Scalable fuzzing infrastructure.
This report presents the forensic synthetic code analysis of google/clusterfuzz, a Python project with 5,584 GitHub stars. SynthScan v2.0 examined 251,987 lines of code across 1409 source files, recording 5755 pattern matches distributed across 20 syntactic categories. The overall adjusted score of 63.1 places this repository in the Strong AI signal band.
The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).
Longitudinal tracking requires multiple scan runs. Once this repository is re-scanned after new commits land, this chart will visualise how the synthetic code signal evolves over time — enabling you to detect whether AI authorship is growing, stabilising, or being actively corrected by human engineers.
Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.
This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.
The scanner identified 5755 distinct pattern matches across 20 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | …rnal/tests/core/build_management/source_mapper_test.py | 47 | frame = 'at org.apache.lucene.util.ArrayUtil.growExact(ArrayUtil.java:400)' | CODE |
| CRITICAL | …rnal/tests/core/build_management/build_manager_test.py | 671 | self.mock.open.return_value.__enter__.return_value.unpack.assert_called_with( | CODE |
| CRITICAL | …rnal/tests/core/build_management/build_manager_test.py | 688 | self.mock.open.return_value.__enter__.return_value.unpack.assert_called_with( | CODE |
| CRITICAL | …rnal/tests/core/build_management/build_manager_test.py | 724 | self.mock.open.return_value.__enter__.return_value.unpack.assert_has_calls([ | CODE |
| CRITICAL | …rnal/tests/core/build_management/build_manager_test.py | 745 | self.mock.open.return_value.__enter__.return_value.unpack.assert_has_calls([ | CODE |
| CRITICAL | …rnal/tests/core/build_management/build_manager_test.py | 819 | self.mock.open_uri.return_value.__enter__.return_value.unpacked_size.assert_called_with( | CODE |
| CRITICAL | …rnal/tests/core/build_management/build_manager_test.py | 1283 | self.mock.open.return_value.unpack.assert_called_once_with( | CODE |
| CRITICAL | …rnal/tests/core/build_management/build_manager_test.py | 1834 | self.mock.open.return_value.__enter__.return_value.unpack.assert_called_with( | CODE |
| CRITICAL | …rnal/tests/core/build_management/build_manager_test.py | 1863 | self.mock.open.return_value.__enter__.return_value.unpack.assert_called_with( | CODE |
| CRITICAL | …rfuzz/_internal/tests/core/bot/startup/run_bot_test.py | 242 | self.mock.RemoteTaskGate.return_value.create_utask_main_jobs.assert_called_once( | CODE |
| CRITICAL | …rfuzz/_internal/tests/core/bot/startup/run_bot_test.py | 262 | self.mock.RemoteTaskGate.return_value.create_utask_main_jobs.assert_called_once( | CODE |
| CRITICAL | …rfuzz/_internal/tests/core/bot/startup/run_bot_test.py | 284 | self.mock.RemoteTaskGate.return_value.create_utask_main_jobs.assert_called_once( | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1395 | at com.google.security.wycheproof.AesGcmTest.testLargeArrayAlias(AesGcmTest.java:474) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1401 | at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1402 | at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:47) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1403 | at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1420 | at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1425 | at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:116) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1426 | at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:148) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1427 | at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:75) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1433 | at com.google.security.wycheproof.AesGcmTest.testLargeArrayAlias(AesGcmTest.java:469) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1446 | at com.google.security.wycheproof.CipherInputStreamTest.testCorruptDecrypt(CipherInputStreamTest.java:206) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1447 | at com.google.security.wycheproof.CipherInputStreamTest.testCorruptAesGcm(CipherInputStreamTest.java:243) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1453 | at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1454 | at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:47) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1455 | at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1472 | at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1477 | at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:116) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1478 | at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:148) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1479 | at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:75) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1483 | at com.google.security.wycheproof.CipherInputStreamTest.testCorruptDecrypt(CipherInputStreamTest.java:206) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1484 | at com.google.security.wycheproof.CipherInputStreamTest.testAesEax(CipherInputStreamTest.java:284) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1490 | at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1491 | at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:47) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1492 | at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1509 | at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1514 | at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:116) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1515 | at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:148) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1516 | at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:75) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1520 | at com.google.security.wycheproof.CipherOutputStreamTest.testCorruptDecrypt(CipherOutputStreamTest.java:185) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1521 | at com.google.security.wycheproof.CipherOutputStreamTest.testEmptyPlaintext(CipherOutputStreamTest.java:225) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1527 | at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1528 | at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:47) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1529 | at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1546 | at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1551 | at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:116) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1552 | at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:148) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1553 | at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:75) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1557 | at com.google.security.wycheproof.CipherOutputStreamTest.testCorruptDecrypt(CipherOutputStreamTest.java:179) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1558 | at com.google.security.wycheproof.CipherOutputStreamTest.testAesEax(CipherOutputStreamTest.java:249) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1564 | at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1565 | at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:47) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1566 | at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1583 | at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1588 | at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:116) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1589 | at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:148) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1590 | at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:75) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1594 | at com.google.security.wycheproof.CipherOutputStreamTest.testCorruptDecrypt(CipherOutputStreamTest.java:179) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1595 | at com.google.security.wycheproof.CipherOutputStreamTest.testAesGcm(CipherOutputStreamTest.java:205) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1601 | at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12) | CODE |
| 1362 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | butler.py | 144 | def _add_py_unittest_subparser(toplevel_subparsers): | CODE |
| LOW | butler.py | 198 | def _add_integration_tests_subparsers(toplevel_subparsers): | CODE |
| LOW | butler.py | 204 | def _add_weights_fuzzer_subparser(weights_subparsers): | CODE |
| LOW | butler.py | 258 | def _add_weights_batches_subparser(weights_subparsers): | CODE |
| LOW | butler.py | 282 | def _add_weights_target_subparser(weights_subparsers): | CODE |
| LOW | butler.py | 339 | def _add_schedule_tworker_fuzz_subparser(toplevel_subparsers): | CODE |
| LOW | cli/casp/README.md | 100 | def test_my_command_no_verbose(self): | CODE |
| LOW | cli/casp/src/casp/tests/utils/gcloud_test.py | 184 | def test_login_fail_then_custom_path(self, mock_is_valid, mock_confirm, | CODE |
| LOW | cli/casp/src/casp/tests/utils/gcloud_test.py | 204 | def test_decline_login_then_custom_path(self, mock_is_valid, mock_confirm, | CODE |
| LOW | cli/casp/src/casp/tests/utils/local_butler_test.py | 32 | def test_build_command_success_auto_find(self, mock_get_butler): | CODE |
| LOW | cli/casp/src/casp/tests/utils/local_butler_test.py | 42 | def test_build_command_success_explicit_path(self): | CODE |
| LOW | cli/casp/src/casp/tests/utils/local_butler_test.py | 53 | def test_build_command_flags_and_args(self, mock_get_butler): | CODE |
| LOW | cli/casp/src/casp/tests/utils/docker_test.py | 57 | def test_docker_permission_denied(self, mock_echo, mock_secho, mock_from_env): | CODE |
| LOW | cli/casp/src/casp/tests/utils/docker_test.py | 149 | def test_pull_image_docker_setup_fails(self, mock_echo, mock_secho, | CODE |
| LOW | cli/casp/src/casp/tests/utils/docker_test.py | 162 | def test_pull_image_not_found(self, mock_echo, mock_secho, | CODE |
| LOW | cli/casp/src/casp/tests/utils/docker_test.py | 233 | def test_run_command_privileged(self, mock_check_docker_setup, | CODE |
| LOW | cli/casp/src/casp/tests/utils/docker_test.py | 268 | def test_run_command_docker_setup_fails( | CODE |
| LOW | cli/casp/src/casp/tests/utils/docker_test.py | 285 | def test_run_command_pull_image_fails(self, mock_check_docker_setup, | CODE |
| LOW | cli/casp/src/casp/tests/utils/docker_test.py | 305 | def test_run_command_container_error_status( | CODE |
| LOW | cli/casp/src/casp/tests/utils/docker_test.py | 340 | def test_run_command_container_error_exception_with_stderr( | CODE |
