A free Windows-compatible Operating System
This report summarizes scanner evidence for reactos/reactos, a C project with 18,410 GitHub stars. SynthScan examined 9,923,000 lines of code across 18621 source files, recording 19747 pattern matches distributed across 17 syntactic categories. The legacy adjusted pattern signal is 1.8 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.
Can maintainers explain intent, assumptions, and trade-offs? 19711 finding(s).
Are imports declared and package/API names verified? 34 finding(s).
Are wrappers, guards, and repeated structures necessary? 10 finding(s).
Which changes need focused human review? 19747 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 19747 distinct pattern matches across 17 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | drivers/filters/fltmgr/Object.c | 21 | /* DATA *********************************************************************/ | COMMENT |
| LOW | drivers/filters/fltmgr/fltmgr.h | 1 | #ifndef _FLTMGR_H | COMMENT |
| LOW | drivers/filters/fltmgr/fltmgr.h | 121 | COMMENT | |
| LOW | drivers/filters/fltmgr/fltmgr.h | 141 | //FMil - fltmgr.sys - IRP_CTRL completion node stack | COMMENT |
| LOW | drivers/acpi/cmbatt/cmbatt.h | 41 | #define CMBATT_ACPI_ENTRY_EXIT 0x40 | COMMENT |
| LOW | drivers/acpi/cmbatt/cmbatt.h | 61 | } CMBATT_EXTENSION_TYPE; | COMMENT |
| LOW | drivers/parallel/parallel/parallel.h | 61 | #define LPGETIRQ 0x0606 /* get the current IRQ number */ | COMMENT |
| LOW | drivers/sac/driver/sacdrv.h | 21 | // | COMMENT |
| LOW | drivers/sac/driver/sacdrv.h | 121 | KeClearEvent(Channel->x##WaitObjectBody); \ | COMMENT |
| LOW | drivers/sac/driver/sacdrv.h | 141 | #define FREE_POOL_TAG 'FpcR' | COMMENT |
| LOW | drivers/sac/driver/sacdrv.h | 161 | #define SAC_VTUTF8_OBUFFER_SIZE 0x2D00 | COMMENT |
| LOW | drivers/sac/driver/sacdrv.h | 1321 | { | COMMENT |
| LOW | drivers/sac/driver/sacdrv.h | 1481 | // The following site is a good reference on VT100/ANSI escape codes | COMMENT |
| LOW | drivers/sac/driver/sacdrv.h | 1501 | #define VT_ANSI_ERASE_START_LINE L"[1K" | COMMENT |
| LOW | drivers/input/inport/hardware.c | 21 | COMMENT | |
| LOW | drivers/input/inport/hardware.c | 41 | COMMENT | |
| LOW | drivers/input/inport/hardware.c | 61 | * Microsoft InPort | COMMENT |
| LOW | drivers/input/inport/hardware.c | 81 | COMMENT | |
| LOW | drivers/network/netio/netio.c | 41 | #include <ntifs.h> | COMMENT |
| LOW | drivers/network/tdi/precomp.h | 1 | #ifndef _TDI_PCH_ | COMMENT |
| LOW | drivers/network/afd/include/debug.h | 41 | : (DebugTraceLevel & NORMAL_MASK) >= _t_) { \ | COMMENT |
| LOW | drivers/network/afd/include/afd.h | 21 | #include <windef.h> | COMMENT |
| LOW | drivers/network/afd/include/afd.h | 41 | #define TAG_AFD_CONNECT_DATA 'cdfA' | COMMENT |
| LOW | drivers/network/afd/include/afd.h | 81 | #define SOCKET_STATE_LOCKED 0x40000000 | COMMENT |
| LOW | drivers/network/dd/nvnet/nvnet.h | 21 | COMMENT | |
| LOW | drivers/network/dd/nvnet/nvnet.h | 41 | #define NVNET_RECEIVE_PROCESSING_LIMIT 64 | COMMENT |
| LOW | drivers/network/dd/nvnet/nvnet.h | 281 | { | COMMENT |
| LOW | drivers/network/dd/nvnet/nic.h | 21 | * and needs packet format 2 */ | COMMENT |
