Home / radareorg / radare2
Repository Analysis

radareorg/radare2

UNIX-like reverse engineering framework and command-line toolset

1.4 Likely human-written View on GitHub
1.4
Adjusted Score
1.4
Raw Score
100%
Time Factor
2026-05-30
Last Push
23,972
Stars
C
Language
1,175,223
Lines of Code
2751
Files
1724
Pattern Hits
2026-05-31
Scan Date

Score History

Severity Breakdown

CRITICAL 1HIGH 1MEDIUM 13LOW 1709

Pattern Findings

1724 matches across 14 categories. Click a row to expand file-level details.

Over-Commented Block1667 hits · 1514 pts
SeverityFileLineSnippet
LOWtest/indent/header.h361
LOWtest/indent/header.h441};
LOWtest/unit/test_get_main_arena_offset.c1#include <r_bin.h>
LOWtest/unit/test_pdb.c361 char *type;
LOWtest/unit/test_debug.c1#include <r_core.h>
LOWtest/unit/minunit.h1// minunit.h comes from http://www.jera.com/techinfo/jtns/jtn002.html
LOWtest/fuzz/fuzz_bin_demangle.c1#include <r_bin.h>
LOWtest/fuzz/scripts/fuzz_rasm2.py1#!/usr/bin/env python3
LOWbinr/r2r/run.c1/* radare - LGPL - Copyright 2020-2026 - pancake, thestr4ng3r */
LOWbinr/r2r/run.c461#ifndef __wasi__
LOWbinr/r2r/load.c41// read the (possibly multiline) string value of some key in the file
LOWbinr/r2r/r2r.c1/* radare - LGPL - Copyright 2020-2026 - pancake */
LOWsys/release-notes.sh1#!/bin/sh
LOWsys/docker_build_alpine_image.sh1#!/bin/sh
LOWsys/docker_build_alpine_image.sh21# $ r2d # Optional --rm
LOWsys/docker_build_alpine_image.sh141FROM alpine:latest
LOWsys/source_bat.bash1# Copyright 2019 Wason Technology, LLC
LOWsys/ui/r2-install.c1/* r2-install.c generated by valac 0.13.3.41-7d9f, the Vala compiler
LOWlibr/reg/rcond.c1/* radare - LGPL - Copyright 2014-2022 - pancake */
LOWlibr/egg/emit_a64.c1/* pancake - radare2 - 2023-2026 -- arm64 emiter */
LOWlibr/egg/emit_arm.c1/* pancake // nopcode.org 2010-2026 -- arm emiter */
LOWlibr/egg/emit_x86.c1/* pancake // nopcode.org 2010-2026 -- emit module for rcc */
LOWlibr/egg/emit_x86.c21#define EMIT_NAME emit_x86
LOWlibr/egg/emit_arm64.c1/* pancake // nopcode.org 2023 -- arm64 emiter */
LOWlibr/egg/emit_esil.c21 * appear in a valid ESIL token so recognition is unambiguous. */
LOWlibr/egg/emit_trace.c1/* pancake // nopcode.org 2011 -- trace emiter */
LOWlibr/egg/emit_ppc.c1/* radare - LGPL - Copyright 2026 - radare2 contributors */
LOWlibr/egg/emit_ppc.c21# define R_SZ 4
LOWlibr/core/cmd_mmc.inc.c1/* radare - LGPL - Copyright 2025 - MiKi (mikelloc) */
LOWlibr/core/panels.c1/* radare2 - LGPL - Copyright 2014-2026 - pancake, vane11ope */
LOWlibr/core/cmd_debug.inc.c1/* radare - LGPL - Copyright 2009-2026 - pancake */
LOWlibr/core/dmh_jemalloc.inc.c1/* radare - LGPL - Copyright 2017-2025 - javierptd, pancake */
LOWlibr/core/dmh_jemalloc.inc.c21#define GH(x) x##_32
LOWlibr/core/cconfig.c1/* radare - LGPL - Copyright 2009-2026 - pancake */
LOWlibr/core/agraph.c81#define MARGIN_TEXT_X 2
LOWlibr/core/disasm.c1/* radare - LGPL - Copyright 2009-2026 - nibble, pancake, dso, lazula */
LOWlibr/core/cbin.c1/* radare - LGPL - Copyright 2011-2026 - pancake */
