⚡	tests/test_cli.py	294	def test_disassemble_catch_exceptions_error(self):	CODE
LOW⚡	tests/test_cli.py	314	def test_disassemble_catch_exceptions_noninteractive(self):	CODE
LOW⚡	tests/test_cli.py	320	def test_decompile_no_functions_noninteractive(self):	CODE
LOW⚡	tests/test_cli.py	326	def test_disassemble_no_functions_noninteractive(self):	CODE
LOW⚡	tests/test_cli.py	331	def test_decompile_syntax_highlighting_catch_exceptions(self):	CODE
LOW	tests/test_cli.py	148	def test_syntax_highlighting_no_colors_flag(self):	CODE
LOW	tests/test_cli.py	342	def test_blob_requires_required_args(self):	CODE
LOW	tests/test_cli.py	354	def test_disassemble_blob_loader_options(self):	CODE
LOW	tests/test_cli.py	383	def test_decompile_blob_loader_options(self):	CODE
LOW	tests/procedures/test_sim_procedure.py	63	def test_syscall_and_simprocedure(self):	CODE
LOW⚡	tests/procedures/test_syscall_none_prototype.py	24	def test_none_prototype_is_not_reported_as_present(self):	CODE
LOW⚡	tests/procedures/test_syscall_none_prototype.py	34	def test_real_prototype_still_present(self):	CODE
LOW⚡	tests/procedures/test_syscall_none_prototype.py	39	def test_get_none_prototype_syscall_does_not_crash(self):	CODE
LOW	tests/procedures/posix/test_getenv.py	44	def test_run_getenv_without_env(self):	CODE
LOW	tests/procedures/posix/test_getenv.py	58	def test_run_getenv_with_symbolic_env(self):	CODE
LOW	tests/procedures/libc/test_string.py	233	def test_strncmp_longer_limit(self):	CODE
LOW	tests/procedures/libc/test_string.py	278	def test_strncmp_find_prefix_unsat(self):	CODE
LOW	tests/procedures/libc/test_string.py	294	def test_strncmp_find_input_for_limit(self):	CODE
LOW	tests/procedures/libc/test_string.py	317	def test_strstr_conc_haystack_conc_needle(self):	CODE
LOW	tests/procedures/libc/test_string.py	331	def test_strstr_conc_haystack_sym_needle(self):	CODE
LOW	tests/procedures/libc/test_string.py	364	def test_strstr_sym_haystack_conc_needle(self):	CODE
LOW	tests/procedures/libc/test_string.py	393	def test_strstr_sym_haystack_sym_needle(self):	CODE
LOW	tests/procedures/libc/test_string.py	441	def test_strstr_inconsistency(self):	CODE
LOW	tests/procedures/libc/test_scanf.py	204	def test_scanf_simfile_string(self):	CODE
LOW	tests/procedures/linux_kernel/test_lseek.py	144	def test_lseek_symbolic_whence(self):	CODE
LOW	tests/ailment/test_expression.py	46	def test_rust_composite_return_deep_copy(self):	CODE
LOW	tests/ailment/test_expression.py	79	def test_combo_register_and_virtual_variable_accessors(self):	CODE
LOW	tests/ailment/test_expression.py	130	def test_rust_ail_value_expressions(self):	CODE
2191 more matches not shown…

Unused Imports2254 hits · 2115 pts

Severity	File	Line	Context
LOW	setup.py	2	CODE
LOW	native/angr/scripts/gen_vexop_names.py	12	CODE
LOW	corpus_tests/conftest.py	6	CODE
LOW	corpus_tests/test_corpus.py	6	CODE
LOW	tests/test_fuzzer.py	1	CODE
LOW	tests/common.py	1	CODE
LOW	tests/test_load_shellcode.py	2	CODE
LOW	tests/test_calling_conventions.py	3	CODE
LOW	tests/test_cli.py	3	CODE
LOW	tests/procedures/test_stub_procedure_args.py	3	CODE
LOW	tests/procedures/test_project_resolve_simproc.py	3	CODE
LOW	tests/procedures/test_sim_procedure.py	3	CODE
LOW	tests/procedures/test_syscall_none_prototype.py	3	CODE
LOW	tests/procedures/posix/test_getenv.py	4	CODE
LOW	tests/procedures/posix/test_sim_time.py	3	CODE
LOW	tests/procedures/posix/test_unlink.py	3	CODE
LOW	tests/procedures/posix/test_pwrite_pread.py	3	CODE
LOW	tests/procedures/posix/test_chroot.py	3	CODE
LOW	tests/procedures/libc/test_strcasecmp.py	3	CODE
LOW	tests/procedures/libc/test_string.py	3	CODE
LOW	tests/procedures/libc/test_sprintf.py	3	CODE
LOW	tests/procedures/libc/test_scanf.py	2	CODE
LOW	tests/procedures/libc/test_strtol.py	2	CODE
LOW	tests/procedures/libc/test_sscanf.py	2	CODE
LOW	tests/procedures/libc/test_fgets.py	3	CODE
LOW	tests/procedures/linux_kernel/test_lseek.py	2	CODE
LOW	tests/procedures/glibc/test_ctype_locale.py	3	CODE
LOW	tests/ailment/test_expression.py	2	CODE
LOW	tests/ailment/test_expression_markers.py	4	CODE
LOW	tests/ailment/test_statement_markers.py	8	CODE
LOW	tests/ailment/test_block_walker.py	1	CODE
LOW	tests/ailment/test_serialize.py	6	CODE
LOW	tests/ailment/test_hash_eq_contract.py	15	CODE
LOW	tests/ailment/test_irsb.py	2	CODE
LOW	tests/misc/test_hookset.py	3	CODE
LOW	tests/angrdb/test_angrdb_jumptables.py	2	CODE
LOW	tests/angrdb/test_angrdb_load_missing_binary.py	3	CODE
LOW	tests/types/test_enum_integration.py	5	CODE
LOW	tests/types/test_enum_types.py	5	CODE
LOW	tests/types/test_simtypefunction.py	3	CODE
LOW	tests/types/test_enum_inference.py	3	CODE
LOW	tests/types/test_types.py	3	CODE
LOW	tests/llm/test_project_llm.py	2	CODE
LOW	tests/llm/test_llm_client.py	2	CODE
LOW	tests/llm/test_decompiler_llm.py	2	CODE
LOW	tests/serialization/test_vault.py	2	CODE
LOW	tests/serialization/test_pickle.py	3	CODE
LOW	tests/serialization/test_db.py	3	CODE
LOW	…erialization/test_decompilation_cache_serialization.py	3	CODE
LOW	tests/serialization/test_serialization.py	3	CODE
LOW	tests/utils/test_library.py	1	CODE
LOW	tests/utils/test_bits.py	2	CODE
LOW	tests/utils/test_mp_stdio.py	16	CODE
LOW	tests/utils/test_segment_list.py	1	CODE
LOW	tests/utils/test_balancer.py	2	CODE
LOW	tests/utils/test_doms.py	2	CODE
LOW	tests/utils/test_ins_addr_list.py	2	CODE
LOW	tests/utils/test_graph.py	3	CODE
LOW	tests/utils/test_constants.py	3	CODE
LOW	tests/exploration_techniques/test_driller_core.py	3	CODE
2194 more matches not shown…

Deep Nesting1057 hits · 926 pts

Severity	File	Line	Context
LOW	tests/common.py	75	CODE
LOW	tests/common.py	222	CODE
LOW	tests/common.py	308	CODE
LOW	tests/serialization/test_db.py	668	CODE
LOW	tests/analyses/test_s_liveness.py	44	CODE
LOW	tests/analyses/test_s_liveness.py	62	CODE
LOW	tests/analyses/test_variablerecovery.py	73	CODE
LOW	tests/analyses/test_vfg.py	183	CODE
LOW	tests/analyses/test_typehoon_constraint_subset.py	21	CODE
LOW	tests/analyses/test_typehoon.py	596	CODE
LOW	tests/analyses/test_callsite_maker.py	21	CODE
LOW	…lyses/reaching_definitions/test_reachingdefinitions.py	118	CODE
LOW	…ts/analyses/decompiler/test_variable_nondeterminism.py	69	CODE
LOW	tests/analyses/decompiler/test_outliner.py	21	CODE
LOW	tests/analyses/decompiler/test_outliner.py	87	CODE
LOW	tests/analyses/decompiler/test_outliner.py	232	CODE
LOW	tests/analyses/decompiler/test_outliner.py	272	CODE
LOW	…s/analyses/decompiler/test_dephication_interference.py	31	CODE
LOW	…s/analyses/decompiler/test_dephication_interference.py	57	CODE
LOW	…s/analyses/decompiler/test_dephication_interference.py	65	CODE
LOW	docs/conf.py	156	CODE
LOW	angr/state_hierarchy.py	206	CODE
LOW	angr/callable.py	129	CODE
LOW	angr/sim_type.py	3870	CODE
LOW	angr/sim_type.py	4010	CODE
LOW	angr/sim_type.py	4320	CODE
LOW	angr/sim_type.py	69	CODE
LOW	angr/sim_type.py	175	CODE
LOW	angr/sim_type.py	207	CODE
LOW	angr/sim_type.py	1946	CODE
LOW	angr/sim_type.py	2587	CODE
LOW	angr/sim_manager.py	675	CODE
LOW	angr/sim_manager.py	695	CODE
LOW	angr/blade.py	120	CODE
LOW	angr/blade.py	239	CODE
LOW	angr/blade.py	341	CODE
LOW	angr/calling_conventions.py	849	CODE
LOW	angr/calling_conventions.py	1047	CODE
LOW	angr/calling_conventions.py	1636	CODE
LOW	angr/calling_conventions.py	1675	CODE
LOW	angr/calling_conventions.py	1703	CODE
LOW	angr/calling_conventions.py	1743	CODE
LOW	angr/calling_conventions.py	1792	CODE
LOW	angr/calling_conventions.py	1883	CODE
LOW	angr/calling_conventions.py	1922	CODE
LOW	angr/calling_conventions.py	1972	CODE
LOW	angr/calling_conventions.py	2020	CODE
LOW	angr/calling_conventions.py	2188	CODE
LOW	angr/calling_conventions.py	2281	CODE
LOW	angr/calling_conventions.py	2311	CODE
LOW	angr/calling_conventions.py	2376	CODE
LOW	angr/calling_conventions.py	2418	CODE
LOW	angr/calling_conventions.py	2466	CODE
LOW	angr/tablespecs.py	18	CODE
LOW	angr/sim_state.py	94	CODE
LOW	angr/sim_state.py	756	CODE
LOW	angr/keyed_region.py	389	CODE
LOW	angr/keyed_region.py	500	CODE
LOW	angr/block.py	205	CODE
LOW	angr/__main__.py	180	CODE
997 more matches not shown…