| LOW | drivers/network/dd/nvnet/nic.h | 41 | #define DEV_NEED_PHY_INIT_FIX 0x00400000 /* Device needs specific PHY workaround */ | COMMENT |
| LOW | drivers/network/dd/nvnet/nic.h | 61 | #define NVREG_IRQ_TX_OK 0x0010 | COMMENT |
| LOW | drivers/network/dd/nvnet/nic.h | 101 | #define NVREG_XMITCTL_MGMT_SEMA_MASK 0x00000f00 | COMMENT |
| LOW | drivers/network/dd/nvnet/nic.h | 121 | NvRegOffloadConfig = 0x90, | COMMENT |
| LOW | drivers/network/dd/nvnet/nic.h | 181 | #define NVREG_RINGSZ_RXSHIFT 16 | COMMENT |
| LOW | drivers/network/dd/nvnet/nic.h | 201 | NvRegTxRxControl = 0x144, | COMMENT |
| LOW | drivers/network/dd/nvnet/nic.h | 221 | #define NVREG_TX_PAUSEFRAME_ENABLE_V3 0x09f00880 | COMMENT |
| LOW | drivers/network/dd/nvnet/nic.h | 281 | #define NVREG_MGMTUNITVERSION 0x08 | COMMENT |
| LOW | drivers/network/dd/nvnet/nic.h | 361 | typedef struct _NVNET_DESCRIPTOR_64 | COMMENT |
| LOW | drivers/network/dd/nvnet/nic.h | 381 | #define NV_TX_CARRIERLOST (1<<27) | COMMENT |
| LOW | drivers/network/dd/nvnet/nic.h | 401 | #define NV_TX2_CHECKSUM_L3 (1<<27) | COMMENT |
| LOW | drivers/network/dd/nvnet/nic.h | 421 | NV_RX_OVERFLOW|NV_RX_FRAMINGERR) | COMMENT |
| LOW | drivers/network/dd/nvnet/nic.h | 441 | COMMENT | |
| LOW | drivers/network/dd/nvnet/nic.h | 461 | #define NV_MIIBUSY_DELAY 50 | COMMENT |
| LOW | drivers/network/dd/nvnet/nic.h | 481 | #define PHY_MODEL_REALTEK_8211 0x0110 | COMMENT |
| LOW | drivers/network/dd/nvnet/nic.h | 501 | #define PHY_CICADA_INIT5 0x0004 | COMMENT |
| LOW | drivers/network/dd/nvnet/nic.h | 521 | #define PHY_REALTEK_INIT11 0x0200 | COMMENT |
| LOW | drivers/network/dd/nvnet/nic.h | 541 | #define PHY_REALTEK_INIT3 0x0001 | COMMENT |
| LOW | drivers/network/dd/nvnet/nic.h | 561 | #define NV_MSI_X_VECTOR_TX 0x1 | COMMENT |
| LOW | drivers/network/dd/nvnet/phyreg.h | 1 | /* | COMMENT |
| LOW | drivers/network/dd/nvnet/phyreg.h | 21 | #define MII_AUTONEG_ADVERTISE 0x04 | COMMENT |
| LOW | drivers/network/dd/nvnet/phyreg.h | 41 | #define MII_MASTER_SLAVE_STATUS 0x0A | COMMENT |
| LOW | drivers/network/dd/dc21x4/eeprom.h | 41 | #define SRomGetExtendedBlockLength(Byte) (((Byte) & 0x7F) + 1) | COMMENT |
| LOW | drivers/network/dd/dc21x4/eeprom.h | 61 | COMMENT | |
| LOW | drivers/network/dd/dc21x4/eeprom.h | 81 | /* | COMMENT |
| LOW | drivers/network/dd/dc21x4/eeprom.h | 101 | #define SROM_MEDIA_100T_HD 3 | COMMENT |
| LOW | drivers/network/dd/dc21x4/debug.h | 81 | COMMENT | |
| LOW | drivers/network/dd/dc21x4/media.h | 41 | } DC_MII_MEDIA, *PDC_MII_MEDIA; | COMMENT |
| LOW | drivers/network/dd/dc21x4/dc21x4hw.h | 21 | */ | COMMENT |
| LOW | drivers/network/dd/dc21x4/dc21x4hw.h | 61 | #define DC_TBD_STATUS_UNDERFLOW 0x00000002 | COMMENT |
| LOW | drivers/network/dd/dc21x4/dc21x4hw.h | 81 | #define DC_TBD_CONTROL_CHAINED 0x01000000 | COMMENT |
| LOW | drivers/network/dd/dc21x4/dc21x4hw.h | 101 | /* | COMMENT |
| 19531 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | drivers/network/tcpip/lwip/src/include/lwip/sockets.h | 214 | #define SO_DONTROUTE 0x0010 /* Unimplemented: just use interface addresses */ | COMMENT |
