Scalable fuzzing infrastructure.
This report summarizes scanner evidence for google/clusterfuzz, a Python project with 5,612 GitHub stars. SynthScan examined 258,029 lines of code across 1421 source files, recording 6010 pattern matches distributed across 22 syntactic categories. The legacy adjusted pattern signal is 63.4 (High pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 4130 finding(s).
Are imports declared and package/API names verified? 1575 finding(s).
Are wrappers, guards, and repeated structures necessary? 2730 finding(s).
Which changes need focused human review? 6010 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 6010 distinct pattern matches across 22 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | …rnal/tests/core/build_management/source_mapper_test.py | 47 | frame = 'at org.apache.lucene.util.ArrayUtil.growExact(ArrayUtil.java:400)' | CODE |
| CRITICAL | …rnal/tests/core/build_management/build_manager_test.py | 671 | self.mock.open.return_value.__enter__.return_value.unpack.assert_called_with( | CODE |
| CRITICAL | …rnal/tests/core/build_management/build_manager_test.py | 688 | self.mock.open.return_value.__enter__.return_value.unpack.assert_called_with( | CODE |
| CRITICAL | …rnal/tests/core/build_management/build_manager_test.py | 724 | self.mock.open.return_value.__enter__.return_value.unpack.assert_has_calls([ | CODE |
| CRITICAL | …rnal/tests/core/build_management/build_manager_test.py | 745 | self.mock.open.return_value.__enter__.return_value.unpack.assert_has_calls([ | CODE |
| CRITICAL | …rnal/tests/core/build_management/build_manager_test.py | 819 | self.mock.open_uri.return_value.__enter__.return_value.unpacked_size.assert_called_with( | CODE |
| CRITICAL | …rnal/tests/core/build_management/build_manager_test.py | 1283 | self.mock.open.return_value.unpack.assert_called_once_with( | CODE |
| CRITICAL | …rnal/tests/core/build_management/build_manager_test.py | 1834 | self.mock.open.return_value.__enter__.return_value.unpack.assert_called_with( | CODE |
| CRITICAL | …rnal/tests/core/build_management/build_manager_test.py | 1863 | self.mock.open.return_value.__enter__.return_value.unpack.assert_called_with( | CODE |
| CRITICAL | …rfuzz/_internal/tests/core/bot/startup/run_bot_test.py | 242 | self.mock.RemoteTaskGate.return_value.create_utask_main_jobs.assert_called_once( | CODE |
| CRITICAL | …rfuzz/_internal/tests/core/bot/startup/run_bot_test.py | 262 | self.mock.RemoteTaskGate.return_value.create_utask_main_jobs.assert_called_once( | CODE |
| CRITICAL | …rfuzz/_internal/tests/core/bot/startup/run_bot_test.py | 284 | self.mock.RemoteTaskGate.return_value.create_utask_main_jobs.assert_called_once( | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1395 | at com.google.security.wycheproof.AesGcmTest.testLargeArrayAlias(AesGcmTest.java:474) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1401 | at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1402 | at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:47) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1403 | at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1420 | at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1425 | at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:116) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1426 | at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:148) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1427 | at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:75) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1433 | at com.google.security.wycheproof.AesGcmTest.testLargeArrayAlias(AesGcmTest.java:469) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1446 | at com.google.security.wycheproof.CipherInputStreamTest.testCorruptDecrypt(CipherInputStreamTest.java:206) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1447 | at com.google.security.wycheproof.CipherInputStreamTest.testCorruptAesGcm(CipherInputStreamTest.java:243) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1453 | at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1454 | at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:47) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1455 | at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1472 | at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1477 | at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:116) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1478 | at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:148) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1479 | at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:75) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1483 | at com.google.security.wycheproof.CipherInputStreamTest.testCorruptDecrypt(CipherInputStreamTest.java:206) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1484 | at com.google.security.wycheproof.CipherInputStreamTest.testAesEax(CipherInputStreamTest.java:284) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1490 | at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1491 | at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:47) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1492 | at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1509 | at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1514 | at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:116) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1515 | at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:148) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1516 | at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:75) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1520 | at com.google.security.wycheproof.CipherOutputStreamTest.testCorruptDecrypt(CipherOutputStreamTest.java:185) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1521 | at com.google.security.wycheproof.CipherOutputStreamTest.testEmptyPlaintext(CipherOutputStreamTest.java:225) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1527 | at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1528 | at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:47) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1529 | at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1546 | at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1551 | at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:116) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1552 | at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:148) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1553 | at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:75) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1557 | at com.google.security.wycheproof.CipherOutputStreamTest.testCorruptDecrypt(CipherOutputStreamTest.java:179) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1558 | at com.google.security.wycheproof.CipherOutputStreamTest.testAesEax(CipherOutputStreamTest.java:249) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1564 | at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1565 | at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:47) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1566 | at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1583 | at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1588 | at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:116) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1589 | at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:148) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1590 | at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:75) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1594 | at com.google.security.wycheproof.CipherOutputStreamTest.testCorruptDecrypt(CipherOutputStreamTest.java:179) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1595 | at com.google.security.wycheproof.CipherOutputStreamTest.testAesGcm(CipherOutputStreamTest.java:205) | CODE |
| CRITICAL⚡ | …lysis/stack_parsing/stack_analyzer_data/wycheproof.txt | 1601 | at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12) | CODE |
| 1362 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | butler.py | 148 | def _add_py_unittest_subparser(toplevel_subparsers): | CODE |
| LOW | butler.py | 202 | def _add_integration_tests_subparsers(toplevel_subparsers): | CODE |
| LOW | butler.py | 208 | def _add_weights_fuzzer_subparser(weights_subparsers): | CODE |
| LOW | butler.py | 262 | def _add_weights_batches_subparser(weights_subparsers): | CODE |
| LOW | butler.py | 286 | def _add_weights_target_subparser(weights_subparsers): | CODE |
| LOW | butler.py | 343 | def _add_schedule_tworker_fuzz_subparser(toplevel_subparsers): | CODE |
| LOW | cli/casp/README.md | 100 | def test_my_command_no_verbose(self): | CODE |
| LOW | cli/casp/src/casp/tests/utils/gcloud_test.py | 184 | def test_login_fail_then_custom_path(self, mock_is_valid, mock_confirm, | CODE |
| LOW | cli/casp/src/casp/tests/utils/gcloud_test.py | 204 | def test_decline_login_then_custom_path(self, mock_is_valid, mock_confirm, | CODE |
| LOW | cli/casp/src/casp/tests/utils/local_butler_test.py | 32 | def test_build_command_success_auto_find(self, mock_get_butler): | CODE |
| LOW | cli/casp/src/casp/tests/utils/local_butler_test.py | 42 | def test_build_command_success_explicit_path(self): | CODE |
| LOW | cli/casp/src/casp/tests/utils/local_butler_test.py | 53 | def test_build_command_flags_and_args(self, mock_get_butler): | CODE |
| LOW | cli/casp/src/casp/tests/utils/docker_test.py | 57 | def test_docker_permission_denied(self, mock_echo, mock_secho, mock_from_env): | CODE |
| LOW | cli/casp/src/casp/tests/utils/docker_test.py | 149 | def test_pull_image_docker_setup_fails(self, mock_echo, mock_secho, | CODE |
| LOW | cli/casp/src/casp/tests/utils/docker_test.py | 162 | def test_pull_image_not_found(self, mock_echo, mock_secho, | CODE |
| LOW | cli/casp/src/casp/tests/utils/docker_test.py | 233 | def test_run_command_privileged(self, mock_check_docker_setup, | CODE |
| LOW | cli/casp/src/casp/tests/utils/docker_test.py | 268 | def test_run_command_docker_setup_fails( | CODE |
| LOW | cli/casp/src/casp/tests/utils/docker_test.py | 285 | def test_run_command_pull_image_fails(self, mock_check_docker_setup, | CODE |
| LOW | cli/casp/src/casp/tests/utils/docker_test.py | 305 | def test_run_command_container_error_status( | CODE |
| LOW | cli/casp/src/casp/tests/utils/docker_test.py | 340 | def test_run_command_container_error_exception_with_stderr( | CODE |
| LOW | cli/casp/src/casp/tests/utils/docker_test.py | 363 | def test_run_command_container_error_exception_no_stderr( | CODE |
| LOW | cli/casp/src/casp/tests/utils/docker_test.py | 385 | def test_run_command_image_not_found( | CODE |
| LOW | cli/casp/src/casp/tests/utils/docker_test.py | 411 | def test_run_command_api_error(self, mock_secho, mock_check_docker_setup, | CODE |
| LOW | cli/casp/src/casp/tests/utils/docker_test.py | 435 | def test_run_command_remove_container_fails( | CODE |
| LOW | cli/casp/src/casp/tests/utils/config_test.py | 50 | def test_save_config_creates_dir_and_file(self): | CODE |
| LOW⚡ | cli/casp/src/casp/tests/utils/config_test.py | 63 | def test_load_config_file_not_exists(self): | CODE |
| LOW⚡ | cli/casp/src/casp/tests/utils/config_test.py | 70 | def test_save_and_load_config(self): | CODE |
