Secure and fast microVMs for serverless computing.
This report presents the forensic synthetic code analysis of firecracker-microvm/firecracker, a Rust project with 35,460 GitHub stars. SynthScan v2.0 examined 207,532 lines of code across 668 source files, recording 705 pattern matches distributed across 17 syntactic categories. The overall adjusted score of 4.0 places this repository in the Likely human-written band.
The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).
This chart maps the temporal evolution of the adjusted synthetic code score across successive scan runs. An upward trajectory indicates ongoing incorporation of AI-generated code or expanding LLM-assisted scaffolding; a stable or declining trajectory may reflect active human refactoring, code removal, or the adoption of stricter authorship policies. The dashed secondary line (right axis) independently tracks total raw pattern hit count, which can diverge from the normalised score when codebase size changes significantly between scans.
Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.
This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.
The scanner identified 705 distinct pattern matches across 17 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | rust-toolchain.toml | 1 | # Copyright 2023 Amazon.com, Inc. or its affiliates. All Rights Reserved. | COMMENT |
| LOW | tools/ab_test.py | 321 | COMMENT | |
| LOW | tools/ab_test.py | 341 | # | COMMENT |
| LOW | resources/rootfs/overlay/usr/local/bin/readmem.c | 1 | // Copyright 2020 Amazon.com, Inc. or its affiliates. All Rights Reserved. | COMMENT |
| LOW | resources/rootfs/overlay/usr/local/bin/init.c | 1 | // Copyright 2020 Amazon.com, Inc. or its affiliates. All Rights Reserved. | COMMENT |
| LOW | resources/rootfs/overlay/usr/local/bin/fillmem.c | 1 | // Copyright 2020 Amazon.com, Inc. or its affiliates. All Rights Reserved. | COMMENT |
| LOW | …/rootfs/overlay/usr/local/bin/fast_page_fault_helper.c | 1 | // Copyright 2024 Amazon.com, Inc. or its affiliates. All Rights Reserved. | COMMENT |
| LOW | tests/conftest.py | 561 | # Tests get a microVM by requesting one of: | COMMENT |
| LOW | …sts/integration_tests/security/test_vulnerabilities.py | 141 | # ============================= | COMMENT |
| LOW | tests/integration_tests/security/__init__.py | 1 | # Copyright 2025 Amazon.com, Inc. or its affiliates. All Rights Reserved. | COMMENT |
| LOW | tests/integration_tests/style/__init__.py | 1 | # Copyright 2025 Amazon.com, Inc. or its affiliates. All Rights Reserved. | COMMENT |
| LOW | tests/integration_tests/style/test_licenses.py | 141 | COMMENT | |
| LOW | tests/integration_tests/performance/test_mmds.py | 61 | { | COMMENT |
| LOW | tests/integration_tests/performance/__init__.py | 1 | # Copyright 2025 Amazon.com, Inc. or its affiliates. All Rights Reserved. | COMMENT |
| LOW | tests/integration_tests/performance/test_huge_pages.py | 21 | COMMENT | |
| LOW | tests/integration_tests/performance/test_huge_pages.py | 41 | # Referenced: 0 kB | COMMENT |
| LOW | …tegration_tests/functional/test_cpu_template_helper.py | 101 | return cpu_config_dict | COMMENT |
| LOW | …tegration_tests/functional/test_cpu_template_helper.py | 121 | # is 0 on all tested platforms. On the other hand, the userspace cpuid | COMMENT |
| LOW | …tegration_tests/functional/test_cpu_template_helper.py | 141 | # CPUID.20000000h is not documented in Intel SDM and AMD APM. KVM doesn't | COMMENT |