| MEDIUM | drivers/storage/partmgr/partition.c | 865 | // so we just return success. A more robust algorithm would be | COMMENT |
| MEDIUM | drivers/filesystems/udfs/write.cpp | 749 | FALSE, // We will not utilize pin access for this file | CODE |
| MEDIUM | drivers/filesystems/udfs/read.cpp | 640 | FALSE, // We will not utilize pin access for this file | CODE |
| MEDIUM | drivers/filesystems/udfs/read.cpp | 768 | // Also, at this point, the FSD might choose to utilize the | COMMENT |
| MEDIUM | drivers/filesystems/fastfat/easup.c | 3232 | // nice and more robust | COMMENT |
| MEDIUM | drivers/filesystems/fastfat/close.c | 674 | // make sure we fully utilize the acquisition of the volume, which can | COMMENT |
| MEDIUM | sdk/include/c++/stlport/stl/config/_apple.h | 97 | #define _STLP_VENDOR_GLOBAL_STD // mpw's c++ libs do not utilize namespace std yet | COMMENT |
| MEDIUM | sdk/include/c++/stlport/stl/config/_apple.h | 97 | #define _STLP_VENDOR_GLOBAL_STD // mpw's c++ libs do not utilize namespace std yet | COMMENT |
| MEDIUM⚡ | sdk/include/psdk/twain.h | 1311 | #define DG_CONTROL 0x0001L /* data pertaining to control */ | COMMENT |
| MEDIUM⚡ | sdk/include/psdk/twain.h | 1312 | #define DG_IMAGE 0x0002L /* data pertaining to raster images */ | COMMENT |
| MEDIUM⚡ | sdk/include/psdk/twain.h | 1314 | #define DG_AUDIO 0x0004L /* data pertaining to audio */ | COMMENT |
| MEDIUM | sdk/include/ucrt/corecrt.h | 89 | // C28719: Banned API, use a more robust and secure replacement. | COMMENT |
| MEDIUM | sdk/include/ucrt/corecrt.h | 90 | // C28726: Banned or deprecated API, use a more robust and secure replacement. | COMMENT |
| MEDIUM | …drivers/wdf/shared/inc/private/common/fxdeviceinit.hpp | 247 | // If set, the Cx/Client intends to leverage Self IO Target | COMMENT |
| MEDIUM | …ib/drivers/wdf/shared/inc/private/common/fxioqueue.hpp | 541 | // The IoQueue is designed to be robust in that multiple events | COMMENT |
| MEDIUM | sdk/lib/drivers/wdf/shared/targets/usb/fxusbdevice.cpp | 1535 | // but can't leverage on that as that sends the select interface URB down | COMMENT |
| MEDIUM | sdk/lib/ucrt/stdio/fopen.cpp | 38 | // subjected to direct user input and thus must be robust to that rather | COMMENT |
| MEDIUM | sdk/lib/ucrt/heap/debug_heap.cpp | 1772 | // alignment.cpp, but these functions (suffixed with _dbg instead of _base) utilize | COMMENT |
| MEDIUM | sdk/lib/3rdparty/symcrypt/lib/sha256.c | 1383 | // For the SHA-NI implementation we will utilize 128-bit XMM registers. Each | COMMENT |
| MEDIUM | subsystems/mvdm/ntvdm/bios/vidbios.c | 3351 | // Certainly in BL and not in BX as said by Ralf Brown... | COMMENT |
| MEDIUM | subsystems/mvdm/ntvdm/bios/vidbios.c | 3369 | // Certainly in BL and not in BX as said by Ralf Brown... | COMMENT |
| MEDIUM | subsystems/mvdm/ntvdm/bios/vidbios.c | 3429 | // Certainly in BL and not in BX as said by Ralf Brown... | COMMENT |
| MEDIUM | win32ss/drivers/displays/vga/vgaddi.h | 188 | // one seamless 64K bank | COMMENT |
| LOW | …s/applications/devutils/btrfstools/btrfs_structures.py | 889 | # sizes, because that's how it gets cowed. We don't just use 1 or 2 | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | drivers/network/tcpip/lwip/src/core/netif.c | 280 | * IPv6: Don't forget to call netif_create_ip6_linklocal_address() after | COMMENT |
