A fast and robust web server and application server for Ruby, Python and Node.js
This report summarizes scanner evidence for phusion/passenger, a C++ project with 5,092 GitHub stars. SynthScan examined 1,013,812 lines of code across 4160 source files, recording 12718 pattern matches distributed across 17 syntactic categories. The legacy adjusted pattern signal is 10.7 (Moderate pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 12570 finding(s).
Are imports declared and package/API names verified? 0 finding(s).
Are wrappers, guards, and repeated structures necessary? 211 finding(s).
Which changes need focused human review? 12718 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 12718 distinct pattern matches across 17 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | test/integration_tests/native_packaging_spec.rb | 1 | # encoding: utf-8 | COMMENT |
| LOW | test/integration_tests/source_packaging_test.rb | 1 | # Phusion Passenger - https://www.phusionpassenger.com/ | COMMENT |
| LOW | test/integration_tests/standalone_tests.rb | 221 | output.should include(AGENT_BINARY_DOWNLOAD_MESSAGE) | COMMENT |
| LOW | test/integration_tests/standalone_tests.rb | 241 | # FileUtils.mkdir_p("cxx_supportlib/libpassenger_common/ApplicationPool2") | COMMENT |
| LOW | test/integration_tests/standalone_tests.rb | 261 | # "--runtime-dir '#{@runtime_dir}' " + | COMMENT |
| LOW | test/integration_tests/standalone_tests.rb | 281 | # test_serving_application(command) | COMMENT |
| LOW | test/integration_tests/standalone_tests.rb | 301 | # File.rename("#{PhusionPassenger.build_system_dir}/buildout", | COMMENT |
| LOW | test/integration_tests/standalone_tests.rb | 321 | # test_serving_application("#{command} --no-compile-runtime") | COMMENT |
| LOW | test/integration_tests/standalone_tests.rb | 341 | # File.unlink("#{PhusionPassenger.lib_dir}/PassengerWebHelper") | COMMENT |
| LOW | test/integration_tests/standalone_tests.rb | 361 | # "--runtime-dir '#{@runtime_dir}' " + | COMMENT |
| LOW | test/cxx/TestSupport.h | 1 | #ifndef _TEST_SUPPORT_H_ | COMMENT |
| LOW | test/cxx/CxxTestMain.cpp | 1 | #include <TestSupport.h> | COMMENT |
| LOW | test/cxx/UtilsTest.cpp | 1 | #include <TestSupport.h> | COMMENT |
| LOW | test/cxx/TestSupport.cpp | 1 | #include <TestSupport.h> | COMMENT |
| LOW | test/cxx/ServerKit/ServerTest.cpp | 1 | #include <TestSupport.h> | COMMENT |
| LOW | test/cxx/ServerKit/HttpServerTest.cpp | 1 | #include <TestSupport.h> | COMMENT |
| LOW | test/cxx/SystemTools/ProcessMetricsCollectorTest.cpp | 1 | #include <TestSupport.h> | COMMENT |
| LOW | test/cxx/Core/SpawningKit/SmartSpawnerTest.cpp | 1 | #include <TestSupport.h> | COMMENT |
| LOW | test/cxx/Core/ApplicationPool/PoolTest.cpp | 1 | #include <TestSupport.h> | COMMENT |
| LOW | test/cxx/Core/ApplicationPool/PoolTest.cpp | 1581 | // TODO: asyncGet() should not select a disabling process when non-rolling restarting. | COMMENT |
| LOW | test/support/apache2_controller.rb | 1 | require 'erb' | COMMENT |
| LOW | test/support/apache2_controller.rb | 21 | # | COMMENT |
| LOW | test/support/valgrind.h | 81 | COMMENT | |
| LOW | test/stub/wsgi/cgishim.py | 21 | """ | COMMENT |
| LOW | test/stub/wsgi/cgishim.py | 441 | if 'filename' in pdict: | COMMENT |
| LOW | test/ruby/utils/json_spec.rb | 141 | # // comment inside array | COMMENT |
| LOW | test/ruby/utils/json_spec.rb | 161 | # /* another | COMMENT |
| LOW | dev/install_scripts_bootstrap_code.rb | 1 | #!/usr/bin/env ruby | COMMENT |
| LOW | src/schema_printer/SchemaPrinterMain.cpp | 41 | COMMENT | |
| LOW | …c/nodejs_supportlib/vendor-copy/winston/lib/winston.js | 41 | // programmer may manage multiple `winston.Logger` instances without any additional overhead. | COMMENT |
| LOW | …s_supportlib/vendor-copy/winston/lib/winston/logger.js | 21 | // #### @options {Object} Options for this instance. | COMMENT |
| LOW | …s_supportlib/vendor-copy/winston/lib/winston/logger.js | 101 | // | COMMENT |
| LOW | …s_supportlib/vendor-copy/winston/lib/winston/common.js | 61 | // | COMMENT |
| LOW | …s_supportlib/vendor-copy/winston/lib/winston/common.js | 121 | } | COMMENT |
| LOW | …s_supportlib/vendor-copy/winston/lib/winston/common.js | 301 | // | COMMENT |