| LOW | …tegration_tests/functional/test_cpu_template_helper.py | 181 | # List of MSR indices that should not be tested due to its mutability or inavailablility | COMMENT |
| LOW | …tegration_tests/functional/test_cpu_template_helper.py | 201 | # SYSENTER. | COMMENT |
| LOW | …tegration_tests/functional/test_cpu_template_helper.py | 221 | 0x4B564D01, | COMMENT |
| LOW | …/integration_tests/functional/test_net_config_space.py | 161 | # on the interface. | COMMENT |
| LOW | tests/integration_tests/functional/__init__.py | 1 | # Copyright 2025 Amazon.com, Inc. or its affiliates. All Rights Reserved. | COMMENT |
| LOW | …on_tests/functional/test_cpu_features_host_vs_guest.py | 161 | } | COMMENT |
| LOW | …on_tests/functional/test_cpu_features_host_vs_guest.py | 321 | # tests on Intel Cascade Lake for Ubuntu. | COMMENT |
| LOW | …on_tests/functional/test_cpu_features_host_vs_guest.py | 381 | # supports these features with multiple leaf functions, selecting a leaf function | COMMENT |
| LOW | …on_tests/functional/test_cpu_features_host_vs_guest.py | 421 | } | COMMENT |
| LOW | …tegration_tests/functional/test_cpu_features_x86_64.py | 201 | # Assert the guest frequency matches the host frequency | COMMENT |
| LOW | tests/framework/http_api.py | 21 | def __init__(self): | COMMENT |
| LOW | tests/host_tools/sysgenid.c | 1 | // Copyright 2026 Amazon.com, Inc. or its affiliates. All Rights Reserved. | COMMENT |
| LOW | tests/host_tools/vmclock.c | 1 | // Copyright 2025 Amazon.com, Inc. or its affiliates. All Rights Reserved. | COMMENT |
| LOW | tests/host_tools/vsock_helper.c | 1 | // Copyright 2018 Amazon.com, Inc. or its affiliates. All Rights Reserved. | COMMENT |
| LOW | tests/host_tools/test_syscalls.c | 1 | // Copyright 2024 Amazon.com, Inc. or its affiliates. All Rights Reserved. | COMMENT |
| LOW | tests/host_tools/devmem.c | 1 | // Copyright 2026 Amazon.com, Inc. or its affiliates. All Rights Reserved. | COMMENT |
| LOW | src/jailer/src/env.rs | 41 | const DEV_NET_TUN_MINOR: u32 = 200; | COMMENT |
| LOW | src/jailer/src/env.rs | 81 | // pid namespace, we will call clone with a NULL stack pointer. We can do this because we will | COMMENT |
| LOW | src/jailer/src/env.rs | 681 | // for all of them. | COMMENT |
| LOW | src/jailer/src/cgroup.rs | 41 | // search PROC_MOUNTS for cgroup mount points | COMMENT |
| LOW | src/jailer/src/cgroup.rs | 241 | } | COMMENT |
| LOW | src/jailer/src/cgroup.rs | 261 | // on the following helper function) helps with propagating the values. | COMMENT |
| LOW | src/jailer/src/resource_limits.rs | 21 | RlimitFsize, | COMMENT |
| LOW | src/jailer/src/resource_limits.rs | 41 | // c_uint (which is an u32) | COMMENT |
| LOW | src/clippy-tracing/src/main.rs | 21 | #[derive(Parser)] | COMMENT |
| LOW | src/acpi-tables/src/aml.rs | 201 | } | COMMENT |
| LOW | src/acpi-tables/src/aml.rs | 1241 | COMMENT | |
| LOW | src/acpi-tables/src/aml.rs | 1301 | .unwrap() | COMMENT |
| LOW | src/acpi-tables/src/aml.rs | 1321 | // 0x0CF8, // Length | COMMENT |
| LOW | src/acpi-tables/src/aml.rs | 1341 | // 0x00000000, // Translation Offset | COMMENT |
| LOW | src/acpi-tables/src/aml.rs | 1621 | [0x14, 0x09, 0x5F, 0x53, 0x54, 0x41, 0x00, 0xA4, 0x0A, 0x0F] | COMMENT |
| LOW | src/acpi-tables/src/aml.rs | 1861 | COMMENT | |
| LOW | src/acpi-tables/src/aml.rs | 1981 | // { | COMMENT |
| LOW | src/acpi-tables/src/fadt.rs | 21 | COMMENT | |
| LOW | src/acpi-tables/src/rsdp.rs | 1 | // Copyright © 2019 Intel Corporation | COMMENT |