| LOW⚡ | cli/casp/src/casp/tests/utils/config_test.py | 80 | def test_load_config_empty_file(self): | CODE |
| LOW⚡ | cli/casp/src/casp/tests/utils/config_test.py | 89 | def test_load_config_malformed_json(self): | CODE |
| LOW⚡ | cli/casp/src/casp/tests/utils/config_test.py | 99 | def test_overwrite_existing_config(self): | CODE |
| LOW | cli/casp/src/casp/tests/commands/lint_test.py | 39 | def test_lint_success_no_args(self): | CODE |
| LOW | cli/casp/src/casp/tests/commands/lint_test.py | 47 | def test_lint_success_with_path_arg(self): | CODE |
| LOW | cli/casp/src/casp/tests/commands/lint_test.py | 58 | def test_lint_success_with_path_option(self): | CODE |
| LOW | cli/casp/src/casp/tests/commands/lint_test.py | 69 | def test_lint_success_with_type_check(self): | CODE |
| LOW | cli/casp/src/casp/tests/commands/lint_test.py | 78 | def test_lint_success_with_path_and_type_check(self): | CODE |
| LOW | cli/casp/src/casp/tests/commands/lint_test.py | 98 | def test_subprocess_run_fails(self): | CODE |
| LOW | cli/casp/src/casp/tests/commands/reproduce_test.py | 68 | def test_reproduce_success_with_custom_config(self): | CODE |
| LOW | cli/casp/src/casp/tests/commands/reproduce_test.py | 107 | def test_reproduce_no_gcloud_credentials(self): | CODE |
| LOW | cli/casp/src/casp/tests/commands/reproduce_test.py | 116 | def test_reproduce_docker_command_fails(self): | CODE |
| LOW | cli/casp/src/casp/tests/commands/reproduce_test.py | 132 | def test_reproduce_with_project_option(self): | CODE |
| LOW | cli/casp/src/casp/tests/commands/init_test.py | 53 | def test_init_success_all_steps(self): | CODE |
| LOW | cli/casp/src/casp/tests/commands/init_test.py | 70 | def test_init_docker_setup_fails(self): | CODE |
| LOW | cli/casp/src/casp/tests/commands/init_test.py | 80 | def test_init_gcloud_auth_fails(self): | CODE |
| LOW | cli/casp/src/casp/tests/commands/init_test.py | 91 | def test_init_docker_pull_fails(self): | CODE |
| LOW | cli/casp/src/casp/tests/commands/init_test.py | 101 | def test_init_with_existing_config(self): | CODE |
| LOW | cli/casp/src/casp/tests/commands/init_test.py | 115 | def test_init_custom_config_path_success(self): | CODE |
| LOW | cli/casp/src/casp/tests/commands/init_test.py | 133 | def test_init_custom_config_path_not_exists(self): | CODE |
| LOW | cli/casp/src/casp/tests/commands/init_test.py | 151 | def test_init_custom_config_path_empty(self): | CODE |
| LOW | cli/casp/src/casp/tests/commands/init_test.py | 163 | def test_init_custom_config_path_empty_clears_existing(self): | CODE |
| LOW | cli/casp/src/casp/tests/commands/format_test.py | 39 | def test_format_success_no_dir(self): | CODE |
| LOW | cli/casp/src/casp/tests/commands/format_test.py | 47 | def test_format_success_with_path_option(self): | CODE |
| LOW | cli/casp/src/casp/tests/commands/format_test.py | 58 | def test_format_success_with_path(self): | CODE |
| LOW | cli/casp/src/casp/tests/commands/format_test.py | 77 | def test_subprocess_run_fails(self): | CODE |
| LOW | cli/casp/src/casp/tests/commands/package_test.py | 38 | def test_package_success_defaults(self): | CODE |
| LOW | cli/casp/src/casp/tests/commands/package_test.py | 47 | def test_package_success_with_args(self): | CODE |
| LOW | cli/casp/src/casp/tests/commands/package_test.py | 64 | def test_subprocess_run_fails(self): | CODE |
| LOW | cli/casp/src/casp/tests/commands/run_test.py | 38 | def test_run_local_success_basic(self): | CODE |
| LOW | cli/casp/src/casp/tests/commands/run_test.py | 58 | def test_run_local_success_all_options(self): | CODE |
| LOW | cli/casp/src/casp/tests/commands/run_test.py | 112 | def test_run_container_success(self): | CODE |
| LOW | cli/casp/src/casp/tests/commands/bootstrap_test.py | 55 | def test_subprocess_run_fails(self): | CODE |
| 2326 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | cloudbuild.yaml | 1 | # Copyright 2019 Google LLC | COMMENT |
| LOW | butler.py | 1 | # Copyright 2019 Google LLC | COMMENT |
| LOW | infra/terraform/main.tf | 1 | # Copyright 2023 Google LLC | COMMENT |
| LOW | infra/terraform/variables.tf | 1 | # Copyright 2023 Google LLC | COMMENT |
| LOW | infra/terraform/monitoring.tf | 1 | # Copyright 2024 Google LLC | COMMENT |
| LOW | docker/build-immutable.sh | 1 | #!/bin/bash -ex | COMMENT |
| LOW | docker/cloudbuild.yaml | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | docker/build.sh | 1 | #!/bin/bash -ex | COMMENT |
| LOW | docker/build_on_container_builder.sh | 1 | #!/bin/bash | COMMENT |
| LOW | docker/immutable-cloudbuild.yaml | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | docker/fuchsia/start.sh | 1 | #!/bin/bash -ex | COMMENT |
| LOW | docker/chromium/builder/setup_depot_tools.sh | 1 | #!/bin/bash | COMMENT |
| LOW | docker/chromium/builder/setup_gerrit.sh | 1 | #!/bin/bash | COMMENT |
| LOW | docker/chromium/builder/start.sh | 1 | #!/bin/bash -ex | COMMENT |
| LOW | docker/chromium/tests-syncer/setup_depot_tools.sh | 1 | #!/bin/bash | COMMENT |
| LOW | docker/chromium/tests-syncer/setup_gerrit.sh | 1 | #!/bin/bash | COMMENT |
| LOW | docker/chromium/tests-syncer/start.sh | 1 | #!/bin/bash -ex | COMMENT |
| LOW | docker/chromium/base/setup.sh | 1 | #!/bin/bash -ex | COMMENT |
| LOW | docker/chromium/base/setup_x.sh | 1 | #!/bin/bash -ex | COMMENT |
| LOW | docker/chromium/base/start.sh | 1 | #!/bin/bash -ex | COMMENT |
| LOW | docker/base/setup_clusterfuzz.sh | 1 | #!/bin/bash -ex | COMMENT |
| LOW | docker/base/setup_mock_metadata.sh | 1 | #!/bin/bash -ex | COMMENT |
| LOW | docker/base/start_clusterfuzz.sh | 1 | #!/bin/bash -ex | COMMENT |
| LOW | docker/base/start.sh | 1 | #!/bin/bash -ex | COMMENT |
| LOW | docker/base/setup_common.sh | 1 | #!/bin/bash -ex | COMMENT |
| LOW | docker/oss-fuzz/base/start.sh | 1 | #!/bin/bash -ex | COMMENT |
| LOW | deploy/cloudbuild.yaml | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | …rces/platform/android/third_party/asan_device_setup.sh | 1 | #!/bin/bash | COMMENT |
| LOW | test_suites/__init__.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | test_suites/data/fuzzer/blackbox/run.py | 1 | #!/usr/bin/env python3 | COMMENT |
| LOW | test_suites/data/fuzzer/blackbox/__init__.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | docs/_config.yml | 1 | # Welcome to Jekyll! | COMMENT |
| LOW | docs/setting-up-fuzzing/build_afl.bash | 1 | #! /bin/bash | COMMENT |
| LOW | cli/casp/src/casp/__init__.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | cli/casp/src/casp/main.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | cli/casp/src/casp/tests/__init__.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | cli/casp/src/casp/tests/utils/gcloud_test.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | cli/casp/src/casp/tests/utils/__init__.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | cli/casp/src/casp/tests/utils/local_butler_test.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | cli/casp/src/casp/tests/utils/docker_test.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | cli/casp/src/casp/tests/utils/config_test.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | cli/casp/src/casp/tests/commands/lint_test.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | cli/casp/src/casp/tests/commands/__init__.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | cli/casp/src/casp/tests/commands/reproduce_test.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | cli/casp/src/casp/tests/commands/init_test.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | cli/casp/src/casp/tests/commands/format_test.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | cli/casp/src/casp/tests/commands/package_test.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | cli/casp/src/casp/tests/commands/run_test.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | cli/casp/src/casp/tests/commands/bootstrap_test.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | cli/casp/src/casp/utils/docker_utils.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | cli/casp/src/casp/utils/config.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | cli/casp/src/casp/utils/gcloud.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | cli/casp/src/casp/utils/container.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | cli/casp/src/casp/utils/local_butler.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | cli/casp/src/casp/utils/path_utils.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | cli/casp/src/casp/commands/package.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | cli/casp/src/casp/commands/bootstrap.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | cli/casp/src/casp/commands/run.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | cli/casp/src/casp/commands/run_bot.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | cli/casp/src/casp/commands/version.py | 1 | # Copyright 2025 Google LLC | COMMENT |
| 1354 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | src/python/bot/startup/run.py | 128 | except Exception: | CODE |
| HIGH | src/python/bot/startup/run_cron.py | 56 | except ImportError: | CODE |
| HIGH | src/appengine/main.py | 39 | except ImportError: | CODE |
| HIGH | src/appengine/libs/helpers.py | 78 | except errors.InvalidTestcaseError: | CODE |
| HIGH | src/appengine/libs/helpers.py | 136 | except not_found_exception: | CODE |
| HIGH | src/local/remote/handlers/posix.py | 73 | except exceptions.CommandTimeout: | CODE |
| HIGH | …terfuzz/_internal/google_cloud_utils/compute_engine.py | 302 | except: | CODE |
| HIGH | …terfuzz/_internal/google_cloud_utils/compute_engine.py | 307 | except: | CODE |
| HIGH | …lusterfuzz/_internal/google_cloud_utils/credentials.py | 33 | except ImportError: | CODE |
| HIGH | src/clusterfuzz/_internal/google_cloud_utils/storage.py | 60 | except ImportError: | CODE |
| HIGH | src/clusterfuzz/_internal/google_cloud_utils/storage.py | 1282 | except: | CODE |
| HIGH | …rfuzz/_internal/google_cloud_utils/compute_metadata.py | 110 | except Exception: | CODE |
| HIGH | …c/clusterfuzz/_internal/platforms/fuchsia/undercoat.py | 169 | except UndercoatError: | CODE |
| HIGH | src/clusterfuzz/_internal/platforms/android/adb.py | 161 | except OSError: | CODE |
| HIGH | src/clusterfuzz/_internal/platforms/windows/gestures.py | 25 | except ImportError: | CODE |
| HIGH | src/clusterfuzz/_internal/platforms/windows/gestures.py | 160 | except Exception: | CODE |
| HIGH | src/clusterfuzz/_internal/fuzzing/fuzzer_selection.py | 61 | except ValueError: | CODE |
| HIGH | src/clusterfuzz/_internal/build_management/revisions.py | 274 | except (ValueError, TypeError): | CODE |
| HIGH | …/_internal/tests/test_libs/untrusted_runner_helpers.py | 164 | except OSError: | CODE |
| HIGH | …fuzz/_internal/tests/core/bot/tasks/task_types_test.py | 291 | except: | CODE |
| HIGH | …z/_internal/tests/core/bot/tasks/utasks/utasks_test.py | 423 | except ValueError: | CODE |
| HIGH | …ternal/tests/core/bot/fuzzers/libFuzzer/engine_test.py | 1066 | except fuchsia.undercoat.UndercoatError: | CODE |
| HIGH | src/clusterfuzz/_internal/datastore/locks.py | 124 | except exceptions.Error: | CODE |
| HIGH | src/clusterfuzz/_internal/system/shell.py | 438 | except: | CODE |
| HIGH | src/clusterfuzz/_internal/system/shell.py | 186 | except: | CODE |
| HIGH | src/clusterfuzz/_internal/system/shell.py | 470 | except: | CODE |