| LOW | …endor-copy/winston/lib/winston/transports/transport.js | 41 | // | COMMENT |
| LOW | …lib/vendor-copy/winston/lib/winston/transports/file.js | 121 | // #### @level {string} Level at which to log the message. | COMMENT |
| LOW | …lib/vendor-copy/winston/lib/winston/transports/file.js | 361 | }; | COMMENT |
| LOW | …lib/vendor-copy/winston/lib/winston/transports/file.js | 501 | // | COMMENT |
| LOW | …lib/vendor-copy/winston/lib/winston/transports/file.js | 581 | // in the case that log filesizes are being capped. | COMMENT |
| LOW | src/nginx_module/ngx_http_passenger_module.c | 21 | * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) | COMMENT |
| LOW | src/nginx_module/ngx_http_passenger_module.c | 41 | #include <string.h> | COMMENT |
| LOW | src/nginx_module/Configuration.c | 21 | * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) | COMMENT |
| LOW | src/agent/FileReadHelper/FileReadHelperMain.cpp | 21 | * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER | COMMENT |
| LOW | src/agent/FileReadHelper/FileReadHelperMain.cpp | 41 | // to lower its privilege, otherwise no protection is provided. | COMMENT |
| LOW | src/agent/Core/CoreMain.cpp | 21 | * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER | COMMENT |
| LOW | src/agent/Core/CoreMain.cpp | 41 | #include <boost/foreach.hpp> | COMMENT |
| LOW | src/agent/Core/CoreMain.cpp | 61 | #include <curl/curl.h> | COMMENT |
| LOW | src/agent/Core/CoreMain.cpp | 81 | #include <AppTypeDetector/Detector.h> | COMMENT |
| LOW | src/agent/Core/OptionParser.h | 21 | * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER | COMMENT |
| LOW | src/agent/Core/TelemetryCollector.h | 21 | * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER | COMMENT |
| LOW | src/agent/Core/Config.h | 21 | * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER | COMMENT |
| LOW | src/agent/Core/Config.h | 41 | #include <ConfigKit/PrefixTranslator.h> | COMMENT |
| LOW | src/agent/Core/Controller.h | 41 | COMMENT | |
| LOW | src/agent/Core/Controller.h | 61 | #include <ServerKit/HttpServer.h> | COMMENT |
| LOW | src/agent/Core/ResponseCache.h | 21 | * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER | COMMENT |
| LOW | src/agent/Core/ApiServer.h | 21 | * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER | COMMENT |
| LOW | src/agent/Core/ApiServer.h | 41 | #include <Core/ConfigChange.h> | COMMENT |
| LOW | src/agent/Core/SecurityUpdateChecker.h | 21 | * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER | COMMENT |
| LOW | src/agent/Core/SecurityUpdateChecker.h | 41 | #include <Utils/Curl.h> | COMMENT |
| 12353 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | test/stub/wsgi/cgishim.py | 57 | # =============== | COMMENT |
| MEDIUM | test/stub/wsgi/cgishim.py | 120 | # ================= | COMMENT |
| MEDIUM | test/stub/wsgi/cgishim.py | 257 | # ========================= | COMMENT |
| MEDIUM | test/stub/wsgi/cgishim.py | 848 | # =============== | COMMENT |
| MEDIUM | test/stub/wsgi/cgishim.py | 1005 | # =============== | STRING |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 157 | # -------------- | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 183 | # ---------------------- | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 192 | # -------------------------------------------- | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 378 | # --------------------------- | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 523 | # ------------------- | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 572 | # --------------------- | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 607 | # ---------------------------- | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 630 | # -------------------------- | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 654 | # ------------------ | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 678 | # ------------------ | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 711 | # ------------------------------------------- | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 723 | # -------------------------------------------------------- | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 744 | # ---------------- | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 763 | # -------------------- | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 772 | # ------------------------------ | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 808 | # ----------------- | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 821 | # ----------------------- | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 833 | # ----------------------------- | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 844 | # --------------- | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 870 | # --------------------------- | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 918 | # ------------------------- | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 956 | # ------------------------ | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 1046 | # -------------------- | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 1062 | # -------------------------------- | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 1127 | # ---------------------------- | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 1207 | # ----------------------- | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 1242 | # ------------------------ | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 1253 | # ---------------- | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 1306 | # ------------------------ | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 1327 | # --------------------------------- | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 1357 | # ----------------------------- | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 1382 | # ------------------------------------ | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 1411 | # ---------- | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 1432 | # ------------------- | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 1445 | # ----------------------------- | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 1458 | # ---------------------------- | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 1483 | # ----------------------- | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 1500 | # --------------------- | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 1629 | # ----------------------- | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 1641 | # --------------------------------- | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 1658 | # ------------------------------------ | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 1670 | # --------------------------------------------- | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 1688 | # --------------------------------- | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 1804 | # ---------------------------- | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 1816 | # --------------------- | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 1849 | # -------------------------- | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 1870 | # --------------------------- | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 1990 | # ------------------------------ | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 2019 | # ---------------------- | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 2047 | # ------------------------ | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 2060 | # ------------------------ | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 2096 | # ----------------------------- | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 2122 | # ---------- | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 2135 | # ------------------ | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 2155 | # ------------ | COMMENT |
| 74 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | test/support/apache2_controller.rb | 85 | # Create an Apache configuration folder and start Apache on that | COMMENT |
| MEDIUM | test/support/apache2_controller.rb | 247 | # Define a virtual host configuration block for the Apache configuration | COMMENT |
| MEDIUM | …c/ruby_supportlib/phusion_passenger/request_handler.rb | 74 | # Create a new RequestHandler with the given owner pipe. | COMMENT |
| MEDIUM | src/ruby_supportlib/phusion_passenger/platform_info.rb | 158 | # This function is mostly used for compiling C programs to autodetect | COMMENT |