| LOW | src/utils/src/time.rs | 181 | /// Converts a timestamp in seconds to an equivalent one in nanoseconds. | COMMENT |
| LOW | src/vmm/src/persist.rs | 101 | /// This describes the mapping between Firecracker base virtual address and | COMMENT |
| LOW | src/vmm/src/persist.rs | 121 | /// wrong but cannot be changed due to being API, so this field is deprecated, | COMMENT |
| LOW | src/vmm/src/persist.rs | 601 | COMMENT | |
| LOW | src/vmm/src/persist.rs | 621 | // libc::SOL_SOCKET, | COMMENT |
| LOW | src/vmm/src/lib.rs | 1 | // Copyright 2018 Amazon.com, Inc. or its affiliates. All Rights Reserved. | COMMENT |
| 324 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/conftest.py | 112 | def pytest_runtest_makereport(item, call): # pylint:disable=unused-argument | CODE |
| LOW | tests/conftest.py | 253 | def test_fc_session_root_path(): | CODE |
| LOW | tests/README.md | 489 | def test_with_any_microvm_and_my_init(test_microvm_any): | CODE |
| LOW | tests/integration_tests/security/test_fips.py | 55 | def test_fips_rng_reseed_on_snapshot_restore(uvm_with_fips, microvm_factory): | CODE |
| LOW | tests/integration_tests/security/test_fips.py | 70 | def test_fips_reseeded_kernel_csprng(fips_snapshot_pair): | CODE |
| LOW | tests/integration_tests/security/test_seccomp.py | 180 | def test_default_seccomp_level(uvm): | CODE |
| LOW | tests/integration_tests/security/test_jail.py | 114 | def test_exec_destination_path_is_symlink(uvm): | CODE |
| LOW | tests/integration_tests/security/test_jail.py | 134 | def test_exec_destination_path_is_hardlink(uvm): | CODE |
| LOW | tests/integration_tests/security/test_jail.py | 154 | def test_default_chroot_hierarchy(uvm): | CODE |
| LOW | tests/integration_tests/security/test_jail.py | 209 | def test_arbitrary_usocket_location(uvm): | CODE |
| LOW | tests/integration_tests/security/test_jail.py | 227 | def test_jailer_bind_mount_propagation(uvm): | CODE |
| LOW | tests/integration_tests/security/test_jail.py | 302 | def enable_controller_in_subtree(self, cgname, controller): | CODE |
| LOW | tests/integration_tests/security/test_jail.py | 429 | def test_cgroups_custom_parent(uvm, cgroups_info): | CODE |
| LOW | tests/integration_tests/security/test_jail.py | 484 | def test_cgroups_without_numa(uvm, cgroups_info): | CODE |
| LOW | tests/integration_tests/security/test_jail.py | 521 | def test_cgroups_parent_cgroup_but_no_cgroup( | CODE |
| LOW | tests/integration_tests/security/test_jail.py | 584 | def test_args_default_resource_limits(uvm): | CODE |
| LOW | tests/integration_tests/security/test_jail.py | 608 | def test_args_resource_limits(uvm): | CODE |
| LOW | tests/integration_tests/security/test_jail.py | 624 | def test_positive_file_size_limit(uvm): | CODE |
| LOW | tests/integration_tests/security/test_jail.py | 642 | def test_negative_file_size_limit(uvm): | CODE |
| LOW | tests/integration_tests/security/test_jail.py | 678 | def test_negative_no_file_limit(uvm): | CODE |
| LOW | tests/integration_tests/security/test_jail.py | 697 | def test_new_pid_ns_resource_limits(uvm): | CODE |
| LOW | tests/integration_tests/security/test_jail.py | 753 | def test_firecracker_kill_by_pid(uvm, daemonize, new_pid_ns): | CODE |
| LOW | …sts/integration_tests/security/test_vulnerabilities.py | 102 | def download_spectre_meltdown_checker(tmp_path_factory): | CODE |
| LOW | …sts/integration_tests/security/test_vulnerabilities.py | 116 | def test_spectre_meltdown_checker_on_host(spectre_meltdown_checker): | CODE |