| LOW | cli/casp/src/casp/tests/utils/docker_test.py | 363 | def test_run_command_container_error_exception_no_stderr( | CODE |
| LOW | cli/casp/src/casp/tests/utils/docker_test.py | 385 | def test_run_command_image_not_found( | CODE |
| LOW | cli/casp/src/casp/tests/utils/docker_test.py | 411 | def test_run_command_api_error(self, mock_secho, mock_check_docker_setup, | CODE |
| LOW | cli/casp/src/casp/tests/utils/docker_test.py | 435 | def test_run_command_remove_container_fails( | CODE |
| LOW | cli/casp/src/casp/tests/utils/config_test.py | 50 | def test_save_config_creates_dir_and_file(self): | CODE |
| LOW⚡ | cli/casp/src/casp/tests/utils/config_test.py | 63 | def test_load_config_file_not_exists(self): | CODE |
| LOW⚡ | cli/casp/src/casp/tests/utils/config_test.py | 70 | def test_save_and_load_config(self): | CODE |
| LOW⚡ | cli/casp/src/casp/tests/utils/config_test.py | 80 | def test_load_config_empty_file(self): | CODE |
| LOW⚡ | cli/casp/src/casp/tests/utils/config_test.py | 89 | def test_load_config_malformed_json(self): | CODE |
| LOW⚡ | cli/casp/src/casp/tests/utils/config_test.py | 99 | def test_overwrite_existing_config(self): | CODE |
| LOW | cli/casp/src/casp/tests/commands/lint_test.py | 39 | def test_lint_success_no_args(self): | CODE |
| LOW | cli/casp/src/casp/tests/commands/lint_test.py | 47 | def test_lint_success_with_path_arg(self): | CODE |
| LOW | cli/casp/src/casp/tests/commands/lint_test.py | 58 | def test_lint_success_with_path_option(self): | CODE |
| LOW | cli/casp/src/casp/tests/commands/lint_test.py | 69 | def test_lint_success_with_type_check(self): | CODE |
| LOW | cli/casp/src/casp/tests/commands/lint_test.py | 78 | def test_lint_success_with_path_and_type_check(self): | CODE |
| LOW | cli/casp/src/casp/tests/commands/lint_test.py | 98 | def test_subprocess_run_fails(self): | CODE |
| LOW | cli/casp/src/casp/tests/commands/reproduce_test.py | 68 | def test_reproduce_success_with_custom_config(self): | CODE |
| LOW | cli/casp/src/casp/tests/commands/reproduce_test.py | 107 | def test_reproduce_no_gcloud_credentials(self): | CODE |
| LOW | cli/casp/src/casp/tests/commands/reproduce_test.py | 116 | def test_reproduce_docker_command_fails(self): | CODE |
| LOW | cli/casp/src/casp/tests/commands/reproduce_test.py | 132 | def test_reproduce_with_project_option(self): | CODE |
| LOW | cli/casp/src/casp/tests/commands/init_test.py | 53 | def test_init_success_all_steps(self): | CODE |
| LOW | cli/casp/src/casp/tests/commands/init_test.py | 70 | def test_init_docker_setup_fails(self): | CODE |
| LOW | cli/casp/src/casp/tests/commands/init_test.py | 80 | def test_init_gcloud_auth_fails(self): | CODE |
| LOW | cli/casp/src/casp/tests/commands/init_test.py | 91 | def test_init_docker_pull_fails(self): | CODE |
| LOW | cli/casp/src/casp/tests/commands/init_test.py | 101 | def test_init_with_existing_config(self): | CODE |
| LOW | cli/casp/src/casp/tests/commands/init_test.py | 115 | def test_init_custom_config_path_success(self): | CODE |
| LOW | cli/casp/src/casp/tests/commands/init_test.py | 133 | def test_init_custom_config_path_not_exists(self): | CODE |
| LOW | cli/casp/src/casp/tests/commands/init_test.py | 151 | def test_init_custom_config_path_empty(self): | CODE |
| LOW | cli/casp/src/casp/tests/commands/init_test.py | 163 | def test_init_custom_config_path_empty_clears_existing(self): | CODE |
| LOW | cli/casp/src/casp/tests/commands/format_test.py | 39 | def test_format_success_no_dir(self): | CODE |
| LOW | cli/casp/src/casp/tests/commands/format_test.py | 47 | def test_format_success_with_path_option(self): | CODE |
| LOW | cli/casp/src/casp/tests/commands/format_test.py | 58 | def test_format_success_with_path(self): | CODE |
| LOW | cli/casp/src/casp/tests/commands/format_test.py | 77 | def test_subprocess_run_fails(self): | CODE |
| LOW | cli/casp/src/casp/tests/commands/package_test.py | 38 | def test_package_success_defaults(self): | CODE |
| LOW | cli/casp/src/casp/tests/commands/package_test.py | 47 | def test_package_success_with_args(self): | CODE |
| LOW | cli/casp/src/casp/tests/commands/package_test.py | 64 | def test_subprocess_run_fails(self): | CODE |
| LOW | cli/casp/src/casp/tests/commands/run_test.py | 38 | def test_run_local_success_basic(self): | CODE |
| LOW | cli/casp/src/casp/tests/commands/run_test.py | 58 | def test_run_local_success_all_options(self): | CODE |
| LOW | cli/casp/src/casp/tests/commands/run_test.py | 112 | def test_run_container_success(self): | CODE |
| LOW | cli/casp/src/casp/tests/commands/bootstrap_test.py | 55 | def test_subprocess_run_fails(self): | CODE |
| 2143 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | cloudbuild.yaml | 1 | # Copyright 2019 Google LLC | COMMENT |
| LOW | butler.py | 1 | # Copyright 2019 Google LLC | COMMENT |
| LOW | infra/terraform/main.tf | 1 | # Copyright 2023 Google LLC | COMMENT |
| LOW | infra/terraform/variables.tf | 1 | # Copyright 2023 Google LLC | COMMENT |
| LOW | infra/terraform/monitoring.tf | 1 | # Copyright 2024 Google LLC | COMMENT |
| LOW | docker/build-immutable.sh | 1 | #!/bin/bash -ex | COMMENT |
| LOW | docker/cloudbuild.yaml | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | docker/build.sh | 1 | #!/bin/bash -ex | COMMENT |
| LOW | docker/build_on_container_builder.sh | 1 | #!/bin/bash | COMMENT |
| LOW | docker/immutable-cloudbuild.yaml | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | docker/fuchsia/start.sh | 1 | #!/bin/bash -ex | COMMENT |
| LOW | docker/chromium/builder/setup_depot_tools.sh | 1 | #!/bin/bash | COMMENT |
| LOW | docker/chromium/builder/setup_gerrit.sh | 1 | #!/bin/bash | COMMENT |
| LOW | docker/chromium/builder/start.sh | 1 | #!/bin/bash -ex | COMMENT |
| LOW | docker/chromium/tests-syncer/setup_depot_tools.sh | 1 | #!/bin/bash | COMMENT |
| LOW | docker/chromium/tests-syncer/setup_gerrit.sh | 1 | #!/bin/bash | COMMENT |
| LOW | docker/chromium/tests-syncer/start.sh | 1 | #!/bin/bash -ex | COMMENT |
| LOW | docker/chromium/base/setup.sh | 1 | #!/bin/bash -ex | COMMENT |
| LOW | docker/chromium/base/setup_x.sh | 1 | #!/bin/bash -ex | COMMENT |
| LOW | docker/chromium/base/start.sh | 1 | #!/bin/bash -ex | COMMENT |
| LOW | docker/base/setup_clusterfuzz.sh | 1 | #!/bin/bash -ex | COMMENT |
| LOW | docker/base/setup_mock_metadata.sh | 1 | #!/bin/bash -ex | COMMENT |
| LOW | docker/base/start_clusterfuzz.sh | 1 | #!/bin/bash -ex | COMMENT |
| LOW | docker/base/start.sh | 1 | #!/bin/bash -ex | COMMENT |
| LOW | docker/base/setup_common.sh | 1 | #!/bin/bash -ex | COMMENT |
| LOW | docker/oss-fuzz/base/start.sh | 1 | #!/bin/bash -ex | COMMENT |
| LOW | deploy/cloudbuild.yaml | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | …rces/platform/android/third_party/asan_device_setup.sh | 1 | #!/bin/bash | COMMENT |
| LOW | docs/_config.yml | 1 | # Welcome to Jekyll! | COMMENT |
| LOW | docs/setting-up-fuzzing/build_afl.bash | 1 | #! /bin/bash | COMMENT |
| LOW | cli/casp/src/casp/__init__.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | cli/casp/src/casp/main.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | cli/casp/src/casp/tests/__init__.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | cli/casp/src/casp/tests/utils/gcloud_test.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | cli/casp/src/casp/tests/utils/__init__.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | cli/casp/src/casp/tests/utils/local_butler_test.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | cli/casp/src/casp/tests/utils/docker_test.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | cli/casp/src/casp/tests/utils/config_test.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | cli/casp/src/casp/tests/commands/lint_test.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | cli/casp/src/casp/tests/commands/__init__.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | cli/casp/src/casp/tests/commands/reproduce_test.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | cli/casp/src/casp/tests/commands/init_test.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | cli/casp/src/casp/tests/commands/format_test.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | cli/casp/src/casp/tests/commands/package_test.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | cli/casp/src/casp/tests/commands/run_test.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | cli/casp/src/casp/tests/commands/bootstrap_test.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | cli/casp/src/casp/utils/docker_utils.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | cli/casp/src/casp/utils/config.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | cli/casp/src/casp/utils/gcloud.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | cli/casp/src/casp/utils/container.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | cli/casp/src/casp/utils/local_butler.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | cli/casp/src/casp/utils/path_utils.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | cli/casp/src/casp/commands/package.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | cli/casp/src/casp/commands/bootstrap.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | cli/casp/src/casp/commands/run.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | cli/casp/src/casp/commands/run_bot.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | cli/casp/src/casp/commands/version.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | cli/casp/src/casp/commands/deploy.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | cli/casp/src/casp/commands/reproduce.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | cli/casp/src/casp/commands/remote.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| 1344 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …sterfuzz/_internal/protos/untrusted_runner_pb2_grpc.py | 0 | client and server classes corresponding to protobuf-defined services. | STRING |
| HIGH | src/clusterfuzz/_internal/protos/heartbeat_pb2_grpc.py | 0 | client and server classes corresponding to protobuf-defined services. | STRING |
| HIGH | …clusterfuzz/_internal/protos/process_state_pb2_grpc.py | 0 | client and server classes corresponding to protobuf-defined services. | STRING |
| HIGH | src/clusterfuzz/_internal/protos/swarming_pb2_grpc.py | 0 | client and server classes corresponding to protobuf-defined services. | STRING |
| HIGH | …c/clusterfuzz/_internal/protos/uworker_msg_pb2_grpc.py | 0 | client and server classes corresponding to protobuf-defined services. | STRING |
| HIGH | …internal/tests/core/build_management/revisions_test.py | 0 | helper function to read the contents of a data file. | STRING |
