WebAssembly Micro Runtime (WAMR)
This report summarizes scanner evidence for wasm-micro-runtime/wasm-micro-runtime, a C project with 6,180 GitHub stars. SynthScan examined 323,475 lines of code across 1258 source files, recording 895 pattern matches distributed across 17 syntactic categories. The legacy adjusted pattern signal is 3.2 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.
Can maintainers explain intent, assumptions, and trade-offs? 815 finding(s).
Are imports declared and package/API names verified? 34 finding(s).
Are wrappers, guards, and repeated structures necessary? 390 finding(s).
Which changes need focused human review? 895 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 895 distinct pattern matches across 17 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | core/config.h | 41 | #define BUILD_TARGET_AARCH64 | COMMENT |
| LOW | core/config.h | 61 | #define BUILD_TARGET_RISCV32_ILP32D | COMMENT |
| LOW | core/config.h | 81 | #endif | COMMENT |
| LOW | core/config.h | 101 | COMMENT | |
| LOW | core/config.h | 121 | #error "WASM_ORC_JIT_COMPILE_THREAD_NUM must be greater than 0" | COMMENT |
| LOW | core/config.h | 141 | #ifndef FAST_JIT_DEFAULT_CODE_CACHE_SIZE | COMMENT |
| LOW | core/config.h | 161 | #ifndef WASM_ENABLE_WASI_NN | COMMENT |
| LOW | core/config.h | 181 | COMMENT | |
| LOW | core/config.h | 201 | && WASM_ENABLE_LIB_WASI_THREADS == 1 | COMMENT |
| LOW | core/config.h | 221 | /* Bulk memory operation */ | COMMENT |
| LOW | core/config.h | 241 | #ifndef WASM_ENABLE_DEBUG_INTERP | COMMENT |
| LOW | core/config.h | 281 | || defined(BUILD_TARGET_AARCH64) | COMMENT |
| LOW | core/config.h | 301 | COMMENT | |
| LOW | core/config.h | 321 | /* Disable boundary check with hardware trap or not, | COMMENT |
| LOW | core/config.h | 341 | #endif | COMMENT |
| LOW | core/config.h | 361 | #define WASM_ENABLE_MEMORY_PROFILING 0 | COMMENT |
| LOW | core/config.h | 381 | #define WASM_ENABLE_AOT_STACK_FRAME 0 | COMMENT |
| LOW | core/config.h | 401 | #define WASM_ENABLE_GLOBAL_HEAP_POOL 0 | COMMENT |
| LOW | core/config.h | 421 | COMMENT | |
| LOW | core/config.h | 441 | #define GC_HEAP_SIZE_MAX (1024 * 1024 * 1024) | COMMENT |
| LOW | core/config.h | 461 | #define APP_THREAD_STACK_SIZE_MIN PTHREAD_STACK_MIN | COMMENT |
| LOW | core/config.h | 561 | #else | COMMENT |
| LOW | core/config.h | 581 | #endif | COMMENT |
| LOW | core/config.h | 601 | #ifndef WASM_ENABLE_REF_TYPES | COMMENT |
| LOW | core/config.h | 621 | #define WASM_CONST_EXPR_STACK_SIZE 4 | COMMENT |
| LOW | core/config.h | 641 | #ifndef WASM_ENABLE_TAGS | COMMENT |
| LOW | core/config.h | 721 | COMMENT | |
| LOW | core/config.h | 741 | /* In oss-fuzz, the maximum RAM is ~2.5G */ | COMMENT |
| LOW | core/config.h | 761 | COMMENT | |
| LOW | core/iwasm/interpreter/wasm_runtime.h | 1 | /* | COMMENT |
| LOW | core/iwasm/interpreter/wasm_mini_loader.c | 1 | /* | COMMENT |
| LOW | core/iwasm/interpreter/wasm_mini_loader.c | 2401 | #if WASM_ENABLE_THREAD_MGR != 0 | COMMENT |
| LOW | core/iwasm/interpreter/wasm_mini_loader.c | 4201 | #define REF_F64_2 VALUE_TYPE_F64 | COMMENT |
| LOW | core/iwasm/interpreter/wasm_loader.c | 1 | /* | COMMENT |