Hallucination Indicators30 hits · 310 pts

Severity	File	Line	Snippet	Context
CRITICAL	native/angr/src/icicle.rs	571	self.vm.cpu.mem.modified.iter().copied().collect()	CODE
CRITICAL	tests/exploration_techniques/test_spiller.py	42	claripy.ast.bv.BV._hash_cache.clear()	CODE
CRITICAL	tests/exploration_techniques/test_oppologist.py	19	angr.engines.vex.claripy.irop.operations.clear()	CODE
CRITICAL	tests/exploration_techniques/test_oppologist.py	28	angr.engines.vex.claripy.irop.operations.update(old_ops)	CODE
CRITICAL⚡	tests/analyses/decompiler/test_decompiler.py	806	result = angr.analyses.decompiler.structured_codegen.c.CConstant.str_to_c_str(_input)	CODE
CRITICAL	angr/procedures/java_jni/__init__.py	48	return self.state.project.loader.extern_object.allocate(size=size)	CODE
CRITICAL	angr/simos/linux.py	435	self.project.loader.extern_object.memory.pack_word(	CODE
CRITICAL	angr/storage/memory_mixins/name_resolution_mixin.py	33	"cc_dep1", angr.engines.vex.claripy.ccall._get_flags(self.state)	CODE
CRITICAL	angr/storage/memory_mixins/name_resolution_mixin.py	39	self.store("cc_dep1", angr.engines.vex.claripy.ccall._get_flags(self.state))	CODE
CRITICAL	angr/knowledge_plugins/cfg/cfg_model.py	1076	plt_entry = self.project.loader.main_object.reverse_plt.get(irsb_addr, None)	CODE
CRITICAL⚡	angr/knowledge_plugins/variables/variable_manager.py	796	reg_ = self.manager._kb._project.arch.registers.get(reg)	CODE
CRITICAL	angr/knowledge_plugins/functions/function.py	635	b = self._function_manager._kb._project.factory.block(addr)	CODE
CRITICAL	angr/knowledge_plugins/functions/function.py	645	b = self._function_manager._kb._project.factory.block(addr)	CODE
CRITICAL	angr/state_plugins/unicorn_engine.py	580	if not h.setup_imports(unicorn.unicorn_py3.unicorn.uclib._name.encode()):	CODE
CRITICAL	angr/state_plugins/jni_references.py	48	opaque_ref = self.state.project.loader.extern_object.allocate()	CODE
CRITICAL	angr/analyses/bindiff.py	1045	for name, addr in self.project.loader.main_object.plt.items():	CODE
CRITICAL	angr/analyses/boyscout.py	46	for start_, data in self.project.loader.main_object.memory.backers():	CODE
CRITICAL	angr/analyses/soot_class_hierarchy.py	41	for cls in self.project.loader.main_object.classes.values():	CODE
CRITICAL	angr/analyses/soot_class_hierarchy.py	48	for cls in self.project.loader.main_object.classes.values():	CODE
CRITICAL	angr/analyses/soot_class_hierarchy.py	67	for cls in self.project.loader.main_object.classes.values():	CODE
CRITICAL	angr/analyses/callee_cleanup_finder.py	16	starts = [imp.resolvedby.rebased_addr for imp in self.project.loader.main_object.imports.values()]	CODE
CRITICAL	angr/analyses/deobfuscator/string_obf_finder.py	172	pred for pred in self.project.kb.functions.callgraph.predecessors(func.addr) if pred != func.addr	CODE
CRITICAL	angr/analyses/deobfuscator/string_obf_finder.py	470	pred for pred in self.project.kb.functions.callgraph.predecessors(func.addr) if pred != func.addr	CODE
CRITICAL	angr/analyses/reaching_definitions/rd_state.py	425	cfg = self.analysis.project.kb.cfgs.get_most_accurate()	CODE
CRITICAL	angr/analyses/reaching_definitions/function_handler.py	355	data.function = state.analysis.project.kb.functions.get(data.address, None)	CODE
CRITICAL	angr/analyses/reaching_definitions/function_handler.py	416	if (data.symbol is None and state.analysis.project.loader.main_object.contains_addr(data.address)) or (	CODE
CRITICAL	angr/analyses/cfg/cfg_fast.py	2748	security_cookie_addr = self.project.loader.main_object.load_config.get("SecurityCookie", None)	CODE
CRITICAL	angr/analyses/cfg/cfg_fast_soot.py	98	for cls in self.project.loader.main_object.classes.values():	CODE
CRITICAL	angr/analyses/decompiler/decompiler.py	133	cfg = self.func._function_manager._kb.cfgs.get_most_accurate()	CODE
CRITICAL	…ler/optimization_passes/win_stack_canary_simplifier.py	40	self._security_cookie_addr = self.project.loader.main_object.load_config.get("SecurityCookie", None)	CODE

Decorative Section Separators96 hits · 309 pts

Severity	File	Line	Snippet	Context
MEDIUM⚡	tests/analyses/decompiler/test_rust_misc_passes.py	43	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/analyses/decompiler/test_rust_misc_passes.py	45	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/analyses/decompiler/test_rust_misc_passes.py	66	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/analyses/decompiler/test_rust_misc_passes.py	68	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/analyses/decompiler/test_rust_misc_passes.py	97	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/analyses/decompiler/test_rust_misc_passes.py	99	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	…ts/analyses/decompiler/test_ssa_addr_taken_stackvar.py	176	# │ │ │ │ │ │ │ │ │ ╭────────────╴│ 46ae69 jne 0x46aed0	COMMENT
MEDIUM⚡	…ts/analyses/decompiler/test_ssa_addr_taken_stackvar.py	186	# │ │ │ │ │ │ │ │ │ │ ╭──────────╴│ 46ae79 jne 0x46aed0	COMMENT
MEDIUM⚡	…ts/analyses/decompiler/test_ssa_addr_taken_stackvar.py	196	# │ │ │ │ │ │ │ │ │ │ │ ╭──────────╴46ae89 je 0x46aed2	COMMENT
MEDIUM⚡	…ts/analyses/decompiler/test_ssa_addr_taken_stackvar.py	199	# │ │ │ │ │ │ │ │ │ │ │ │ ╭──────╴46ae8e jmp 0x46aec3	COMMENT
MEDIUM⚡	…ts/analyses/decompiler/test_ssa_addr_taken_stackvar.py	244	# │ │ │ ╰▸╰▸╰──────▸╰────▸╰▸╰──────▸╰▸46aed2 mov al, bl	COMMENT
MEDIUM⚡	…ts/analyses/decompiler/test_ssa_addr_taken_stackvar.py	247	# │ │ ╰──────────────────────────▸│ 46aed6 lea eax, [ebp-0x34]	COMMENT
MEDIUM⚡	…ts/analyses/decompiler/test_ssa_addr_taken_stackvar.py	256	# ╰▸╰────────────────────────────▸│ │ 46aee4 xor al, al	COMMENT
MEDIUM	…ts/analyses/decompiler/test_ssa_addr_taken_stackvar.py	49	# ╭────────────▸│ │ 46ad5e mov dword ptr [ebp-0x40], eax	COMMENT
MEDIUM	…ts/analyses/decompiler/test_ssa_addr_taken_stackvar.py	51	# ╭────────────╴│ │ │ 46ad64 jae 0x46aee4	COMMENT
MEDIUM	…ts/analyses/decompiler/test_ssa_addr_taken_stackvar.py	100	# │ ╭────────╴│ │ 46adce je 0x46aed6	COMMENT
MEDIUM	…ts/analyses/decompiler/test_ssa_addr_taken_stackvar.py	142	# │ │ │ │ │ │ │ │ ╭──────────────╴│ │ 46ae2a jmp 0x46aec3	COMMENT
MEDIUM	…ts/analyses/decompiler/test_ssa_addr_taken_stackvar.py	156	# │ │ │ │ │ │ │ │ ╭────────────────╴46ae45 je 0x46aed2	COMMENT
MEDIUM	angr/rust/typehoon/translator.py	37	# ----------------------------------------------------------------	COMMENT
MEDIUM	angr/rust/typehoon/translator.py	39	# ----------------------------------------------------------------	COMMENT
MEDIUM	angr/rust/typehoon/translator.py	171	# ----------------------------------------------------------------	COMMENT
MEDIUM	angr/rust/typehoon/translator.py	173	# ----------------------------------------------------------------	COMMENT
MEDIUM	angr/rust/typehoon/translator.py	240	# ----------------------------------------------------------------	COMMENT
MEDIUM	angr/rust/typehoon/translator.py	242	# ----------------------------------------------------------------	COMMENT
MEDIUM	…ust/analyses/rust_calling_convention/fact_collector.py	15	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…ust/analyses/rust_calling_convention/fact_collector.py	17	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	…ust/analyses/rust_calling_convention/fact_collector.py	242	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	…ust/analyses/rust_calling_convention/fact_collector.py	244	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	angr/utils/ail_serialization.py	27	# ---------------------------------------------------------------------------------------------------------------------	COMMENT
MEDIUM⚡	angr/utils/ail_serialization.py	29	# ---------------------------------------------------------------------------------------------------------------------	COMMENT
MEDIUM⚡	angr/utils/ail_serialization.py	43	# ---------------------------------------------------------------------------------------------------------------------	COMMENT
MEDIUM⚡	angr/utils/ail_serialization.py	45	# ---------------------------------------------------------------------------------------------------------------------	COMMENT
MEDIUM	angr/utils/ail_serialization.py	186	# ---------------------------------------------------------------------------------------------------------------------	COMMENT
MEDIUM	angr/utils/ail_serialization.py	188	# ---------------------------------------------------------------------------------------------------------------------	COMMENT
MEDIUM	angr/utils/ail_serialization.py	207	# ---------------------------------------------------------------------------------------------------------------------	COMMENT
MEDIUM	angr/utils/ail_serialization.py	209	# ---------------------------------------------------------------------------------------------------------------------	COMMENT
MEDIUM	angr/utils/ail_serialization.py	225	# ---------------------------------------------------------------------------------------------------------------------	COMMENT
MEDIUM	angr/utils/ail_serialization.py	227	# ---------------------------------------------------------------------------------------------------------------------	COMMENT
MEDIUM	angr/mcp/server.py	141	# ============================================================================	COMMENT
MEDIUM	angr/mcp/server.py	143	# ============================================================================	COMMENT
MEDIUM	angr/mcp/server.py	454	# ============================================================================	COMMENT
MEDIUM	angr/mcp/server.py	456	# ============================================================================	COMMENT
MEDIUM	angr/mcp/server.py	807	# ============================================================================	COMMENT
MEDIUM	angr/mcp/server.py	809	# ============================================================================	COMMENT
MEDIUM	angr/analyses/language_detector.py	202	# ------------------------------------------------------------------	COMMENT
MEDIUM	angr/analyses/language_detector.py	204	# ------------------------------------------------------------------	COMMENT
MEDIUM	angr/analyses/language_detector.py	232	# ------------------------------------------------------------------	COMMENT
MEDIUM	angr/analyses/language_detector.py	234	# ------------------------------------------------------------------	COMMENT
MEDIUM	angr/analyses/language_detector.py	251	# ------------------------------------------------------------------	COMMENT
MEDIUM	angr/analyses/language_detector.py	253	# ------------------------------------------------------------------	COMMENT
MEDIUM	angr/analyses/language_detector.py	312	# ------------------------------------------------------------------	COMMENT
MEDIUM	angr/analyses/language_detector.py	314	# ------------------------------------------------------------------	COMMENT
MEDIUM	angr/analyses/language_detector.py	339	# ------------------------------------------------------------------	COMMENT
MEDIUM	angr/analyses/language_detector.py	341	# ------------------------------------------------------------------	COMMENT
MEDIUM	angr/analyses/language_detector.py	357	# ------------------------------------------------------------------	COMMENT
MEDIUM	angr/analyses/language_detector.py	359	# ------------------------------------------------------------------	COMMENT
MEDIUM	angr/analyses/language_detector.py	422	# ------------------------------------------------------------------	COMMENT
MEDIUM	angr/analyses/language_detector.py	424	# ------------------------------------------------------------------	COMMENT
MEDIUM	angr/analyses/cfg/pe_msvc_eh_structs.py	20	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	angr/analyses/cfg/pe_msvc_eh_structs.py	22	# ---------------------------------------------------------------------------	COMMENT
36 more matches not shown…