| LOW | drivers/storage/mountmgr/device.c | 1407 | /* And don't forget to nullify */ | COMMENT |
| LOW | drivers/storage/port/scsiport/scsi.c | 1292 | /* Nothing - just return (don't forget to release the spinlock */ | COMMENT |
| LOW | drivers/multimedia/audio/sndblst.old/dma.c | 11 | // Don't forget to check for Compaq machines (they can't be configured | COMMENT |
| LOW | sdk/include/c++/stlport/stl/config/user_config.h | 217 | * If you customize the STLport generated library names don't forget to give | COMMENT |
| LOW | sdk/include/reactos/libs/mbedtls/blowfish.h | 67 | #define MBEDTLS_BLOWFISH_ROUNDS 16 /**< Rounds to use. When increasing this value, make sure to extend the | COMMENT |
| LOW | sdk/lib/drivers/csq/csq.c | 45 | * - Don't forget to release the cancel spinlock ASAP --> #1 hot lock in the | COMMENT |
| LOW | sdk/lib/rtl/heap.c | 1937 | /* Don't forget to update previous size of the next entry! */ | COMMENT |
| MEDIUM | sdk/lib/3rdparty/freetype/include/freetype/fterrors.h | 78 | * Here is a simple example. | COMMENT |
| MEDIUM | sdk/lib/3rdparty/freetype/include/freetype/freetype.h | 1182 | * for demonstration purposes. | COMMENT |
| LOW | …/3rdparty/freetype/include/freetype/internal/ftrfork.h | 35 | /* Don't forget to increment the number if you add a new guessing rule. */ | COMMENT |
| LOW | ntoskrnl/fsrtl/oplock.c | 351 | /* Don't forget to release the mutex */ | COMMENT |
| LOW | ntoskrnl/cc/copy.c | 370 | /* And don't forget to release master */ | COMMENT |
| LOW | dll/win32/cabinet/fdi.c | 2367 | * This notification is important, don't forget to implement it. This | COMMENT |
| LOW | dll/win32/advapi32/sec/misc.c | 480 | * more than 0xFFFF (USHORT) characters! Also don't forget to explicitly | COMMENT |
| LOW | dll/win32/browseui/travellog.cpp | 505 | // don't forget to patch ampersands before adding to menu | COMMENT |
| LOW | dll/directx/wine/ddraw/utils.c | 1202 | * though. Don't forget to set ddsCaps.dwCaps2/3/4 to 0 when removing this */ | COMMENT |
| LOW | dll/directx/wine/wined3d/glsl_shader.c | 12575 | * Don't forget to clamp the y values in into the range, otherwise we'll | COMMENT |
| LOW | dll/opengl/glu32/src/libutil/mipmap.c | 4536 | free(newMipmapImage); /* don't forget to free it! */ | CODE |
| LOW | win32ss/user/ntuser/class.c | 2979 | // Don't forget to use DesktopPtrToUser( ? ) with return pointer in user space. | COMMENT |
| MEDIUM | modules/rosapps/applications/net/ncftp/sio/sio.html | 738 | <P>This is <TT><A HREF="#SSendto">SSendto()</A></TT>, only you can use | CODE |
| LOW | modules/rosapps/applications/net/ncftp/libncftp/cmds.c | 1157 | /* Don't forget to change back to the original directory. */ | COMMENT |
| LOW | modules/rosapps/applications/net/ncftp/libncftp/cmds.c | 1305 | /* Don't forget to change back to the original directory. */ | COMMENT |
| LOW | base/applications/regedit/framewnd.c | 740 | pd.hDevMode = NULL; /* Don't forget to free or store hDevMode*/ | CODE |
| LOW | base/applications/regedit/framewnd.c | 741 | pd.hDevNames = NULL; /* Don't forget to free or store hDevNames*/ | CODE |