LOWlibr/core/cmd.c1/* radare - LGPL - Copyright 2009-2026 - nibble, pancake */
LOWlibr/core/cmd.c81#include "cmd_hash.inc.c"
LOWlibr/core/dmh_glibc.inc.c1/* radare2 - LGPL - Copyright 2016-2025 - n4x0r, soez, pancake */
LOWlibr/core/casm.c681
LOWlibr/core/cmd_search.inc.c2041#if 0
LOWlibr/core/cmd_search.inc.c3961 lastch = input + strlen (input) - 1;
LOWlibr/core/i/heap/jemalloc/public_namespace.h1#define je_malloc_conf JEMALLOC_N(malloc_conf)
LOWlibr/core/i/heap/jemalloc/public_namespace.h21#define je_memalign JEMALLOC_N(memalign)
LOWlibr/core/i/heap/jemalloc/rtree.h281 */ \
LOWlibr/core/i/heap/jemalloc/rtree.h301#endif
LOWlibr/core/i/heap/jemalloc/rtree.h321 RTREE_GET_SUBTREE(12)
LOWlibr/core/i/heap/jemalloc/jemalloc_public.h41
LOWlibr/core/i/heap/jemalloc/jemalloc_public.h61# define je_malloc malloc
LOWlibr/core/i/heap/jemalloc/jemalloc_public.h81#endif
LOWlibr/core/i/heap/jemalloc/jemalloc_public.h121
LOWlibr/core/i/heap/jemalloc/jemalloc_public.h141# define JEMALLOC_SECTION(s) __declspec(allocate(s))
LOWlibr/core/i/heap/jemalloc/jemalloc_public.h161# endif
LOWlibr/core/i/heap/jemalloc/jemalloc_public.h321# ifndef JEMALLOC_NO_DEMANGLE
LOWlibr/core/i/heap/jemalloc/jemalloc_public.h341# define mallctlbymib je_mallctlbymib
LOWlibr/core/i/heap/jemalloc/jemalloc_public.h361# undef je_aligned_alloc
LOWlibr/core/i/heap/jemalloc/jemalloc_internal_macros.h21 static inline JEMALLOC_ATTR(unused) JEMALLOC_ATTR(always_inline)
LOWlibr/core/i/heap/jemalloc/jemalloc_internal_macros.h41#define KZI(z) ZI(z##LL)
LOWlibr/core/i/heap/jemalloc/jemalloc_internal_decls.h1#ifndef JEMALLOC_INTERNAL_DECLS_H
1607 more matches not shown…
Excessive Try-Catch Wrapping10 hits · 15 pts
SeverityFileLineSnippet
LOWtest/fuzz/scripts/mutate_c.py441 except Exception as e:
MEDIUMtest/fuzz/scripts/mutate_c.py442 print(f"Error: {e}")
MEDIUMbinr/r2pm/r2pm-view.py26 print(f"Error fetching package list: {e}", file=sys.stderr)
MEDIUMbinr/r2pm/r2pm-view.py36 print(f"Error downloading package {package_name}: {e}", file=sys.stderr)
MEDIUMsys/check_includes.py44 print(f"Error: {meson_file} not found")
LOWsys/lint.py191 except Exception:
MEDIUMsys/lint.py216 print("Error running git ls-files. Ensure git is installed and this is a git repository.")
LOWsys/lint.py225 except Exception:
LOWsys/lint.py258 except Exception:
LOWlibr/syscall/d/gen.py37except Exception as e:
Decorative Section Separators4 hits · 12 pts
SeverityFileLineSnippet
MEDIUMtest/fuzz/scripts/fuzz_rasm2.py6# ============
MEDIUMlibr/bin/p/bin_pdp11.c13#------------------------------------------------------------------------------
MEDIUMdoc/vim2r2.js7# ------------
MEDIUMdoc/vim2r2.js13# -------------
Hallucination Indicators1 hit · 10 pts
SeverityFileLineSnippet
CRITICALshlr/www/m/vendors/jquery.min.js2!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):f
Redundant / Tautological Comments6 hits · 10 pts
SeverityFileLineSnippet
LOWtest/fuzz/scripts/run.sh15# Check if we're in the right directory