Self-Referential Comments58 hits · 170 pts

Severity	File	Line	Snippet	Context
MEDIUM	corpus_tests/scripts/gh_create_branch.sh	120	# Create the new ref.	COMMENT
MEDIUM	tests/procedures/posix/test_unlink.py	18	# Create a file 'test'	COMMENT
MEDIUM	tests/procedures/linux_kernel/test_lseek.py	34	# Create a file	COMMENT
MEDIUM	tests/procedures/linux_kernel/test_lseek.py	71	# Create a file	COMMENT
MEDIUM	tests/procedures/linux_kernel/test_lseek.py	98	# Create a file	COMMENT
MEDIUM	tests/procedures/linux_kernel/test_lseek.py	152	# Create a file	COMMENT
MEDIUM	tests/procedures/linux_kernel/test_lseek.py	167	# Create a file	COMMENT
MEDIUM	tests/angrdb/test_angrdb_load_missing_binary.py	36	# Create a project from the temporary copy and dump it	COMMENT
MEDIUM	tests/types/test_enum_inference.py	56	# Create an enum type	COMMENT
MEDIUM	tests/types/test_enum_inference.py	135	# Define the enum type for the parameter	STRING
MEDIUM	tests/types/test_enum_inference.py	205	# Create a complex enum	COMMENT
MEDIUM	tests/knowledge_plugins/test_variable_manager.py	25	# Create a VariableManagerInternal and generate some variable idents	COMMENT
MEDIUM	tests/state_plugins/posix/test_posix.py	15	# Create a state first	COMMENT
MEDIUM	tests/state_plugins/posix/test_posix.py	18	# Create a file	COMMENT
MEDIUM	tests/analyses/test_variablerecovery.py	79	# Create a temporary KnowledgeBase instance	COMMENT
MEDIUM	tests/analyses/test_cdg.py	26	# Create a project with a random binary - it will not be used anyways	COMMENT
MEDIUM	tests/analyses/test_cdg.py	33	# Create the CDG analysis	COMMENT
MEDIUM	tests/analyses/test_cdg.py	61	# Create a TemporaryNode for each node	COMMENT
MEDIUM	tests/analyses/test_cdg.py	125	# Create the mock post-dom graph	COMMENT
MEDIUM	tests/analyses/cfg/test_cfg_patching.py	142	# Define the data region and run analysis for function reconstruction	COMMENT
MEDIUM	tests/analyses/decompiler/test_decompiler.py	3961	# This function is expected to emit some (referenced) struct typedefs; if it stops doing so	STRING
MEDIUM	angr/sim_options.py	1	# This module contains the analysis options.	COMMENT
MEDIUM	angr/angrdb/db.py	223	# Create the project	COMMENT
MEDIUM	angr/utils/graph.py	491	# Create the end_node, too	COMMENT
MEDIUM	angr/simos/cgc.py	47	# Create the CGC plugin	COMMENT
MEDIUM	angr/simos/windows.py	250	# Create a LDR_MODULE, we'll handle the links later...	COMMENT
MEDIUM	angr/mcp/server.py	59	# Create the FastMCP server instance	COMMENT
MEDIUM	angr/knowledge_plugins/functions/function_manager.py	61	# Create a new function	COMMENT
MEDIUM	angr/knowledge_plugins/functions/function.py	1720	# Create a new one	COMMENT
MEDIUM	angr/state_plugins/sim_action.py	1	# This module contains data structures for handling memory, code, and register references.	COMMENT
MEDIUM	angr/analyses/cdg.py	156	# Create the normalized_cfg without the annoying ContainerNodes	COMMENT
MEDIUM	angr/analyses/vsa_ddg.py	272	# Create an edge between def site and use site	COMMENT
MEDIUM	angr/analyses/vfg.py	545	# Create the initial state	COMMENT
MEDIUM	angr/analyses/vfg.py	870	# Create a new call stack for the successor	COMMENT
MEDIUM	angr/analyses/deobfuscator/api_obf_type2_finder.py	144	# Create a label	COMMENT
MEDIUM	angr/analyses/deobfuscator/api_obf_type2_finder.py	149	# Create a variable	COMMENT
MEDIUM	angr/analyses/cfg/cfg_fast.py	880	# Create the segment list	COMMENT
MEDIUM	angr/analyses/cfg/cfg_fast.py	1632	# Create a read-only memory view in loader for faster data loading	COMMENT
MEDIUM	angr/analyses/cfg/cfg_fast.py	1667	# Create an initial state. Store it to self so we can use it globally.	COMMENT
MEDIUM	angr/analyses/cfg/cfg_fast.py	5888	# Create a CFG node, and add it to the graph	COMMENT
MEDIUM	angr/analyses/cfg/cfg_emulated.py	556	# Create a common end node for all nodes whose out_degree is 0	COMMENT
MEDIUM	angr/analyses/cfg/cfg_emulated.py	1220	# Create the CFGNode object	COMMENT
MEDIUM	angr/analyses/cfg/cfg_emulated.py	1848	# Create the new call stack of target block	COMMENT
MEDIUM	angr/analyses/cfg/cfg_emulated.py	1850	# Create the callstack suffix	COMMENT
MEDIUM	angr/analyses/cfg/cfg_emulated.py	2144	# Create a return site for current function	COMMENT
MEDIUM	angr/analyses/cfg/cfg_emulated.py	2152	# Create a returning edge in the caller function	COMMENT
MEDIUM	angr/analyses/cfg/cfg_emulated.py	2685	# Create a partial CFG first	COMMENT
MEDIUM	angr/analyses/cfg/cfg_emulated.py	3105	# Create the function if it doesn't exist	COMMENT
MEDIUM	angr/analyses/cfg/cfg_base.py	1432	# Create a new one	COMMENT
MEDIUM	angr/analyses/cfg/cfg_base.py	3104	# Create an IndirectJump instance	COMMENT
MEDIUM	angr/analyses/cfg/indirect_jump_resolvers/jumptable.py	1026	# Create the annotated CFG	COMMENT
MEDIUM	angr/analyses/cfg/indirect_jump_resolvers/jumptable.py	1052	# Create the slicecutor	COMMENT
MEDIUM	angr/analyses/data_dep/data_dependency_analysis.py	536	# Create a simplified version of the graph	COMMENT
MEDIUM	angr/analyses/decompiler/clinic.py	2926	# Create a new global variable if there isn't one already	COMMENT
MEDIUM	angr/analyses/decompiler/structurer_nodes.py	424	# The following classes are custom AIL statements (not nodes, unfortunately)	COMMENT
MEDIUM	…/analyses/decompiler/structured_codegen/c_serialize.py	626	# Create the AST.	COMMENT
MEDIUM	…/analyses/decompiler/dephication/graph_vvar_mapping.py	88	# The following code maintains phi congruence classes in a union-find structure.	COMMENT
MEDIUM	angr/analyses/decompiler/structuring/dream.py	314	# Create a graph region and structure it	COMMENT