| HIGH | src/clusterfuzz/_internal/system/process_handler.py | 41 | except ImportError: | CODE |
| HIGH | src/clusterfuzz/_internal/system/process_handler.py | 464 | except: | CODE |
| HIGH | src/clusterfuzz/_internal/system/process_handler.py | 419 | except (psutil.AccessDenied, psutil.NoSuchProcess, OSError): | CODE |
| HIGH | src/clusterfuzz/_internal/system/process_handler.py | 507 | except: | CODE |
| HIGH | src/clusterfuzz/_internal/system/process_handler.py | 332 | except: | CODE |
| HIGH | src/clusterfuzz/_internal/bot/tasks/update_task.py | 273 | except FileNotFoundError: | CODE |
| HIGH | …c/clusterfuzz/_internal/bot/tasks/utasks/uworker_io.py | 130 | except zlib.error: | CODE |
| HIGH | src/clusterfuzz/_internal/bot/untrusted_runner/host.py | 345 | except grpc.RpcError: | CODE |
| HIGH | …sterfuzz/_internal/bot/untrusted_runner/environment.py | 24 | except ImportError: | CODE |
| HIGH | …lusterfuzz/_internal/bot/untrusted_runner/file_impl.py | 63 | except Exception: | CODE |
| HIGH | src/clusterfuzz/_internal/bot/minimizer/minimizer.py | 210 | except OSError: | CODE |
| HIGH | src/clusterfuzz/_internal/bot/minimizer/minimizer.py | 545 | except KeyError: | CODE |
| HIGH | …usterfuzz/_internal/bot/minimizer/unicode_minimizer.py | 60 | except (ValueError, OverflowError): | CODE |
| HIGH | src/clusterfuzz/_internal/bot/fuzzers/options.py | 65 | except Exception: | CODE |
| HIGH | src/clusterfuzz/_internal/bot/fuzzers/engine_common.py | 555 | except OSError: # Pipe may already be closed and we may not be able to print. | CODE |
| HIGH | src/clusterfuzz/_internal/bot/fuzzers/afl/launcher.py | 21 | except ImportError: | CODE |
| HIGH | src/clusterfuzz/_internal/bot/fuzzers/afl/launcher.py | 1124 | except KeyError: | CODE |
| HIGH | …ernal/crash_analysis/stack_parsing/stack_symbolizer.py | 53 | except ImportError: | CODE |
| HIGH | …ernal/crash_analysis/stack_parsing/stack_symbolizer.py | 612 | except ProcessLookupError: | CODE |
| HIGH | src/clusterfuzz/_internal/base/utils.py | 566 | except: | CODE |
| HIGH | src/clusterfuzz/_internal/base/modules.py | 43 | except ImportError: | CODE |
| HIGH | src/clusterfuzz/_internal/swarming/__init__.py | 154 | except Exception: | CODE |
| HIGH | src/clusterfuzz/_internal/cron/project_setup.py | 512 | except ValueError: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …sterfuzz/_internal/protos/untrusted_runner_pb2_grpc.py | 0 | client and server classes corresponding to protobuf-defined services. | STRING |
| HIGH | src/clusterfuzz/_internal/protos/heartbeat_pb2_grpc.py | 0 | client and server classes corresponding to protobuf-defined services. | STRING |
| HIGH | …clusterfuzz/_internal/protos/process_state_pb2_grpc.py | 0 | client and server classes corresponding to protobuf-defined services. | STRING |
| HIGH | src/clusterfuzz/_internal/protos/swarming_pb2_grpc.py | 0 | client and server classes corresponding to protobuf-defined services. | STRING |
| HIGH | …c/clusterfuzz/_internal/protos/uworker_msg_pb2_grpc.py | 0 | client and server classes corresponding to protobuf-defined services. | STRING |
| HIGH | …internal/tests/core/build_management/revisions_test.py | 0 | helper function to read the contents of a data file. | STRING |
| HIGH | …internal/tests/appengine/handlers/fuzzer_stats_test.py | 0 | helper function to read the contents of a data file. | STRING |
| HIGH | …al/tests/appengine/handlers/cron/project_setup_test.py | 0 | helper function to read the contents of a data file. | STRING |
| HIGH | …ernal/tests/core/bot/tasks/utasks/analyze_task_test.py | 0 | checks that an output with an error is handled properly. | STRING |
| HIGH | …l/tests/core/bot/tasks/utasks/progression_task_test.py | 0 | checks that an output with an error is handled properly. | STRING |
| HIGH | …nal/tests/core/bot/tasks/utasks/symbolize_task_test.py | 0 | checks that an output with an error is handled properly. | STRING |
| HIGH | …ernal/tests/core/bot/tasks/utasks/analyze_task_test.py | 0 | tests utask_postprocess behaviour when there is a crash on latest revision. | STRING |
| HIGH | …l/tests/core/bot/tasks/utasks/progression_task_test.py | 0 | tests utask_postprocess behaviour when there is a crash on latest revision. | STRING |
| HIGH | …nal/tests/core/bot/tasks/utasks/symbolize_task_test.py | 0 | tests utask_postprocess behaviour when there is a crash on latest revision. | STRING |
| HIGH | …/clusterfuzz/_internal/bot/fuzzers/libFuzzer/engine.py | 0 | return the maximum additional timeout in seconds for additional operations in fuzz() (e.g. merging back new items). args | STRING |
| HIGH | …/clusterfuzz/_internal/bot/fuzzers/centipede/engine.py | 0 | return the maximum additional timeout in seconds for additional operations in fuzz() (e.g. merging back new items). args | STRING |
| HIGH | src/clusterfuzz/fuzz/engine.py | 0 | return the maximum additional timeout in seconds for additional operations in fuzz() (e.g. merging back new items). args | STRING |
| HIGH | …/clusterfuzz/_internal/bot/fuzzers/libFuzzer/engine.py | 0 | prepares for a fuzzing session, by generating options. args: corpus_dir: the main corpus directory. target_path: path to | STRING |
| HIGH | src/clusterfuzz/_internal/bot/fuzzers/afl/engine.py | 0 | prepares for a fuzzing session, by generating options. args: corpus_dir: the main corpus directory. target_path: path to | STRING |
| HIGH | …terfuzz/_internal/bot/fuzzers/googlefuzztest/engine.py | 0 | prepares for a fuzzing session, by generating options. args: corpus_dir: the main corpus directory. target_path: path to | STRING |
| HIGH | …/clusterfuzz/_internal/bot/fuzzers/honggfuzz/engine.py | 0 | prepares for a fuzzing session, by generating options. args: corpus_dir: the main corpus directory. target_path: path to | STRING |
| HIGH | src/clusterfuzz/fuzz/engine.py | 0 | prepares for a fuzzing session, by generating options. args: corpus_dir: the main corpus directory. target_path: path to | STRING |
| HIGH | …/clusterfuzz/_internal/bot/fuzzers/centipede/engine.py | 0 | prepares for a fuzzing session, by generating options. args: corpus_dir: the main corpus directory. target_path: path to | STRING |
| HIGH | …/clusterfuzz/_internal/bot/fuzzers/libFuzzer/engine.py | 0 | runs a fuzz session. args: target_path: path to the target. options: the fuzzoptions object returned by prepare(). repro | STRING |
| HIGH | src/clusterfuzz/_internal/bot/fuzzers/afl/engine.py | 0 | runs a fuzz session. args: target_path: path to the target. options: the fuzzoptions object returned by prepare(). repro | STRING |
| HIGH | …terfuzz/_internal/bot/fuzzers/googlefuzztest/engine.py | 0 | runs a fuzz session. args: target_path: path to the target. options: the fuzzoptions object returned by prepare(). repro | STRING |
| HIGH | …/clusterfuzz/_internal/bot/fuzzers/honggfuzz/engine.py | 0 | runs a fuzz session. args: target_path: path to the target. options: the fuzzoptions object returned by prepare(). repro | STRING |
| HIGH | src/clusterfuzz/fuzz/engine.py | 0 | runs a fuzz session. args: target_path: path to the target. options: the fuzzoptions object returned by prepare(). repro | STRING |
| HIGH | …/clusterfuzz/_internal/bot/fuzzers/centipede/engine.py | 0 | runs a fuzz session. args: target_path: path to the target. options: the fuzzoptions object returned by prepare(). repro | STRING |
| HIGH | …/clusterfuzz/_internal/bot/fuzzers/libFuzzer/engine.py | 0 | optional (but recommended): run corpus minimization. args: target_path: path to the target. arguments: additional argume | STRING |
| HIGH | …terfuzz/_internal/bot/fuzzers/googlefuzztest/engine.py | 0 | optional (but recommended): run corpus minimization. args: target_path: path to the target. arguments: additional argume | STRING |
| HIGH | src/clusterfuzz/fuzz/engine.py | 0 | optional (but recommended): run corpus minimization. args: target_path: path to the target. arguments: additional argume | STRING |
| HIGH | …/clusterfuzz/_internal/bot/fuzzers/libFuzzer/engine.py | 0 | minimizes a testcase. args: target_path: path to the target. arguments: additional arguments needed for testcase minimiz | STRING |
| HIGH | …terfuzz/_internal/bot/fuzzers/googlefuzztest/engine.py | 0 | minimizes a testcase. args: target_path: path to the target. arguments: additional arguments needed for testcase minimiz | STRING |
| HIGH | …/clusterfuzz/_internal/bot/fuzzers/honggfuzz/engine.py | 0 | minimizes a testcase. args: target_path: path to the target. arguments: additional arguments needed for testcase minimiz | STRING |
| HIGH | src/clusterfuzz/fuzz/engine.py | 0 | minimizes a testcase. args: target_path: path to the target. arguments: additional arguments needed for testcase minimiz | STRING |
| HIGH | …/clusterfuzz/_internal/bot/fuzzers/centipede/engine.py | 0 | minimizes a testcase. args: target_path: path to the target. arguments: additional arguments needed for testcase minimiz | STRING |
| HIGH | …/clusterfuzz/_internal/bot/fuzzers/libFuzzer/engine.py | 0 | cleanses a testcase. args: target_path: path to the target. arguments: additional arguments needed for testcase cleanse. | STRING |
| HIGH | …terfuzz/_internal/bot/fuzzers/googlefuzztest/engine.py | 0 | cleanses a testcase. args: target_path: path to the target. arguments: additional arguments needed for testcase cleanse. | STRING |
| HIGH | …/clusterfuzz/_internal/bot/fuzzers/honggfuzz/engine.py | 0 | cleanses a testcase. args: target_path: path to the target. arguments: additional arguments needed for testcase cleanse. | STRING |
| HIGH | src/clusterfuzz/fuzz/engine.py | 0 | cleanses a testcase. args: target_path: path to the target. arguments: additional arguments needed for testcase cleanse. | STRING |
| HIGH | …/clusterfuzz/_internal/bot/fuzzers/centipede/engine.py | 0 | cleanses a testcase. args: target_path: path to the target. arguments: additional arguments needed for testcase cleanse. | STRING |
| HIGH | src/clusterfuzz/_internal/bot/fuzzers/afl/engine.py | 0 | reproduces a crash given an input. args: target_path: path to the target. input_path: path to the reproducer input. argu | STRING |
| HIGH | …terfuzz/_internal/bot/fuzzers/googlefuzztest/engine.py | 0 | reproduces a crash given an input. args: target_path: path to the target. input_path: path to the reproducer input. argu | STRING |
| HIGH | …/clusterfuzz/_internal/bot/fuzzers/honggfuzz/engine.py | 0 | reproduces a crash given an input. args: target_path: path to the target. input_path: path to the reproducer input. argu | STRING |
| HIGH | …/clusterfuzz/_internal/bot/fuzzers/centipede/engine.py | 0 | reproduces a crash given an input. args: target_path: path to the target. input_path: path to the reproducer input. argu | STRING |
| HIGH | src/clusterfuzz/_internal/bot/fuzzers/afl/engine.py | 0 | runs corpus minimization. args: target_path: path to the target. arguments: additional arguments needed for corpus minim | STRING |
| HIGH | …/clusterfuzz/_internal/bot/fuzzers/honggfuzz/engine.py | 0 | runs corpus minimization. args: target_path: path to the target. arguments: additional arguments needed for corpus minim | STRING |
| HIGH | …/clusterfuzz/_internal/bot/fuzzers/centipede/engine.py | 0 | runs corpus minimization. args: target_path: path to the target. arguments: additional arguments needed for corpus minim | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | src/python/bot/startup/run.py | 72 | except Exception: | CODE |