| HIGH | …internal/tests/appengine/handlers/fuzzer_stats_test.py | 0 | helper function to read the contents of a data file. | STRING |
| HIGH | …al/tests/appengine/handlers/cron/project_setup_test.py | 0 | helper function to read the contents of a data file. | STRING |
| HIGH | …ernal/tests/core/bot/tasks/utasks/analyze_task_test.py | 0 | checks that an output with an error is handled properly. | STRING |
| HIGH | …l/tests/core/bot/tasks/utasks/progression_task_test.py | 0 | checks that an output with an error is handled properly. | STRING |
| HIGH | …nal/tests/core/bot/tasks/utasks/symbolize_task_test.py | 0 | checks that an output with an error is handled properly. | STRING |
| HIGH | …ernal/tests/core/bot/tasks/utasks/analyze_task_test.py | 0 | tests utask_postprocess behaviour when there is a crash on latest revision. | STRING |
| HIGH | …l/tests/core/bot/tasks/utasks/progression_task_test.py | 0 | tests utask_postprocess behaviour when there is a crash on latest revision. | STRING |
| HIGH | …nal/tests/core/bot/tasks/utasks/symbolize_task_test.py | 0 | tests utask_postprocess behaviour when there is a crash on latest revision. | STRING |
| HIGH | …/clusterfuzz/_internal/bot/fuzzers/libFuzzer/engine.py | 0 | return the maximum additional timeout in seconds for additional operations in fuzz() (e.g. merging back new items). args | STRING |
| HIGH | …/clusterfuzz/_internal/bot/fuzzers/centipede/engine.py | 0 | return the maximum additional timeout in seconds for additional operations in fuzz() (e.g. merging back new items). args | STRING |
| HIGH | src/clusterfuzz/fuzz/engine.py | 0 | return the maximum additional timeout in seconds for additional operations in fuzz() (e.g. merging back new items). args | STRING |
| HIGH | …/clusterfuzz/_internal/bot/fuzzers/libFuzzer/engine.py | 0 | prepares for a fuzzing session, by generating options. args: corpus_dir: the main corpus directory. target_path: path to | STRING |
| HIGH | src/clusterfuzz/_internal/bot/fuzzers/afl/engine.py | 0 | prepares for a fuzzing session, by generating options. args: corpus_dir: the main corpus directory. target_path: path to | STRING |
| HIGH | …terfuzz/_internal/bot/fuzzers/googlefuzztest/engine.py | 0 | prepares for a fuzzing session, by generating options. args: corpus_dir: the main corpus directory. target_path: path to | STRING |
| HIGH | …/clusterfuzz/_internal/bot/fuzzers/honggfuzz/engine.py | 0 | prepares for a fuzzing session, by generating options. args: corpus_dir: the main corpus directory. target_path: path to | STRING |
| HIGH | src/clusterfuzz/fuzz/engine.py | 0 | prepares for a fuzzing session, by generating options. args: corpus_dir: the main corpus directory. target_path: path to | STRING |
| HIGH | …/clusterfuzz/_internal/bot/fuzzers/centipede/engine.py | 0 | prepares for a fuzzing session, by generating options. args: corpus_dir: the main corpus directory. target_path: path to | STRING |
| HIGH | …/clusterfuzz/_internal/bot/fuzzers/libFuzzer/engine.py | 0 | runs a fuzz session. args: target_path: path to the target. options: the fuzzoptions object returned by prepare(). repro | STRING |
| HIGH | src/clusterfuzz/_internal/bot/fuzzers/afl/engine.py | 0 | runs a fuzz session. args: target_path: path to the target. options: the fuzzoptions object returned by prepare(). repro | STRING |
| HIGH | …terfuzz/_internal/bot/fuzzers/googlefuzztest/engine.py | 0 | runs a fuzz session. args: target_path: path to the target. options: the fuzzoptions object returned by prepare(). repro | STRING |
| HIGH | …/clusterfuzz/_internal/bot/fuzzers/honggfuzz/engine.py | 0 | runs a fuzz session. args: target_path: path to the target. options: the fuzzoptions object returned by prepare(). repro | STRING |
| HIGH | src/clusterfuzz/fuzz/engine.py | 0 | runs a fuzz session. args: target_path: path to the target. options: the fuzzoptions object returned by prepare(). repro | STRING |
| HIGH | …/clusterfuzz/_internal/bot/fuzzers/centipede/engine.py | 0 | runs a fuzz session. args: target_path: path to the target. options: the fuzzoptions object returned by prepare(). repro | STRING |
| HIGH | …/clusterfuzz/_internal/bot/fuzzers/libFuzzer/engine.py | 0 | optional (but recommended): run corpus minimization. args: target_path: path to the target. arguments: additional argume | STRING |
| HIGH | …terfuzz/_internal/bot/fuzzers/googlefuzztest/engine.py | 0 | optional (but recommended): run corpus minimization. args: target_path: path to the target. arguments: additional argume | STRING |
| HIGH | src/clusterfuzz/fuzz/engine.py | 0 | optional (but recommended): run corpus minimization. args: target_path: path to the target. arguments: additional argume | STRING |
| HIGH | …/clusterfuzz/_internal/bot/fuzzers/libFuzzer/engine.py | 0 | minimizes a testcase. args: target_path: path to the target. arguments: additional arguments needed for testcase minimiz | STRING |
| HIGH | …terfuzz/_internal/bot/fuzzers/googlefuzztest/engine.py | 0 | minimizes a testcase. args: target_path: path to the target. arguments: additional arguments needed for testcase minimiz | STRING |
| HIGH | …/clusterfuzz/_internal/bot/fuzzers/honggfuzz/engine.py | 0 | minimizes a testcase. args: target_path: path to the target. arguments: additional arguments needed for testcase minimiz | STRING |
| HIGH | src/clusterfuzz/fuzz/engine.py | 0 | minimizes a testcase. args: target_path: path to the target. arguments: additional arguments needed for testcase minimiz | STRING |
| HIGH | …/clusterfuzz/_internal/bot/fuzzers/centipede/engine.py | 0 | minimizes a testcase. args: target_path: path to the target. arguments: additional arguments needed for testcase minimiz | STRING |
| HIGH | …/clusterfuzz/_internal/bot/fuzzers/libFuzzer/engine.py | 0 | cleanses a testcase. args: target_path: path to the target. arguments: additional arguments needed for testcase cleanse. | STRING |
| HIGH | …terfuzz/_internal/bot/fuzzers/googlefuzztest/engine.py | 0 | cleanses a testcase. args: target_path: path to the target. arguments: additional arguments needed for testcase cleanse. | STRING |
| HIGH | …/clusterfuzz/_internal/bot/fuzzers/honggfuzz/engine.py | 0 | cleanses a testcase. args: target_path: path to the target. arguments: additional arguments needed for testcase cleanse. | STRING |
| HIGH | src/clusterfuzz/fuzz/engine.py | 0 | cleanses a testcase. args: target_path: path to the target. arguments: additional arguments needed for testcase cleanse. | STRING |
| HIGH | …/clusterfuzz/_internal/bot/fuzzers/centipede/engine.py | 0 | cleanses a testcase. args: target_path: path to the target. arguments: additional arguments needed for testcase cleanse. | STRING |
| HIGH | src/clusterfuzz/_internal/bot/fuzzers/afl/engine.py | 0 | reproduces a crash given an input. args: target_path: path to the target. input_path: path to the reproducer input. argu | STRING |
| HIGH | …terfuzz/_internal/bot/fuzzers/googlefuzztest/engine.py | 0 | reproduces a crash given an input. args: target_path: path to the target. input_path: path to the reproducer input. argu | STRING |
| HIGH | …/clusterfuzz/_internal/bot/fuzzers/honggfuzz/engine.py | 0 | reproduces a crash given an input. args: target_path: path to the target. input_path: path to the reproducer input. argu | STRING |
| HIGH | …/clusterfuzz/_internal/bot/fuzzers/centipede/engine.py | 0 | reproduces a crash given an input. args: target_path: path to the target. input_path: path to the reproducer input. argu | STRING |
| HIGH | src/clusterfuzz/_internal/bot/fuzzers/afl/engine.py | 0 | runs corpus minimization. args: target_path: path to the target. arguments: additional arguments needed for corpus minim | STRING |
| HIGH | …/clusterfuzz/_internal/bot/fuzzers/honggfuzz/engine.py | 0 | runs corpus minimization. args: target_path: path to the target. arguments: additional arguments needed for corpus minim | STRING |
| HIGH | …/clusterfuzz/_internal/bot/fuzzers/centipede/engine.py | 0 | runs corpus minimization. args: target_path: path to the target. arguments: additional arguments needed for corpus minim | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | src/python/bot/startup/run.py | 72 | except Exception: | CODE |
| LOW | src/python/bot/startup/run.py | 107 | except Exception: | CODE |
| LOW | src/python/bot/startup/run.py | 128 | except Exception: | CODE |
| LOW | src/python/bot/startup/run.py | 150 | except Exception: | CODE |
| LOW | src/python/bot/startup/run.py | 168 | except Exception as e: | CODE |
| LOW | src/python/bot/startup/run.py | 186 | except Exception: | CODE |
| LOW | src/python/bot/startup/run.py | 211 | except Exception: | CODE |
| LOW | src/python/bot/startup/run_bot.py | 237 | except Exception: | CODE |
| LOW | src/python/bot/startup/run_bot.py | 299 | except Exception as ex: | CODE |
| LOW | src/python/bot/startup/run_bot.py | 379 | except Exception: | CODE |
| LOW | src/python/bot/startup/run_cron.py | 69 | except Exception as e: | CODE |
| LOW | src/python/bot/startup/heartbeat.py | 71 | except Exception: | CODE |
| LOW | src/python/bot/startup/heartbeat.py | 85 | except Exception: | CODE |
| LOW | src/python/bot/startup/heartbeat.py | 113 | except Exception: | CODE |
| LOW | src/python/bot/startup/run_heartbeat.py | 69 | except Exception: | CODE |
| LOW | src/appengine/libs/gcs.py | 58 | except Exception as e: | CODE |
| LOW | src/appengine/libs/helpers.py | 138 | except Exception: | CODE |
| LOW | src/appengine/libs/helpers.py | 152 | except Exception: | CODE |
| LOW | src/appengine/handlers/viewer.py | 60 | except Exception: | CODE |
| LOW | src/appengine/handlers/fuzzer_stats.py | 521 | except Exception as e: | CODE |
| LOW | src/appengine/handlers/fuzzer_stats.py | 531 | except Exception as e: | CODE |
| LOW | src/appengine/handlers/upload_testcase.py | 444 | except Exception as e: | CODE |
| LOW | src/appengine/handlers/upload_testcase.py | 459 | except Exception as e: | CODE |
| LOW | src/appengine/handlers/upload_testcase.py | 793 | except Exception as e: | CODE |
| LOW | src/appengine/handlers/base_handler.py | 254 | except Exception: | CODE |
| LOW | src/appengine/handlers/base_handler.py | 279 | except Exception as exception: | CODE |
| LOW | src/local/butler/deploy.py | 451 | except Exception as ex: | CODE |
| LOW | src/local/butler/reproduce.py | 84 | except Exception as e: | CODE |
| LOW⚡ | src/local/butler/integration_tests.py | 56 | except Exception: | CODE |
| MEDIUM⚡ | src/local/butler/integration_tests.py | 57 | print('Error occurred:') | CODE |
| LOW | src/local/butler/run_server.py | 99 | except Exception: | CODE |
| LOW | src/local/butler/lint.py | 159 | except Exception as e: | CODE |
| LOW | src/local/butler/scripts/grouper_experiment.py | 722 | except Exception as e: | CODE |