| LOW⚡ | …sts/integration_tests/security/test_vulnerabilities.py | 127 | def test_vulnerabilities_on_host(): | CODE |
| LOW⚡ | …sts/integration_tests/security/test_vulnerabilities.py | 134 | def get_vuln_files_exception_dict(template): | CODE |
| LOW | …sts/integration_tests/security/test_vulnerabilities.py | 167 | def check_vulnerabilities_files_on_guest(microvm): | CODE |
| LOW | …sts/integration_tests/security/test_vulnerabilities.py | 232 | def test_check_vulnerability_files_ab(request, uvm_any): | CODE |
| LOW | …sts/integration_tests/security/test_vulnerabilities.py | 246 | def test_spectre_meltdown_checker_on_guest( | CODE |
| LOW | tests/integration_tests/security/test_nv.py | 23 | def test_no_nested_virtualization(uvm_booted): | CODE |
| LOW | tests/integration_tests/style/test_repo.py | 15 | def test_repo_no_spaces_in_paths(): | CODE |
| LOW | tests/integration_tests/style/test_repo.py | 39 | def test_repo_validate_changelog(): | CODE |
| LOW | tests/integration_tests/style/test_markdown.py | 25 | def test_markdown_internal_links(): | CODE |
| LOW | tests/integration_tests/performance/test_boottime.py | 70 | def get_systemd_analyze_times(microvm): | CODE |
| LOW | tests/integration_tests/performance/test_boottime.py | 101 | def launch_vm_with_boot_timer( | CODE |
| LOW | …s/integration_tests/performance/test_hotplug_memory.py | 262 | def test_virtio_mem_hotplug_hotunplug(uvm_any_memhp): | CODE |
| LOW | …s/integration_tests/performance/test_hotplug_memory.py | 320 | def test_snapshot_restore_persistence(uvm, microvm_factory, snapshot_type): | CODE |
| LOW | …s/integration_tests/performance/test_hotplug_memory.py | 360 | def test_snapshot_restore_incremental(uvm, microvm_factory, snapshot_type): | CODE |
| LOW | …s/integration_tests/performance/test_hotplug_memory.py | 486 | def test_memory_hotplug_latency( | CODE |
| LOW | tests/integration_tests/performance/test_block.py | 160 | def test_block_vhost_user_performance( | CODE |
| LOW | tests/integration_tests/performance/test_vsock.py | 99 | def consume_vsock_ping_output(ping_output): | CODE |
| LOW | tests/integration_tests/performance/test_initrd.py | 27 | def test_microvm_initrd_with_serial(uvm_with_initrd, huge_pages): | CODE |
| LOW | tests/integration_tests/performance/test_network.py | 97 | def test_network_tcp_throughput( | CODE |
| LOW | …tegration_tests/performance/test_vhost_user_metrics.py | 16 | def test_vhost_user_block_metrics(uvm, vcpu_count, metrics): | CODE |
| LOW | tests/integration_tests/performance/test_steal_time.py | 21 | def test_pvtime_steal_time_increases(uvm): | CODE |
| LOW | …sts/integration_tests/performance/test_rate_limiter.py | 97 | def test_rx_rate_limiting_cpu_load(uvm): | CODE |
| LOW | …sts/integration_tests/performance/test_rate_limiter.py | 237 | def _check_tx_rate_limit_patch(test_microvm): | CODE |
| LOW | …sts/integration_tests/performance/test_rate_limiter.py | 263 | def _check_rx_rate_limit_patch(test_microvm): | CODE |
| LOW | …sts/integration_tests/performance/test_rate_limiter.py | 340 | def _start_iperf_server_on_guest(test_microvm): | CODE |
| LOW | …sts/integration_tests/performance/test_rate_limiter.py | 356 | def _start_iperf_server_on_host(netns_cmd_prefix): | CODE |
| LOW | tests/integration_tests/performance/test_snapshot.py | 151 | def test_post_restore_latency( | CODE |
| LOW | tests/integration_tests/performance/test_snapshot.py | 267 | def test_snapshot_create_latency( | CODE |