Cross-Language Confusion29 hits · 145 pts

Severity	File	Line	Snippet	Context
HIGH	tests/sim/test_ail_exec.py	123	state.callstack.push(top_frame)	CODE
HIGH	tests/sim/test_ail_exec.py	172	state.callstack.push(top_frame)	CODE
HIGH	tests/sim/test_ail_exec.py	216	state.callstack.push(top_frame)	CODE
HIGH	tests/sim/test_ail_exec.py	277	state.callstack.push(top_frame)	CODE
HIGH	tests/sim/test_ail_exec.py	327	state.callstack.push(top_frame)	CODE
HIGH⚡	tests/sim/test_ail_exec.py	382	state.callstack.push(AILCallStack(func_addr=0xDEADBEEF))	CODE
HIGH⚡	tests/sim/test_ail_exec.py	385	state.callstack.push(top_frame)	CODE
HIGH	tests/sim/test_ail_exec.py	418	state.callstack.push(top_frame)	CODE
HIGH	angr/procedures/java_jni/string_operations.py	31	# if isCopy is not null, store JNI_TRUE at that address	COMMENT
HIGH	angr/procedures/java_jni/array_operations.py	167	# if isCopy is not null, store JNI_TRUE at that address	COMMENT
HIGH	angr/procedures/posix/fdopen.py	76	return claripy.If(fd_int == fd_concr, file_struct_ptr, null)	CODE
HIGH	angr/procedures/libc/fopen.py	64	return claripy.If(fd == fd_concr, file_struct_ptr, null)	CODE
HIGH	angr/simos/javavm.py	158	state.callstack.push(new_frame)	CODE
HIGH	angr/engines/soot/engine.py	262	state.callstack.push(state.callstack.copy())	CODE
HIGH	angr/engines/ail/engine_light.py	298	self.frame.push(new_frame)	CODE
HIGH	angr/engines/ail/setup.py	60	state.callstack.push(top_frame)	CODE
HIGH	angr/state_plugins/callstack.py	279	return self.push(frame)	CODE
HIGH	angr/state_plugins/callstack.py	414	self.push(new_frame)	CODE
HIGH	angr/state_plugins/heap/heap_ptmalloc.py	289	pointer). Returns None if ptr is null.	STRING
HIGH	angr/state_plugins/heap/heap_ptmalloc.py	292	:returns: a pointer to the base of the associated heap chunk, or None if ptr is null	STRING
HIGH	angr/analyses/typehoon/simple_solver.py	1382	a <:b && b <: a ==> a == b	STRING
HIGH	angr/analyses/reaching_definitions/engine_vex.py	267	l.debug("Memory address undefined, ins_addr = %#x.", self.ins_addr)	CODE
HIGH	angr/analyses/reaching_definitions/engine_vex.py	463	l.debug("Memory address undefined, ins_addr = %#x.", self.ins_addr)	CODE
HIGH	angr/analyses/decompiler/structured_codegen/c.py	814	set(name_to_structtypes.keys()) # type: ignore[possibly-undefined]	CODE
HIGH	angr/analyses/decompiler/ccall_rewriters/arm_ccalls.py	232	checking !Z && N==V) are exactly equivalent to signed comparisons.	STRING
HIGH	…tions/invert_negated_logical_conjuction_disjunction.py	15	NAME = "!(A && B) => A \|\| B; !(A \|\| B) => A && B"	CODE
HIGH	…tions/invert_negated_logical_conjuction_disjunction.py	15	NAME = "!(A && B) => A \|\| B; !(A \|\| B) => A && B"	CODE
HIGH	angr/analyses/decompiler/counters/boolean_counter.py	16	In the case of: `if (a \|\| (b && c))`, it will count 2 Boolean operators.	STRING
HIGH	angr/analyses/s_reaching_definitions/s_rda_model.py	173	# --- reconcile extern (used-but-undefined) definitions to match a full rebuild ---	COMMENT

Over-Commented Block130 hits · 115 pts

Severity	File	Line	Snippet	Context
LOW	native/unicornlib/log.c	21	#include "log.h"	COMMENT
LOW	native/unicornlib/sim_unicorn.hpp	1	#ifndef SIM_UNICORN_HPP	COMMENT
LOW	native/unicornlib/unicorn_dynamic.c	1	#include <stdbool.h>	COMMENT
LOW	native/unicornlib/log.h	21		COMMENT
LOW	native/unicornlib/log.h	61	void logLog(enum llevel_t ll, const char fn, int ln, bool perr, const char fmt, ...)	COMMENT
LOW	native/unicornlib/sim_unicorn.cpp	1	#define __STDC_FORMAT_MACROS 1	COMMENT
LOW	native/unicornlib/sim_unicorn.cpp	221	// first part and not for the remaining ones, so it is impossible to find the	COMMENT
LOW	native/angr/src/ailment/vex_ffi.rs	1	//! Raw FFI mirrors of the libVEX C structures, plus runtime resolution of	COMMENT
LOW	native/angr/src/ailment/vex_ffi.rs	481	/// returns a pointer to the full static struct, reading only the prefix is	COMMENT
LOW	native/angr/src/ailment/ail_stmt.rs	1	//! Fat-enum design for AIL Statements.	COMMENT
LOW	native/angr/src/ailment/ail_stmt.rs	761		COMMENT
LOW	native/angr/src/ailment/ail_stmt.rs	781	/// compared via ``AilExpression::matches`` rather than ``likes``,	COMMENT
LOW	native/angr/src/ailment/ail_stmt.rs	1601	}	COMMENT
LOW	native/angr/src/ailment/ail_stmt.rs	1861	// ---------------------------------------------------------------------------	COMMENT
LOW	native/angr/src/ailment/tags.rs	1	//! Tags storage for AIL objects.	COMMENT
LOW	native/angr/src/ailment/const_value.rs	101	Self::Float(v) => format!("{}", v),	COMMENT
LOW	native/angr/src/ailment/enums.rs	461	})	COMMENT
LOW	native/angr/src/ailment/mod.rs	101	///	COMMENT
LOW	native/angr/src/ailment/mod.rs	121	/// Const-generic parameters may only be integers, ``bool`` or ``char``	COMMENT
LOW	native/angr/src/ailment/mod.rs	161	// ---------------------------------------------------------------------------	COMMENT
LOW	native/angr/src/ailment/mod.rs	181	/// - Well-distributed -- Python uses the result as a dict / set	COMMENT
LOW	native/angr/src/ailment/ail_expr.rs	1	//! ``AilExpression`` fat-enum + single ``Expression`` pyclass.	COMMENT
LOW	native/angr/src/ailment/ail_expr.rs	61	}	COMMENT
LOW	native/angr/src/ailment/ail_expr.rs	341	/// Named base pointer (e.g. ``"stack_base"``, ``"tls_base"``).	COMMENT
LOW	native/angr/src/ailment/ail_expr.rs	401	/// ``Jump.target``, ``ConditionalJump.{true,false}_target``, and	COMMENT
LOW	native/angr/src/ailment/ail_expr.rs	541	/// surrounding ``category``:	COMMENT
LOW	native/angr/src/ailment/ail_expr.rs	721	/// ite_region_converter, return_duplicator) read the source vvar's	COMMENT
LOW	native/angr/src/ailment/ail_expr.rs	741	pub inner: ExprInner,	COMMENT
LOW	native/angr/src/ailment/ail_expr.rs	1101	/// have different ``idx``, and a replace targeting one must not	COMMENT
LOW	native/angr/src/ailment/ail_expr.rs	1941	///	COMMENT
LOW	native/angr/src/ailment/ail_expr.rs	1961	}	COMMENT
LOW	native/angr/src/ailment/ail_expr.rs	2441	_ => false,	COMMENT
LOW	native/angr/src/ailment/ail_expr.rs	2461	/// * ``matches`` = "do these two expressions have the same shape" --	COMMENT
LOW	native/angr/src/ailment/ail_expr.rs	2481	///	COMMENT
LOW	native/angr/src/ailment/ail_expr.rs	4901	}	COMMENT
LOW	native/angr/src/ailment/ail_expr.rs	5101	// ---------------------------------------------------------------------------	COMMENT
LOW	native/angr/src/ailment/vexop.rs	1	//! Full Rust port of `angr.engines.vex.claripy.irop.vexop_to_simop` (the	COMMENT
LOW	native/angr/src/ailment/convert_vex.rs	1	//! Rust port of `angr.ailment.converter_vex` (the VEX -> AIL converter).	COMMENT
LOW	native/angr/src/ailment/convert_vex.rs	261	.arch	COMMENT
LOW	tests/procedures/libc/test_string.py	761	cm = strcmp(s, arguments=[dst_addr, src_addr])	COMMENT
LOW	tests/procedures/libc/test_string.py	881	assert sorted(s_match.solver.eval_upto(s_match.memory.load(0x13, 1), 300)) == [0x00, 0x44]	COMMENT
LOW	tests/procedures/libc/test_string.py	901	# match_cmp = strncmp(s_match, inline=True, arguments=[ss_res, addr_needle, len_needle])	COMMENT
LOW	tests/storage/test_memory.py	221	s.memory.store(0x3001, claripy.BVV(b"AB"))	COMMENT
LOW	tests/storage/test_memory.py	241	# assert set(s.memory.addrs_for_name('replace_cool')) == {0x3000, 0x3003, 0x4000, 0x4001, 0x4002, 0x4003}	COMMENT
LOW	tests/engines/pcode/test_emulate.py	581	# ! OpCode.CPOOLREF	COMMENT
LOW	tests/state_plugins/solver/test_symbolic.py	61		COMMENT
LOW	tests/analyses/test_slicing.py	101	use_sim_procedures=True,	COMMENT
LOW	tests/analyses/test_typehoon.py	341	# struct struct_1 *field_8;	COMMENT
LOW	tests/analyses/decompiler/test_structurer.py	81	g = networkx.DiGraph()	COMMENT
LOW	tests/analyses/decompiler/test_decompiler.py	1421	# {	COMMENT
LOW	tests/analyses/decompiler/test_decompiler.py	2821	# 2. the last do-while loop ends with a call to rpl_free(), and there is no goto statement after	COMMENT
LOW	tests/analyses/decompiler/test_decompiler.py	3021	# do	COMMENT
LOW	tests/analyses/decompiler/test_decompiler.py	3221	# {	COMMENT
LOW	tests/analyses/decompiler/test_decompiler.py	3461	text = text.replace(" ", "").replace("\n", "")	COMMENT
LOW	tests/analyses/decompiler/test_decompiler.py	5241	assert d.codegen is not None and isinstance(d.codegen.text, str)	COMMENT
LOW	tests/analyses/decompiler/test_decompiler.py	5421	assert dec.codegen is not None and dec.codegen.text is not None	COMMENT
LOW	…ts/analyses/decompiler/test_ssa_addr_taken_stackvar.py	21	# 46ad1f mov edi, edi	COMMENT
LOW	…ts/analyses/decompiler/test_ssa_addr_taken_stackvar.py	41	# 46ad4e mov edx, dword ptr [ebp-0x3c]	COMMENT
LOW	…ts/analyses/decompiler/test_ssa_addr_taken_stackvar.py	61	# │ │ │ │ │ 46ad7d pop ecx	COMMENT
LOW	…ts/analyses/decompiler/test_ssa_addr_taken_stackvar.py	81	# │ │ │ │ 46ada2 mov dword ptr [eax-0x4], edx	COMMENT
70 more matches not shown…