| LOW | src/local/butler/scripts/grouper_experiment.py | 732 | except Exception as e: | CODE |
| LOW | src/local/butler/scripts/migrate_blobs.py | 52 | except Exception: | CODE |
| LOW⚡ | src/local/butler/scripts/build_attributes.py | 87 | except Exception: | CODE |
| LOW⚡ | src/local/butler/scripts/build_attributes.py | 91 | except Exception: | CODE |
| MEDIUM⚡ | src/local/butler/scripts/build_attributes.py | 92 | print('Error: %s %s' % (testcase.key.id(), sys.exc_info())) | CODE |
| LOW | …scripts/migration/monorail_to_issuetracker_migrator.py | 103 | except Exception as e: | CODE |
| LOW | …scripts/migration/monorail_to_issuetracker_migrator.py | 111 | except Exception as ie: | CODE |
| LOW | …terfuzz/_internal/google_cloud_utils/compute_engine.py | 66 | except Exception: | CODE |
| LOW | …terfuzz/_internal/google_cloud_utils/compute_engine.py | 97 | except Exception as e: | CODE |
| LOW | src/clusterfuzz/_internal/google_cloud_utils/gsutil.py | 183 | except Exception: | CODE |
| MEDIUM | src/clusterfuzz/_internal/google_cloud_utils/storage.py | 777 | def from_key(key): | CODE |
| LOW⚡ | src/clusterfuzz/_internal/google_cloud_utils/storage.py | 1337 | except Exception: | CODE |
| LOW⚡ | src/clusterfuzz/_internal/google_cloud_utils/storage.py | 1347 | except Exception: | CODE |
| LOW⚡ | src/clusterfuzz/_internal/google_cloud_utils/storage.py | 1360 | except Exception: | CODE |
| LOW | src/clusterfuzz/_internal/google_cloud_utils/storage.py | 780 | except Exception: | CODE |
| LOW | …rfuzz/_internal/google_cloud_utils/compute_metadata.py | 51 | except Exception: | CODE |
| LOW | src/clusterfuzz/_internal/metrics/monitor.py | 88 | except Exception as e: | CODE |
| LOW | src/clusterfuzz/_internal/metrics/monitor.py | 129 | except Exception as e: | CODE |
| LOW | src/clusterfuzz/_internal/metrics/logs.py | 216 | except Exception as ex: | CODE |
| LOW | src/clusterfuzz/_internal/metrics/logs.py | 643 | except Exception: | CODE |
| LOW | src/clusterfuzz/_internal/metrics/logs.py | 824 | except Exception: | CODE |
| LOW | src/clusterfuzz/_internal/metrics/logs.py | 1085 | except Exception as e: | CODE |
| LOW | src/clusterfuzz/_internal/metrics/logs.py | 1109 | except Exception as e: | CODE |
| LOW | src/clusterfuzz/_internal/metrics/logs.py | 1146 | except Exception as e: | CODE |
| LOW | src/clusterfuzz/_internal/metrics/logs.py | 1166 | except Exception as e: | CODE |
| LOW | src/clusterfuzz/_internal/metrics/logs.py | 1195 | except Exception as e: | CODE |
| LOW | src/clusterfuzz/_internal/metrics/profiler.py | 38 | except Exception: | CODE |
| 96 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …rces/platform/android/third_party/asan_device_setup.sh | 6 | # This file is distributed under the University of Illinois Open Source | COMMENT |
| MEDIUM⚡ | cli/casp/src/casp/tests/utils/config_test.py | 84 | f.write('') # Create an empty file | CODE |
| MEDIUM | src/appengine/handlers/upload_testcase.py | 539 | # Create a job to unpack an archive. | COMMENT |
| MEDIUM | src/appengine/handlers/upload_testcase.py | 568 | # Create a testcase metadata object to show the user their upload. | COMMENT |
| MEDIUM | src/local/butler/create_config.py | 242 | # Create the bucket if it does not exist. | COMMENT |
| MEDIUM | …sterfuzz/_internal/google_cloud_utils/google_groups.py | 177 | # Create a membership object with a role type MEMBER | COMMENT |
| MEDIUM | …sterfuzz/_internal/google_cloud_utils/google_groups.py | 186 | # Create a membership using the group ID and the membership object | COMMENT |
| MEDIUM | src/clusterfuzz/_internal/platforms/android/device.py | 179 | # Create a list of property name and names to be used in local.prop file. | COMMENT |
| MEDIUM⚡ | src/clusterfuzz/_internal/fuzzing/leak_blacklist.py | 117 | # Create the directory if it does not exists, since we need to write to it. | COMMENT |
| MEDIUM | …sterfuzz/_internal/protos/untrusted_runner_pb2_grpc.py | 387 | # This class is part of an EXPERIMENTAL API. | COMMENT |
| MEDIUM | src/clusterfuzz/_internal/protos/heartbeat_pb2_grpc.py | 64 | # This class is part of an EXPERIMENTAL API. | COMMENT |
| MEDIUM | …lusterfuzz/_internal/build_management/build_manager.py | 219 | # Create the root build directory for this job. | COMMENT |
| MEDIUM | src/clusterfuzz/_internal/k8s/service.py | 148 | # Define the context with all the dynamic values. | COMMENT |
| MEDIUM | …zz/_internal/tests/core/datastore/feature_flag_test.py | 28 | # Create a boolean feature flag. | COMMENT |
| MEDIUM | …zz/_internal/tests/core/datastore/feature_flag_test.py | 34 | # Create a float feature flag. | COMMENT |
| MEDIUM⚡ | …lusterfuzz/_internal/tests/core/system/archive_test.py | 69 | # Create a temporary TAR archive file on disk. | COMMENT |
| MEDIUM⚡ | …lusterfuzz/_internal/tests/core/system/archive_test.py | 73 | # Create a malicious archive with an absolute path payload. | COMMENT |
| MEDIUM⚡ | …lusterfuzz/_internal/tests/core/system/archive_test.py | 76 | # Creating a TarInfo object with an absolute path. | COMMENT |
| MEDIUM | …nternal/tests/core/bot/tasks/utasks/uworker_io_test.py | 129 | # Create a mocked version of write_data so that when we upload the uworker | COMMENT |
| MEDIUM | …nternal/tests/core/bot/tasks/utasks/uworker_io_test.py | 146 | # Create a mocked version of download_signed_url that will read the data | COMMENT |
| MEDIUM | …nternal/tests/core/bot/tasks/utasks/uworker_io_test.py | 195 | # Create a version of upload_signed_url that will "upload" the data to a | COMMENT |
| MEDIUM | …internal/tests/core/bot/tasks/utasks/fuzz_task_test.py | 1267 | # Create the correct version file to make the fuzzer appear up-to-date on disk | COMMENT |
| MEDIUM | …/untrusted_runner/untrusted_runner_integration_test.py | 522 | # This file is as good as any. | COMMENT |
| MEDIUM | …_internal/tests/core/bot/fuzzers/engine_common_test.py | 584 | # Create an arbitrary file with a hash name that is different from this | COMMENT |
| MEDIUM⚡ | …ternal/tests/core/bot/fuzzers/afl/afl_launcher_test.py | 772 | # Create an arbitrary number of features. | COMMENT |
| MEDIUM | …/core/bot/fuzzers/afl/afl_launcher_integration_test.py | 82 | # Create the queue directory within AFL's output directory. | COMMENT |
| MEDIUM | …z/_internal/tests/core/remote_task/remote_task_test.py | 122 | # Create a new gate instance to trigger __init__ again. | COMMENT |
| MEDIUM | …uzz/_internal/tests/appengine/handlers/fuzzers_test.py | 199 | # Create a Linux job. | COMMENT |
| MEDIUM | …uzz/_internal/tests/appengine/handlers/fuzzers_test.py | 231 | # Create a Windows job. | COMMENT |
| MEDIUM | src/clusterfuzz/_internal/datastore/data_handler.py | 781 | # Create the testcase. | COMMENT |
| MEDIUM | src/clusterfuzz/_internal/datastore/data_handler.py | 1499 | # Create the job to analyze the testcase. | COMMENT |
| MEDIUM | src/clusterfuzz/_internal/system/archive.py | 435 | """This class is a very simple file-like object representation of a zip file | STRING |
| MEDIUM | src/clusterfuzz/_internal/bot/testcase_manager.py | 1097 | # Create a file in user profile directory based on format: | COMMENT |
| MEDIUM | src/clusterfuzz/_internal/bot/testcase_manager.py | 1173 | # Create a blank command line with no file to run and no http. | COMMENT |
| MEDIUM | src/clusterfuzz/_internal/bot/testcase_manager.py | 1204 | # Initialize helper variables. | COMMENT |
| MEDIUM | src/clusterfuzz/_internal/bot/tasks/setup.py | 888 | # Create the archive. | COMMENT |
| MEDIUM | src/clusterfuzz/_internal/bot/tasks/utasks/fuzz_task.py | 1790 | # Create a dict to store metadata specific to each testcase. | COMMENT |
| MEDIUM | …clusterfuzz/_internal/bot/tasks/utasks/analyze_task.py | 408 | # Initialize some variables. | COMMENT |
| MEDIUM | src/clusterfuzz/_internal/bot/tasks/utasks/__init__.py | 35 | # Define an alias to appease pylint. | COMMENT |
| MEDIUM⚡ | …c/clusterfuzz/_internal/bot/tasks/utasks/uworker_io.py | 35 | # Define an alias to appease pylint. | COMMENT |
| MEDIUM | …ernal/crash_analysis/stack_parsing/stack_symbolizer.py | 19 | # This file is distributed under the University of Illinois Open Source | COMMENT |
| MEDIUM | src/clusterfuzz/_internal/cron/project_setup.py | 385 | # Create a new one in those cases. | COMMENT |
| MEDIUM | src/clusterfuzz/_internal/cron/oss_fuzz_cc_groups.py | 78 | # Create the group and bail out since the CIG API might delay to create a | COMMENT |
| MEDIUM | src/clusterfuzz/_internal/cron/grouper.py | 69 | # This method is useful so that an object calling it gets a similar result | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | cli/casp/src/casp/utils/local_butler.py | 24 | Builds a butler command for local execution. Args: subcommand: The butler subcommand to execute (e.g., 'format'). | STRING |
| HIGH | …zz/_internal/platforms/android/android_build_v4_api.py | 54 | Validates credentials and constructs an authenticated client instance. Args: credentials: Service account cre | STRING |
| HIGH | …lusterfuzz/_internal/build_management/build_manager.py | 486 | Gets a handle on a build archive for the current build. Depending on the provided parameters, this function might do | STRING |
| HIGH | …lusterfuzz/_internal/build_management/build_archive.py | 472 | Open the archive and gets the appropriate build archive based on the provided archive information. Args: read | STRING |
| HIGH | …lusterfuzz/_internal/build_management/build_archive.py | 500 | Opens the archive and gets the appropriate build archive based on the `archive_path`. The resulting object is usable a | STRING |
| HIGH | src/clusterfuzz/_internal/system/archive.py | 390 | Opens the archive and gets the appropriate archive reader based on the `archive_path`. If `file_obj` is not none, the | STRING |
| HIGH | …/clusterfuzz/_internal/bot/fuzzers/libFuzzer/engine.py | 380 | Reproduce a crash given an input. Args: target_path: Path to the target. input_path: Path to the reprod | STRING |
| HIGH | …/clusterfuzz/_internal/bot/fuzzers/libFuzzer/engine.py | 497 | Optional (but recommended): run corpus minimization. Args: target_path: Path to the target. arguments: | STRING |
| HIGH | …/clusterfuzz/_internal/bot/fuzzers/libFuzzer/engine.py | 552 | Optional (but recommended): Minimize a testcase. Args: target_path: Path to the target. arguments: Addi | STRING |
| HIGH | …/clusterfuzz/_internal/bot/fuzzers/libFuzzer/engine.py | 586 | Optional (but recommended): Cleanse a testcase. Args: target_path: Path to the target. arguments: Addit | STRING |
| HIGH | …terfuzz/_internal/bot/fuzzers/googlefuzztest/engine.py | 120 | Optional (but recommended): run corpus minimization. Args: target_path: Path to the target. arguments: | STRING |