| LOW | base/services/nfsd/nfs41_daemon.c | 53 | #ifndef STANDALONE_NFSD //make sure to define it in "sources" not here | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …/lib/3rdparty/stlport/test/unit/mvctor_traits_test.cpp | 55 | void* dummy_data[2]; | CODE |
| LOW | sdk/lib/3rdparty/stlport/test/unit/mvctor_test.h | 96 | void* dummy_data[2]; | CODE |
| LOW | dll/win32/mscms/profile.c | 156 | static const BYTE dummy_value[12]; | CODE |
| LOW | dll/win32/mscms/profile.c | 171 | return set_profile_device_key( profile, dummy_value, sizeof(dummy_value) ); | CODE |
| LOW | modules/rostests/winetests/gdi32/font.c | 2377 | "Lorem ipsum dolor sit amet, consectetur adipisicing elit, sed do " | CODE |
| LOW | modules/rostests/winetests/gdi32/font.c | 2377 | "Lorem ipsum dolor sit amet, consectetur adipisicing elit, sed do " | CODE |
| LOW | modules/rostests/winetests/secur32/ntlm.c | 990 | SecBuffer data[2], fake_data[2], complex_data[4]; | CODE |
| LOW⚡ | modules/rostests/winetests/secur32/ntlm.c | 1067 | crypt.pBuffers = fake_data; | CODE |
| LOW⚡ | modules/rostests/winetests/secur32/ntlm.c | 1069 | fake_data[0].BufferType = SECBUFFER_DATA; | CODE |
| LOW⚡ | modules/rostests/winetests/secur32/ntlm.c | 1070 | fake_data[0].cbBuffer = ctxt_sizes.cbSecurityTrailer; | CODE |
| LOW⚡ | modules/rostests/winetests/secur32/ntlm.c | 1071 | fake_data[0].pvBuffer = HeapAlloc(GetProcessHeap(), 0, fake_data[0].cbBuffer); | CODE |
| LOW⚡ | modules/rostests/winetests/secur32/ntlm.c | 1073 | fake_data[1].BufferType = SECBUFFER_DATA; | CODE |
| LOW⚡ | modules/rostests/winetests/secur32/ntlm.c | 1074 | fake_data[1].cbBuffer = lstrlenA(message); | CODE |
| LOW⚡ | modules/rostests/winetests/secur32/ntlm.c | 1075 | fake_data[1].pvBuffer = HeapAlloc(GetProcessHeap(), 0, fake_data[1].cbBuffer); | CODE |
| LOW | modules/rostests/winetests/riched20/txtsrv.c | 124 | static const WCHAR lorem[] = L"Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt | CODE |
| LOW | modules/rostests/winetests/riched20/txtsrv.c | 124 | static const WCHAR lorem[] = L"Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt | CODE |
| LOW⚡ | modules/rostests/winetests/riched20/editor.c | 7306 | result = SendMessageA(hwnd, WM_SETTEXT, 0, (LPARAM)"Lorem ipsum\rdolor sit\rnamet"); | CODE |
| LOW⚡ | modules/rostests/winetests/riched20/editor.c | 7309 | /* [|Lorem ipsum] [dolor sit] [amet] */ | COMMENT |
| LOW⚡ | modules/rostests/winetests/riched20/editor.c | 7319 | /* [Lorem ipsum|] [dolor sit] [amet] */ | COMMENT |
| LOW⚡ | modules/rostests/winetests/riched20/editor.c | 7326 | /* [Lorem ipsum] [|dolor sit] [amet] */ | COMMENT |
| LOW⚡ | modules/rostests/winetests/riched20/editor.c | 7333 | /* [Lorem ipsum|] [dolor sit] [amet] */ | COMMENT |
| LOW | modules/rostests/apitests/winspool/EnumPrinters.c | 129 | ok(!EnumPrintersW(PRINTER_ENUM_LOCAL | PRINTER_ENUM_NAME, L"LOREM IPSUM", Level, NULL, 0, &cbNeeded, &dw | CODE |
| LOW | modules/rostests/apitests/winspool/EnumPrinters.c | 168 | ok(!EnumPrintersW(PRINTER_ENUM_LOCAL, L"LOREM IPSUM", Level, NULL, 0, &cbNeeded, &dwReturned), "EnumPrinters | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | drivers/network/tcpip/lwip/src/apps/mdns/mdns.c | 614 | * comparison. So if we get passed the class and type comparison we need to check if the | COMMENT |