Modern Structural Boilerplate75 hits · 80 pts

Severity	File	Line	Snippet	Context
LOW	angr/procedures/definitions/__init__.py	248	def set_prototype(self, name, proto: SimTypeFunction) -> None:	CODE
LOW	angr/procedures/definitions/__init__.py	257	def set_prototypes(self, protos: dict[str, SimTypeFunction]) -> None:	CODE
LOW	angr/procedures/definitions/__init__.py	651	def set_prototype(self, abi: str, name: str, proto: SimTypeFunction) -> None: # type: ignore	CODE
LOW	angr/procedures/definitions/__init__.py	662	def set_prototypes(self, abi: str, protos: dict[str, SimTypeFunction]) -> None: # type: ignore	CODE
LOW	angr/ailment/_deepcopy.py	36	__all__ = [	CODE
LOW	angr/ailment/converter_vex.py	5	__all__ = ["VEXIRSBConverter"]	CODE
LOW	angr/ailment/tagged_object.py	94	__all__ = ["TagDict", "TaggedObject"]	CODE
LOW	angr/ailment/statement.py	262	__all__ = [	CODE
LOW	angr/ailment/__init__.py	64	__all__ = [	CODE
LOW	angr/ailment/block.py	7	__all__ = ["Block"]	CODE
LOW	angr/ailment/expression.py	674	__all__ = [	CODE
LOW	angr/ailment/manager.py	5	__all__ = ["Manager"]	CODE
LOW	angr/misc/telemetry.py	56	__all__ = ["Status", "StatusCode", "get_current_span", "get_tracer"]	CODE
LOW	angr/angrdb/serializers/funcs.py	166	def _set_cfg_node_function_addresses(cfg_model, func_addr: int, block_addrs) -> None:	CODE
LOW	angr/rust/mixins/cfg_transformation_mixin.py	83	def _update_phi_variables_after_removing_block(graph, preds, removed_block: Block) -> None:	CODE
LOW	angr/rust/mixins/__init__.py	9	__all__ = [	CODE
LOW	angr/rust/knowledge_plugins/__init__.py	10	__all__ = [	CODE
LOW	angr/rust/analyses/rust_calling_convention/__init__.py	7	__all__ = [	CODE
LOW	angr/utils/json_utils.py	34	__all__ = ["json_decode", "json_encode"]	CODE
LOW	angr/mcp/__init__.py	57	__all__ = [	CODE
LOW	…ge/memory_mixins/paged_memory/pages/symbolic_bitmap.py	81	def set_range(self, start: int, stop: int) -> None:	CODE
LOW	angr/knowledge_plugins/cfg/spilling_cfg.py	1252	def set_rtdb(self, rtdb: RuntimeDb \| None) -> None:	CODE
LOW	angr/knowledge_plugins/cfg/types.py	16	__all__ = ["CFGENODE_K", "CFGNODE_K", "CFG_ADDR_TYPES", "SOOTNODE_K", "K"]	CODE
LOW	angr/knowledge_plugins/cfg/spilling_digraph.py	580	def set_rtdb(self, rtdb: RuntimeDb \| None) -> None:	CODE
LOW	angr/knowledge_plugins/cfg/spilling_digraph.py	596	def set_edge_eviction_enabled(self, enabled: bool) -> None:	CODE
LOW	angr/knowledge_plugins/variables/variable_manager.py	1244	def set_unified_variable(self, variable: SimVariable, unified: SimVariable) -> None:	CODE
LOW	angr/knowledge_plugins/rtdb/__init__.py	5	__all__ = ["RuntimeDb"]	CODE
LOW	angr/knowledge_plugins/functions/function_manager.py	1464	def set_function_returning(self, addr: K, v: bool \| None) -> None:	CODE
LOW	angr/knowledge_plugins/functions/function_manager.py	1519	def set_func_block_count(self, addr: K, count: int) -> None:	CODE
LOW	angr/knowledge_plugins/functions/function_manager.py	1561	def set_from_signature(self, addr: K, from_signature: str \| None) -> None:	CODE
LOW	angr/knowledge_plugins/functions/function.py	1224	def update_func_block_count(self) -> None:	CODE
LOW	angr/engines/__init__.py	38	__all__ = [	CODE
LOW	angr/engines/pcode/emulate.py	162	def _set_value(self, varnode: Varnode, value: BV) -> None:	CODE
LOW	angr/engines/ail/__init__.py	6	__all__ = [	CODE
LOW	angr/state_plugins/inspect.py	297	def _set_inspect_attrs(self, **kwargs: dict[str, Any]) -> None:	CODE
LOW	angr/state_plugins/plugin.py	36	def set_state(self, state) -> None:	CODE
LOW	angr/analyses/vfg.py	1257	def _set_return_address(self, state: SimState, ret_addr: int) -> None:	CODE
LOW	angr/analyses/calling_convention/__init__.py	6	__all__ = ["CallingConventionAnalysis", "FactCollector"]	CODE
LOW	angr/analyses/loop_unroller/__init__.py	5	__all__ = ["LoopUnroller"]	CODE
LOW	angr/analyses/loop_analysis/__init__.py	5	__all__ = ["LoopAnalysis"]	CODE
LOW	…ching_definitions/function_handler_library/__init__.py	13	__all__ = ["EnvironAtom", "ExecveAtom", "LibcHandlers", "StdinAtom", "StdoutAtom", "SystemAtom"]	CODE
LOW	angr/analyses/purity/__init__.py	3	__all__ = [	CODE
LOW	angr/analyses/decompiler/redundant_label_remover.py	44	def _update_jump_targets(self) -> None:	CODE
LOW	angr/analyses/decompiler/region_overlay.py	188	def _set_owner(self, node, new_owner: RegionOverlay \| None) -> None:	CODE
LOW	angr/analyses/decompiler/region_identifier.py	879	def _update_graph(graph: TGraph, new_region: TOverlay, replaced_nodes: set[TNode]) -> None:	CODE
LOW⚡	angr/analyses/decompiler/clinic.py	2681	def _set_expr_variable(self, expr, variable, offset) -> None:	CODE
LOW⚡	angr/analyses/decompiler/clinic.py	2684	def _set_store_variable(self, stmt, variable, offset) -> None:	CODE
LOW⚡	angr/analyses/decompiler/clinic.py	2687	def _set_reference_variable(self, expr, variable, offset) -> None:	CODE
LOW⚡	angr/analyses/decompiler/clinic.py	2690	def _set_reference_values(self, expr, reference_values) -> None:	CODE
LOW	angr/analyses/decompiler/variable_map.py	170	def set_variable(self, obj: AILObject \| int, variable: SimVariable \| None, offset: int = 0) -> None:	CODE
LOW⚡	angr/analyses/decompiler/variable_map.py	190	def set_variable_offset(self, obj: AILObject \| int, offset: int) -> None:	CODE
LOW⚡	angr/analyses/decompiler/variable_map.py	193	def set_custom_string(self, obj: AILObject \| int, value: bool = True) -> None:	CODE
LOW⚡	angr/analyses/decompiler/variable_map.py	196	def set_reference_values(self, obj: AILObject \| int, reference_values: dict[SimType, Any]) -> None:	CODE
LOW⚡	angr/analyses/decompiler/variable_map.py	199	def set_reference_variable(self, obj: AILObject \| int, variable: SimVariable \| None, offset: int = 0) -> None:	CODE
LOW⚡	angr/analyses/decompiler/variable_map.py	210	def set_prototype(self, obj: AILObject \| int, prototype: SimTypeFunction \| None) -> None:	CODE
LOW⚡	angr/analyses/decompiler/variable_map.py	220	def set_calling_convention(self, obj: AILObject \| int, cc: SimCC \| None) -> None:	CODE
LOW⚡	angr/analyses/decompiler/variable_map.py	230	def set_variant(self, obj: AILObject \| int, variant: Any) -> None:	CODE
LOW⚡	angr/analyses/decompiler/variable_map.py	240	def set_returnty(self, obj: AILObject \| int, returnty: SimType \| None) -> None:	CODE
LOW	angr/analyses/decompiler/stackarg_offset_manager.py	52	def update_stackoff_vvars(self, rd: SRDAModel) -> None:	CODE
LOW⚡	…/analyses/decompiler/structured_codegen/c_serialize.py	1136	def _set_const_int(body, v: int) -> None:	CODE
15 more matches not shown…