| HIGH | …terfuzz/_internal/bot/fuzzers/googlefuzztest/engine.py | 142 | Optional (but recommended): Minimize a testcase. Args: target_path: Path to the target. arguments: Addi | STRING |
| HIGH | …terfuzz/_internal/bot/fuzzers/googlefuzztest/engine.py | 160 | Optional (but recommended): Cleanse a testcase. Args: target_path: Path to the target. arguments: Addit | STRING |
| HIGH | …/clusterfuzz/_internal/bot/fuzzers/centipede/engine.py | 635 | Minimizes a testcase. Args: target_path: Path to the target. arguments: Additional arguments needed for | STRING |
| HIGH | …/clusterfuzz/_internal/bot/fuzzers/centipede/engine.py | 676 | Cleanses a testcase. Args: target_path: Path to the target. arguments: Additional arguments needed for t | STRING |
| HIGH | …/clusterfuzz/_internal/bot/fuzzers/honggfuzz/engine.py | 277 | Optional (but recommended): Minimize a testcase. Args: target_path: Path to the target. arguments: Addit | STRING |
| HIGH | …/clusterfuzz/_internal/bot/fuzzers/honggfuzz/engine.py | 292 | Optional (but recommended): Cleanse a testcase. Args: target_path: Path to the target. arguments: Additi | STRING |
| HIGH | src/clusterfuzz/_internal/base/utils.py | 125 | Launches an HTTP GET request with retries. Args: url: Target URL for the GET request. params: Optional | STRING |
| HIGH | src/clusterfuzz/_internal/base/utils.py | 166 | Post the provided data and headers to the provided url. The request is retried `URL_REQUEST_RETRIES` times. To avoid | STRING |
| HIGH | src/clusterfuzz/_internal/swarming/api.py | 102 | Makes a pRPC request to the Swarming API. Args: endpoint: The pRPC endpoint (e.g. "swarming.v2.Tasks/NewTask" | STRING |
| HIGH | src/clusterfuzz/_internal/swarming/api.py | 141 | Schedules a task on swarming. Args: task_request: The NewTaskRequest proto message. Returns: | STRING |
| HIGH | src/clusterfuzz/_internal/swarming/api.py | 176 | Counts tasks on swarming. Args: count_request: The TasksCountRequest proto message. Returns: | STRING |
| HIGH | src/clusterfuzz/fuzz/engine.py | 127 | Reproduce a crash given an input. Args: target_path: Path to the target. input_path: Path to the reprod | STRING |
| HIGH | src/clusterfuzz/fuzz/engine.py | 145 | Optional (but recommended): run corpus minimization. Args: target_path: Path to the target. arguments: | STRING |
| HIGH | src/clusterfuzz/fuzz/engine.py | 167 | Optional (but recommended): Minimize a testcase. Args: target_path: Path to the target. arguments: Addi | STRING |
| HIGH | src/clusterfuzz/fuzz/engine.py | 185 | Optional (but recommended): Cleanse a testcase. Args: target_path: Path to the target. arguments: Addit | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | deploy/cloudbuild.yaml | 73 | # Check if the _PROJECT substitution was provided. | COMMENT |
| LOW⚡ | deploy/cloudbuild.yaml | 114 | # Check if the metadata value has been updated | COMMENT |
| LOW | local/install_deps_linux.bash | 54 | # Check if the distro is supported. | COMMENT |
| LOW | local/install_deps_linux.bash | 71 | # Check if the architecture is supported. | COMMENT |
| LOW | src/appengine/handlers/upload_testcase.py | 243 | # Check if this is an external user with access to certain fuzzers/jobs. | COMMENT |
| LOW | src/local/butler/scripts/upload_fuzzer.py | 108 | # Check if the fuzzer already exists to determine whether to edit or create. | COMMENT |
| LOW | src/clusterfuzz/_internal/metrics/events.py | 508 | # Check if testcase has an associated issue. | COMMENT |
| LOW | src/clusterfuzz/_internal/metrics/logs.py | 206 | # Check if it's a NamedTuple | COMMENT |
| LOW | src/clusterfuzz/_internal/platforms/android/wifi.py | 63 | # Check if wifi needs to be enabled. If not, then no need to modify the | COMMENT |
| LOW | …fuzz/_internal/platforms/android/symbols_downloader.py | 61 | # Check if we already have the symbols locally. | COMMENT |
| LOW⚡ | src/clusterfuzz/_internal/platforms/android/util.py | 53 | # Check if device is deprecated | COMMENT |
| LOW⚡ | src/clusterfuzz/_internal/platforms/android/util.py | 57 | # Check if branch is deprecated | COMMENT |
| LOW | src/clusterfuzz/_internal/platforms/android/flash.py | 68 | # Check if our local build matches the latest build. If not, we will | COMMENT |
| LOW | src/clusterfuzz/_internal/platforms/android/flash.py | 125 | # Check if a flash is needed based on last recorded flash time. | COMMENT |
| LOW | src/clusterfuzz/_internal/platforms/android/flash.py | 147 | # Check if both |BUILD_BRANCH| and |BUILD_TARGET| environment variables | COMMENT |
| LOW | src/clusterfuzz/_internal/platforms/android/adb.py | 668 | # Check if we are already running as root. If yes bail out. | COMMENT |
| LOW | src/clusterfuzz/_internal/platforms/android/adb.py | 904 | # Write file with desired contents. | COMMENT |
| LOW⚡ | src/clusterfuzz/_internal/datastore/data_handler.py | 1158 | # Check if the heartbeat was recently updated. If yes, bail out. | COMMENT |
| LOW | src/clusterfuzz/_internal/system/process_handler.py | 237 | # Check if we need to bail out on process exit. | COMMENT |
| LOW | src/clusterfuzz/_internal/system/process_handler.py | 265 | # Check if a reboot has happened, if yes, append log output before reboot | COMMENT |
| LOW | src/clusterfuzz/_internal/system/environment.py | 207 | # Check if UBSAN is enabled as well for this ASAN build. | COMMENT |
| LOW | src/clusterfuzz/_internal/bot/testcase_manager.py | 1002 | # Check if the file to run is in fuzzed testcases folder. If yes, then we | COMMENT |
| LOW | src/clusterfuzz/_internal/bot/testcase_manager.py | 1016 | # Check if the testcase needs to be loaded over http. | COMMENT |
| LOW | src/clusterfuzz/_internal/bot/testcase_manager.py | 1212 | # Check if the build is bad. | COMMENT |
| LOW | src/clusterfuzz/_internal/bot/tasks/trials.py | 109 | # Check if the flag is contradicted by an already added flag | COMMENT |
| LOW | src/clusterfuzz/_internal/bot/tasks/trials.py | 112 | # Check if the flag contradicts an already added flag | COMMENT |
| LOW | src/clusterfuzz/_internal/bot/tasks/setup.py | 453 | # Check if data bundle is up to date. If yes, skip the update. | COMMENT |
| LOW | src/clusterfuzz/_internal/bot/tasks/setup.py | 761 | # Check if we recently synced. | COMMENT |
| LOW | src/clusterfuzz/_internal/bot/tasks/update_task.py | 303 | # Check if we have a valid tests url. | COMMENT |
| LOW | src/clusterfuzz/_internal/bot/tasks/commands.py | 380 | # Check if the device or branch is deprecated. | COMMENT |
| LOW | …lusterfuzz/_internal/bot/tasks/utasks/minimize_task.py | 429 | # Check if we have an application path. If not, our build failed | COMMENT |
| LOW | src/clusterfuzz/_internal/bot/tasks/utasks/fuzz_task.py | 580 | # Check if the corpus was recently synced. If yes, set a flag so that we | COMMENT |
| LOW | src/clusterfuzz/_internal/bot/tasks/utasks/fuzz_task.py | 1965 | # Check if we have an application path. If not, our build failed | COMMENT |
| LOW | src/clusterfuzz/_internal/bot/tasks/utasks/fuzz_task.py | 1971 | # Check if we have a bad build, i.e. one that crashes on startup. | COMMENT |
| LOW | …clusterfuzz/_internal/bot/tasks/utasks/analyze_task.py | 162 | # Check if we have an application path. If not, our build failed | COMMENT |
| LOW | …sterfuzz/_internal/bot/tasks/utasks/fuzz_task_knobs.py | 114 | # Check if UBSan is enabled in this ASan build. If not, can't disable it. | COMMENT |
| LOW | …clusterfuzz/_internal/bot/tasks/utasks/variant_task.py | 123 | # Check if we have an application path. If not, our build failed to setup | COMMENT |
| LOW | …sterfuzz/_internal/bot/tasks/utasks/regression_task.py | 566 | # Check if we made progress at all. If this task already resumed a previous | COMMENT |
| LOW | …lusterfuzz/_internal/bot/untrusted_runner/untrusted.py | 72 | # Check if there is a in-progress RPC. | COMMENT |
| LOW | src/clusterfuzz/_internal/bot/init_scripts/android.py | 35 | # Check if we need to reflash device to latest build. | COMMENT |
| LOW | src/clusterfuzz/_internal/bot/fuzzers/engine_common.py | 192 | # Check if we exceeded our timeout. If yes, do no more mutations and break. | COMMENT |
| LOW | …/clusterfuzz/_internal/bot/fuzzers/libFuzzer/engine.py | 316 | # Check if we crashed, and get the crash testcase path. | COMMENT |
| LOW | src/clusterfuzz/_internal/bot/fuzzers/afl/launcher.py | 516 | # Set paths to afl tools. | COMMENT |
| LOW | src/clusterfuzz/_internal/bot/fuzzers/afl/launcher.py | 526 | # Set this to None so we can tell if it has never been set or if it's just | COMMENT |
| LOW⚡ | …clusterfuzz/_internal/crash_analysis/crash_analyzer.py | 243 | # Check if we have a complete stacktrace by location stacktrace end marker. | COMMENT |
| LOW⚡ | …clusterfuzz/_internal/crash_analysis/crash_analyzer.py | 248 | # Check if have a UBSan error. | COMMENT |
| LOW⚡ | …clusterfuzz/_internal/crash_analysis/crash_analyzer.py | 252 | # Check if have a stacktrace start marker. | COMMENT |
| LOW | …_internal/crash_analysis/stack_parsing/stack_parser.py | 281 | # Set base to use for address translation. | COMMENT |
| LOW | …ernal/crash_analysis/stack_parsing/stack_symbolizer.py | 184 | # Check if we don't have any symbols at all. If yes, this is probably | COMMENT |
| LOW | …ernal/crash_analysis/stack_parsing/stack_symbolizer.py | 270 | # Set LD_LIBRARY_PATH to use the right libstdc++. | COMMENT |
| LOW⚡ | src/clusterfuzz/_internal/cron/cleanup.py | 734 | # Check if testcase is open. If yes, bail out. | COMMENT |
| LOW⚡ | src/clusterfuzz/_internal/cron/cleanup.py | 738 | # Check if there is an associated bug in open state. If yes, bail out. | COMMENT |
| LOW | src/clusterfuzz/_internal/cron/cleanup.py | 621 | # Check if there are any reproducible open testcases are associated with | COMMENT |
| LOW | src/clusterfuzz/_internal/cron/cleanup.py | 790 | # Check if the testcase job name is in the list of jobs. | COMMENT |
| LOW | src/clusterfuzz/_internal/cron/cleanup.py | 834 | # Check if there is ignore label on issue already. If yes, bail out. | COMMENT |
| LOW | src/clusterfuzz/_internal/cron/cleanup.py | 838 | # Check if we did add the notification comment already. If yes, bail out. | COMMENT |
| LOW | src/clusterfuzz/_internal/cron/cleanup.py | 896 | # Check if we added this message once. If yes, bail out. | COMMENT |
| LOW | src/clusterfuzz/_internal/cron/cleanup.py | 993 | # Check if this is a user upload. If not, bail out. | COMMENT |
| LOW | src/clusterfuzz/_internal/cron/cleanup.py | 1009 | # Check if the notification is already sent once. If yes, bail out. | COMMENT |
| LOW | src/clusterfuzz/_internal/cron/triage.py | 89 | # Check if the testcase is already associated with a bug. | COMMENT |