| LOW | src/python/bot/startup/run.py | 107 | except Exception: | CODE |
| LOW | src/python/bot/startup/run.py | 128 | except Exception: | CODE |
| LOW | src/python/bot/startup/run.py | 150 | except Exception: | CODE |
| LOW | src/python/bot/startup/run.py | 168 | except Exception as e: | CODE |
| LOW | src/python/bot/startup/run.py | 186 | except Exception: | CODE |
| LOW | src/python/bot/startup/run.py | 211 | except Exception: | CODE |
| LOW | src/python/bot/startup/run_bot.py | 237 | except Exception: | CODE |
| LOW | src/python/bot/startup/run_bot.py | 299 | except Exception as ex: | CODE |
| LOW | src/python/bot/startup/run_bot.py | 379 | except Exception: | CODE |
| LOW | src/python/bot/startup/run_cron.py | 69 | except Exception as e: | CODE |
| LOW | src/python/bot/startup/heartbeat.py | 71 | except Exception: | CODE |
| LOW | src/python/bot/startup/heartbeat.py | 85 | except Exception: | CODE |
| LOW | src/python/bot/startup/heartbeat.py | 113 | except Exception: | CODE |
| LOW | src/python/bot/startup/run_heartbeat.py | 69 | except Exception: | CODE |
| LOW | src/appengine/libs/gcs.py | 58 | except Exception as e: | CODE |
| LOW | src/appengine/libs/helpers.py | 138 | except Exception: | CODE |
| LOW | src/appengine/libs/helpers.py | 155 | except Exception: | CODE |
| LOW | src/appengine/handlers/viewer.py | 60 | except Exception: | CODE |
| LOW | src/appengine/handlers/fuzzer_stats.py | 521 | except Exception as e: | CODE |
| LOW | src/appengine/handlers/fuzzer_stats.py | 531 | except Exception as e: | CODE |
| LOW | src/appengine/handlers/upload_testcase.py | 447 | except Exception as e: | CODE |
| LOW | src/appengine/handlers/upload_testcase.py | 462 | except Exception as e: | CODE |
| LOW | src/appengine/handlers/upload_testcase.py | 796 | except Exception as e: | CODE |
| LOW | src/appengine/handlers/base_handler.py | 254 | except Exception: | CODE |
| LOW | src/appengine/handlers/base_handler.py | 279 | except Exception as exception: | CODE |
| LOW | src/local/butler/deploy.py | 451 | except Exception as ex: | CODE |
| LOW | src/local/butler/reproduce.py | 84 | except Exception as e: | CODE |
| LOW⚡ | src/local/butler/integration_tests.py | 56 | except Exception: | CODE |
| MEDIUM⚡ | src/local/butler/integration_tests.py | 57 | print('Error occurred:') | CODE |
| LOW | src/local/butler/run_server.py | 99 | except Exception: | CODE |
| LOW | src/local/butler/lint.py | 159 | except Exception as e: | CODE |
| LOW | src/local/butler/scripts/grouper_experiment.py | 722 | except Exception as e: | CODE |
| LOW | src/local/butler/scripts/grouper_experiment.py | 732 | except Exception as e: | CODE |
| LOW | src/local/butler/scripts/migrate_blobs.py | 52 | except Exception: | CODE |
| LOW⚡ | src/local/butler/scripts/build_attributes.py | 87 | except Exception: | CODE |
| LOW⚡ | src/local/butler/scripts/build_attributes.py | 91 | except Exception: | CODE |
| MEDIUM⚡ | src/local/butler/scripts/build_attributes.py | 92 | print('Error: %s %s' % (testcase.key.id(), sys.exc_info())) | CODE |
| LOW | …scripts/migration/monorail_to_issuetracker_migrator.py | 103 | except Exception as e: | CODE |
| LOW | …scripts/migration/monorail_to_issuetracker_migrator.py | 111 | except Exception as ie: | CODE |
| LOW | …terfuzz/_internal/google_cloud_utils/compute_engine.py | 66 | except Exception: | CODE |
| LOW | …terfuzz/_internal/google_cloud_utils/compute_engine.py | 97 | except Exception as e: | CODE |
| LOW | src/clusterfuzz/_internal/google_cloud_utils/gsutil.py | 183 | except Exception: | CODE |
| MEDIUM | src/clusterfuzz/_internal/google_cloud_utils/storage.py | 780 | def from_key(key): | CODE |
| LOW⚡ | src/clusterfuzz/_internal/google_cloud_utils/storage.py | 1343 | except Exception: | CODE |
| LOW⚡ | src/clusterfuzz/_internal/google_cloud_utils/storage.py | 1353 | except Exception: | CODE |
| LOW⚡ | src/clusterfuzz/_internal/google_cloud_utils/storage.py | 1366 | except Exception: | CODE |
| LOW | src/clusterfuzz/_internal/google_cloud_utils/storage.py | 783 | except Exception: | CODE |
| LOW | …rfuzz/_internal/google_cloud_utils/compute_metadata.py | 74 | except Exception as e: | CODE |
| LOW | …rfuzz/_internal/google_cloud_utils/compute_metadata.py | 110 | except Exception: | CODE |
| LOW | src/clusterfuzz/_internal/metrics/monitor.py | 91 | except Exception as e: | CODE |
| LOW | src/clusterfuzz/_internal/metrics/monitor.py | 132 | except Exception as e: | CODE |
| LOW | src/clusterfuzz/_internal/metrics/monitor.py | 154 | except Exception as e: | CODE |
| LOW | src/clusterfuzz/_internal/metrics/monitor.py | 235 | except Exception as e: | CODE |
| LOW | src/clusterfuzz/_internal/metrics/logs.py | 225 | except Exception as ex: | CODE |
| LOW | src/clusterfuzz/_internal/metrics/logs.py | 656 | except Exception: | CODE |
| LOW | src/clusterfuzz/_internal/metrics/logs.py | 842 | except Exception: | CODE |
| LOW | src/clusterfuzz/_internal/metrics/logs.py | 1103 | except Exception as e: | CODE |
| LOW | src/clusterfuzz/_internal/metrics/logs.py | 1127 | except Exception as e: | CODE |
| LOW | src/clusterfuzz/_internal/metrics/logs.py | 1164 | except Exception as e: | CODE |
| 98 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …rces/platform/android/third_party/asan_device_setup.sh | 6 | # This file is distributed under the University of Illinois Open Source | COMMENT |
| MEDIUM⚡ | cli/casp/src/casp/tests/utils/config_test.py | 84 | f.write('') # Create an empty file | CODE |
| MEDIUM | src/appengine/handlers/upload_testcase.py | 542 | # Create a job to unpack an archive. | COMMENT |
| MEDIUM | src/appengine/handlers/upload_testcase.py | 571 | # Create a testcase metadata object to show the user their upload. | COMMENT |
| MEDIUM | src/local/butler/create_config.py | 242 | # Create the bucket if it does not exist. | COMMENT |
| MEDIUM | …sterfuzz/_internal/google_cloud_utils/google_groups.py | 177 | # Create a membership object with a role type MEMBER | COMMENT |
| MEDIUM | …sterfuzz/_internal/google_cloud_utils/google_groups.py | 186 | # Create a membership using the group ID and the membership object | COMMENT |
| MEDIUM | src/clusterfuzz/_internal/platforms/android/device.py | 180 | # Create a list of property name and names to be used in local.prop file. | COMMENT |
| MEDIUM⚡ | src/clusterfuzz/_internal/fuzzing/leak_blacklist.py | 117 | # Create the directory if it does not exists, since we need to write to it. | COMMENT |
| MEDIUM | …sterfuzz/_internal/protos/untrusted_runner_pb2_grpc.py | 387 | # This class is part of an EXPERIMENTAL API. | COMMENT |
| MEDIUM | src/clusterfuzz/_internal/protos/heartbeat_pb2_grpc.py | 64 | # This class is part of an EXPERIMENTAL API. | COMMENT |
| MEDIUM | …lusterfuzz/_internal/build_management/build_manager.py | 218 | # Create the root build directory for this job. | COMMENT |
| MEDIUM | src/clusterfuzz/_internal/k8s/service.py | 148 | # Define the context with all the dynamic values. | COMMENT |
| MEDIUM | …zz/_internal/tests/core/datastore/feature_flag_test.py | 28 | # Create a boolean feature flag. | COMMENT |
| MEDIUM | …zz/_internal/tests/core/datastore/feature_flag_test.py | 34 | # Create a float feature flag. | COMMENT |
| MEDIUM⚡ | …lusterfuzz/_internal/tests/core/system/archive_test.py | 69 | # Create a temporary TAR archive file on disk. | COMMENT |
| MEDIUM⚡ | …lusterfuzz/_internal/tests/core/system/archive_test.py | 73 | # Create a malicious archive with an absolute path payload. | COMMENT |
| MEDIUM⚡ | …lusterfuzz/_internal/tests/core/system/archive_test.py | 76 | # Creating a TarInfo object with an absolute path. | COMMENT |
| MEDIUM | …nternal/tests/core/bot/tasks/utasks/uworker_io_test.py | 129 | # Create a mocked version of write_data so that when we upload the uworker | COMMENT |
| MEDIUM | …nternal/tests/core/bot/tasks/utasks/uworker_io_test.py | 146 | # Create a mocked version of download_signed_url that will read the data | COMMENT |
| MEDIUM | …nternal/tests/core/bot/tasks/utasks/uworker_io_test.py | 195 | # Create a version of upload_signed_url that will "upload" the data to a | COMMENT |
| MEDIUM | …internal/tests/core/bot/tasks/utasks/fuzz_task_test.py | 1267 | # Create the correct version file to make the fuzzer appear up-to-date on disk | COMMENT |
| MEDIUM | …/untrusted_runner/untrusted_runner_integration_test.py | 522 | # This file is as good as any. | COMMENT |
| MEDIUM | …_internal/tests/core/bot/fuzzers/engine_common_test.py | 628 | # Create an arbitrary file with a hash name that is different from this | COMMENT |
| MEDIUM⚡ | …ternal/tests/core/bot/fuzzers/afl/afl_launcher_test.py | 772 | # Create an arbitrary number of features. | COMMENT |
| MEDIUM | …/core/bot/fuzzers/afl/afl_launcher_integration_test.py | 82 | # Create the queue directory within AFL's output directory. | COMMENT |
| MEDIUM | …z/_internal/tests/core/remote_task/remote_task_test.py | 122 | # Create a new gate instance to trigger __init__ again. | COMMENT |
| MEDIUM | …uzz/_internal/tests/appengine/handlers/fuzzers_test.py | 303 | # Create a Linux job. | COMMENT |
| MEDIUM | …uzz/_internal/tests/appengine/handlers/fuzzers_test.py | 335 | # Create a Windows job. | COMMENT |
| MEDIUM | src/clusterfuzz/_internal/datastore/data_handler.py | 795 | # Create the testcase. | COMMENT |
| MEDIUM | src/clusterfuzz/_internal/datastore/data_handler.py | 1514 | # Create the job to analyze the testcase. | COMMENT |
| MEDIUM | src/clusterfuzz/_internal/system/archive.py | 435 | """This class is a very simple file-like object representation of a zip file | STRING |
| MEDIUM | src/clusterfuzz/_internal/bot/testcase_manager.py | 1173 | # Create a file in user profile directory based on format: | COMMENT |
| MEDIUM | src/clusterfuzz/_internal/bot/testcase_manager.py | 1249 | # Create a blank command line with no file to run and no http. | COMMENT |
| MEDIUM | src/clusterfuzz/_internal/bot/testcase_manager.py | 1281 | # Initialize helper variables. | COMMENT |
| MEDIUM | src/clusterfuzz/_internal/bot/tasks/setup.py | 902 | # Create the archive. | COMMENT |
| MEDIUM | src/clusterfuzz/_internal/bot/tasks/utasks/fuzz_task.py | 1975 | # Create a dict to store metadata specific to each testcase. | COMMENT |
| MEDIUM | …clusterfuzz/_internal/bot/tasks/utasks/analyze_task.py | 408 | # Initialize some variables. | COMMENT |
| MEDIUM | src/clusterfuzz/_internal/bot/tasks/utasks/__init__.py | 37 | # Define an alias to appease pylint. | COMMENT |
| MEDIUM⚡ | …c/clusterfuzz/_internal/bot/tasks/utasks/uworker_io.py | 35 | # Define an alias to appease pylint. | COMMENT |
| MEDIUM | …ernal/crash_analysis/stack_parsing/stack_symbolizer.py | 19 | # This file is distributed under the University of Illinois Open Source | COMMENT |
| MEDIUM | src/clusterfuzz/_internal/cron/project_setup.py | 385 | # Create a new one in those cases. | COMMENT |
| MEDIUM | src/clusterfuzz/_internal/cron/oss_fuzz_cc_groups.py | 78 | # Create the group and bail out since the CIG API might delay to create a | COMMENT |
| MEDIUM | src/clusterfuzz/_internal/cron/grouper.py | 69 | # This method is useful so that an object calling it gets a similar result | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | cli/casp/src/casp/utils/local_butler.py | 24 | Builds a butler command for local execution. Args: subcommand: The butler subcommand to execute (e.g., 'format'). | STRING |