| LOW | drivers/bus/acpi/acpica/executer/exmisc.c | 209 | * We need to check if the shiftcount is larger than the integer bit | COMMENT |
| LOW | drivers/bus/acpi/acpica/executer/exmisc.c | 221 | * We need to check if the shiftcount is larger than the integer bit | COMMENT |
| LOW | drivers/storage/class/cdrom/cdrom.c | 1085 | The purpose of this function is to send SYNC CACHE command and STOP UNIT command if it's necessary. | CODE |
| LOW | drivers/filesystems/cdfs/dirsup.c | 241 | find. This may already point to a dirent so we need to check if | CODE |
| LOW | sdk/lib/cportlib/cport_pc98.c | 439 | * To avoid an infinite loop, we need to check if the other side is ready | COMMENT |
| LOW | sdk/lib/ucrt/internal/locks.cpp | 16 | // This variable stores the number of locks that have been successfully | COMMENT |
| LOW⚡ | sdk/lib/3rdparty/symcrypt/lib/dlgroup.c | 1767 | // Step 3: Acceptable pairs of L,N => skipped | COMMENT |
| LOW⚡ | sdk/lib/3rdparty/symcrypt/lib/dlgroup.c | 1769 | // Step 6: nBitsOfSeed < nBitsOfQ => skipped | COMMENT |
| LOW⚡ | sdk/lib/3rdparty/symcrypt/lib/dlgroup.c | 1857 | // Step 2: Verify that 2<= G <= p-1 | COMMENT |
| LOW⚡ | sdk/lib/3rdparty/symcrypt/lib/dlgroup.c | 1866 | // Step 3: Verify that G^Q == 1 | COMMENT |
| LOW | ntoskrnl/io/pnpmgr/devaction.c | 1108 | // Step 1: Write the DeviceDesc value if does not exist | COMMENT |
| LOW | ntoskrnl/io/pnpmgr/devaction.c | 1157 | // Step 2: LocaltionInformation is overwritten unconditionally | COMMENT |
| LOW | dll/win32/shell32/CDefView.cpp | 4331 | /* We need to check if we drag the selection over itself */ | COMMENT |
| LOW | win32ss/user/ntuser/security.c | 18 | * context of the caller. The purpose of this function is to query | COMMENT |
| LOW | base/setup/lib/utils/partlist.c | 3336 | // Step 1 : Check the system disk. | COMMENT |
| LOW | base/setup/lib/utils/partlist.c | 3456 | // Step 2 : No active partition found: Check the alternative disk if specified. | COMMENT |
| LOW | base/services/umpnpmgr/install.c | 534 | // Step 1: install all drivers which were configured during the boot | COMMENT |
| LOW | base/services/umpnpmgr/install.c | 581 | // Step 2: start the wait-loop for newly added devices | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | drivers/network/tcpip/lwip/src/apps/snmp/snmp_core.c | 258 | * device a > 1.3.6.1.4.1.XXX(ent-oid).1(devices).1(device a) | COMMENT |
| CRITICAL | drivers/network/tcpip/lwip/src/apps/snmp/snmp_core.c | 259 | * device b > 1.3.6.1.4.1.XXX(ent-oid).1(devices).2(device b) | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | drivers/network/dd/netkvm/Common/ParaNdis-Common.c | 2078 | //NOTE: This function assumes that VLAN header has been already stripped out | COMMENT |
| LOW | drivers/bus/acpi_new/uacpi/source/uacpi.c | 659 | // Step 1 - Execute \_INI | COMMENT |
| LOW | drivers/bus/acpi_new/uacpi/source/uacpi.c | 662 | // Step 2 - Execute \_SB._INI | COMMENT |
| LOW | drivers/bus/acpi_new/uacpi/source/uacpi.c | 683 | // Step 4 - Run all other _STA and _INI methods | COMMENT |