| 8 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …s_default_1d783bc2a3629b94c963debfa3feaee27092dd92.txt | 11 | # ----------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …s_default_1d783bc2a3629b94c963debfa3feaee27092dd92.txt | 13 | # ----------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …core/build_management/revisions_data/chromium_deps.txt | 11 | # ----------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …core/build_management/revisions_data/chromium_deps.txt | 13 | # ----------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …s_default_2eca06e8a84ae4db820e2dcb6bd91fe8b7b71b83.txt | 11 | # ----------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …s_default_2eca06e8a84ae4db820e2dcb6bd91fe8b7b71b83.txt | 13 | # ----------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …dictionary_manager_data/example_correct_dictionary.txt | 3 | # ------------------------------ | COMMENT |
| MEDIUM⚡ | src/clusterfuzz/_internal/datastore/data_handler.py | 1147 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | src/clusterfuzz/_internal/datastore/data_handler.py | 1149 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | src/clusterfuzz/_internal/datastore/data_handler.py | 1210 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | src/clusterfuzz/_internal/datastore/data_handler.py | 1212 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | src/clusterfuzz/_internal/datastore/data_handler.py | 1358 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | src/clusterfuzz/_internal/datastore/data_handler.py | 1360 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | src/clusterfuzz/_internal/datastore/data_handler.py | 1634 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | src/clusterfuzz/_internal/datastore/data_handler.py | 1636 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | src/clusterfuzz/_internal/datastore/data_handler.py | 1713 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | src/clusterfuzz/_internal/datastore/data_handler.py | 1715 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | src/clusterfuzz/_internal/datastore/data_handler.py | 100 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | src/clusterfuzz/_internal/datastore/data_handler.py | 102 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | src/clusterfuzz/_internal/datastore/data_handler.py | 973 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | src/clusterfuzz/_internal/datastore/data_handler.py | 975 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | src/clusterfuzz/_internal/datastore/data_handler.py | 1020 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | src/clusterfuzz/_internal/datastore/data_handler.py | 1090 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | src/clusterfuzz/_internal/datastore/data_handler.py | 1092 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | src/clusterfuzz/_internal/datastore/data_handler.py | 1337 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | src/clusterfuzz/_internal/datastore/data_handler.py | 1339 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | src/clusterfuzz/_internal/datastore/data_handler.py | 1552 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | src/clusterfuzz/_internal/datastore/data_handler.py | 1554 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | src/clusterfuzz/_internal/datastore/data_handler.py | 1738 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | src/clusterfuzz/_internal/datastore/data_handler.py | 1740 | # ------------------------------------------------------------------------------ | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …rfuzz/_internal/tests/core/k8s/k8s_integration_test.py | 49 | mock_creds.token = 'fake-token' | CODE |
| LOW | …internal/tests/core/bot/tasks/utasks/fuzz_task_test.py | 1263 | blobstore_key='fake_key', | CODE |
| LOW | …ternal/tests/core/bot/fuzzers/afl/afl_launcher_test.py | 234 | DUMMY_OPTION = 'dummy_option=dummy_value' | CODE |
| LOW | …rfuzz/_internal/tests/core/base/external_users_test.py | 34 | email='user@example.com', | CODE |
| LOW | …rfuzz/_internal/tests/core/base/external_users_test.py | 81 | email='user@example.com', | CODE |
| LOW⚡ | …rfuzz/_internal/tests/core/base/external_users_test.py | 192 | self.assertEqual(result, ['user2@example.com', 'user@example.com']) | CODE |
| LOW⚡ | …rfuzz/_internal/tests/core/base/external_users_test.py | 261 | 'user@example.com', 'parent_child2', include_from_jobs=False)) | CODE |
| LOW⚡ | …rfuzz/_internal/tests/core/base/external_users_test.py | 265 | 'user@example.com', 'parent_child3', include_from_jobs=True)) | CODE |
| LOW⚡ | …rfuzz/_internal/tests/core/base/external_users_test.py | 269 | 'user@example.com', 'parent', include_from_jobs=True)) | CODE |
| LOW⚡ | …rfuzz/_internal/tests/core/base/external_users_test.py | 273 | 'user@example.com', 'fuzzer', include_from_jobs=True)) | CODE |
| LOW⚡ | …rfuzz/_internal/tests/core/base/external_users_test.py | 290 | external_users.is_job_allowed_for_user('user@example.com', 'job2')) | CODE |
| LOW⚡ | …rfuzz/_internal/tests/core/base/external_users_test.py | 297 | external_users.is_upload_allowed_for_user('user@example.com')) | CODE |
| LOW⚡ | …rfuzz/_internal/tests/core/base/external_users_test.py | 302 | self.assertEqual(result, ['user@example.com']) | CODE |
| LOW⚡ | …rfuzz/_internal/tests/core/base/external_users_test.py | 305 | self.assertEqual(result, ['user2@example.com', 'user@example.com']) | CODE |
| LOW⚡ | …rfuzz/_internal/tests/core/base/external_users_test.py | 314 | self.assertEqual(result, ['user2@example.com', 'user@example.com']) | CODE |
| LOW⚡ | …rfuzz/_internal/tests/core/base/external_users_test.py | 317 | self.assertEqual(result, ['user2@example.com', 'user@example.com']) | CODE |
| LOW | …z/_internal/tests/core/remote_task/remote_task_test.py | 43 | mock_creds.token = 'fake-token' | CODE |
| LOW | …/clusterfuzz/_internal/tests/core/swarming/api_test.py | 39 | self.mock_creds.token = 'fake_token' | CODE |
| LOW | …/clusterfuzz/_internal/tests/core/swarming/api_test.py | 74 | 'Authorization': 'Bearer fake_token' | CODE |
| LOW | …/clusterfuzz/_internal/tests/core/swarming/api_test.py | 93 | 'Authorization': 'Bearer fake_token' | CODE |
| LOW | …uzz/_internal/tests/appengine/libs/issue_filer_test.py | 464 | email='user@example.com', | CODE |
| LOW⚡ | …sterfuzz/_internal/tests/appengine/libs/access_test.py | 191 | user = auth.User('test@test.com', email_verified=True) | CODE |
| LOW⚡ | …sterfuzz/_internal/tests/appengine/libs/access_test.py | 198 | user = auth.User('test@test.com', email_verified=False) | CODE |
| LOW⚡ | …sterfuzz/_internal/tests/appengine/libs/access_test.py | 204 | user = auth.User('test@test.com', email_verified=True) | CODE |
| LOW⚡ | …sterfuzz/_internal/tests/appengine/libs/access_test.py | 265 | 'test@test.com', email_verified=False) | CODE |
| LOW⚡ | …sterfuzz/_internal/tests/appengine/libs/access_test.py | 477 | self.testcase.uploader_email = 'test@test.com' | CODE |
| LOW | …sterfuzz/_internal/tests/appengine/libs/access_test.py | 60 | self.mock.get_user_email.return_value = 'test@test.com' | CODE |
| LOW | …sterfuzz/_internal/tests/appengine/libs/access_test.py | 95 | self.assertTrue(access._is_privileged_user('test@test.com')) | CODE |
| LOW | …sterfuzz/_internal/tests/appengine/libs/access_test.py | 167 | self.assertFalse(access._is_domain_allowed('test@test.com')) | CODE |
| LOW | …sterfuzz/_internal/tests/appengine/libs/access_test.py | 172 | self.assertTrue(access._is_domain_allowed('test@test.com')) | CODE |
| LOW | …sterfuzz/_internal/tests/appengine/libs/access_test.py | 226 | self.user = auth.User('test@test.com') | CODE |
| LOW | …sterfuzz/_internal/tests/appengine/libs/access_test.py | 367 | self.email = 'test@test.com' | CODE |
| LOW | …sterfuzz/_internal/tests/appengine/libs/access_test.py | 552 | self.mock.get_user_email.return_value = 'user@example.com' | CODE |
| LOW | …zz/_internal/tests/appengine/libs/crash_access_test.py | 46 | self.mock.get_user_email.return_value = 'test@test.com' | CODE |
| LOW | …lusterfuzz/_internal/tests/appengine/libs/form_test.py | 38 | self.mock.get_user_email.return_value = 'test@test.com' | CODE |
| LOW | …lusterfuzz/_internal/tests/appengine/libs/form_test.py | 71 | data_types.CSRFToken.user_email == 'test@test.com')) | CODE |
| LOW | …terfuzz/_internal/tests/appengine/libs/handler_test.py | 181 | self.mock.get_current_user.return_value = auth.User('test@test.com') | CODE |
| LOW | …terfuzz/_internal/tests/appengine/libs/handler_test.py | 301 | self.mock.get_user_email.return_value = 'test@test.com' | CODE |
| LOW | …terfuzz/_internal/tests/appengine/libs/handler_test.py | 310 | self.assertEqual('test@test.com', resp.json['email']) | CODE |
| LOW⚡ | …terfuzz/_internal/tests/appengine/libs/handler_test.py | 517 | 'email': 'test@test.com', | CODE |
| LOW⚡ | …terfuzz/_internal/tests/appengine/libs/handler_test.py | 533 | 'email': 'test@test.com', | CODE |
| LOW⚡ | …terfuzz/_internal/tests/appengine/libs/handler_test.py | 581 | 'email': 'test@test.com', | CODE |
| LOW⚡ | …terfuzz/_internal/tests/appengine/libs/handler_test.py | 586 | self.assertEqual('test@test.com', email) | CODE |
| LOW | …terfuzz/_internal/tests/appengine/libs/handler_test.py | 631 | 'email': 'test@test.com', | CODE |
| LOW | …terfuzz/_internal/tests/appengine/libs/handler_test.py | 648 | 'email': 'test@test.com', | CODE |
| LOW | …internal/tests/appengine/handlers/base_handler_test.py | 96 | self.mock.get_user_email.return_value = 'test@test.com' | CODE |
| LOW⚡ | …internal/tests/appengine/handlers/base_handler_test.py | 115 | self.assertEqual(response.json['email'], 'test@test.com') | CODE |
| LOW⚡ | …internal/tests/appengine/handlers/base_handler_test.py | 125 | self.assertEqual(response.json['email'], 'test@test.com') | CODE |
| LOW | …nternal/tests/appengine/handlers/testcase_list_test.py | 170 | self.mock.get_user_email.return_value = 'test@test.com' | CODE |
| LOW⚡ | …andlers/testcase_detail/testcase_status_events_test.py | 810 | uploader='user@example.com', | CODE |
| LOW | …ine/handlers/testcase_detail/download_testcase_test.py | 39 | self.mock.get_email_and_access_token.return_value = ('test@test.com', | CODE |
| LOW | …/tests/appengine/handlers/testcase_detail/show_test.py | 350 | self.mock.get_user_email.return_value = 'test@test.com' | CODE |
| LOW | …ppengine/handlers/testcase_detail/update_issue_test.py | 68 | self.mock.get_current_user().email = 'test@test.com' | CODE |
| LOW | …ppengine/handlers/testcase_detail/update_issue_test.py | 93 | self.assertEqual('test@test.com', resp.json['email']) | CODE |
| LOW | …ppengine/handlers/testcase_detail/update_issue_test.py | 114 | self.assertEqual('test@test.com', resp.json['email']) | CODE |