LOWsys/msvc.sh33# Set capstone to release
LOWsys/update_urls.sh92 # Check if line contains an HTTP URL
LOWsys/update_urls.sh108 # Check if domain should be updated
LOWsys/macos-cert.sh4# Check if the certificate is already present in the system keychain
LOWsys/lint.py24 # Check if a file path should be scanned for this rule (based on include/exclude patterns)
Deep Nesting9 hits · 9 pts
SeverityFileLineSnippet
LOWtest/fuzz/scripts/fuzz_rasm2.py130
LOWtest/fuzz/scripts/mutate_c.py300
LOWsys/check_includes.py8
LOWsys/lint.py163
LOWsys/lint.py198
LOWlibr/egg/p/sc/scmangle.py69
LOWlibr/egg/p/sc/scmangle.py132
LOWlibr/egg/p/sc/scmangle.py160
LOWlibr/egg/p/sc/scmangle.py189
AI Slop Vocabulary2 hits · 9 pts
SeverityFileLineSnippet
MEDIUMsys/macos-cert.sh2# Credits to https://github.com/derekparker/delve/blob/master/scripts/gencert.sh
MEDIUMsys/macos-cert.sh2# Credits to https://github.com/derekparker/delve/blob/master/scripts/gencert.sh
Self-Referential Comments2 hits · 8 pts
SeverityFileLineSnippet
MEDIUMsys/update_urls.sh87 # Create a temporary file
MEDIUMsys/macos-cert.sh14# Create the certificate template
Verbosity Indicators5 hits · 8 pts
SeverityFileLineSnippet
LOWlibr/util/lib.c308 // Step 1: Open with safe mode if enabled
LOWlibr/util/lib.c324 // Step 2: Get plugin struct pointer
LOWlibr/util/lib.c339 // Step 3: Check plugin metadata and ABI version
LOWlibr/util/lib.c355 // Step 4: If safe mode used, reload with full initialization
LOWlibr/util/lib.c386 // Step 5: Register and initialize the plugin
Hyper-Verbose Identifiers7 hits · 7 pts
SeverityFileLineSnippet
LOWtest/fuzz/scripts/mutate_c.py86def mutate_number_replacement(content):
LOWtest/fuzz/scripts/mutate_c.py262def mutate_identifier_replacement(content):
LOWtest/fuzz/scripts/mutate_c.py273def generate_random_construction():
LOWtest/fuzz/scripts/mutate_c.py289def mutate_bracket_modification(content):
LOWtest/fuzz/scripts/mutate_c.py300def mutate_semicolon_modification(content):
LOWtest/fuzz/scripts/mutate_c.py313def mutate_whitespace_modification(content):
LOWtest/fuzz/scripts/mutate_c.py339def mutate_replace_construction(content):
Unused Imports5 hits · 5 pts
SeverityFileLineSnippet
LOWtest/fuzz/scripts/fuzz_rasm2.py31
LOWtest/fuzz/scripts/fuzz_rasm2.py35
LOWtest/fuzz/scripts/mutate_c.py9
LOWbinr/r2pm/r2pm-view.py9
LOWlibr/syscall/d/gen.py3
Cross-Language Confusion1 hit · 5 pts
SeverityFileLineSnippet
HIGHsys/meson.py201 const='address,undefined,signed-integer-overflow', metavar='sanitizers',
Example Usage Blocks3 hits · 4 pts
SeverityFileLineSnippet
LOWlibr/bin/format/elf/elf.c355 // Usage example:
LOWlibr/bin/format/elf/elf.c421 // Usage example:
LOWdoc/dexdump.sh3# Usage:
Slop Phrases2 hits · 2 pts
SeverityFileLineSnippet
LOWlibr/arch/p/xtensa/gnu/elf32-xtensa.c10364 Also, don't forget to modify the associated SIZE at
LOWshlr/www/m/main.min.js2(()=>{"use strict";var __webpack_modules__={"./js/app.js":(__unused_webpack_module,__webpack_exports__,__webpack_require