| LOW | tests/integration_tests/performance/test_pmem.py | 155 | def emit_fio_single_read_metrics(logs_dir, metrics): | CODE |
| LOW | tests/integration_tests/performance/test_balloon.py | 51 | def test_hinting_reporting_cpu( | CODE |
| LOW | tests/integration_tests/performance/test_balloon.py | 131 | def test_hinting_fault_latency( | CODE |
| LOW | …gration_tests/performance/test_process_startup_time.py | 19 | def test_startup_time_new_pid_ns(microvm_factory, guest_kernel, rootfs, metrics): | CODE |
| LOW | …gration_tests/performance/test_process_startup_time.py | 31 | def test_startup_time_daemonize(microvm_factory, guest_kernel, rootfs, metrics): | CODE |
| LOW | …gration_tests/performance/test_process_startup_time.py | 42 | def test_startup_time_custom_seccomp(microvm_factory, guest_kernel, rootfs, metrics): | CODE |
| LOW | tests/integration_tests/functional/test_rng.py | 69 | def assert_virtio_rng_is_current_hwrng_device(ssh_connection: SSHConnection): | CODE |
| LOW | tests/integration_tests/functional/test_rng.py | 104 | def _get_percentage_difference(measured, base): | CODE |
| 137 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | tools/release-tag.sh | 12 | # Create a tag for the specified release. | COMMENT |
| MEDIUM | resources/rebuild.sh | 130 | # Create a temporary branch where we can apply patches and then | COMMENT |
| MEDIUM | resources/rebuild.sh | 312 | # Create the directory in which we will store the kernels and rootfs | COMMENT |
| MEDIUM | tests/integration_tests/security/test_jail.py | 544 | # Create the parent cgroup. | COMMENT |
| MEDIUM | tests/integration_tests/performance/test_vsock.py | 138 | # Create a vsock device | COMMENT |
| MEDIUM | …/integration_tests/functional/test_net_config_space.py | 32 | # Create the control ssh connection. | COMMENT |
| MEDIUM | …/integration_tests/functional/test_drive_vhost_user.py | 53 | # Create a rw rootfs file that is unique to the microVM | COMMENT |
| MEDIUM | …/integration_tests/functional/test_drive_vhost_user.py | 180 | # Create a rw rootfs file that is unique to the microVM | COMMENT |
| MEDIUM | …/integration_tests/functional/test_drive_vhost_user.py | 236 | # Create a rootfs with partuuid unique to this microVM | COMMENT |
| MEDIUM | tests/integration_tests/functional/test_vsock.py | 289 | # Create a socat process in the guest which will connect to the host socat | COMMENT |
| MEDIUM | …sts/functional/test_snapshot_not_losing_dirty_pages.py | 51 | # Create a large file dynamically based on available space | COMMENT |
| MEDIUM | tests/integration_tests/functional/test_api.py | 972 | # Create a vsock device. | COMMENT |
| MEDIUM | tests/integration_tests/functional/test_api.py | 1004 | # Create a new entropy device should be OK. | COMMENT |
| MEDIUM | …ts/integration_tests/functional/test_snapshot_basic.py | 158 | # Create a snapshot from a microvm. | COMMENT |
| MEDIUM | tests/framework/utils.py | 311 | # Create the async process | COMMENT |
| MEDIUM | tests/framework/microvm.py | 237 | # Create the jailer context associated with this microvm. | COMMENT |
| MEDIUM | tests/host_tools/udp_offload.py | 37 | # Create a UDP socket | COMMENT |
| MEDIUM | tests/host_tools/network.py | 276 | # Create the tap device tap0 directly in the network namespace to avoid | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | tests/data/metadata.json | 3 | "meta-data": "Lorem ipsum dolor sit amet, consectetur adipiscing elit", | CODE |