| LOW | …ppengine/handlers/testcase_detail/update_issue_test.py | 137 | self.assertEqual('test@test.com', resp.json['email']) | CODE |
| LOW | …sts/appengine/handlers/cron/oss_fuzz_apply_ccs_test.py | 49 | issue.add_cc('user@example.com') | CODE |
| LOW | …sts/appengine/handlers/cron/oss_fuzz_apply_ccs_test.py | 52 | issue.add_cc('user@example.com') | CODE |
| LOW | …sts/appengine/handlers/cron/oss_fuzz_apply_ccs_test.py | 65 | email='user@example.com', | CODE |
| LOW⚡ | …sts/appengine/handlers/cron/oss_fuzz_apply_ccs_test.py | 119 | 'user@example.com', | CODE |
| 22 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | src/python/bot/startup/run_bot.py | 164 | CODE | |
| LOW | src/appengine/libs/handler.py | 365 | CODE | |
| LOW | src/appengine/libs/handler.py | 401 | CODE | |
| LOW | src/appengine/libs/handler.py | 368 | CODE | |
| LOW | src/appengine/libs/handler.py | 404 | CODE | |
| LOW | src/appengine/libs/handler.py | 372 | CODE | |
| LOW | src/appengine/libs/handler.py | 408 | CODE | |
| LOW | src/appengine/libs/query/datastore_query.py | 93 | CODE | |
| LOW | src/appengine/libs/query/datastore_query.py | 121 | CODE | |
| LOW | src/appengine/handlers/fuzzer_stats.py | 103 | CODE | |
| LOW | src/appengine/handlers/fuzzer_stats.py | 224 | CODE | |
| LOW | src/appengine/handlers/fuzzer_stats.py | 512 | CODE | |
| LOW | src/appengine/handlers/testcase_detail/show.py | 353 | CODE | |
| LOW | src/local/butler/deploy.py | 63 | CODE | |
| LOW | src/local/butler/deploy.py | 487 | CODE | |
| LOW | src/local/butler/py_unittest.py | 145 | CODE | |
| LOW | src/local/butler/weights.py | 389 | CODE | |
| LOW | src/local/butler/scripts/grouper_experiment.py | 361 | CODE | |
| LOW | src/local/butler/scripts/grouper_experiment.py | 507 | CODE | |
| LOW | src/local/butler/scripts/preprocess.py | 33 | CODE | |
| LOW | src/local/butler/scripts/build_attributes.py | 65 | CODE | |
| LOW | …scripts/migration/monorail_to_issuetracker_migrator.py | 95 | CODE | |
| LOW | src/clusterfuzz/_internal/google_cloud_utils/storage.py | 911 | CODE | |
| LOW | src/clusterfuzz/_internal/google_cloud_utils/storage.py | 1478 | CODE | |
| LOW | src/clusterfuzz/_internal/google_cloud_utils/storage.py | 394 | CODE | |
| LOW | src/clusterfuzz/_internal/metrics/logs.py | 1119 | CODE | |
| LOW | src/clusterfuzz/_internal/metrics/logs.py | 1172 | CODE | |
| LOW | src/clusterfuzz/_internal/platforms/linux/gestures.py | 63 | CODE | |
| LOW | …sterfuzz/_internal/platforms/android/fetch_artifact.py | 99 | CODE | |
| LOW | …sterfuzz/_internal/platforms/android/fetch_artifact.py | 236 | CODE | |
| LOW | src/clusterfuzz/_internal/platforms/android/flash.py | 66 | CODE | |
| LOW | src/clusterfuzz/_internal/platforms/android/flash.py | 108 | CODE | |
| LOW | src/clusterfuzz/_internal/platforms/android/adb.py | 310 | CODE | |
| LOW | src/clusterfuzz/_internal/platforms/windows/gestures.py | 62 | CODE | |
| LOW | src/clusterfuzz/_internal/platforms/windows/gestures.py | 121 | CODE | |
| LOW | src/clusterfuzz/_internal/fuzzing/leak_blacklist.py | 166 | CODE | |
| LOW | src/clusterfuzz/_internal/fuzzing/corpus_manager.py | 483 | CODE | |
| LOW | src/clusterfuzz/_internal/build_management/revisions.py | 49 | CODE | |
| LOW | …lusterfuzz/_internal/build_management/build_manager.py | 235 | CODE | |
| LOW | …lusterfuzz/_internal/build_management/build_manager.py | 1062 | CODE | |
| LOW | …lusterfuzz/_internal/tests/core/system/archive_test.py | 155 | CODE | |
| LOW | …lusterfuzz/_internal/tests/core/system/archive_test.py | 167 | CODE | |
| LOW | …lusterfuzz/_internal/tests/core/system/archive_test.py | 212 | CODE | |
| LOW | …terfuzz/_internal/tests/core/chrome/build_info_test.py | 32 | CODE | |
| LOW | …terfuzz/_internal/tests/core/chrome/build_info_test.py | 37 | CODE | |
| LOW | …fuzz/_internal/tests/core/bot/tasks/task_types_test.py | 162 | CODE | |
| LOW | src/clusterfuzz/_internal/datastore/search_tokenizer.py | 82 | CODE | |
| LOW | src/clusterfuzz/_internal/system/process_handler.py | 94 | CODE | |
| LOW | src/clusterfuzz/_internal/system/process_handler.py | 113 | CODE | |
| LOW | src/clusterfuzz/_internal/system/process_handler.py | 647 | CODE | |
| LOW | src/clusterfuzz/_internal/system/environment.py | 889 | CODE | |
| LOW | src/clusterfuzz/_internal/batch/service.py | 203 | CODE | |
| LOW | …/clusterfuzz/_internal/issue_management/issue_filer.py | 166 | CODE | |
| LOW | …issue_management/google_issue_tracker/issue_tracker.py | 284 | CODE | |
| LOW | src/clusterfuzz/_internal/bot/testcase_manager.py | 126 | CODE | |
| LOW | src/clusterfuzz/_internal/bot/testcase_manager.py | 179 | CODE | |
| LOW | src/clusterfuzz/_internal/bot/testcase_manager.py | 229 | CODE | |
| LOW | src/clusterfuzz/_internal/bot/testcase_manager.py | 911 | CODE | |
| LOW | src/clusterfuzz/_internal/bot/tasks/setup.py | 823 | CODE | |
| LOW | src/clusterfuzz/_internal/bot/tasks/blame_task.py | 163 | CODE | |
| 45 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …/_internal/tests/core/platforms/android/logger_test.py | 81 | 'mounted filesystem without journal. Opts: (null)\n', | CODE |
| HIGH | …/_internal/tests/core/platforms/android/logger_test.py | 84 | 'mounted filesystem without journal. Opts: (null)')) | CODE |
| HIGH⚡ | …re/crash_analysis/stack_parsing/stack_analyzer_test.py | 2344 | expected_state = ('offset + length <= impl.length() in StringView.h\n' | CODE |
| HIGH⚡ | …re/crash_analysis/stack_parsing/stack_analyzer_test.py | 2564 | 'length == 0 || (length > 0 && data != __null) in vector.h\n') | CODE |
| HIGH⚡ | …re/crash_analysis/stack_parsing/stack_analyzer_test.py | 2578 | 'length == 0 || (length > 0 && data != __null) in vector.h\n' | CODE |
| HIGH | …re/crash_analysis/stack_parsing/stack_analyzer_test.py | 834 | '<= text.length() in SimplifiedB\n' | CODE |
| HIGH | …re/crash_analysis/stack_parsing/stack_analyzer_test.py | 3101 | 'ss_len == 0 || ss_len >= offsetof(struct sockaddr_un, sun_path) + 1\n' | CODE |
| HIGH | src/clusterfuzz/_internal/system/minijail.py | 147 | """Create /dev/null, /dev/random, /dev/urandom, and /dev/shm.""" | STRING |
| HIGH | …lusterfuzz/_internal/bot/tasks/utasks/minimize_task.py | 343 | run_queue.push(self.file_path, self.run, self.store_result_from_run) | CODE |
| HIGH | src/clusterfuzz/_internal/bot/minimizer/minimizer.py | 273 | self.test_queue.push( | CODE |
| HIGH | …clusterfuzz/_internal/crash_analysis/crash_analyzer.py | 392 | # If the address is not near null, then we it is highly likely | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | src/clusterfuzz/_internal/metrics/logs.py | 39 | CODE | |
| LOW | src/clusterfuzz/_internal/metrics/logs.py | 40 | CODE | |
| LOW | src/clusterfuzz/_internal/metrics/logs.py | 41 | CODE | |
| LOW | src/clusterfuzz/_internal/platforms/fuchsia/__init__.py | 16 | CODE | |
| LOW | src/clusterfuzz/_internal/platforms/mac/__init__.py | 16 | CODE | |
| LOW | src/clusterfuzz/_internal/platforms/linux/__init__.py | 16 | CODE | |
| LOW | src/clusterfuzz/_internal/platforms/android/__init__.py | 16 | CODE | |
| LOW | src/clusterfuzz/_internal/platforms/android/__init__.py | 17 | CODE | |
| LOW | src/clusterfuzz/_internal/platforms/android/__init__.py | 18 | CODE | |
| LOW | src/clusterfuzz/_internal/platforms/android/__init__.py | 19 | CODE | |
| LOW | src/clusterfuzz/_internal/platforms/android/__init__.py | 20 | CODE | |
| LOW | src/clusterfuzz/_internal/platforms/android/__init__.py | 21 | CODE | |
| LOW | src/clusterfuzz/_internal/platforms/android/__init__.py | 22 | CODE | |
| LOW | src/clusterfuzz/_internal/platforms/android/__init__.py | 23 | CODE | |
| LOW | src/clusterfuzz/_internal/platforms/android/__init__.py | 24 | CODE | |
| LOW | src/clusterfuzz/_internal/platforms/android/__init__.py | 25 | CODE | |
| LOW | src/clusterfuzz/_internal/platforms/android/__init__.py | 26 | CODE | |
| LOW | src/clusterfuzz/_internal/platforms/android/__init__.py | 27 | CODE | |
| LOW | src/clusterfuzz/_internal/platforms/android/__init__.py | 28 | CODE | |
| LOW | src/clusterfuzz/_internal/platforms/android/__init__.py | 29 | CODE | |
| LOW | src/clusterfuzz/_internal/platforms/windows/__init__.py | 16 | CODE | |
| LOW | src/clusterfuzz/_internal/protos/swarming_pb2.py | 29 | CODE | |
| LOW | …clusterfuzz/_internal/protos/process_state_pb2_grpc.py | 17 | CODE | |
| LOW | src/clusterfuzz/_internal/protos/swarming_pb2_grpc.py | 17 | CODE | |
| LOW | …c/clusterfuzz/_internal/protos/untrusted_runner_pb2.py | 29 | CODE | |
| LOW | …c/clusterfuzz/_internal/protos/untrusted_runner_pb2.py | 30 | CODE | |
| LOW | src/clusterfuzz/_internal/protos/uworker_msg_pb2.py | 29 | CODE | |
| LOW | src/clusterfuzz/_internal/protos/uworker_msg_pb2.py | 30 | CODE | |
| LOW | src/clusterfuzz/_internal/protos/uworker_msg_pb2.py | 31 | CODE | |
| LOW | …c/clusterfuzz/_internal/protos/uworker_msg_pb2_grpc.py | 17 | CODE | |
| LOW | …rnal/tests/core/build_management/build_manager_test.py | 31 | CODE | |
| LOW | src/clusterfuzz/_internal/fuzzer_utils/__init__.py | 23 | CODE | |
| LOW | src/clusterfuzz/_internal/fuzzer_utils/__init__.py | 24 | CODE | |
| LOW | src/clusterfuzz/_internal/fuzzer_utils/__init__.py | 25 | CODE | |
| LOW | src/clusterfuzz/_internal/fuzzer_utils/__init__.py | 26 | CODE | |
| LOW | src/clusterfuzz/_internal/common/testcase_utils.py | 16 | CODE | |
| LOW | src/clusterfuzz/_internal/common/testcase_utils.py | 17 | CODE | |
| LOW | …zz/_internal/bot/tokenizer/grammars/JavaScriptLexer.py | 20 | CODE | |
| LOW | …sterfuzz/_internal/bot/tokenizer/grammars/HTMLLexer.py | 20 | CODE | |
| LOW | …ernal/crash_analysis/stack_parsing/stack_symbolizer.py | 39 | CODE | |
| LOW | …ernal/crash_analysis/stack_parsing/stack_symbolizer.py | 41 | CODE | |
| LOW | …ernal/crash_analysis/stack_parsing/stack_symbolizer.py | 42 | CODE | |
| LOW | …ernal/crash_analysis/stack_parsing/stack_symbolizer.py | 45 | CODE | |
| LOW | …ernal/crash_analysis/stack_parsing/stack_symbolizer.py | 46 | CODE | |
| LOW | …ernal/crash_analysis/stack_parsing/stack_symbolizer.py | 48 | CODE | |
| LOW | src/clusterfuzz/_internal/base/tasks/__init__.py | 38 | CODE | |
| LOW | src/clusterfuzz/_internal/swarming/__init__.py | 16 | CODE | |
| LOW | src/clusterfuzz/_internal/swarming/__init__.py | 26 | CODE | |
| LOW | src/clusterfuzz/_internal/cron/backup.py | 29 | CODE | |
| LOW | src/clusterfuzz/stacktraces/crash_comparer.py | 16 | CODE | |
| LOW | src/clusterfuzz/stacktraces/__init__.py | 26 | CODE | |
| LOW | src/clusterfuzz/environment/__init__.py | 16 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | src/appengine/handlers/upload_testcase.py | 315 | CODE | |
| LOW | src/clusterfuzz/_internal/platforms/android/adb.py | 765 | CODE | |