| MEDIUM | …_supportlib/phusion_passenger/loader_shared_helpers.rb | 150 | # This method is to be called before loading the application code. | COMMENT |
| MEDIUM | …_supportlib/phusion_passenger/loader_shared_helpers.rb | 231 | # This method is to be called after the load path has been set up | COMMENT |
| MEDIUM | …_supportlib/phusion_passenger/loader_shared_helpers.rb | 237 | # This method is to be called after loading the application code but | COMMENT |
| MEDIUM | …uby_supportlib/phusion_passenger/abstract_installer.rb | 56 | # Create an AbstractInstaller. All options will be stored as instance | COMMENT |
| MEDIUM | …c/ruby_supportlib/phusion_passenger/message_channel.rb | 45 | # Create a new MessageChannel by wrapping the given IO object. | COMMENT |
| MEDIUM | …ib/phusion_passenger/standalone/config_options_list.rb | 28 | # This file contains a specification of all supported Passenger Standalone | COMMENT |
| MEDIUM | …c/ruby_supportlib/phusion_passenger/utils/tee_input.rb | 4 | # This file is taken from Unicorn. The following license applies to this file | COMMENT |
| MEDIUM | …supportlib/phusion_passenger/apache2/config_options.rb | 25 | # This file defines all supported Apache per-directory configuration options. The | COMMENT |
| MEDIUM | …y_supportlib/phusion_passenger/nginx/config_options.rb | 25 | # This file defines all supported Nginx configuration options. The | COMMENT |
| MEDIUM | src/helper-scripts/download_binaries/extconf.rb | 29 | # Create a dummy Makefile to prevent 'gem install' from borking out. | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 77 | # This file is dual licensed under the terms of the MIT license | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 1530 | # This file is dual licensed under the terms of the MIT license | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 1548 | # This file is a library for parsing options in your shell scripts along | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 2800 | # This function is only a basic sanity check; it will hardly flush out | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 2810 | # This function implements the same check as func_lalib_p without | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 2833 | # This function is only a basic sanity check; it will hardly flush out | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 2843 | # This function is only a basic sanity check; it will hardly flush out | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 2868 | # This function is only a basic sanity check; it will hardly flush out | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 3008 | # Create a libtool object file (analogous to a ".la" file), | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 7931 | # Create the object directory. | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 10518 | # Create the old-style object. | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 10538 | # Create an invalid libtool object if no PIC, so that we don't | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-modified/libev/ltmain.sh | 1402 | # This file is a library for parsing options in your shell scripts along | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-modified/libev/ltmain.sh | 2594 | # This function is only a basic sanity check; it will hardly flush out | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-modified/libev/ltmain.sh | 2604 | # This function implements the same check as func_lalib_p without | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-modified/libev/ltmain.sh | 2627 | # This function is only a basic sanity check; it will hardly flush out | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-modified/libev/ltmain.sh | 2637 | # This function is only a basic sanity check; it will hardly flush out | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-modified/libev/ltmain.sh | 2662 | # This function is only a basic sanity check; it will hardly flush out | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-modified/libev/ltmain.sh | 2802 | # Create a libtool object file (analogous to a ".la" file), | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-modified/libev/ltmain.sh | 7568 | # Create the object directory. | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-modified/libev/ltmain.sh | 10247 | # Create the old-style object. | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-modified/libev/ltmain.sh | 10267 | # Create an invalid libtool object if no PIC, so that we don't | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | test/support/apache2_controller.rb | 307 | def read_error_log_starting_from(prev_pos) | CODE |