| LOW | drivers/filesystems/udfs/flush.cpp | 528 | // NOTE: This function may also be invoked internally as part of | COMMENT |
| LOW | …ib/drivers/wdf/shared/support/fxresourcecollection.cpp | 392 | // NOTE: This function assumes all resources are on the same bus | COMMENT |
| LOW⚡ | sdk/lib/3rdparty/symcrypt/lib/dlgroup.c | 1767 | // Step 3: Acceptable pairs of L,N => skipped | COMMENT |
| LOW⚡ | sdk/lib/3rdparty/symcrypt/lib/dlgroup.c | 1769 | // Step 6: nBitsOfSeed < nBitsOfQ => skipped | COMMENT |
| LOW⚡ | sdk/lib/3rdparty/symcrypt/lib/dlgroup.c | 1857 | // Step 2: Verify that 2<= G <= p-1 | COMMENT |
| LOW⚡ | sdk/lib/3rdparty/symcrypt/lib/dlgroup.c | 1866 | // Step 3: Verify that G^Q == 1 | COMMENT |
| LOW | ntoskrnl/io/pnpmgr/devaction.c | 1108 | // Step 1: Write the DeviceDesc value if does not exist | COMMENT |
| LOW | ntoskrnl/io/pnpmgr/devaction.c | 1157 | // Step 2: LocaltionInformation is overwritten unconditionally | COMMENT |
| LOW | base/setup/lib/utils/partlist.c | 3336 | // Step 1 : Check the system disk. | COMMENT |
| LOW | base/setup/lib/utils/partlist.c | 3456 | // Step 2 : No active partition found: Check the alternative disk if specified. | COMMENT |
| LOW | base/services/umpnpmgr/install.c | 534 | // Step 1: install all drivers which were configured during the boot | COMMENT |
| LOW | base/services/umpnpmgr/install.c | 581 | // Step 2: start the wait-loop for newly added devices | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | CONTRIBUTING.md | 80 | ### AI-generated communication | COMMENT |
| HIGH | drivers/storage/class/sfloppy/floppy.c | 3061 | // If we don't get as much data as requested, it is not an error. | COMMENT |
| HIGH | ntoskrnl/mm/ARM3/virtual.c | 5080 | // And now write the invalid demand-zero PTE as requested | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | sdk/include/c++/stlport/stl/_iosfwd.h | 18 | // In this implementation, the declarations in <iosfwd> contain default | COMMENT |
| HIGH | sdk/include/c++/stlport/stl/_sstream.c | 257 | // defined, except that setbuf(0, 0) has no effect. In this implementation, | COMMENT |
| HIGH | sdk/include/c++/stlport/stl/_bitset.h | 33 | // In this implementation the const version of operator[] is equivalent | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | drivers/network/tcpip/lwip/codespell_changed_files.sh | 6 | # This file is subject to the terms and conditions of the GNU Lesser | COMMENT |
| MEDIUM | drivers/network/tcpip/lwip/codespell_check.sh | 5 | # This file is subject to the terms and conditions of the GNU Lesser | COMMENT |
| MEDIUM | boot/remaster.sh | 157 | ## Create a mkisofs sort file to specify an explicit ordering for the boot files | COMMENT |
| MEDIUM | modules/rosapps/applications/net/ncftp/ncftp/pref.c | 715 | (void) fprintf(fp, "%s", "# NcFTP 3 preferences file\n# This file is loaded and overwritten each time NcFTP is run.\n# | CODE |
| MEDIUM | …les/rosapps/applications/devutils/btrfstools/crc32c.py | 3 | # This file is part of the python-btrfs module. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | sdk/tools/check_packing.py | 34 | CODE | |