AI Structural Patterns78 hits · 71 pts

Severity	File	Line	Context
LOW	tests/common.py	222	CODE
LOW	tests/exploration_techniques/test_tracer.py	15	CODE
LOW	angr/callable.py	30	CODE
LOW	angr/sim_type.py	2422	CODE
LOW	angr/sim_manager.py	72	CODE
LOW	angr/sim_manager.py	280	CODE
LOW	angr/sim_manager.py	380	CODE
LOW	angr/blade.py	26	CODE
LOW	angr/factory.py	241	CODE
LOW	angr/factory.py	311	CODE
LOW	angr/factory.py	335	CODE
LOW	angr/factory.py	356	CODE
LOW	angr/sim_state.py	94	CODE
LOW	angr/block.py	205	CODE
LOW	angr/project.py	119	CODE
LOW	angr/sim_procedure.py	118	CODE
LOW	angr/distributed/server.py	29	CODE
LOW	angr/rust/typehoon/typehoon.py	21	CODE
LOW	angr/exploration_techniques/spiller.py	148	CODE
LOW	angr/exploration_techniques/loop_seer.py	21	CODE
LOW	angr/exploration_techniques/tracer.py	162	CODE
LOW	angr/simos/simos.py	91	CODE
LOW	angr/storage/file.py	185	CODE
LOW	angr/storage/memory_mixins/hex_dumper_mixin.py	11	CODE
LOW	…memory_mixins/regioned_memory/regioned_memory_mixin.py	45	CODE
LOW	…gr/knowledge_plugins/propagations/propagation_model.py	34	CODE
LOW	angr/knowledge_plugins/propagations/states.py	78	CODE
LOW	angr/knowledge_plugins/propagations/states.py	364	CODE
LOW	angr/knowledge_plugins/propagations/states.py	415	CODE
LOW	…/knowledge_plugins/key_definitions/live_definitions.py	117	CODE
LOW	angr/knowledge_plugins/cfg/indirect_jump.py	67	CODE
LOW	angr/knowledge_plugins/cfg/cfg_node.py	77	CODE
LOW	angr/knowledge_plugins/cfg/cfg_node.py	476	CODE
LOW	angr/knowledge_plugins/functions/function.py	168	CODE
LOW	angr/engines/vex/lifter.py	77	CODE
LOW	angr/engines/vex/heavy/heavy.py	85	CODE
LOW	angr/engines/pcode/lifter.py	637	CODE
LOW	angr/engines/pcode/lifter.py	151	CODE
LOW	angr/engines/pcode/lifter.py	461	CODE
LOW	angr/engines/pcode/lifter.py	579	CODE
LOW	angr/engines/pcode/lifter.py	1049	CODE
LOW	angr/engines/pcode/lifter.py	1092	CODE
LOW	angr/state_plugins/unicorn_engine.py	605	CODE
LOW	angr/state_plugins/solver.py	370	CODE
LOW	angr/state_plugins/posix.py	120	CODE
LOW	angr/analyses/reassembler.py	1215	CODE
LOW	angr/analyses/vfg.py	306	CODE
LOW	angr/analyses/complete_calling_conventions.py	64	CODE
LOW	angr/analyses/typehoon/typehoon.py	37	CODE
LOW	…r/analyses/variable_recovery/variable_recovery_fast.py	62	CODE
LOW	…r/analyses/variable_recovery/variable_recovery_fast.py	255	CODE
LOW	…r/analyses/variable_recovery/variable_recovery_base.py	198	CODE
LOW	angr/analyses/calling_convention/calling_convention.py	109	CODE
LOW	angr/analyses/propagator/propagator.py	45	CODE
LOW	angr/analyses/reaching_definitions/rd_state.py	76	CODE
LOW	…/analyses/reaching_definitions/reaching_definitions.py	51	CODE
LOW	angr/analyses/cfg/cfg_job_base.py	63	CODE
LOW	angr/analyses/cfg/cfg_fast.py	490	CODE
LOW	angr/analyses/cfg/cfg_fast.py	615	CODE
LOW	angr/analyses/cfg/cfg_emulated.py	174	CODE
18 more matches not shown…

Excessive Try-Catch Wrapping61 hits · 68 pts

Severity	File	Line	Snippet	Context
LOW	corpus_tests/test_corpus.py	56	except Exception: # pylint:disable=broad-exception-caught	CODE
LOW	corpus_tests/README.md	127	except Exception as e:	CODE
LOW	tests/common.py	183	except Exception: # pylint:disable=broad-exception-caught	CODE
LOW	tests/common.py	333	except Exception: # pylint:disable=broad-exception-caught	CODE
LOW⚡	tests/ailment/test_irsb.py	206	except Exception:	CODE
LOW⚡	tests/ailment/test_irsb.py	210	except Exception:	CODE
LOW⚡	tests/ailment/test_irsb.py	219	except Exception:	CODE
LOW⚡	tests/ailment/test_irsb.py	225	except Exception:	CODE
LOW	tests/ailment/test_irsb.py	286	except Exception:	CODE
LOW⚡	tests/analyses/decompiler/test_outliner.py	264	except Exception: # pylint:disable=broad-except	CODE
LOW	tests/analyses/decompiler/test_outliner.py	288	except Exception: # pylint:disable=broad-except	CODE
LOW	tests/analyses/decompiler/test_outliner.py	303	except Exception: # pylint:disable=broad-except	CODE
LOW	angr/llm_client.py	180	except Exception as ex: # pylint:disable=broad-exception-caught	CODE
LOW	angr/__main__.py	231	except Exception as e: # pylint:disable=broad-exception-caught	CODE
LOW	angr/__main__.py	386	except Exception as e: # pylint:disable=broad-exception-caught	CODE
LOW	angr/procedures/definitions/parse_glibc.py	58	except Exception as ex: # pylint: disable=broad-exception-caught	CODE
LOW⚡	angr/misc/bug_report.py	53	except Exception as e: # pylint: disable=broad-except	CODE
MEDIUM⚡	angr/misc/bug_report.py	54	print(f"An error occurred importing {m}: {e}")	CODE
LOW⚡	angr/misc/bug_report.py	60	except Exception: # pylint: disable-broad-except	CODE
LOW	angr/misc/bug_report.py	86	except Exception: # pylint: disable=broad-except	CODE
LOW	angr/misc/bug_report.py	102	except Exception as e: # pylint: disable=broad-except	CODE
LOW	angr/misc/bug_report.py	108	except Exception as e: # pylint: disable=broad-except	CODE
LOW	angr/angrdb/db.py	54	except Exception as ex:	CODE
LOW	angr/angrdb/db.py	64	except Exception:	CODE
LOW	angr/angrdb/serializers/structured_code.py	101	except Exception: # pylint:disable=broad-exception-caught	CODE
LOW	angr/rust/utils/rust_sigs.py	46	except Exception as e: # pylint:disable=broad-exception-caught	CODE
LOW	angr/rust/knowledge_plugins/clinic_factory.py	31	except Exception as e: # pylint:disable=broad-exception-caught	CODE
LOW	angr/rust/analyses/rustc_version_identification.py	76	except Exception: # pylint:disable=broad-exception-caught	CODE
LOW	…ses/rust_calling_convention/rust_calling_convention.py	107	except Exception as e: # pylint:disable=broad-exception-caught	CODE
LOW	…ses/rust_calling_convention/rust_calling_convention.py	115	except Exception as e: # pylint:disable=broad-exception-caught	CODE
LOW	angr/utils/library.py	98	except Exception: # pylint:disable=broad-except	STRING
LOW	angr/utils/library.py	135	except Exception: # pylint:disable=broad-except	STRING
LOW	angr/utils/timing.py	67	except Exception:	CODE
LOW	angr/exploration_techniques/oppologist.py	92	except Exception: # pylint:disable=broad-except	CODE
MEDIUM	angr/exploration_techniques/oppologist.py	78	def successors(self, simgr, state, **kwargs):	CODE
LOW	angr/simos/windows.py	388	except Exception as e:	CODE
LOW	angr/mcp/server.py	409	except Exception as e:	CODE
LOW	angr/knowledge_plugins/structured_code.py	128	except Exception: # pylint:disable=broad-exception-caught	CODE
LOW	angr/knowledge_plugins/structured_code.py	210	except Exception: # pylint:disable=broad-exception-caught	CODE
LOW	angr/state_plugins/solver.py	59	except Exception: # pylint:disable=broad-except	CODE
LOW	angr/state_plugins/trace_additions.py	531	except Exception as e: # pylint: disable=broad-except	CODE
MEDIUM	angr/state_plugins/trace_additions.py	473	def atoi_dumps(state, require_same_length=True):	CODE
LOW	angr/analyses/complete_calling_conventions.py	401	except Exception: # pylint:disable=broad-except	CODE
LOW	angr/analyses/complete_calling_conventions.py	407	except Exception: # pylint:disable=broad-except	CODE
LOW	angr/analyses/deobfuscator/api_obf_finder.py	275	except Exception: # pylint:disable=broad-exception-caught	CODE
LOW	…/analyses/deobfuscator/data_transformation_embedder.py	146	except Exception: # pylint:disable=broad-exception-caught	CODE
LOW	…/analyses/deobfuscator/data_transformation_embedder.py	259	except Exception: # pylint:disable=broad-exception-caught	CODE
LOW	…/analyses/deobfuscator/data_transformation_embedder.py	441	except Exception: # pylint:disable=broad-exception-caught	CODE
LOW	angr/analyses/cfg/cfg_fast.py	2730	except Exception: # pylint: disable=broad-except	CODE
LOW	angr/analyses/cfg/cfg_emulated.py	2862	except Exception: # pylint:disable=broad-exception-caught	CODE
LOW	angr/analyses/cfg/indirect_jump_resolvers/jumptable.py	2391	except Exception: # pylint: disable=broad-except	CODE
LOW	angr/analyses/decompiler/clinic.py	1589	except Exception: # pylint: disable=broad-except	CODE
LOW	angr/analyses/decompiler/clinic.py	2623	except Exception: # pylint:disable=broad-except	CODE
LOW	angr/analyses/decompiler/utils.py	1239	except Exception as e:	CODE
LOW	angr/analyses/decompiler/decompiler.py	606	except Exception: # pylint:disable=broad-exception-caught	CODE
LOW	angr/analyses/decompiler/decompiler.py	908	except Exception: # pylint:disable=broad-except	CODE
LOW	angr/analyses/decompiler/decompiler.py	1242	except Exception as ex: # pylint:disable=broad-exception-caught	CODE
LOW	…es/decompiler/optimization_passes/optimization_pass.py	723	except Exception:	CODE
MEDIUM	…es/decompiler/optimization_passes/optimization_pass.py	543	def analyze(self):	CODE
LOW	angr/analyses/decompiler/edits/ops.py	214	except Exception as ex: # pylint:disable=broad-exception-caught	CODE
1 more matches not shown…