| HIGH | …zz/_internal/platforms/android/android_build_v4_api.py | 54 | Validates credentials and constructs an authenticated client instance. Args: credentials: Service account cre | STRING |
| HIGH | …lusterfuzz/_internal/build_management/build_manager.py | 491 | Gets a handle on a build archive for the current build. Depending on the provided parameters, this function might do | STRING |
| HIGH | …lusterfuzz/_internal/build_management/build_archive.py | 469 | Open the archive and gets the appropriate build archive based on the provided archive information. Args: read | STRING |
| HIGH | …lusterfuzz/_internal/build_management/build_archive.py | 497 | Opens the archive and gets the appropriate build archive based on the `archive_path`. The resulting object is usable a | STRING |
| HIGH | src/clusterfuzz/_internal/system/archive.py | 390 | Opens the archive and gets the appropriate archive reader based on the `archive_path`. If `file_obj` is not none, the | STRING |
| HIGH | …/clusterfuzz/_internal/bot/fuzzers/libFuzzer/engine.py | 398 | Reproduce a crash given an input. Args: target_path: Path to the target. input_path: Path to the reprod | STRING |
| HIGH | …/clusterfuzz/_internal/bot/fuzzers/libFuzzer/engine.py | 516 | Optional (but recommended): run corpus minimization. Args: target_path: Path to the target. arguments: | STRING |
| HIGH | …/clusterfuzz/_internal/bot/fuzzers/libFuzzer/engine.py | 572 | Optional (but recommended): Minimize a testcase. Args: target_path: Path to the target. arguments: Addi | STRING |
| HIGH | …/clusterfuzz/_internal/bot/fuzzers/libFuzzer/engine.py | 608 | Optional (but recommended): Cleanse a testcase. Args: target_path: Path to the target. arguments: Addit | STRING |
| HIGH | …terfuzz/_internal/bot/fuzzers/googlefuzztest/engine.py | 120 | Optional (but recommended): run corpus minimization. Args: target_path: Path to the target. arguments: | STRING |
| HIGH | …terfuzz/_internal/bot/fuzzers/googlefuzztest/engine.py | 142 | Optional (but recommended): Minimize a testcase. Args: target_path: Path to the target. arguments: Addi | STRING |
| HIGH | …terfuzz/_internal/bot/fuzzers/googlefuzztest/engine.py | 160 | Optional (but recommended): Cleanse a testcase. Args: target_path: Path to the target. arguments: Addit | STRING |
| HIGH | …/clusterfuzz/_internal/bot/fuzzers/centipede/engine.py | 637 | Minimizes a testcase. Args: target_path: Path to the target. arguments: Additional arguments needed for | STRING |
| HIGH | …/clusterfuzz/_internal/bot/fuzzers/centipede/engine.py | 685 | Cleanses a testcase. Args: target_path: Path to the target. arguments: Additional arguments needed for t | STRING |
| HIGH | …/clusterfuzz/_internal/bot/fuzzers/honggfuzz/engine.py | 277 | Optional (but recommended): Minimize a testcase. Args: target_path: Path to the target. arguments: Addit | STRING |
| HIGH | …/clusterfuzz/_internal/bot/fuzzers/honggfuzz/engine.py | 292 | Optional (but recommended): Cleanse a testcase. Args: target_path: Path to the target. arguments: Additi | STRING |
| HIGH | src/clusterfuzz/_internal/base/utils.py | 127 | Launches an HTTP GET request with retries. Args: url: Target URL for the GET request. params: Optional | STRING |
| HIGH | src/clusterfuzz/_internal/base/utils.py | 168 | Post the provided data and headers to the provided url. The request is retried `URL_REQUEST_RETRIES` times. To avoid | STRING |
| HIGH | src/clusterfuzz/_internal/base/utils.py | 1145 | Creates a temporary file and returns its path. Args: directory: The directory in which to create the temporary fi | STRING |
| HIGH | src/clusterfuzz/_internal/swarming/api.py | 95 | Makes a pRPC request to the Swarming API. Args: endpoint: The pRPC endpoint (e.g. "swarming.v2.Tasks/NewTask" | STRING |
| HIGH | src/clusterfuzz/_internal/swarming/api.py | 134 | Schedules a task on swarming. Args: task_request: The NewTaskRequest proto message. Returns: | STRING |
| HIGH | src/clusterfuzz/_internal/swarming/api.py | 170 | Counts tasks on swarming. Args: count_request: The TasksCountRequest proto message. Returns: | STRING |
| HIGH | src/clusterfuzz/fuzz/engine.py | 127 | Reproduce a crash given an input. Args: target_path: Path to the target. input_path: Path to the reprod | STRING |
| HIGH | src/clusterfuzz/fuzz/engine.py | 145 | Optional (but recommended): run corpus minimization. Args: target_path: Path to the target. arguments: | STRING |
| HIGH | src/clusterfuzz/fuzz/engine.py | 167 | Optional (but recommended): Minimize a testcase. Args: target_path: Path to the target. arguments: Addi | STRING |
| HIGH | src/clusterfuzz/fuzz/engine.py | 185 | Optional (but recommended): Cleanse a testcase. Args: target_path: Path to the target. arguments: Addit | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …rfuzz/_internal/tests/core/k8s/k8s_integration_test.py | 49 | mock_creds.token = 'fake-token' | CODE |
| LOW | …internal/tests/core/bot/tasks/utasks/fuzz_task_test.py | 1263 | blobstore_key='fake_key', | CODE |
| LOW | …ternal/tests/core/bot/fuzzers/afl/afl_launcher_test.py | 234 | DUMMY_OPTION = 'dummy_option=dummy_value' | CODE |
| LOW | …rfuzz/_internal/tests/core/base/external_users_test.py | 34 | email='user@example.com', | CODE |
| LOW | …rfuzz/_internal/tests/core/base/external_users_test.py | 81 | email='user@example.com', | CODE |
| LOW⚡ | …rfuzz/_internal/tests/core/base/external_users_test.py | 192 | self.assertEqual(result, ['user2@example.com', 'user@example.com']) | CODE |
| LOW⚡ | …rfuzz/_internal/tests/core/base/external_users_test.py | 261 | 'user@example.com', 'parent_child2', include_from_jobs=False)) | CODE |
| LOW⚡ | …rfuzz/_internal/tests/core/base/external_users_test.py | 265 | 'user@example.com', 'parent_child3', include_from_jobs=True)) | CODE |
| LOW⚡ | …rfuzz/_internal/tests/core/base/external_users_test.py | 269 | 'user@example.com', 'parent', include_from_jobs=True)) | CODE |
| LOW⚡ | …rfuzz/_internal/tests/core/base/external_users_test.py | 273 | 'user@example.com', 'fuzzer', include_from_jobs=True)) | CODE |
| LOW⚡ | …rfuzz/_internal/tests/core/base/external_users_test.py | 290 | external_users.is_job_allowed_for_user('user@example.com', 'job2')) | CODE |
| LOW⚡ | …rfuzz/_internal/tests/core/base/external_users_test.py | 297 | external_users.is_upload_allowed_for_user('user@example.com')) | CODE |
| LOW⚡ | …rfuzz/_internal/tests/core/base/external_users_test.py | 302 | self.assertEqual(result, ['user@example.com']) | CODE |
| LOW⚡ | …rfuzz/_internal/tests/core/base/external_users_test.py | 305 | self.assertEqual(result, ['user2@example.com', 'user@example.com']) | CODE |
| LOW⚡ | …rfuzz/_internal/tests/core/base/external_users_test.py | 314 | self.assertEqual(result, ['user2@example.com', 'user@example.com']) | CODE |
| LOW⚡ | …rfuzz/_internal/tests/core/base/external_users_test.py | 317 | self.assertEqual(result, ['user2@example.com', 'user@example.com']) | CODE |
| LOW | …z/_internal/tests/core/remote_task/remote_task_test.py | 43 | mock_creds.token = 'fake-token' | CODE |
| LOW | …/clusterfuzz/_internal/tests/core/swarming/api_test.py | 39 | self.mock_creds.token = 'fake_token' | CODE |
| LOW | …/clusterfuzz/_internal/tests/core/swarming/api_test.py | 74 | 'Authorization': 'Bearer fake_token' | CODE |
| LOW | …/clusterfuzz/_internal/tests/core/swarming/api_test.py | 93 | 'Authorization': 'Bearer fake_token' | CODE |
| LOW | …uzz/_internal/tests/appengine/libs/issue_filer_test.py | 464 | email='user@example.com', | CODE |
| LOW⚡ | …lusterfuzz/_internal/tests/appengine/libs/auth_test.py | 54 | 'email': 'admin@example.com', | CODE |
| LOW⚡ | …lusterfuzz/_internal/tests/appengine/libs/auth_test.py | 65 | 'email': 'user@example.com', | CODE |
| LOW⚡ | …lusterfuzz/_internal/tests/appengine/libs/auth_test.py | 73 | self.assertEqual(user.email, 'user@example.com') | CODE |
| LOW⚡ | …lusterfuzz/_internal/tests/appengine/libs/auth_test.py | 89 | data_types.Admin(id='admin@example.com', email='admin@example.com').put() | CODE |
| LOW⚡ | …lusterfuzz/_internal/tests/appengine/libs/auth_test.py | 92 | 'admin@example.com', email_verified=False) | CODE |
| LOW⚡ | …lusterfuzz/_internal/tests/appengine/libs/auth_test.py | 97 | data_types.Admin(id='admin@example.com', email='admin@example.com').put() | CODE |
| LOW⚡ | …lusterfuzz/_internal/tests/appengine/libs/auth_test.py | 100 | 'admin@example.com', email_verified=True) | CODE |
| LOW⚡ | …sterfuzz/_internal/tests/appengine/libs/access_test.py | 191 | user = auth.User('test@test.com', email_verified=True) | CODE |
| LOW⚡ | …sterfuzz/_internal/tests/appengine/libs/access_test.py | 198 | user = auth.User('test@test.com', email_verified=False) | CODE |
| LOW⚡ | …sterfuzz/_internal/tests/appengine/libs/access_test.py | 204 | user = auth.User('test@test.com', email_verified=True) | CODE |
| LOW⚡ | …sterfuzz/_internal/tests/appengine/libs/access_test.py | 265 | 'test@test.com', email_verified=False) | CODE |
| LOW⚡ | …sterfuzz/_internal/tests/appengine/libs/access_test.py | 279 | 'test@test.com', email_verified=False) | CODE |
| LOW⚡ | …sterfuzz/_internal/tests/appengine/libs/access_test.py | 490 | self.testcase.uploader_email = 'test@test.com' | CODE |
| LOW | …sterfuzz/_internal/tests/appengine/libs/access_test.py | 60 | self.mock.get_user_email.return_value = 'test@test.com' | CODE |
| LOW | …sterfuzz/_internal/tests/appengine/libs/access_test.py | 95 | self.assertTrue(access._is_privileged_user('test@test.com')) | CODE |
| LOW | …sterfuzz/_internal/tests/appengine/libs/access_test.py | 167 | self.assertFalse(access._is_domain_allowed('test@test.com')) | CODE |
| LOW | …sterfuzz/_internal/tests/appengine/libs/access_test.py | 172 | self.assertTrue(access._is_domain_allowed('test@test.com')) | CODE |
| LOW | …sterfuzz/_internal/tests/appengine/libs/access_test.py | 226 | self.user = auth.User('test@test.com') | CODE |
| LOW | …sterfuzz/_internal/tests/appengine/libs/access_test.py | 380 | self.email = 'test@test.com' | CODE |
| LOW | …sterfuzz/_internal/tests/appengine/libs/access_test.py | 565 | self.mock.get_user_email.return_value = 'user@example.com' | CODE |
| LOW | …zz/_internal/tests/appengine/libs/crash_access_test.py | 46 | self.mock.get_user_email.return_value = 'test@test.com' | CODE |
| LOW | …lusterfuzz/_internal/tests/appengine/libs/form_test.py | 38 | self.mock.get_user_email.return_value = 'test@test.com' | CODE |
| LOW | …lusterfuzz/_internal/tests/appengine/libs/form_test.py | 71 | data_types.CSRFToken.user_email == 'test@test.com')) | CODE |
| LOW | …terfuzz/_internal/tests/appengine/libs/handler_test.py | 181 | self.mock.get_current_user.return_value = auth.User('test@test.com') | CODE |
| LOW | …terfuzz/_internal/tests/appengine/libs/handler_test.py | 301 | self.mock.get_user_email.return_value = 'test@test.com' | CODE |
| LOW | …terfuzz/_internal/tests/appengine/libs/handler_test.py | 310 | self.assertEqual('test@test.com', resp.json['email']) | CODE |
| LOW⚡ | …terfuzz/_internal/tests/appengine/libs/handler_test.py | 517 | 'email': 'test@test.com', | CODE |
| LOW⚡ | …terfuzz/_internal/tests/appengine/libs/handler_test.py | 533 | 'email': 'test@test.com', | CODE |