| LOW⚡ | tests/data/metadata.json | 3 | "meta-data": "Lorem ipsum dolor sit amet, consectetur adipiscing elit", | CODE |
| LOW⚡ | tests/data/metadata.json | 7 | "meta-data": "Lorem ipsum dolor sit amet" | CODE |
| LOW⚡ | tests/data/metadata.json | 7 | "meta-data": "Lorem ipsum dolor sit amet" | CODE |
| LOW | tests/data/metadata_invalid.json | 3 | "meta-data": "Lorem ipsum dolor sit amet, consectetur adipiscing elit", | CODE |
| LOW | tests/data/metadata_invalid.json | 3 | "meta-data": "Lorem ipsum dolor sit amet, consectetur adipiscing elit", | CODE |
| LOW⚡ | src/vmm/tests/devices.rs | 72 | let mut dummy_data = [1u8; BYTES_COUNT]; | CODE |
| LOW⚡ | src/vmm/tests/devices.rs | 76 | dummy_data.as_mut_ptr() as *const c_void, | CODE |
| LOW⚡ | src/vmm/tests/devices.rs | 77 | dummy_data.len(), | CODE |
| LOW⚡ | src/vmm/tests/devices.rs | 80 | assert!(dummy_data.len() == usize::try_from(rc).unwrap()); | CODE |
| LOW | src/vmm/tests/devices.rs | 102 | assert!(data[..31] == dummy_data[..31]); | CODE |
| LOW | src/vmm/tests/devices.rs | 103 | assert!(data[32..64] == dummy_data[32..64]); | CODE |
| LOW⚡ | src/vmm/tests/devices.rs | 118 | dummy_data.as_mut_ptr() as *const c_void, | CODE |
| LOW⚡ | src/vmm/tests/devices.rs | 119 | dummy_data.len(), | CODE |
| LOW⚡ | src/vmm/tests/devices.rs | 122 | assert!(dummy_data.len() == usize::try_from(rc).unwrap()); | CODE |
| LOW⚡ | src/vmm/tests/devices.rs | 220 | let mut dummy_data = [1u8; BYTES_COUNT]; | CODE |
| LOW⚡ | src/vmm/tests/devices.rs | 224 | dummy_data.as_mut_ptr() as *const c_void, | CODE |
| LOW⚡ | src/vmm/tests/devices.rs | 225 | dummy_data.len(), | CODE |
| LOW⚡ | src/vmm/tests/devices.rs | 228 | assert!(dummy_data.len() == usize::try_from(rc).unwrap()); | CODE |
| LOW | src/vmm/tests/devices.rs | 250 | assert!(data[..31] == dummy_data[..31]); | CODE |
| LOW | src/vmm/tests/devices.rs | 251 | assert!(data[32..64] == dummy_data[32..64]); | CODE |
| LOW⚡ | src/vmm/tests/devices.rs | 266 | dummy_data.as_mut_ptr() as *const c_void, | CODE |
| LOW⚡ | src/vmm/tests/devices.rs | 267 | dummy_data.len(), | CODE |
| LOW⚡ | src/vmm/tests/devices.rs | 270 | assert!(dummy_data.len() == usize::try_from(rc).unwrap()); | CODE |
| LOW | src/vmm/src/vmm_config/drive.rs | 232 | let dummy_id = String::from("1"); | CODE |
| LOW | src/vmm/src/vmm_config/drive.rs | 234 | drive_id: dummy_id.clone(), | CODE |
| LOW | src/vmm/src/vmm_config/drive.rs | 254 | assert_eq!(block_devs.get_index_of_drive_id(&dummy_id), Some(0)); | CODE |
| LOW | src/firecracker/src/api_server/request/drive.rs | 119 | "drive_id": "dummy_id", | CODE |
| LOW | src/firecracker/src/api_server/request/balloon.rs | 165 | "amount_mib": "dummy_id", | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …/integration_tests/functional/test_drive_vhost_user.py | 305 | mkfs_mount_cmd = "mkfs.ext4 /dev/vdb && mkdir -p /tmp/tmp && mount /dev/vdb /tmp/tmp && umount /tmp/tmp" | CODE |
| HIGH | tests/integration_tests/functional/test_drive_virtio.py | 405 | vm.ssh.check_output("mount /dev/vdb /tmp && umount /tmp") | CODE |
| HIGH | tests/integration_tests/functional/test_drive_virtio.py | 423 | vm.ssh.check_output("mount /dev/vdb /tmp && umount /tmp") | CODE |
| HIGH | tests/framework/utils.py | 538 | cmd = "cd ../src/firecracker && cargo pkgid | cut -d# -f2 | cut -d: -f2" | CODE |
| HIGH | .buildkite/pipeline_release_qa.py | 69 | "| jq '(..|select(.priority? != null).priority) += 100' " | CODE |