| LOW | test/stub/wsgi/cgishim.py | 744 | def read_lines_to_outerboundary(self): | CODE |
| LOW | test/ruby/config/utils_spec.rb | 21 | def select_instance_exit_status(options) | CODE |
| LOW | test/ruby/shared/loader_sharedspec.rb | 68 | def find_socket_with_protocol(protocol) | CODE |
| LOW | dev/index_cxx_dependencies.rb | 195 | def gather_all_dependencies_recursively(source_file, basic_map, result) | CODE |
| LOW | dev/configkit-schemas/update_schema_inline_comments.rb | 53 | def format_inline_comment_for_schema(prefix, class_name) | CODE |
| LOW | dev/configkit-schemas/update_schema_inline_comments.rb | 107 | def format_default_value_desc(value) | CODE |
| LOW | …c/ruby_supportlib/phusion_passenger/request_handler.rb | 41 | class RequestHandler | CODE |
| LOW | …c/ruby_supportlib/phusion_passenger/request_handler.rb | 289 | def create_unix_socket_on_filesystem(options) | CODE |
| LOW | …_supportlib/phusion_passenger/loader_shared_helpers.rb | 80 | def check_rvm_using_wrapper_script(options) | CODE |
| LOW | …_supportlib/phusion_passenger/loader_shared_helpers.rb | 251 | def maybe_make_path_relative_to_app_root(app_root, abs_path) | CODE |
| LOW | …_supportlib/phusion_passenger/loader_shared_helpers.rb | 388 | def record_journey_step_begin(step, state, *args) | CODE |
| LOW | …_supportlib/phusion_passenger/loader_shared_helpers.rb | 396 | def run_block_and_record_step_progress(step, *args) | CODE |
| LOW | …_supportlib/phusion_passenger/loader_shared_helpers.rb | 416 | def record_and_print_exception(e) | CODE |
| LOW | …_supportlib/phusion_passenger/loader_shared_helpers.rb | 435 | def record_error_category_based_on_exception(e) | CODE |
| LOW⚡ | …_supportlib/phusion_passenger/loader_shared_helpers.rb | 450 | def record_and_print_error_summary(summary) | CODE |
| LOW⚡ | …_supportlib/phusion_passenger/loader_shared_helpers.rb | 455 | def record_advanced_problem_details(message) | CODE |
| LOW⚡ | …_supportlib/phusion_passenger/loader_shared_helpers.rb | 460 | def record_problem_description_html(html) | CODE |
| LOW⚡ | …_supportlib/phusion_passenger/loader_shared_helpers.rb | 465 | def record_solution_description_html(html) | CODE |
| LOW | …_supportlib/phusion_passenger/loader_shared_helpers.rb | 907 | def check_execution_environment_solution_description(passenger_user, passenger_user_doc, bundle_path) | CODE |
| LOW | …_supportlib/phusion_passenger/loader_shared_helpers.rb | 955 | def attach_problem_description_html_to_exception(e, html) | CODE |
| LOW | …_supportlib/phusion_passenger/loader_shared_helpers.rb | 962 | def attach_solution_description_html_to_exception(e, html) | CODE |
| LOW | …uby_supportlib/phusion_passenger/abstract_installer.rb | 223 | def check_whether_system_has_enough_ram(required = 1024) | CODE |
| LOW | …uby_supportlib/phusion_passenger/abstract_installer.rb | 251 | def show_support_options_for_installer_bug(e) | CODE |
| LOW | …uby_supportlib/phusion_passenger/abstract_installer.rb | 364 | def prompt_confirmation_with_default(message, default) | CODE |
| LOW | …pportlib/phusion_passenger/preloader_shared_helpers.rb | 61 | def accept_and_process_next_client(server_socket, options) | CODE |
| LOW | src/ruby_supportlib/phusion_passenger/utils.rb | 109 | def create_thread_and_abort_on_exception(*args) | CODE |
| LOW | src/ruby_supportlib/phusion_passenger/common_library.rb | 125 | def define_object_compilation_task(object_name, extra_compiler_flags) | CODE |
| LOW | src/ruby_supportlib/phusion_passenger/common_library.rb | 236 | def selected_objects_belonging_to_category(category) | CODE |
| LOW | …supportlib/phusion_passenger/platform_info/depcheck.rb | 115 | def append_install_instructions(value) | CODE |
| LOW | …lib/phusion_passenger/platform_info/apache_detector.rb | 279 | def remove_symlink_duplications(filenames) | CODE |