| LOW⚡ | …terfuzz/_internal/tests/appengine/libs/handler_test.py | 581 | 'email': 'test@test.com', | CODE |
| LOW⚡ | …terfuzz/_internal/tests/appengine/libs/handler_test.py | 586 | self.assertEqual('test@test.com', email) | CODE |
| LOW | …terfuzz/_internal/tests/appengine/libs/handler_test.py | 631 | 'email': 'test@test.com', | CODE |
| LOW | …terfuzz/_internal/tests/appengine/libs/handler_test.py | 648 | 'email': 'test@test.com', | CODE |
| LOW | …internal/tests/appengine/handlers/base_handler_test.py | 96 | self.mock.get_user_email.return_value = 'test@test.com' | CODE |
| LOW⚡ | …internal/tests/appengine/handlers/base_handler_test.py | 115 | self.assertEqual(response.json['email'], 'test@test.com') | CODE |
| LOW⚡ | …internal/tests/appengine/handlers/base_handler_test.py | 125 | self.assertEqual(response.json['email'], 'test@test.com') | CODE |
| LOW | …nternal/tests/appengine/handlers/testcase_list_test.py | 170 | self.mock.get_user_email.return_value = 'test@test.com' | CODE |
| LOW⚡ | …andlers/testcase_detail/testcase_status_events_test.py | 810 | uploader='user@example.com', | CODE |
| LOW | …ine/handlers/testcase_detail/download_testcase_test.py | 39 | self.mock.get_email_and_access_token.return_value = ('test@test.com', | CODE |
| LOW | …/tests/appengine/handlers/testcase_detail/show_test.py | 372 | self.mock.get_user_email.return_value = 'test@test.com' | CODE |
| 30 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | deploy/cloudbuild.yaml | 73 | # Check if the _PROJECT substitution was provided. | COMMENT |
| LOW⚡ | deploy/cloudbuild.yaml | 114 | # Check if the metadata value has been updated | COMMENT |
| LOW | local/install_deps_linux.bash | 54 | # Check if the distro is supported. | COMMENT |
| LOW | local/install_deps_linux.bash | 71 | # Check if the architecture is supported. | COMMENT |
| LOW | src/appengine/handlers/upload_testcase.py | 243 | # Check if this is an external user with access to certain fuzzers/jobs. | COMMENT |
| LOW | src/local/butler/scripts/upload_fuzzer.py | 108 | # Check if the fuzzer already exists to determine whether to edit or create. | COMMENT |
| LOW | src/clusterfuzz/_internal/metrics/events.py | 508 | # Check if testcase has an associated issue. | COMMENT |
| LOW | src/clusterfuzz/_internal/metrics/logs.py | 215 | # Check if it's a NamedTuple | COMMENT |
| LOW | src/clusterfuzz/_internal/platforms/android/wifi.py | 63 | # Check if wifi needs to be enabled. If not, then no need to modify the | COMMENT |
| LOW | …fuzz/_internal/platforms/android/symbols_downloader.py | 61 | # Check if we already have the symbols locally. | COMMENT |
| LOW⚡ | src/clusterfuzz/_internal/platforms/android/util.py | 149 | # Check if device is deprecated | COMMENT |
| LOW⚡ | src/clusterfuzz/_internal/platforms/android/util.py | 153 | # Check if branch is deprecated | COMMENT |
| LOW | src/clusterfuzz/_internal/platforms/android/flash.py | 68 | # Check if our local build matches the latest build. If not, we will | COMMENT |
| LOW | src/clusterfuzz/_internal/platforms/android/flash.py | 125 | # Check if a flash is needed based on last recorded flash time. | COMMENT |
| LOW | src/clusterfuzz/_internal/platforms/android/flash.py | 147 | # Check if both |BUILD_BRANCH| and |BUILD_TARGET| environment variables | COMMENT |
| LOW | src/clusterfuzz/_internal/platforms/android/adb.py | 668 | # Check if we are already running as root. If yes bail out. | COMMENT |
| LOW | src/clusterfuzz/_internal/platforms/android/adb.py | 908 | # Write file with desired contents. | COMMENT |
| LOW⚡ | src/clusterfuzz/_internal/datastore/data_handler.py | 1172 | # Check if the heartbeat was recently updated. If yes, bail out. | COMMENT |
| LOW | src/clusterfuzz/_internal/system/process_handler.py | 238 | # Check if we need to bail out on process exit. | COMMENT |
| LOW | src/clusterfuzz/_internal/system/process_handler.py | 279 | # Check if a reboot has happened, if yes, append log output before reboot | COMMENT |
| LOW | src/clusterfuzz/_internal/system/environment.py | 216 | # Check if UBSAN is enabled as well for this ASAN build. | COMMENT |
| LOW | src/clusterfuzz/_internal/bot/testcase_manager.py | 1078 | # Check if the file to run is in fuzzed testcases folder. If yes, then we | COMMENT |
| LOW | src/clusterfuzz/_internal/bot/testcase_manager.py | 1092 | # Check if the testcase needs to be loaded over http. | COMMENT |
| LOW | src/clusterfuzz/_internal/bot/testcase_manager.py | 1289 | # Check if the build is bad. | COMMENT |
| LOW | src/clusterfuzz/_internal/bot/tasks/trials.py | 109 | # Check if the flag is contradicted by an already added flag | COMMENT |
| LOW | src/clusterfuzz/_internal/bot/tasks/trials.py | 112 | # Check if the flag contradicts an already added flag | COMMENT |
| LOW | src/clusterfuzz/_internal/bot/tasks/setup.py | 453 | # Check if data bundle is up to date. If yes, skip the update. | COMMENT |
| LOW | src/clusterfuzz/_internal/bot/tasks/setup.py | 775 | # Check if we recently synced. | COMMENT |
| LOW | src/clusterfuzz/_internal/bot/tasks/update_task.py | 309 | # Check if we have a valid tests url. | COMMENT |
| LOW | src/clusterfuzz/_internal/bot/tasks/commands.py | 391 | # Check if the device or branch is deprecated. | COMMENT |
| LOW | …lusterfuzz/_internal/bot/tasks/utasks/minimize_task.py | 433 | # Check if we have an application path. If not, our build failed | COMMENT |
| LOW | src/clusterfuzz/_internal/bot/tasks/utasks/fuzz_task.py | 699 | # Check if the corpus was recently synced. If yes, set a flag so that we | COMMENT |
| LOW | src/clusterfuzz/_internal/bot/tasks/utasks/fuzz_task.py | 2161 | # Check if we have an application path. If not, our build failed | COMMENT |
| LOW | src/clusterfuzz/_internal/bot/tasks/utasks/fuzz_task.py | 2167 | # Check if we have a bad build, i.e. one that crashes on startup. | COMMENT |
| LOW | …clusterfuzz/_internal/bot/tasks/utasks/analyze_task.py | 162 | # Check if we have an application path. If not, our build failed | COMMENT |
| LOW | …sterfuzz/_internal/bot/tasks/utasks/fuzz_task_knobs.py | 114 | # Check if UBSan is enabled in this ASan build. If not, can't disable it. | COMMENT |
| LOW | …clusterfuzz/_internal/bot/tasks/utasks/variant_task.py | 136 | # Check if we have an application path. If not, our build failed to setup | COMMENT |
| LOW | …sterfuzz/_internal/bot/tasks/utasks/regression_task.py | 566 | # Check if we made progress at all. If this task already resumed a previous | COMMENT |
| LOW | …lusterfuzz/_internal/bot/untrusted_runner/untrusted.py | 72 | # Check if there is a in-progress RPC. | COMMENT |
| LOW | src/clusterfuzz/_internal/bot/init_scripts/android.py | 35 | # Check if we need to reflash device to latest build. | COMMENT |
| LOW | src/clusterfuzz/_internal/bot/fuzzers/engine_common.py | 192 | # Check if we exceeded our timeout. If yes, do no more mutations and break. | COMMENT |
| LOW | …/clusterfuzz/_internal/bot/fuzzers/libFuzzer/engine.py | 334 | # Check if we crashed, and get the crash testcase path. | COMMENT |
| LOW | src/clusterfuzz/_internal/bot/fuzzers/afl/launcher.py | 516 | # Set paths to afl tools. | COMMENT |
| LOW | src/clusterfuzz/_internal/bot/fuzzers/afl/launcher.py | 526 | # Set this to None so we can tell if it has never been set or if it's just | COMMENT |
| LOW⚡ | …clusterfuzz/_internal/crash_analysis/crash_analyzer.py | 243 | # Check if we have a complete stacktrace by location stacktrace end marker. | COMMENT |
| LOW⚡ | …clusterfuzz/_internal/crash_analysis/crash_analyzer.py | 248 | # Check if have a UBSan error. | COMMENT |
| LOW⚡ | …clusterfuzz/_internal/crash_analysis/crash_analyzer.py | 252 | # Check if have a stacktrace start marker. | COMMENT |
| LOW | …_internal/crash_analysis/stack_parsing/stack_parser.py | 281 | # Set base to use for address translation. | COMMENT |
| LOW | …ernal/crash_analysis/stack_parsing/stack_symbolizer.py | 184 | # Check if we don't have any symbols at all. If yes, this is probably | COMMENT |
| LOW | …ernal/crash_analysis/stack_parsing/stack_symbolizer.py | 270 | # Set LD_LIBRARY_PATH to use the right libstdc++. | COMMENT |
| LOW⚡ | src/clusterfuzz/_internal/cron/cleanup.py | 734 | # Check if testcase is open. If yes, bail out. | COMMENT |
| LOW⚡ | src/clusterfuzz/_internal/cron/cleanup.py | 738 | # Check if there is an associated bug in open state. If yes, bail out. | COMMENT |
| LOW | src/clusterfuzz/_internal/cron/cleanup.py | 621 | # Check if there are any reproducible open testcases are associated with | COMMENT |
| LOW | src/clusterfuzz/_internal/cron/cleanup.py | 790 | # Check if the testcase job name is in the list of jobs. | COMMENT |
| LOW | src/clusterfuzz/_internal/cron/cleanup.py | 834 | # Check if there is ignore label on issue already. If yes, bail out. | COMMENT |
| LOW | src/clusterfuzz/_internal/cron/cleanup.py | 838 | # Check if we did add the notification comment already. If yes, bail out. | COMMENT |
| LOW | src/clusterfuzz/_internal/cron/cleanup.py | 896 | # Check if we added this message once. If yes, bail out. | COMMENT |
| LOW | src/clusterfuzz/_internal/cron/cleanup.py | 993 | # Check if this is a user upload. If not, bail out. | COMMENT |
| LOW | src/clusterfuzz/_internal/cron/cleanup.py | 1009 | # Check if the notification is already sent once. If yes, bail out. | COMMENT |
| LOW | src/clusterfuzz/_internal/cron/triage.py | 89 | # Check if the testcase is already associated with a bug. | COMMENT |
| 8 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …s_default_1d783bc2a3629b94c963debfa3feaee27092dd92.txt | 11 | # ----------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …s_default_1d783bc2a3629b94c963debfa3feaee27092dd92.txt | 13 | # ----------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …core/build_management/revisions_data/chromium_deps.txt | 11 | # ----------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …core/build_management/revisions_data/chromium_deps.txt | 13 | # ----------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …s_default_2eca06e8a84ae4db820e2dcb6bd91fe8b7b71b83.txt | 11 | # ----------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …s_default_2eca06e8a84ae4db820e2dcb6bd91fe8b7b71b83.txt | 13 | # ----------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …dictionary_manager_data/example_correct_dictionary.txt | 3 | # ------------------------------ | COMMENT |