Verbosity Indicators29 hits · 58 pts

Severity	File	Line	Snippet	Context
LOW⚡	native/angr/src/fuzzer/executor.rs	64	// Step 1: Copy the base state and run the apply function	COMMENT
LOW⚡	native/angr/src/fuzzer/executor.rs	72	// Step 2: Get or create the icicle engine (reuse across iterations)	COMMENT
LOW	native/angr/src/fuzzer/executor.rs	149	// Step 3: Handle the result	COMMENT
LOW	native/angr/src/fuzzer/executor.rs	162	// Step 4: Copy the edge map from edge_hitmap plugin to the observer to provide feedback	COMMENT
LOW	angr/keyed_region.py	236	# FIXME: we need to check if old_var still exists in the storage	COMMENT
LOW⚡	angr/project.py	173	# Step 2: determine its CPU architecture, ideally falling back to CLE's guess	COMMENT
LOW⚡	angr/project.py	182	# Step 3: Set some defaults and set the public and private properties	COMMENT
LOW⚡	angr/project.py	227	# Step 4: determine the guest OS	COMMENT
LOW⚡	angr/project.py	237	# Step 5: Set up the project's hubs	COMMENT
LOW⚡	angr/project.py	269	# Step 7: Run OS-specific configuration	COMMENT
LOW⚡	angr/project.py	272	# Step 8: LLM client (lazy-initialized from env vars on first access)	COMMENT
LOW	angr/project.py	145	# Step 1: Load the binary	COMMENT
LOW	angr/project.py	258	# Step 6: Register simprocedures as appropriate for library functions	COMMENT
LOW	angr/project.py	329	# Step 1: get the set of libraries we are allowed to use to resolve unresolved symbols	COMMENT
LOW	angr/project.py	355	# Step 2: Categorize every "import" symbol in each object.	COMMENT
LOW⚡	angr/simos/javavm.py	39	# Step 1: find all native libs	COMMENT
LOW⚡	angr/simos/javavm.py	47	# Step 2: determine and set the native SimOS	COMMENT
LOW⚡	angr/simos/javavm.py	68	# Step 3: Match static JNI symbols from native libs	COMMENT
LOW⚡	angr/simos/javavm.py	75	# Step 4: Allocate memory for the return hook	COMMENT
LOW⚡	angr/simos/javavm.py	80	# Step 5: JNI interface functions	COMMENT
LOW	angr/storage/file.py	277	# Step 1: figure out a reasonable concrete size to use for the memory load	COMMENT
LOW⚡	angr/engines/soot/engine.py	378	# Step 1: setup java callsite, but w/o storing arguments in memory	COMMENT
LOW⚡	angr/engines/soot/engine.py	381	# Step 2: add JNI specific arguments to *args list	COMMENT
LOW⚡	angr/engines/soot/engine.py	400	# Step 3: generate C prototype from java_method	COMMENT
LOW⚡	angr/engines/soot/engine.py	406	# Step 3: create native invoke state	COMMENT
LOW	angr/analyses/calling_convention/fact_collector.py	181	# so we need to check if this register write is actually a no-op	COMMENT
LOW⚡	…compiler/semantic_naming/region_loop_counter_naming.py	75	# Step 1: Collect all LoopNodes from the region	COMMENT
LOW⚡	…compiler/semantic_naming/region_loop_counter_naming.py	78	# Step 2: For each loop, identify the counter variable from iterator	COMMENT
LOW⚡	…compiler/semantic_naming/region_loop_counter_naming.py	81	# Step 3: Assign names based on nesting depth	COMMENT

Redundant / Tautological Comments39 hits · 58 pts

Severity	File	Line	Snippet	Context
LOW	tests/analyses/test_ddg_global_var_dependencies.py	56	# Check if we are storing a constant to a variable with constant address	COMMENT
LOW	tests/analyses/test_ddg_global_var_dependencies.py	61	# Check if we are storing the specified constant to the specified variable address	COMMENT
LOW	tests/analyses/decompiler/test_decompiler.py	5729	# Check if Reference(reg_vvar) exists	STRING
LOW	angr/emulator.py	101	# Check if there is a breakpoint at the current address	COMMENT
LOW	angr/emulator.py	106	# Check if we've already executed the requested number of instructions	COMMENT
LOW	angr/procedures/linux_kernel/unlink.py	17	# Check if entity exists before attempting to unlink	COMMENT
LOW	angr/concretization_strategies/any_named.py	19	# Check if a variable already exists	COMMENT
LOW	angr/concretization_strategies/signed_add.py	25	# Check if negative argument	COMMENT
LOW	…ses/rust_calling_convention/rust_calling_convention.py	239	# Check if discriminant 0 has any concrete overflow value	COMMENT
LOW	angr/utils/graph.py	124	elif child not in finished: # Check if the child has not been finished	CODE
LOW	angr/utils/graph.py	385	self._reverse = reverse # Set it to True to generate a post-dominator tree.	CODE
LOW	angr/exploration_techniques/driller_core.py	96	# Check if the state is unsat even if we remove preconstraints.	COMMENT
LOW	angr/knowledge_plugins/cfg/spilling_cfg.py	1031	# Check if dst has any other incoming call edges	COMMENT
LOW	angr/knowledge_plugins/functions/function_manager.py	382	# Check if spilled to LMDB	COMMENT
LOW	angr/knowledge_plugins/functions/function_manager.py	473	# Check if we need to evict (but not during loading)	COMMENT
LOW	angr/analyses/reassembler.py	341	# Check if the address points to a function by checking the plt of main binary	COMMENT
LOW	angr/analyses/reassembler.py	603	# Check if this is a reference to code	COMMENT
LOW	angr/analyses/vfg.py	924	# Check if this return is inside our pending returns list	COMMENT
LOW	angr/analyses/vfg.py	928	# Check if we have reached a fix-point	COMMENT
LOW	angr/analyses/disassembly.py	325	# Check if this is a number or an identifier.	COMMENT
LOW	angr/analyses/disassembly.py	367	# Check if we are inside braces or parentheses. Do not forget	COMMENT
LOW	…decompiler/peephole_optimizations/concat_simplifier.py	136	# Check if we're extracting exactly the high part	COMMENT
LOW	…decompiler/peephole_optimizations/concat_simplifier.py	177	# Check if the mask extracts exactly the low part	COMMENT
LOW	…decompiler/peephole_optimizations/concat_simplifier.py	221	# Check if we're truncating to exactly the low part size	COMMENT
LOW	…decompiler/peephole_optimizations/concat_simplifier.py	225	# Check if we're truncating to less than the low part	COMMENT
LOW	angr/analyses/decompiler/structuring/phoenix.py	729	# Check if the while matcher would produce while(true): if the	COMMENT
LOW	…/analyses/decompiler/semantic_naming/boolean_naming.py	65	# Assign names to high-confidence boolean variables	COMMENT
LOW⚡	…/analyses/decompiler/semantic_naming/boolean_naming.py	86	# Check if assigned a constant 0 or 1	COMMENT
LOW⚡	…/analyses/decompiler/semantic_naming/boolean_naming.py	95	# Check if assigned a comparison result	COMMENT
LOW⚡	…/analyses/decompiler/semantic_naming/boolean_naming.py	99	# Check if assigned a logical operation result	COMMENT
LOW	…/analyses/decompiler/semantic_naming/boolean_naming.py	187	# Check if the source is a comparison	COMMENT
LOW	…compiler/semantic_naming/region_loop_counter_naming.py	135	# Check if this is a for-loop with an iterator	COMMENT
LOW	…compiler/semantic_naming/region_loop_counter_naming.py	227	# Check if the unified variable is already named	COMMENT
LOW	…lyses/decompiler/semantic_naming/call_result_naming.py	165	# Check if we have a naming rule for this function	COMMENT
LOW	…lyses/decompiler/semantic_naming/call_result_naming.py	188	# Check if we have a naming rule for this function	COMMENT
LOW	…/analyses/decompiler/semantic_naming/pointer_naming.py	170	# Check if one operand is a variable (the pointer)	COMMENT
LOW	angr/analyses/decompiler/semantic_naming/size_naming.py	107	# Check if we have size parameter info for this function	COMMENT
LOW	…lyses/decompiler/semantic_naming/array_index_naming.py	91	# Check if this is a Load with array-style addressing	COMMENT
LOW	angr/analyses/decompiler/semantic_naming/naming_base.py	81	# Check if variable already has a meaningful name (not auto-generated)	COMMENT