| LOW | …ib/phusion_passenger/request_handler/thread_handler.rb | 34 | class RequestHandler | CODE |
| LOW | …ib/phusion_passenger/request_handler/thread_handler.rb | 122 | def accept_and_process_next_request(socket_wrapper, channel, buffer) | CODE |
| LOW | …ib/phusion_passenger/request_handler/thread_handler.rb | 347 | end # class RequestHandler | CODE |
| LOW | …upportlib/phusion_passenger/standalone/config_utils.rb | 155 | def add_option_parser_options_from_config_spec(parser, spec, options) | CODE |
| LOW | …upportlib/phusion_passenger/standalone/config_utils.rb | 194 | def remerge_all_config_without_defaults(global_options, local_options, env_options, parsed_options) | CODE |
| LOW | …upportlib/phusion_passenger/standalone/config_utils.rb | 282 | def determine_cli_switch_type(spec_item) | CODE |
| LOW | …upportlib/phusion_passenger/standalone/config_utils.rb | 296 | def format_cli_switch_description(spec_item) | CODE |
| LOW | …pportlib/phusion_passenger/standalone/start_command.rb | 193 | def check_nginx_option_used_with_builtin_engine(option, argument) | CODE |
| LOW | …pportlib/phusion_passenger/standalone/start_command.rb | 519 | def trapsafe_shutdown_and_cleanup(error_occurred) | CODE |
| LOW | …_supportlib/phusion_passenger/standalone/app_finder.rb | 176 | def determine_mode_and_execution_root(options, local_options) | CODE |
| LOW | …uby_supportlib/phusion_passenger/standalone/command.rb | 58 | def load_and_merge_global_options(options) | CODE |
| LOW | …ion_passenger/standalone/start_command/nginx_engine.rb | 232 | def nginx_listen_address_with_ssl_port(options = @options) | CODE |
| LOW | …ion_passenger/standalone/start_command/nginx_engine.rb | 287 | def include_passenger_internal_template(name, indent = 0, fix_existing_indenting = true, the_binding = get_bindi | CODE |
| LOW | …n_passenger/standalone/start_command/builtin_engine.rb | 245 | def add_enterprise_flag_param(command, option_name, param_name) | CODE |
| LOW | …ortlib/phusion_passenger/config/reopen_logs_command.rb | 106 | def perform_reinherit_logs_on(name, socket_name) | CODE |
| LOW | …tlib/phusion_passenger/config/nginx_engine_compiler.rb | 395 | def run_command_yield_activity(command) | CODE |
| LOW | …portlib/phusion_passenger/config/installation_utils.rb | 235 | def mkdir_p_preserve_parent_owner(path) | CODE |
| LOW | src/ruby_supportlib/phusion_passenger/config/utils.rb | 100 | def complain_that_multiple_passenger_instances_are_running(instances) | CODE |
| LOW | src/ruby_supportlib/phusion_passenger/config/utils.rb | 110 | def list_all_passenger_instances(instances, print_preamble = true) | CODE |
| LOW | src/ruby_supportlib/phusion_passenger/config/utils.rb | 126 | def try_performing_ro_admin_basic_auth(request, instance) | CODE |
| LOW | src/ruby_supportlib/phusion_passenger/config/utils.rb | 135 | def try_performing_full_admin_basic_auth(request, instance) | CODE |
| LOW | …lib/phusion_passenger/config/download_agent_command.rb | 257 | def real_download_support_file(site, name, output) | CODE |
| LOW | …sion_passenger/config/download_nginx_engine_command.rb | 261 | def real_download_support_file(site, name, output) | CODE |
| LOW | …ortlib/phusion_passenger/config/restart_app_command.rb | 151 | def select_app_group_name_exact(name) | CODE |
| LOW | …ortlib/phusion_passenger/config/restart_app_command.rb | 203 | def select_app_group_name_by_app_root_regex(app_root) | CODE |
| LOW | src/ruby_supportlib/phusion_passenger/utils/download.rb | 176 | def remove_curl_output_prefix(line) | CODE |
| LOW | …pportlib/phusion_passenger/admin_tools/memory_stats.rb | 285 | def determine_private_dirty_rss(pid) | CODE |
| LOW | src/helper-scripts/wsgi-loader.py | 62 | def record_journey_step_begin(step, state): | CODE |
| LOW | src/helper-scripts/wsgi-loader.py | 194 | class RequestHandler: | CODE |
| 2 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | test/stub/wsgi/cgishim.py | 217 | except KeyError: | CODE |
| HIGH | test/stub/wsgi/cgishim.py | 91 | except OSError: | CODE |
| HIGH | test/stub/wsgi/cgishim.py | 495 | except AttributeError: | CODE |
| HIGH | test/stub/wsgi/cgishim.py | 475 | except ValueError: | CODE |