| HIGH | .buildkite/pipeline_pr.py | 44 | "./tools/devtool -y build_devctr && DEVCTR_IMAGE_TAG=latest ./tools/devtool test --no-build -- integration_tests | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/ab_plot.py | 113 | CODE | |
| LOW | tools/ab_plot.py | 191 | CODE | |
| LOW | tests/conftest.py | 392 | CODE | |
| LOW | …ts/integration_tests/security/test_seccomp_validate.py | 29 | CODE | |
| LOW | tests/integration_tests/functional/test_vsock.py | 246 | CODE | |
| LOW | tests/integration_tests/functional/test_vsock.py | 404 | CODE | |
| LOW | …tegration_tests/functional/test_cpu_features_x86_64.py | 449 | CODE | |
| LOW | …tegration_tests/functional/test_cpu_features_x86_64.py | 704 | CODE | |
| LOW | tests/framework/swagger_validator.py | 52 | CODE | |
| LOW | tests/framework/swagger_validator.py | 156 | CODE | |
| LOW | tests/framework/gitlint_rules.py | 24 | CODE | |
| LOW | tests/framework/guest_stats.py | 62 | CODE | |
| LOW | tests/framework/jailer.py | 85 | CODE | |
| LOW | tests/framework/jailer.py | 180 | CODE | |
| LOW | tests/framework/utils.py | 379 | CODE | |
| LOW | tests/framework/microvm.py | 312 | CODE | |
| LOW | tests/framework/microvm.py | 590 | CODE | |
| LOW | tests/framework/static_analysis.py | 441 | CODE | |
| LOW | tests/framework/utils_cpuid.py | 104 | CODE | |
| LOW | tests/host_tools/fcmetrics.py | 28 | CODE | |
| LOW | tests/host_tools/fcmetrics.py | 446 | CODE | |
| LOW | .buildkite/pipeline_perf.py | 175 | CODE | |
| LOW | .buildkite/common.py | 131 | CODE | |
| LOW | .buildkite/common.py | 354 | CODE | |
| LOW | .buildkite/common.py | 430 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | tests/conftest.py | 557 | # ============================================================================= | COMMENT |
| MEDIUM | tests/conftest.py | 559 | # ============================================================================= | COMMENT |
| MEDIUM⚡ | …sts/integration_tests/security/test_vulnerabilities.py | 141 | # ============================= | COMMENT |
| MEDIUM⚡ | …sts/integration_tests/security/test_vulnerabilities.py | 144 | # -------------------------------------------- | COMMENT |
| MEDIUM | src/vmm/src/logger/rate_limited.rs | 16 | //! ┌───────────────────┬────────────────────────────────────────┐ | COMMENT |
| MEDIUM | src/vmm/src/logger/rate_limited.rs | 18 | //! └───────────────────┴────────────────────────────────────────┘ | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | src/vmm/src/devices/virtio/transport/pci/device.rs | 575 | let bar_offset: u32 = self.cap_pci_cfg_info.cap.cap.offset.into(); | CODE |
| CRITICAL | src/vmm/src/devices/virtio/transport/pci/device.rs | 600 | let bar_offset: u32 = self.cap_pci_cfg_info.cap.cap.offset.into(); | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/ab_plot.py | 215 | # Check if difference is significant | COMMENT |
| LOW | tests/integration_tests/performance/test_huge_pages.py | 161 | # Verify if guest can run commands, and also wake up the fast page fault helper to trigger page faults. | COMMENT |
| LOW | tests/integration_tests/functional/test_net.py | 62 | # Check if the high ingress traffic broke the net interface. | COMMENT |
| LOW | tests/integration_tests/functional/test_metrics.py | 131 | # Verify if guest can run commands. | COMMENT |
| LOW | tests/integration_tests/functional/test_error_code.py | 35 | # Check if FC process is closed | COMMENT |
| LOW | tests/integration_tests/functional/test_max_devices.py | 54 | # Verify if guest can run commands. | COMMENT |