| LOW | sdk/tools/gen_baseaddress.py | 392 | CODE | |
| LOW | sdk/tools/update_caroots.py | 81 | CODE | |
| LOW | sdk/tools/winesync/winesync.py | 128 | CODE | |
| LOW | …lib/3rdparty/symcrypt/scripts/symcryptasm_processor.py | 896 | CODE | |
| LOW | …lib/3rdparty/symcrypt/scripts/symcryptasm_processor.py | 1261 | CODE | |
| LOW | …lib/3rdparty/symcrypt/scripts/symcryptasm_processor.py | 1101 | CODE | |
| LOW | …lib/3rdparty/symcrypt/scripts/symcryptasm_processor.py | 1122 | CODE | |
| LOW | …lib/3rdparty/symcrypt/scripts/symcryptasm_processor.py | 1180 | CODE | |
| LOW | …s/applications/devutils/btrfstools/btrfs_structures.py | 921 | CODE | |
| LOW | …s/applications/devutils/btrfstools/btrfs_structures.py | 1160 | CODE | |
| LOW | …s/applications/devutils/btrfstools/btrfs_structures.py | 1252 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | sdk/tools/gen_baseaddress.py | 8 | CODE | |
| LOW | sdk/tools/gen_baseaddress.py | 8 | CODE | |
| LOW | sdk/tools/gen_baseaddress.py | 8 | CODE | |
| LOW | sdk/tools/winesync/winesync.py | 3 | CODE | |
| LOW | sdk/tools/winesync/winesync.py | 9 | CODE | |
| LOW | …s/applications/devutils/btrfstools/btrfs_playground.py | 6 | CODE | |
| LOW | …s/applications/devutils/btrfstools/btrfs_structures.py | 8 | CODE | |
| LOW | …s/applications/devutils/btrfstools/btrfs_structures.py | 14 | CODE | |
| LOW | …s/applications/devutils/btrfstools/btrfs_structures.py | 16 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | drivers/bus/acpi_new/uacpi/include/uacpi/tables.h | 163 | typedef uacpi_table_installation_disposition (*uacpi_table_installation_handler) | CODE |
| LOW | sdk/tools/winesync/winesync.py | 13 | def string_to_valid_file_name(to_convert): | CODE |
| LOW | sdk/tools/winesync/winesync.py | 63 | def create_or_checkout_wine_branch(self, wine_tag, wine_staging_tag): | CODE |
| LOW | …lib/3rdparty/symcrypt/scripts/symcryptasm_processor.py | 264 | def get_mul_mapping_from_normal_mapping(mapping, argument_registers): | CODE |
| LOW | …lib/3rdparty/symcrypt/scripts/symcryptasm_processor.py | 868 | def gen_function_start_defines(architecture, mapping, arg_count, reg_count): | CODE |
| LOW | dll/win32/ole32/clipboard.c | 1659 | * function IsClipboardFormatAvailable() otherwise. | COMMENT |
| LOW | modules/rosapps/applications/net/netreg/netreg.cpp | 42 | class RequestHandler { | CODE |
| LOW | modules/rostests/winetests/mshtml/events.html | 29 | function ondataavailableDocHandler() { | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | sdk/tools/winesync/winesync.py | 297 | print(f'Error while reverting patch {patch_file_name}') | CODE |
| MEDIUM | modules/rostests/apitests/crt/gen_math_tests.py | 287 | print(f"Error: Unsupported function '{function_name}'. Available tables: {', '.join(TABLE_FUNCTIONS.keys())}") | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | boot/remaster.sh | 51 | ## Usage example: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | sdk/lib/3rdparty/symcrypt/lib/sha256-xmm.c | 37 | // TODO: implement _rorx functions for clang | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | modules/rostests/apitests/crt/gen_math_tests.py | 282 | # Check if the table name is valid | COMMENT |