| MEDIUM⚡ | src/clusterfuzz/_internal/datastore/data_handler.py | 1161 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | src/clusterfuzz/_internal/datastore/data_handler.py | 1163 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | src/clusterfuzz/_internal/datastore/data_handler.py | 1224 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | src/clusterfuzz/_internal/datastore/data_handler.py | 1226 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | src/clusterfuzz/_internal/datastore/data_handler.py | 1372 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | src/clusterfuzz/_internal/datastore/data_handler.py | 1374 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | src/clusterfuzz/_internal/datastore/data_handler.py | 1649 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | src/clusterfuzz/_internal/datastore/data_handler.py | 1651 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | src/clusterfuzz/_internal/datastore/data_handler.py | 1728 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | src/clusterfuzz/_internal/datastore/data_handler.py | 1730 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | src/clusterfuzz/_internal/datastore/data_handler.py | 114 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | src/clusterfuzz/_internal/datastore/data_handler.py | 116 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | src/clusterfuzz/_internal/datastore/data_handler.py | 987 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | src/clusterfuzz/_internal/datastore/data_handler.py | 989 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | src/clusterfuzz/_internal/datastore/data_handler.py | 1034 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | src/clusterfuzz/_internal/datastore/data_handler.py | 1104 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | src/clusterfuzz/_internal/datastore/data_handler.py | 1106 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | src/clusterfuzz/_internal/datastore/data_handler.py | 1351 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | src/clusterfuzz/_internal/datastore/data_handler.py | 1353 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | src/clusterfuzz/_internal/datastore/data_handler.py | 1567 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | src/clusterfuzz/_internal/datastore/data_handler.py | 1569 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | src/clusterfuzz/_internal/datastore/data_handler.py | 1753 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | src/clusterfuzz/_internal/datastore/data_handler.py | 1755 | # ------------------------------------------------------------------------------ | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | src/python/bot/startup/run_bot.py | 164 | CODE | |
| LOW | src/appengine/libs/handler.py | 365 | CODE | |
| LOW | src/appengine/libs/handler.py | 401 | CODE | |
| LOW | src/appengine/libs/handler.py | 368 | CODE | |
| LOW | src/appengine/libs/handler.py | 404 | CODE | |
| LOW | src/appengine/libs/handler.py | 372 | CODE | |
| LOW | src/appengine/libs/handler.py | 408 | CODE | |
| LOW | src/appengine/libs/query/datastore_query.py | 93 | CODE | |
| LOW | src/appengine/libs/query/datastore_query.py | 121 | CODE | |
| LOW | src/appengine/handlers/fuzzer_stats.py | 103 | CODE | |
| LOW | src/appengine/handlers/fuzzer_stats.py | 224 | CODE | |
| LOW | src/appengine/handlers/fuzzer_stats.py | 512 | CODE | |
| LOW | src/appengine/handlers/testcase_detail/show.py | 356 | CODE | |
| LOW | src/local/butler/deploy.py | 63 | CODE | |
| LOW | src/local/butler/deploy.py | 487 | CODE | |
| LOW | src/local/butler/common.py | 289 | CODE | |
| LOW | src/local/butler/py_unittest.py | 145 | CODE | |
| LOW | src/local/butler/weights.py | 389 | CODE | |
| LOW | src/local/butler/scripts/grouper_experiment.py | 361 | CODE | |
| LOW | src/local/butler/scripts/grouper_experiment.py | 507 | CODE | |
| LOW | src/local/butler/scripts/preprocess.py | 33 | CODE | |
| LOW | src/local/butler/scripts/build_attributes.py | 65 | CODE | |
| LOW | …scripts/migration/monorail_to_issuetracker_migrator.py | 95 | CODE | |
| LOW | src/clusterfuzz/_internal/google_cloud_utils/storage.py | 914 | CODE | |
| LOW | src/clusterfuzz/_internal/google_cloud_utils/storage.py | 1650 | CODE | |
| LOW | src/clusterfuzz/_internal/google_cloud_utils/storage.py | 397 | CODE | |
| LOW | …rfuzz/_internal/google_cloud_utils/compute_metadata.py | 88 | CODE | |
| LOW | src/clusterfuzz/_internal/metrics/logs.py | 1137 | CODE | |
| LOW | src/clusterfuzz/_internal/metrics/logs.py | 1190 | CODE | |
| LOW | src/clusterfuzz/_internal/platforms/linux/gestures.py | 63 | CODE | |
| LOW | src/clusterfuzz/_internal/platforms/android/flash.py | 66 | CODE | |
| LOW | src/clusterfuzz/_internal/platforms/android/flash.py | 108 | CODE | |
| LOW | src/clusterfuzz/_internal/platforms/android/adb.py | 310 | CODE | |
| LOW | src/clusterfuzz/_internal/platforms/windows/gestures.py | 62 | CODE | |
| LOW | src/clusterfuzz/_internal/platforms/windows/gestures.py | 121 | CODE | |
| LOW | src/clusterfuzz/_internal/fuzzing/leak_blacklist.py | 166 | CODE | |
| LOW | src/clusterfuzz/_internal/fuzzing/corpus_manager.py | 483 | CODE | |
| LOW | src/clusterfuzz/_internal/build_management/revisions.py | 56 | CODE | |
| LOW | src/clusterfuzz/_internal/build_management/revisions.py | 385 | CODE | |
| LOW | …lusterfuzz/_internal/build_management/build_manager.py | 234 | CODE | |
| LOW | …lusterfuzz/_internal/build_management/build_manager.py | 1069 | CODE | |
| LOW | …lusterfuzz/_internal/tests/core/system/archive_test.py | 155 | CODE | |
| LOW | …lusterfuzz/_internal/tests/core/system/archive_test.py | 167 | CODE | |
| LOW | …lusterfuzz/_internal/tests/core/system/archive_test.py | 212 | CODE | |
| LOW | …terfuzz/_internal/tests/core/chrome/build_info_test.py | 32 | CODE | |
| LOW | …terfuzz/_internal/tests/core/chrome/build_info_test.py | 37 | CODE | |
| LOW | …fuzz/_internal/tests/core/bot/tasks/task_types_test.py | 336 | CODE | |
| LOW | src/clusterfuzz/_internal/datastore/search_tokenizer.py | 82 | CODE | |
| LOW | src/clusterfuzz/_internal/system/process_handler.py | 94 | CODE | |
| LOW | src/clusterfuzz/_internal/system/process_handler.py | 113 | CODE | |
| LOW | src/clusterfuzz/_internal/system/process_handler.py | 666 | CODE | |
| LOW | src/clusterfuzz/_internal/system/environment.py | 918 | CODE | |
| LOW | src/clusterfuzz/_internal/batch/service.py | 203 | CODE | |
| LOW | …/clusterfuzz/_internal/issue_management/issue_filer.py | 166 | CODE | |
| LOW | …issue_management/google_issue_tracker/issue_tracker.py | 284 | CODE | |
| LOW | src/clusterfuzz/_internal/bot/testcase_manager.py | 128 | CODE | |
| LOW | src/clusterfuzz/_internal/bot/testcase_manager.py | 181 | CODE | |
| LOW | src/clusterfuzz/_internal/bot/testcase_manager.py | 231 | CODE | |
| LOW | src/clusterfuzz/_internal/bot/testcase_manager.py | 987 | CODE | |
| LOW | src/clusterfuzz/_internal/bot/tasks/setup.py | 837 | CODE | |
| 46 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …/_internal/tests/core/platforms/android/logger_test.py | 81 | 'mounted filesystem without journal. Opts: (null)\n', | CODE |
| HIGH | …/_internal/tests/core/platforms/android/logger_test.py | 84 | 'mounted filesystem without journal. Opts: (null)')) | CODE |
| HIGH⚡ | …re/crash_analysis/stack_parsing/stack_analyzer_test.py | 2344 | expected_state = ('offset + length <= impl.length() in StringView.h\n' | CODE |
| HIGH⚡ | …re/crash_analysis/stack_parsing/stack_analyzer_test.py | 2564 | 'length == 0 || (length > 0 && data != __null) in vector.h\n') | CODE |
| HIGH⚡ | …re/crash_analysis/stack_parsing/stack_analyzer_test.py | 2578 | 'length == 0 || (length > 0 && data != __null) in vector.h\n' | CODE |
| HIGH | …re/crash_analysis/stack_parsing/stack_analyzer_test.py | 834 | '<= text.length() in SimplifiedB\n' | CODE |
| HIGH | …re/crash_analysis/stack_parsing/stack_analyzer_test.py | 3101 | 'ss_len == 0 || ss_len >= offsetof(struct sockaddr_un, sun_path) + 1\n' | CODE |
| HIGH | …uzz/_internal/tests/appengine/handlers/fuzzers_test.py | 83 | self.request_context.push() | CODE |
| HIGH | src/clusterfuzz/_internal/system/minijail.py | 147 | """Create /dev/null, /dev/random, /dev/urandom, and /dev/shm.""" | STRING |
| HIGH | …lusterfuzz/_internal/bot/tasks/utasks/minimize_task.py | 343 | run_queue.push(self.file_path, self.run, self.store_result_from_run) | CODE |
| HIGH | src/clusterfuzz/_internal/bot/minimizer/minimizer.py | 273 | self.test_queue.push( | CODE |
| HIGH | …clusterfuzz/_internal/crash_analysis/crash_analyzer.py | 392 | # If the address is not near null, then we it is highly likely | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | src/clusterfuzz/_internal/metrics/logs.py | 39 | CODE | |
| LOW | src/clusterfuzz/_internal/metrics/logs.py | 40 | CODE | |
| LOW | src/clusterfuzz/_internal/metrics/logs.py | 41 | CODE | |
| LOW | src/clusterfuzz/_internal/platforms/fuchsia/__init__.py | 16 | CODE | |
| LOW | src/clusterfuzz/_internal/platforms/mac/__init__.py | 16 | CODE | |
| LOW | src/clusterfuzz/_internal/platforms/linux/__init__.py | 16 | CODE | |
| LOW | src/clusterfuzz/_internal/platforms/android/__init__.py | 16 | CODE | |
| LOW | src/clusterfuzz/_internal/platforms/android/__init__.py | 17 | CODE | |
| LOW | src/clusterfuzz/_internal/platforms/android/__init__.py | 18 | CODE | |
| LOW | src/clusterfuzz/_internal/platforms/android/__init__.py | 19 | CODE | |
| LOW | src/clusterfuzz/_internal/platforms/android/__init__.py | 20 | CODE | |
| LOW | src/clusterfuzz/_internal/platforms/android/__init__.py | 21 | CODE | |
| LOW | src/clusterfuzz/_internal/platforms/android/__init__.py | 22 | CODE | |
| LOW | src/clusterfuzz/_internal/platforms/android/__init__.py | 23 | CODE | |
| LOW | src/clusterfuzz/_internal/platforms/android/__init__.py | 24 | CODE | |
| LOW | src/clusterfuzz/_internal/platforms/android/__init__.py | 25 | CODE | |
| LOW | src/clusterfuzz/_internal/platforms/android/__init__.py | 26 | CODE | |
| LOW | src/clusterfuzz/_internal/platforms/android/__init__.py | 27 | CODE | |
| LOW | src/clusterfuzz/_internal/platforms/android/__init__.py | 28 | CODE | |
| LOW | src/clusterfuzz/_internal/platforms/android/__init__.py | 29 | CODE | |
| LOW | src/clusterfuzz/_internal/platforms/windows/__init__.py | 16 | CODE | |
| LOW | src/clusterfuzz/_internal/protos/swarming_pb2.py | 29 | CODE | |
| LOW | …clusterfuzz/_internal/protos/process_state_pb2_grpc.py | 17 | CODE | |
| LOW | src/clusterfuzz/_internal/protos/swarming_pb2_grpc.py | 17 | CODE | |
| LOW | …c/clusterfuzz/_internal/protos/untrusted_runner_pb2.py | 29 | CODE | |
| LOW | …c/clusterfuzz/_internal/protos/untrusted_runner_pb2.py | 30 | CODE | |
| LOW | src/clusterfuzz/_internal/protos/uworker_msg_pb2.py | 29 | CODE | |
| LOW | src/clusterfuzz/_internal/protos/uworker_msg_pb2.py | 30 | CODE | |
| LOW | src/clusterfuzz/_internal/protos/uworker_msg_pb2.py | 31 | CODE | |
| LOW | …c/clusterfuzz/_internal/protos/uworker_msg_pb2_grpc.py | 17 | CODE | |
| LOW | …rnal/tests/core/build_management/build_manager_test.py | 31 | CODE | |
| LOW | src/clusterfuzz/_internal/fuzzer_utils/__init__.py | 23 | CODE | |
| LOW | src/clusterfuzz/_internal/fuzzer_utils/__init__.py | 24 | CODE | |
| LOW | src/clusterfuzz/_internal/fuzzer_utils/__init__.py | 25 | CODE | |
| LOW | src/clusterfuzz/_internal/fuzzer_utils/__init__.py | 26 | CODE | |
| LOW | src/clusterfuzz/_internal/common/testcase_utils.py | 16 | CODE | |
| LOW | src/clusterfuzz/_internal/common/testcase_utils.py | 17 | CODE | |
| LOW | …zz/_internal/bot/tokenizer/grammars/JavaScriptLexer.py | 20 | CODE | |
| LOW | …sterfuzz/_internal/bot/tokenizer/grammars/HTMLLexer.py | 20 | CODE | |
| LOW | …ernal/crash_analysis/stack_parsing/stack_symbolizer.py | 39 | CODE | |
| LOW | …ernal/crash_analysis/stack_parsing/stack_symbolizer.py | 41 | CODE | |
| LOW | …ernal/crash_analysis/stack_parsing/stack_symbolizer.py | 42 | CODE | |
| LOW | …ernal/crash_analysis/stack_parsing/stack_symbolizer.py | 45 | CODE | |
| LOW | …ernal/crash_analysis/stack_parsing/stack_symbolizer.py | 46 | CODE | |
| LOW | …ernal/crash_analysis/stack_parsing/stack_symbolizer.py | 48 | CODE | |
| LOW | src/clusterfuzz/_internal/base/tasks/__init__.py | 38 | CODE | |