| LOW | tests/integration_tests/functional/test_uffd.py | 101 | # Verify if the restored guest works. | COMMENT |
| LOW | tests/integration_tests/functional/test_uffd.py | 107 | # Verify if the restored guest works. | COMMENT |
| LOW | tests/integration_tests/functional/test_drive_virtio.py | 49 | # Check if reading from the entire disk results in a file of the same size | COMMENT |
| LOW | tests/integration_tests/functional/test_serial_io.py | 180 | # Check if the total memory size changed. | COMMENT |
| LOW | tests/framework/swagger_validator.py | 176 | # Check if it's a parameter placeholder or exact match | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/framework/properties.py | 127 | except Exception: | CODE |
| LOW | tests/framework/utils_vsock.py | 54 | except Exception as err: | CODE |
| LOW | tests/framework/http_api.py | 65 | except Exception as e: | CODE |
| LOW | tests/framework/http_api.py | 93 | except Exception as e: | CODE |
| LOW | tests/framework/http_api.py | 109 | except Exception as e: | CODE |
| LOW | tests/framework/utils.py | 75 | except Exception as exc: | CODE |
| LOW | tests/framework/utils.py | 84 | except Exception as exc: | CODE |
| MEDIUM | tests/host_tools/udp_offload.py | 57 | eprint(f"Error sending message: {e}") | CODE |
| LOW | tests/host_tools/network.py | 59 | except Exception as exc: | CODE |
| LOW | tests/host_tools/network.py | 149 | except Exception: | CODE |
| LOW | tests/host_tools/network.py | 225 | except Exception as exc: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …ts/integration_tests/security/test_seccomp_validate.py | 79 | # We just add 1000000 to the allowed arg and assume it | COMMENT |
| MEDIUM | .github/codecov.yml | 2 | # We utilize optional statuses that are okay to fail, so | COMMENT |
| MEDIUM | src/vmm/src/vstate/vm.rs | 732 | // TODO: Once Host 5.10 goes out of support, we can make this more robust and work on | COMMENT |
| MEDIUM | src/firecracker/examples/uffd/uffd_utils.rs | 80 | // happening, but let's try to be a bit more robust and retry a few times | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | tests/pyproject.toml | 29 | # to run only the similarities checker, you can use "--disable=all | COMMENT |
| LOW | src/vmm/src/devices/virtio/balloon/util.rs | 62 | // Don't forget to push the last range to the result. | COMMENT |
| MEDIUM | src/firecracker/src/main.rs | 134 | // It's worth noting that the abort is caused by sending a SIG_ABORT signal to the process. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | src/vmm/src/devices/virtio/vsock/csm/connection.rs | 55 | // respected, the receiving peer's behaviour is undefined. In this implementation, we | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/framework/jailer.py | 42 | CODE | |
| LOW | tests/framework/utils.py | 615 | CODE | |
| LOW | tests/framework/microvm.py | 648 | CODE | |
| LOW | tests/framework/microvm.py | 810 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | docs/device-hotplug.md | 68 | ### Step 1: Remove the device from the guest | COMMENT |
| LOW | docs/device-hotplug.md | 84 | ### Step 2: Unplug from the host | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | src/vmm/src/devices/virtio/queue.rs | 979 | // With firecracker's batching of used IRQs, we need to check if addition of the last | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/framework/static_analysis.py | 23 | logger = logging.getLogger(__name__) | CODE |