| LOW | …sterfuzz/_internal/protos/untrusted_runner_pb2_grpc.py | 393 | CODE | |
| LOW | …sterfuzz/_internal/protos/untrusted_runner_pb2_grpc.py | 410 | CODE | |
| LOW | …sterfuzz/_internal/protos/untrusted_runner_pb2_grpc.py | 427 | CODE | |
| LOW | …sterfuzz/_internal/protos/untrusted_runner_pb2_grpc.py | 444 | CODE | |
| LOW | …sterfuzz/_internal/protos/untrusted_runner_pb2_grpc.py | 461 | CODE | |
| LOW | …sterfuzz/_internal/protos/untrusted_runner_pb2_grpc.py | 478 | CODE | |
| LOW | …sterfuzz/_internal/protos/untrusted_runner_pb2_grpc.py | 495 | CODE | |
| LOW | …sterfuzz/_internal/protos/untrusted_runner_pb2_grpc.py | 512 | CODE | |
| LOW | …sterfuzz/_internal/protos/untrusted_runner_pb2_grpc.py | 529 | CODE | |
| LOW | …sterfuzz/_internal/protos/untrusted_runner_pb2_grpc.py | 546 | CODE | |
| LOW | …sterfuzz/_internal/protos/untrusted_runner_pb2_grpc.py | 563 | CODE | |
| LOW | …sterfuzz/_internal/protos/untrusted_runner_pb2_grpc.py | 580 | CODE | |
| LOW | …sterfuzz/_internal/protos/untrusted_runner_pb2_grpc.py | 597 | CODE | |
| LOW | …sterfuzz/_internal/protos/untrusted_runner_pb2_grpc.py | 614 | CODE | |
| LOW | …sterfuzz/_internal/protos/untrusted_runner_pb2_grpc.py | 631 | CODE | |
| LOW | …sterfuzz/_internal/protos/untrusted_runner_pb2_grpc.py | 648 | CODE | |
| LOW | …sterfuzz/_internal/protos/untrusted_runner_pb2_grpc.py | 665 | CODE | |
| LOW | …sterfuzz/_internal/protos/untrusted_runner_pb2_grpc.py | 682 | CODE | |
| LOW | …sterfuzz/_internal/protos/untrusted_runner_pb2_grpc.py | 699 | CODE | |
| LOW | …sterfuzz/_internal/protos/untrusted_runner_pb2_grpc.py | 716 | CODE | |
| LOW | src/clusterfuzz/_internal/protos/heartbeat_pb2_grpc.py | 70 | CODE | |
| LOW | …internal/tests/core/bot/tasks/utasks/fuzz_task_test.py | 998 | CODE | |
| LOW | src/clusterfuzz/_internal/datastore/data_handler.py | 461 | CODE | |
| LOW | src/clusterfuzz/_internal/system/new_process.py | 389 | CODE | |
| LOW | …/_internal/bot/untrusted_runner/remote_process_host.py | 79 | CODE | |
| LOW | …rfuzz/_internal/bot/untrusted_runner/remote_process.py | 88 | CODE | |
| LOW | src/clusterfuzz/_internal/bot/minimizer/minimizer.py | 496 | CODE | |
| LOW | src/clusterfuzz/_internal/bot/minimizer/js_minimizer.py | 189 | CODE | |
| LOW | …clusterfuzz/_internal/bot/minimizer/chunk_minimizer.py | 70 | CODE | |
| LOW | src/clusterfuzz/_internal/bot/fuzzers/libfuzzer.py | 521 | CODE | |
| LOW | …_internal/crash_analysis/stack_parsing/stack_parser.py | 54 | CODE | |
| LOW | …_internal/crash_analysis/stack_parsing/stack_parser.py | 171 | CODE | |
| LOW | …_internal/crash_analysis/stack_parsing/stack_parser.py | 229 | CODE | |
| LOW | src/clusterfuzz/_internal/base/utils.py | 426 | CODE | |
| LOW | src/clusterfuzz/_internal/base/utils.py | 523 | CODE | |
| LOW | src/clusterfuzz/_internal/cron/project_setup.py | 645 | CODE | |
| LOW | src/clusterfuzz/stacktraces/__init__.py | 168 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …fuzz/_internal/bot/tasks/utasks/corpus_pruning_task.py | 846 | CODE | |
| MEDIUM | …fuzz/_internal/bot/tasks/utasks/corpus_pruning_task.py | 847 | CODE | |
| MEDIUM | …fuzz/_internal/bot/tasks/utasks/corpus_pruning_task.py | 848 | CODE | |
| MEDIUM | …fuzz/_internal/bot/tasks/utasks/corpus_pruning_task.py | 849 | CODE | |
| MEDIUM | …fuzz/_internal/bot/tasks/utasks/corpus_pruning_task.py | 851 | CODE | |
| MEDIUM | …fuzz/_internal/bot/tasks/utasks/corpus_pruning_task.py | 852 | CODE | |
| MEDIUM | …fuzz/_internal/bot/tasks/utasks/corpus_pruning_task.py | 854 | CODE | |
| MEDIUM | …fuzz/_internal/bot/tasks/utasks/corpus_pruning_task.py | 858 | CODE | |
| MEDIUM | …fuzz/_internal/bot/tasks/utasks/corpus_pruning_task.py | 859 | CODE | |
| MEDIUM | …fuzz/_internal/bot/tasks/utasks/corpus_pruning_task.py | 861 | CODE | |
| MEDIUM | …fuzz/_internal/bot/tasks/utasks/corpus_pruning_task.py | 863 | CODE | |
| MEDIUM | …fuzz/_internal/bot/tasks/utasks/corpus_pruning_task.py | 866 | CODE | |
| MEDIUM | …fuzz/_internal/bot/tasks/utasks/corpus_pruning_task.py | 935 | CODE | |
| MEDIUM | …fuzz/_internal/bot/tasks/utasks/corpus_pruning_task.py | 937 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | src/local/butler/integration_tests.py | 47 | # TODO(ochang): Make bootstrap a separate butler command and just call that. | COMMENT |
| LOW | src/clusterfuzz/_internal/build_management/revisions.py | 605 | # No revision >= |MIN_REVISION| was found, store the error and just return | COMMENT |
| LOW | src/clusterfuzz/_internal/config/db_config.py | 50 | # All data is in a single line, just return that. | COMMENT |
| LOW | src/clusterfuzz/_internal/datastore/data_handler.py | 289 | # For ASSERTs and CHECK failures, we should just use the crash type and the | COMMENT |
| LOW | src/clusterfuzz/_internal/chrome/build_info.py | 119 | # If there is no canary for that platform, just return canary from windows. | COMMENT |
| LOW | src/clusterfuzz/_internal/bot/testcase_manager.py | 993 | # command - just use app_name. | COMMENT |
| LOW | src/clusterfuzz/_internal/bot/tasks/task_types.py | 52 | # Simple tasks can just use the environment they don't need the uworker env. | COMMENT |
| LOW | src/clusterfuzz/_internal/bot/tasks/task_creation.py | 254 | # For supported environments, just create the minimize task for now. | COMMENT |
| MEDIUM | …lusterfuzz/_internal/bot/tasks/utasks/minimize_task.py | 384 | # TODO(ochang): More robust check for engine minimization support. | COMMENT |
| LOW | …sterfuzz/_internal/bot/tasks/utasks/regression_task.py | 260 | # exist any later revision, just use the last revision in the list instead. | COMMENT |
| LOW | …sterfuzz/_internal/bot/tasks/utasks/regression_task.py | 277 | # found again, so just use it and restart from scratch. | COMMENT |
| MEDIUM | …clusterfuzz/_internal/crash_analysis/crash_comparer.py | 103 | # TODO(aarya): Improve this algorithm and leverage other parts of | COMMENT |
| LOW | …ernal/crash_analysis/stack_parsing/stack_symbolizer.py | 185 | # a system library. In this case, just return the binary name. | COMMENT |
| LOW | …ernal/crash_analysis/stack_parsing/stack_symbolizer.py | 683 | # This should never happen but if it does, lets just return the unsymbolized stack. | COMMENT |
| LOW | …ernal/crash_analysis/stack_parsing/stack_symbolizer.py | 742 | # just return the same binary path. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | deploy/cloudbuild.yaml | 108 | # Step 1: Run the update command in the background | COMMENT |
| LOW⚡ | deploy/cloudbuild.yaml | 111 | # Step 2: Poll for the updated metadata value | COMMENT |
| LOW | configs/test/project.yaml | 49 | # WARNING: This can cause OOMs. | COMMENT |
| LOW⚡ | src/clusterfuzz/_internal/bot/tasks/task_creation.py | 101 | # Step 1: Check if the regression task finished. If not, bail out. | COMMENT |
| LOW⚡ | src/clusterfuzz/_internal/bot/tasks/task_creation.py | 105 | # Step 2: Check if the symbolize task is applicable and finished. If not, | COMMENT |
| LOW | src/clusterfuzz/_internal/bot/fuzzers/builtin.py | 15 | # NOTE: This module is deprecated and will be replaced with | COMMENT |
| LOW | …/clusterfuzz/_internal/bot/fuzzers/centipede/engine.py | 521 | # Step 1: Generate corpus file for Centipede. | COMMENT |
| LOW | …/clusterfuzz/_internal/bot/fuzzers/centipede/engine.py | 548 | # Step 2: Distill. | COMMENT |
| LOW | …/clusterfuzz/_internal/bot/fuzzers/centipede/engine.py | 566 | # Step 3: Generate corpus files for output_dir. | COMMENT |
| LOW | …/clusterfuzz/_internal/bot/fuzzers/centipede/engine.py | 594 | # Step 4: Copy reproducers from full_corpus_workdir. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | deploy/cloudbuild.yaml | 108 | # Step 1: Run the update command in the background | COMMENT |
| LOW⚡ | deploy/cloudbuild.yaml | 111 | # Step 2: Poll for the updated metadata value | COMMENT |
| LOW⚡ | src/clusterfuzz/_internal/bot/tasks/task_creation.py | 101 | # Step 1: Check if the regression task finished. If not, bail out. | COMMENT |
| LOW⚡ | src/clusterfuzz/_internal/bot/tasks/task_creation.py | 105 | # Step 2: Check if the symbolize task is applicable and finished. If not, | COMMENT |
| LOW | src/clusterfuzz/_internal/bot/fuzzers/afl/launcher.py | 1474 | # We need to check if ASAN_OPTIONS and/or MSAN_OPTIONS contain symbolize=0 | COMMENT |
| LOW | …/clusterfuzz/_internal/bot/fuzzers/centipede/engine.py | 521 | # Step 1: Generate corpus file for Centipede. | COMMENT |
| LOW | …/clusterfuzz/_internal/bot/fuzzers/centipede/engine.py | 548 | # Step 2: Distill. | COMMENT |
| LOW | …/clusterfuzz/_internal/bot/fuzzers/centipede/engine.py | 566 | # Step 3: Generate corpus files for output_dir. | COMMENT |
| LOW | …/clusterfuzz/_internal/bot/fuzzers/centipede/engine.py | 594 | # Step 4: Copy reproducers from full_corpus_workdir. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …erfuzz/_internal/tests/core/system/environment_test.py | 387 | def test_function(): | CODE |
| LOW | …erfuzz/_internal/tests/core/system/environment_test.py | 397 | def test_function(): | CODE |
| LOW | …erfuzz/_internal/tests/core/system/environment_test.py | 416 | def test_function(): | CODE |
| LOW | …erfuzz/_internal/tests/core/system/environment_test.py | 426 | def test_function(): | CODE |
| LOW | …erfuzz/_internal/tests/core/system/environment_test.py | 446 | def test_function(): | CODE |
| LOW | …erfuzz/_internal/tests/core/system/environment_test.py | 456 | def test_function(): | CODE |
| LOW | …erfuzz/_internal/tests/core/system/environment_test.py | 468 | def test_function(): | CODE |
| LOW | …lusterfuzz/_internal/tests/core/base/untrusted_test.py | 24 | def test_function(): | CODE |
| LOW | src/clusterfuzz/_internal/bot/tasks/unpack_task.py | 32 | def execute_task(metadata_id, job_type): | CODE |
| LOW | src/clusterfuzz/_internal/bot/tasks/blame_task.py | 306 | def execute_task(testcase_id, _): | CODE |
| LOW | src/clusterfuzz/_internal/bot/tasks/impact_task.py | 336 | def execute_task(testcase_id, job_type): | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | src/local/butler/reproduce.py | 35 | def _setup_reproduce(args) -> None: | CODE |
| LOW | …rfuzz/_internal/tests/core/batch/batch_service_test.py | 60 | def _set_preemptible(instance_policy, batch_workload_spec) -> None: | CODE |
| LOW | src/clusterfuzz/_internal/datastore/data_handler.py | 889 | def set_initial_testcase_metadata(testcase: data_types.Testcase) -> None: | CODE |
| LOW | src/clusterfuzz/_internal/batch/service.py | 138 | def _set_preemptible(instance_policy, batch_workload_spec) -> None: | CODE |
| LOW | src/clusterfuzz/_internal/bot/tasks/utasks/__init__.py | 428 | def set_uworker_env(uworker_env: dict) -> None: | CODE |