| HIGH | src/helper-scripts/wsgi-loader.py | 411 | except OSError: | CODE |
| HIGH | src/helper-scripts/wsgi-loader.py | 236 | except KeyboardInterrupt: | CODE |
| HIGH | src/helper-scripts/wsgi-loader.py | 230 | except: | CODE |
| HIGH | src/helper-scripts/wsgi-loader.py | 234 | except: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH⚡ | …_supportlib/vendor-modified/boost/container/string.hpp | 544 | //! In this implementation, basic_string has performance characteristics very similar to | COMMENT |
| HIGH⚡ | …_supportlib/vendor-modified/boost/container/string.hpp | 548 | //! In this implementation, begin(), | COMMENT |
| HIGH⚡ | …_supportlib/vendor-modified/boost/container/string.hpp | 550 | //! In this implementation, iterators are only invalidated by member functions that | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 345 | # Sed substitution that helps us do robust quoting. It backslashifies | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 5624 | # Sed substitution that helps us do robust quoting. It backslashifies | COMMENT |
| MEDIUM | …cxx_supportlib/vendor-modified/jsoncpp/json-forwards.h | 100 | /// If defined, indicates that json may leverage CppTL library | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-modified/jsoncpp/json.h | 133 | /// If defined, indicates that json may leverage CppTL library | COMMENT |
| MEDIUM | …-modified/boost/atomic/detail/extra_fp_ops_generic.hpp | 95 | //! Negate implementation for IEEE 754 / IEC 559 floating point types. We leverage the fact that the sign bit is the mos | COMMENT |
| MEDIUM | …_supportlib/vendor-modified/boost/container/vector.hpp | 2322 | //Absolutely experimental. This function might change, disappear or simply crash! | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-modified/libev/ltmain.sh | 331 | # Sed substitution that helps us do robust quoting. It backslashifies | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-modified/libev/ltmain.sh | 5319 | # Sed substitution that helps us do robust quoting. It backslashifies | COMMENT |
| MEDIUM | src/cxx_supportlib/vendor-modified/libev/ltmain.sh | 9269 | # This code stresses the "libraries are programs" paradigm to its | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | src/agent/Core/ApplicationPool/Process.h | 244 | // Step 1: append strings to temporary buffer and take note of their | COMMENT |
| LOW⚡ | src/agent/Core/ApplicationPool/Process.h | 270 | // Step 2: allocate the real buffer. | COMMENT |
| LOW⚡ | src/agent/Core/ApplicationPool/Process.h | 276 | // Step 3: initialize the string fields and point them to | COMMENT |
| LOW⚡ | …b/vendor-modified/boost/container/detail/flat_tree.hpp | 945 | //Step 1: put new elements in the back | COMMENT |
| LOW⚡ | …b/vendor-modified/boost/container/detail/flat_tree.hpp | 948 | //Step 2: sort them | COMMENT |
| LOW⚡ | …b/vendor-modified/boost/container/detail/flat_tree.hpp | 951 | //Step 3: only left unique values from the back not already present in the original range | COMMENT |
| LOW⚡ | …b/vendor-modified/boost/container/detail/flat_tree.hpp | 960 | //Step 4: merge both ranges | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | src/agent/Core/ApplicationPool/Process.h | 244 | // Step 1: append strings to temporary buffer and take note of their | COMMENT |
| LOW⚡ | src/agent/Core/ApplicationPool/Process.h | 270 | // Step 2: allocate the real buffer. | COMMENT |
| LOW⚡ | src/agent/Core/ApplicationPool/Process.h | 276 | // Step 3: initialize the string fields and point them to | COMMENT |
| LOW⚡ | …b/vendor-modified/boost/container/detail/flat_tree.hpp | 945 | //Step 1: put new elements in the back | COMMENT |
| LOW⚡ | …b/vendor-modified/boost/container/detail/flat_tree.hpp | 948 | //Step 2: sort them | COMMENT |
| LOW⚡ | …b/vendor-modified/boost/container/detail/flat_tree.hpp | 951 | //Step 3: only left unique values from the back not already present in the original range | COMMENT |
| LOW⚡ | …b/vendor-modified/boost/container/detail/flat_tree.hpp | 960 | //Step 4: merge both ranges | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …cxx_supportlib/vendor-modified/boost/system/config.hpp | 38 | // enable dynamic or static linking as requested --------------------------------------// | COMMENT |