| LOW | src/clusterfuzz/_internal/swarming/__init__.py | 16 | CODE | |
| LOW | src/clusterfuzz/_internal/cron/backup.py | 29 | CODE | |
| LOW | src/clusterfuzz/stacktraces/crash_comparer.py | 16 | CODE | |
| LOW | src/clusterfuzz/stacktraces/__init__.py | 26 | CODE | |
| LOW | src/clusterfuzz/environment/__init__.py | 16 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | src/appengine/handlers/upload_testcase.py | 315 | CODE | |
| LOW | src/clusterfuzz/_internal/platforms/android/adb.py | 769 | CODE | |
| LOW | …sterfuzz/_internal/protos/untrusted_runner_pb2_grpc.py | 393 | CODE | |
| LOW | …sterfuzz/_internal/protos/untrusted_runner_pb2_grpc.py | 410 | CODE | |
| LOW | …sterfuzz/_internal/protos/untrusted_runner_pb2_grpc.py | 427 | CODE | |
| LOW | …sterfuzz/_internal/protos/untrusted_runner_pb2_grpc.py | 444 | CODE | |
| LOW | …sterfuzz/_internal/protos/untrusted_runner_pb2_grpc.py | 461 | CODE | |
| LOW | …sterfuzz/_internal/protos/untrusted_runner_pb2_grpc.py | 478 | CODE | |
| LOW | …sterfuzz/_internal/protos/untrusted_runner_pb2_grpc.py | 495 | CODE | |
| LOW | …sterfuzz/_internal/protos/untrusted_runner_pb2_grpc.py | 512 | CODE | |
| LOW | …sterfuzz/_internal/protos/untrusted_runner_pb2_grpc.py | 529 | CODE | |
| LOW | …sterfuzz/_internal/protos/untrusted_runner_pb2_grpc.py | 546 | CODE | |
| LOW | …sterfuzz/_internal/protos/untrusted_runner_pb2_grpc.py | 563 | CODE | |
| LOW | …sterfuzz/_internal/protos/untrusted_runner_pb2_grpc.py | 580 | CODE | |
| LOW | …sterfuzz/_internal/protos/untrusted_runner_pb2_grpc.py | 597 | CODE | |
| LOW | …sterfuzz/_internal/protos/untrusted_runner_pb2_grpc.py | 614 | CODE | |
| LOW | …sterfuzz/_internal/protos/untrusted_runner_pb2_grpc.py | 631 | CODE | |
| LOW | …sterfuzz/_internal/protos/untrusted_runner_pb2_grpc.py | 648 | CODE | |
| LOW | …sterfuzz/_internal/protos/untrusted_runner_pb2_grpc.py | 665 | CODE | |
| LOW | …sterfuzz/_internal/protos/untrusted_runner_pb2_grpc.py | 682 | CODE | |
| LOW | …sterfuzz/_internal/protos/untrusted_runner_pb2_grpc.py | 699 | CODE | |
| LOW | …sterfuzz/_internal/protos/untrusted_runner_pb2_grpc.py | 716 | CODE | |
| LOW | src/clusterfuzz/_internal/protos/heartbeat_pb2_grpc.py | 70 | CODE | |
| LOW | …internal/tests/core/bot/tasks/utasks/fuzz_task_test.py | 997 | CODE | |
| LOW | src/clusterfuzz/_internal/datastore/data_handler.py | 475 | CODE | |
| LOW | src/clusterfuzz/_internal/system/new_process.py | 389 | CODE | |
| LOW | …/_internal/bot/untrusted_runner/remote_process_host.py | 79 | CODE | |
| LOW | …rfuzz/_internal/bot/untrusted_runner/remote_process.py | 88 | CODE | |
| LOW | src/clusterfuzz/_internal/bot/minimizer/minimizer.py | 496 | CODE | |
| LOW | src/clusterfuzz/_internal/bot/minimizer/js_minimizer.py | 189 | CODE | |
| LOW | …clusterfuzz/_internal/bot/minimizer/chunk_minimizer.py | 70 | CODE | |
| LOW | src/clusterfuzz/_internal/bot/fuzzers/libfuzzer.py | 521 | CODE | |
| LOW | …_internal/crash_analysis/stack_parsing/stack_parser.py | 54 | CODE | |
| LOW | …_internal/crash_analysis/stack_parsing/stack_parser.py | 171 | CODE | |
| LOW | …_internal/crash_analysis/stack_parsing/stack_parser.py | 229 | CODE | |
| LOW | src/clusterfuzz/_internal/base/utils.py | 426 | CODE | |
| LOW | src/clusterfuzz/_internal/base/utils.py | 523 | CODE | |
| LOW | src/clusterfuzz/_internal/cron/project_setup.py | 645 | CODE | |
| LOW | src/clusterfuzz/stacktraces/__init__.py | 168 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …fuzz/_internal/bot/tasks/utasks/corpus_pruning_task.py | 839 | CODE | |
| MEDIUM | …fuzz/_internal/bot/tasks/utasks/corpus_pruning_task.py | 840 | CODE | |
| MEDIUM | …fuzz/_internal/bot/tasks/utasks/corpus_pruning_task.py | 841 | CODE | |
| MEDIUM | …fuzz/_internal/bot/tasks/utasks/corpus_pruning_task.py | 842 | CODE | |
| MEDIUM | …fuzz/_internal/bot/tasks/utasks/corpus_pruning_task.py | 844 | CODE | |
| MEDIUM | …fuzz/_internal/bot/tasks/utasks/corpus_pruning_task.py | 845 | CODE | |
| MEDIUM | …fuzz/_internal/bot/tasks/utasks/corpus_pruning_task.py | 847 | CODE | |
| MEDIUM | …fuzz/_internal/bot/tasks/utasks/corpus_pruning_task.py | 851 | CODE | |
| MEDIUM | …fuzz/_internal/bot/tasks/utasks/corpus_pruning_task.py | 852 | CODE | |
| MEDIUM | …fuzz/_internal/bot/tasks/utasks/corpus_pruning_task.py | 854 | CODE | |
| MEDIUM | …fuzz/_internal/bot/tasks/utasks/corpus_pruning_task.py | 856 | CODE | |
| MEDIUM | …fuzz/_internal/bot/tasks/utasks/corpus_pruning_task.py | 859 | CODE | |
| MEDIUM | …fuzz/_internal/bot/tasks/utasks/corpus_pruning_task.py | 930 | CODE | |
| MEDIUM | …fuzz/_internal/bot/tasks/utasks/corpus_pruning_task.py | 932 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | src/local/butler/integration_tests.py | 47 | # TODO(ochang): Make bootstrap a separate butler command and just call that. | COMMENT |
| LOW | src/clusterfuzz/_internal/build_management/revisions.py | 732 | # No revision >= |MIN_REVISION| was found, store the error and just return | COMMENT |
| LOW | src/clusterfuzz/_internal/config/db_config.py | 50 | # All data is in a single line, just return that. | COMMENT |
| LOW | src/clusterfuzz/_internal/datastore/data_handler.py | 303 | # For ASSERTs and CHECK failures, we should just use the crash type and the | COMMENT |
| LOW | src/clusterfuzz/_internal/chrome/build_info.py | 119 | # If there is no canary for that platform, just return canary from windows. | COMMENT |
| LOW | src/clusterfuzz/_internal/bot/testcase_manager.py | 1069 | # command - just use app_name. | COMMENT |
| LOW | src/clusterfuzz/_internal/bot/tasks/task_types.py | 52 | # Simple tasks can just use the environment they don't need the uworker env. | COMMENT |
| LOW | src/clusterfuzz/_internal/bot/tasks/task_creation.py | 252 | # For supported environments, just create the minimize task for now. | COMMENT |
| MEDIUM | …lusterfuzz/_internal/bot/tasks/utasks/minimize_task.py | 388 | # TODO(ochang): More robust check for engine minimization support. | COMMENT |
| LOW | …sterfuzz/_internal/bot/tasks/utasks/regression_task.py | 260 | # exist any later revision, just use the last revision in the list instead. | COMMENT |
| LOW | …sterfuzz/_internal/bot/tasks/utasks/regression_task.py | 277 | # found again, so just use it and restart from scratch. | COMMENT |
| MEDIUM | …clusterfuzz/_internal/crash_analysis/crash_comparer.py | 103 | # TODO(aarya): Improve this algorithm and leverage other parts of | COMMENT |
| LOW | …ernal/crash_analysis/stack_parsing/stack_symbolizer.py | 185 | # a system library. In this case, just return the binary name. | COMMENT |
| LOW | …ernal/crash_analysis/stack_parsing/stack_symbolizer.py | 683 | # This should never happen but if it does, lets just return the unsymbolized stack. | COMMENT |
| LOW | …ernal/crash_analysis/stack_parsing/stack_symbolizer.py | 742 | # just return the same binary path. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | deploy/cloudbuild.yaml | 108 | # Step 1: Run the update command in the background | COMMENT |
| LOW⚡ | deploy/cloudbuild.yaml | 111 | # Step 2: Poll for the updated metadata value | COMMENT |
| LOW | configs/test/project.yaml | 49 | # WARNING: This can cause OOMs. | COMMENT |
| LOW⚡ | src/clusterfuzz/_internal/bot/tasks/task_creation.py | 101 | # Step 1: Check if the regression task finished. If not, bail out. | COMMENT |
| LOW⚡ | src/clusterfuzz/_internal/bot/tasks/task_creation.py | 105 | # Step 2: Check if the symbolize task is applicable and finished. If not, | COMMENT |
| LOW | src/clusterfuzz/_internal/bot/fuzzers/builtin.py | 15 | # NOTE: This module is deprecated and will be replaced with | COMMENT |
| LOW | …/clusterfuzz/_internal/bot/fuzzers/centipede/engine.py | 521 | # Step 1: Generate corpus file for Centipede. | COMMENT |
| LOW | …/clusterfuzz/_internal/bot/fuzzers/centipede/engine.py | 548 | # Step 2: Distill. | COMMENT |
| LOW | …/clusterfuzz/_internal/bot/fuzzers/centipede/engine.py | 566 | # Step 3: Generate corpus files for output_dir. | COMMENT |
| LOW | …/clusterfuzz/_internal/bot/fuzzers/centipede/engine.py | 594 | # Step 4: Copy reproducers from full_corpus_workdir. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | deploy/cloudbuild.yaml | 108 | # Step 1: Run the update command in the background | COMMENT |
| LOW⚡ | deploy/cloudbuild.yaml | 111 | # Step 2: Poll for the updated metadata value | COMMENT |
| LOW⚡ | src/clusterfuzz/_internal/bot/tasks/task_creation.py | 101 | # Step 1: Check if the regression task finished. If not, bail out. | COMMENT |
| LOW⚡ | src/clusterfuzz/_internal/bot/tasks/task_creation.py | 105 | # Step 2: Check if the symbolize task is applicable and finished. If not, | COMMENT |
| LOW | src/clusterfuzz/_internal/bot/fuzzers/afl/launcher.py | 1474 | # We need to check if ASAN_OPTIONS and/or MSAN_OPTIONS contain symbolize=0 | COMMENT |
| LOW | …/clusterfuzz/_internal/bot/fuzzers/centipede/engine.py | 521 | # Step 1: Generate corpus file for Centipede. | COMMENT |
| LOW | …/clusterfuzz/_internal/bot/fuzzers/centipede/engine.py | 548 | # Step 2: Distill. | COMMENT |
| LOW | …/clusterfuzz/_internal/bot/fuzzers/centipede/engine.py | 566 | # Step 3: Generate corpus files for output_dir. | COMMENT |
| LOW | …/clusterfuzz/_internal/bot/fuzzers/centipede/engine.py | 594 | # Step 4: Copy reproducers from full_corpus_workdir. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …erfuzz/_internal/tests/core/system/environment_test.py | 396 | def test_function(): | CODE |
| LOW | …erfuzz/_internal/tests/core/system/environment_test.py | 406 | def test_function(): | CODE |
| LOW | …erfuzz/_internal/tests/core/system/environment_test.py | 425 | def test_function(): | CODE |
| LOW | …erfuzz/_internal/tests/core/system/environment_test.py | 435 | def test_function(): | CODE |
| LOW | …erfuzz/_internal/tests/core/system/environment_test.py | 455 | def test_function(): | CODE |
| LOW | …erfuzz/_internal/tests/core/system/environment_test.py | 465 | def test_function(): | CODE |
| LOW | …erfuzz/_internal/tests/core/system/environment_test.py | 477 | def test_function(): | CODE |
| LOW | …lusterfuzz/_internal/tests/core/base/untrusted_test.py | 24 | def test_function(): | CODE |
| LOW | src/clusterfuzz/_internal/bot/tasks/unpack_task.py | 32 | def execute_task(metadata_id, job_type): | CODE |
| LOW | src/clusterfuzz/_internal/bot/tasks/blame_task.py | 306 | def execute_task(testcase_id, _): | CODE |
| LOW | src/clusterfuzz/_internal/bot/tasks/impact_task.py | 336 | def execute_task(testcase_id, job_type): | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | src/local/butler/reproduce.py | 35 | def _setup_reproduce(args) -> None: | CODE |
| LOW | …rfuzz/_internal/tests/core/batch/batch_service_test.py | 60 | def _set_preemptible(instance_policy, batch_workload_spec) -> None: | CODE |
| LOW | src/clusterfuzz/_internal/datastore/data_handler.py | 903 | def set_initial_testcase_metadata(testcase: data_types.Testcase) -> None: | CODE |
| LOW | src/clusterfuzz/_internal/batch/service.py | 138 | def _set_preemptible(instance_policy, batch_workload_spec) -> None: | CODE |
| LOW | src/clusterfuzz/_internal/bot/tasks/utasks/__init__.py | 434 | def set_uworker_env(uworker_env: dict) -> None: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | src/clusterfuzz/_internal/bot/tasks/task_types.py | 120 | # orchestration tworkers they are escalated to remote UTasks. | COMMENT |