Structural Annotation Overuse27 hits · 56 pts

Severity	File	Line	Snippet	Context
LOW⚡	native/angr/src/fuzzer/executor.rs	64	// Step 1: Copy the base state and run the apply function	COMMENT
LOW⚡	native/angr/src/fuzzer/executor.rs	72	// Step 2: Get or create the icicle engine (reuse across iterations)	COMMENT
LOW	native/angr/src/fuzzer/executor.rs	149	// Step 3: Handle the result	COMMENT
LOW	native/angr/src/fuzzer/executor.rs	162	// Step 4: Copy the edge map from edge_hitmap plugin to the observer to provide feedback	COMMENT
LOW⚡	angr/project.py	173	# Step 2: determine its CPU architecture, ideally falling back to CLE's guess	COMMENT
LOW⚡	angr/project.py	182	# Step 3: Set some defaults and set the public and private properties	COMMENT
LOW⚡	angr/project.py	227	# Step 4: determine the guest OS	COMMENT
LOW⚡	angr/project.py	237	# Step 5: Set up the project's hubs	COMMENT
LOW⚡	angr/project.py	269	# Step 7: Run OS-specific configuration	COMMENT
LOW⚡	angr/project.py	272	# Step 8: LLM client (lazy-initialized from env vars on first access)	COMMENT
LOW	angr/project.py	145	# Step 1: Load the binary	COMMENT
LOW	angr/project.py	258	# Step 6: Register simprocedures as appropriate for library functions	COMMENT
LOW	angr/project.py	329	# Step 1: get the set of libraries we are allowed to use to resolve unresolved symbols	COMMENT
LOW	angr/project.py	355	# Step 2: Categorize every "import" symbol in each object.	COMMENT
LOW⚡	angr/simos/javavm.py	39	# Step 1: find all native libs	COMMENT
LOW⚡	angr/simos/javavm.py	47	# Step 2: determine and set the native SimOS	COMMENT
LOW⚡	angr/simos/javavm.py	68	# Step 3: Match static JNI symbols from native libs	COMMENT
LOW⚡	angr/simos/javavm.py	75	# Step 4: Allocate memory for the return hook	COMMENT
LOW⚡	angr/simos/javavm.py	80	# Step 5: JNI interface functions	COMMENT
LOW	angr/storage/file.py	277	# Step 1: figure out a reasonable concrete size to use for the memory load	COMMENT
LOW⚡	angr/engines/soot/engine.py	378	# Step 1: setup java callsite, but w/o storing arguments in memory	COMMENT
LOW⚡	angr/engines/soot/engine.py	381	# Step 2: add JNI specific arguments to *args list	COMMENT
LOW⚡	angr/engines/soot/engine.py	400	# Step 3: generate C prototype from java_method	COMMENT
LOW⚡	angr/engines/soot/engine.py	406	# Step 3: create native invoke state	COMMENT
LOW⚡	…compiler/semantic_naming/region_loop_counter_naming.py	75	# Step 1: Collect all LoopNodes from the region	COMMENT
LOW⚡	…compiler/semantic_naming/region_loop_counter_naming.py	78	# Step 2: For each loop, identify the counter variable from iterator	COMMENT
LOW⚡	…compiler/semantic_naming/region_loop_counter_naming.py	81	# Step 3: Assign names based on nesting depth	COMMENT

Cross-File Repetition10 hits · 50 pts

Severity	File	Snippet	Context
HIGH	tests/procedures/glibc/test_ctype_locale.py	following is the description from linuxfoundation.org: the __ctype_b_loc() function shall return a pointer into an array	STRING
HIGH	angr/procedures/glibc/__ctype_toupper_loc.py	following is the description from linuxfoundation.org: the __ctype_b_loc() function shall return a pointer into an array	STRING
HIGH	angr/procedures/glibc/__ctype_tolower_loc.py	following is the description from linuxfoundation.org: the __ctype_b_loc() function shall return a pointer into an array	STRING
HIGH	angr/procedures/glibc/__ctype_b_loc.py	following is the description from linuxfoundation.org: the __ctype_b_loc() function shall return a pointer into an array	STRING
HIGH	angr/analyses/decompiler/ssailification/rewriting.py	:param node: the current node. :param state: the analysis state. :return: a tuple: (any changes occur, successor state)	STRING
HIGH	angr/analyses/decompiler/ssailification/traversal.py	:param node: the current node. :param state: the analysis state. :return: a tuple: (any changes occur, successor state)	STRING
HIGH	angr/analyses/decompiler/dephication/graph_rewriting.py	:param node: the current node. :param state: the analysis state. :return: a tuple: (any changes occur, successor state)	STRING
HIGH	angr/analyses/decompiler/region_simplifiers/goto.py	:param conditionnode node: :param successor: :return:	STRING
HIGH	angr/analyses/decompiler/region_simplifiers/if_.py	:param conditionnode node: :param successor: :return:	STRING
HIGH	…nalyses/decompiler/region_simplifiers/cascading_ifs.py	:param conditionnode node: :param successor: :return:	STRING

AI Slop Vocabulary21 hits · 38 pts

Severity	File	Line	Snippet	Context
MEDIUM	tests/analyses/cfg/test_cfg_thumb_firmware.py	23	# In short, a very comprehensive high level test	COMMENT
MEDIUM	tests/analyses/decompiler/test_decompiler.py	6043	# No two structurally-identical struct definitions may be emitted (robust to struct renumbering).	STRING
MEDIUM	tests/analyses/decompiler/test_ccall_rewriting.py	535	# and the oracle share a model. Hardware-harness note: for LOGIC* ops, VEX's cc_dep1 is the	COMMENT
MEDIUM	angr/sim_state.py	783	# For AbstractMemory, we wanna utilize more information from VSA	COMMENT
LOW	angr/simos/javavm.py	138	# w/o JNI support, we can just use a blank state	COMMENT
LOW	angr/storage/memory_mixins/__init__.py	198	# create temporary values. we simply return a TOP value here.	COMMENT
LOW	angr/storage/memory_mixins/__init__.py	219	# create temporary values. we simply return a TOP value here.	COMMENT
LOW	angr/knowledge_plugins/functions/function.py	2071	# If a SimCC object is passed assume that this is sane and just use it	COMMENT
LOW	angr/state_plugins/trace_additions.py	251	# don't add constraints just add replacement	COMMENT
LOW	angr/analyses/veritesting.py	528	# if the cfg is cached, simply return the cached cfg	COMMENT
LOW	angr/analyses/reaching_definitions/engine_ail.py	1013	# TODO: can maybe be smarter about this. if we can determine that expr0 is never falsey, we can just return it,	COMMENT
LOW	…eaching_definitions/function_handler_library/string.py	154	# stub: just return the haystack pointer	COMMENT
LOW	angr/analyses/cfg/cfg_fast.py	2263	# if we can find one, just use it	COMMENT
LOW	angr/analyses/cfg/cfg_fast.py	2389	# we are out of the mapped memory range - just return	COMMENT
MEDIUM	angr/analyses/cfg/cfg_emulated.py	2516	# TODO: make this a real indirect jump resolver under the new paradigm	COMMENT
LOW	angr/analyses/cfg/cfg_emulated.py	2762	# We just use the ip, persistent registers, and jumpkind to initialize the original unsat state	COMMENT
LOW	angr/analyses/cfg/indirect_jump_resolvers/jumptable.py	2212	# if this AST has been initialized before, just use the cached addr	COMMENT
LOW	…mpiler/region_simplifiers/switch_cluster_simplifier.py	442	# just add it at the end	COMMENT
LOW	angr/analyses/decompiler/structuring/structurer_base.py	658	# we should use just add a break node	COMMENT
MEDIUM	…gr/analyses/decompiler/semantic_naming/orchestrator.py	37	# after structuring to leverage the structured LoopNode information.	COMMENT
LOW	…lyses/s_reaching_definitions/s_reaching_definitions.py	151	# just use all registers in the default calling convention because we don't know anything about	COMMENT

AI Response Leakage3 hits · 18 pts

Severity	File	Line	Snippet	Context
HIGH	tests/analyses/decompiler/test_decompiler.py	4506	# In this version, true came with the function `get_charset_aliases`, compiled into the binary.	STRING
HIGH	angr/analyses/vfg.py	1410	# does not support. I'll create a terminating stub there	COMMENT
HIGH	angr/analyses/cfg/cfg_emulated.py	3006	# does not support. I'll create a terminating stub there	COMMENT

Fake / Example Data10 hits · 14 pts

Severity	File	Line	Snippet	Context
LOW⚡	…erialization/test_decompilation_cache_serialization.py	450	dummy_key = (0xDEAD, "pseudocode")	CODE
LOW⚡	…erialization/test_decompilation_cache_serialization.py	453	d[dummy_key] = dummy_cache	CODE
LOW⚡	…erialization/test_decompilation_cache_serialization.py	458	assert dummy_key in d._unspillable	CODE
LOW⚡	…erialization/test_decompilation_cache_serialization.py	459	assert d[dummy_key] is dummy_cache	CODE
LOW	angr/utils/graph.py	559	vertices: list[Any] = [ContainerNode("placeholder")]	CODE
LOW	angr/utils/graph.py	601	vertices = [ContainerNode("placeholder")]	CODE
LOW⚡	angr/analyses/proximity_graph.py	148	def __init__(self, dummy_value: str):	CODE
LOW⚡	angr/analyses/proximity_graph.py	150	self.dummy_value = dummy_value	CODE
LOW⚡	angr/analyses/proximity_graph.py	154	isinstance(other, UnknownProxiNode) and self.type_ == other.type_ and self.dummy_value == other.dummy_value	CODE
LOW⚡	angr/analyses/proximity_graph.py	158	return hash((UnknownProxiNode, self.dummy_value))	CODE

Magic Placeholder Names2 hits · 10 pts

Severity	File	Line	Snippet	Context
HIGH	corpus_tests/README.md	232	-H "Authorization: Bearer <YOUR-TOKEN>" \	CODE
HIGH	corpus_tests/README.md	242	-H "Authorization: Bearer <YOUR-TOKEN>" \	CODE

Slop Phrases5 hits · 8 pts

Severity	File	Line	Snippet	Context
LOW	angr/sim_type.py	3905	# Don't forget to update typedef types	COMMENT
MEDIUM	angr/procedures/libc/gets.py	20	"The use of gets in a program usually causes buffer overflows. You may want to adjust "	CODE
LOW	angr/engines/successors.py	545	# nuance: make sure to copy from the PREVIOUS state to the CURRENT one	COMMENT
LOW	angr/analyses/ddg.py	1075	# make sure to put it into the killing set	COMMENT
LOW	angr/analyses/ddg.py	1134	# make sure to put it into the killing set	COMMENT

TODO Padding4 hits · 6 pts

Severity	File	Line	Snippet	Context
LOW	tests/engines/pcode/test_emulate.py	577	# TODO: Add tests for the following ops:	COMMENT
LOW	angr/engines/soot/statements/throw.py	15	# TODO: implement simprocedure to throw exception	COMMENT
LOW	angr/analyses/decompiler/block_similarity.py	97	# TODO: implement a check for when one is empty and other is jump.	COMMENT
LOW	…compiler/optimization_passes/return_duplicator_high.py	54	# TODO: implement a better check	COMMENT

Overly Generic Function Names1 hit · 0 pts

Severity	File	Line	Snippet	Context
LOW	angr/exploration_techniques/tech_builder.py	13	def do_something():	STRING

Analysis Overview

What These Metrics Mean

Score History

Severity Breakdown

Directory Score Breakdown

Pattern Findings