| HIGH | …tlib/vendor-modified/boost/thread/detail/singleton.hpp | 20 | // a class on demand, then dish it out as requested. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 379 | # Check if we can use backslash as IFS='\' separator, and set | COMMENT |
| LOW | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 655 | # Set func_arith_result to the result of evaluating TERMs. | COMMENT |
| LOW | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 679 | # Set func_basename_result to FILE with everything up to and including | COMMENT |
| LOW | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 845 | # Set func_len_result to the length of STRING. STRING may not | COMMENT |
| LOW | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 1063 | # Set func_relative_path_result to the relative path from SRCDIR to DSTDIR. | COMMENT |
| LOW | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 4287 | # Check if any of the arguments is a wrapper script. | COMMENT |
| LOW | src/cxx_supportlib/vendor-copy/libuv/ltmain.sh | 10241 | # Loop over the list of objects to be linked. | COMMENT |
| LOW | src/cxx_supportlib/vendor-modified/libev/ltmain.sh | 623 | # Set func_arith_result to the result of evaluating TERMs. | COMMENT |
| LOW | src/cxx_supportlib/vendor-modified/libev/ltmain.sh | 647 | # Set func_basename_result to FILE with everything up to and including | COMMENT |
| LOW | src/cxx_supportlib/vendor-modified/libev/ltmain.sh | 813 | # Set func_len_result to the length of STRING. STRING may not | COMMENT |
| LOW | src/cxx_supportlib/vendor-modified/libev/ltmain.sh | 1031 | # Set func_relative_path_result to the relative path from SRCDIR to DSTDIR. | COMMENT |
| LOW | src/cxx_supportlib/vendor-modified/libev/ltmain.sh | 4003 | # Check if any of the arguments is a wrapper script. | COMMENT |
| LOW | src/cxx_supportlib/vendor-modified/libev/ltmain.sh | 9970 | # Loop over the list of objects to be linked. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | test/stub/wsgi/passenger_wsgi.py | 37 | CODE | |
| LOW | test/stub/wsgi/passenger_wsgi.py | 66 | CODE | |
| LOW | test/stub/wsgi/passenger_wsgi.py | 166 | CODE | |
| LOW | test/stub/wsgi/cgishim.py | 126 | CODE | |
| LOW | test/stub/wsgi/cgishim.py | 744 | CODE | |
| LOW | src/helper-scripts/wsgi-loader.py | 93 | CODE | |
| LOW | src/helper-scripts/wsgi-loader.py | 200 | CODE | |
| LOW | src/helper-scripts/wsgi-loader.py | 279 | CODE | |
| LOW | src/helper-scripts/wsgi-loader.py | 302 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | src/agent/Core/SpawningKit/SmartSpawner.h | 436 | // then don't forget to also update these locations: | COMMENT |
| LOW | src/ruby_supportlib/phusion_passenger.rb | 103 | # Follows the logic of src/cxx_supportlib/ResourceLocator.h, so don't forget to modify that too. | COMMENT |
| LOW | src/ruby_supportlib/phusion_passenger.rb | 103 | # Follows the logic of src/cxx_supportlib/ResourceLocator.h, so don't forget to modify that too. | COMMENT |
| LOW | …pportlib/phusion_passenger/standalone/start_command.rb | 97 | # If you add or change an option, make sure to update the following places too: | COMMENT |
| MEDIUM | …supportlib/phusion_passenger/apache2/config_options.rb | 68 | # when you can use this option to override what gets written in the | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | src/helper-scripts/wsgi-loader.py | 222 | except Exception: | CODE |
| LOW | src/helper-scripts/wsgi-loader.py | 375 | except Exception: | CODE |
| LOW | src/helper-scripts/wsgi-loader.py | 385 | except Exception: | CODE |
| LOW | src/helper-scripts/wsgi-loader.py | 400 | except Exception: | CODE |
| MEDIUM | src/helper-scripts/wsgi-loader.py | 39 | def try_write_file(path, contents): | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …uby_supportlib/phusion_passenger/abstract_installer.rb | 47 | # Usage: | COMMENT |
| LOW | src/ruby_supportlib/phusion_passenger/utils/json.rb | 36 | # Usage: | COMMENT |
| LOW | …by_supportlib/phusion_passenger/rack/out_of_band_gc.rb | 34 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | test/stub/wsgi/cgishim.py | 51 | __all__ = ["MiniFieldStorage", "FieldStorage", "parse", "parse_multipart", | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | test/stub/wsgi/cgishim.py | 327 | CODE |