| LOW | core/iwasm/interpreter/wasm_loader.c | 21 | #if WASM_ENABLE_FAST_JIT != 0 | COMMENT |
| LOW | core/iwasm/interpreter/wasm_loader.c | 141 | #define skip_leb_int32(p, p_end) skip_leb(p) | COMMENT |
| LOW | core/iwasm/interpreter/wasm_loader.c | 5941 | option.enable_bulk_memory = true; | COMMENT |
| LOW | core/iwasm/interpreter/wasm_loader.c | 10441 | #define PUSH_REF(Type) TEMPLATE_PUSH_REF(Type) | COMMENT |
| LOW | core/iwasm/interpreter/wasm_loader.c | 11761 | COMMENT | |
| LOW | core/iwasm/interpreter/wasm_interp_fast.c | 1 | /* | COMMENT |
| LOW | core/iwasm/interpreter/wasm.h | 21 | #define VALUE_TYPE_I32 0x7F | COMMENT |
| LOW | core/iwasm/interpreter/wasm.h | 41 | #define REF_TYPE_EQREF 0x6D | COMMENT |
| LOW | core/iwasm/interpreter/wasm.h | 61 | #define HEAP_TYPE_STRUCT (-0x15) | COMMENT |
| LOW | core/iwasm/interpreter/wasm.h | 121 | COMMENT | |
| LOW | core/iwasm/interpreter/wasm.h | 141 | #define INIT_EXPR_TYPE_I64_ADD 0x7C | COMMENT |
| LOW | core/iwasm/interpreter/wasm.h | 161 | #define SECTION_TYPE_FUNC 3 | COMMENT |
| LOW | core/iwasm/interpreter/wasm.h | 181 | #define SUB_SECTION_TYPE_FUNC 1 | COMMENT |
| LOW | core/iwasm/interpreter/wasm.h | 201 | #define LABEL_TYPE_LOOP 1 | COMMENT |
| LOW | core/iwasm/interpreter/wasm_runtime.c | 1 | /* | COMMENT |
| LOW | core/iwasm/interpreter/wasm_runtime.c | 21 | #if WASM_ENABLE_THREAD_MGR != 0 | COMMENT |
| LOW | core/iwasm/interpreter/wasm_interp_classic.c | 1 | /* | COMMENT |
| LOW | core/iwasm/interpreter/wasm_interp_classic.c | 21 | #include "../common/wasm_shared_memory.h" | COMMENT |
| LOW | core/iwasm/interpreter/wasm_interp_classic.c | 561 | #define POP_F64() (frame_sp -= 2, GET_F64_FROM_ADDR(frame_sp)) | COMMENT |
| LOW | core/iwasm/include/wasm_export.h | 21 | #if defined(COMPILING_WASM_RUNTIME_API) | COMMENT |
| LOW | core/iwasm/include/wasm_c_api.h | 1 | // WebAssembly C API | COMMENT |
| LOW | core/iwasm/include/wasm_c_api.h | 21 | #define WASM_API_EXTERN __declspec(dllexport) | COMMENT |
| LOW | core/iwasm/include/wasm_c_api.h | 61 | typedef char byte_t; | COMMENT |
| LOW | core/iwasm/include/wasm_c_api.h | 81 | // Own data is created by `wasm_xxx_new` functions and some others. | COMMENT |
| LOW | core/iwasm/include/wasm_c_api.h | 881 | COMMENT | |
| LOW | core/iwasm/libraries/libc-uvwasi/libc_uvwasi_wrapper.c | 21 | wasm_runtime_addr_app_to_native(module_inst, offset) | COMMENT |
| 340 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | core/iwasm/libraries/wasi-nn/test/run_smoke_test.py | 48 | def execute_openvino_road_segmentation_adas_once( | CODE |
| LOW | core/iwasm/libraries/wasi-nn/test/run_smoke_test.py | 66 | def execute_openvino_mobilenet_raw_once( | CODE |
| LOW | core/iwasm/libraries/wasi-nn/test/run_smoke_test.py | 82 | def execute_openvino_mobilenet_image_once( | CODE |
| LOW | core/iwasm/libraries/wasi-nn/test/run_smoke_test.py | 180 | def execute_openvino_mobilenet_image(iwasm_bin: str, wasmedge_bin: str, cwd: Path): | CODE |
| LOW | core/iwasm/libraries/wasi-nn/test/run_smoke_test.py | 198 | def execute_openvino_mobilenet_raw(iwasm_bin: str, wasmedge_bin: str, cwd: Path): | CODE |
| LOW | core/iwasm/libraries/wasi-nn/test/run_smoke_test.py | 216 | def execute_openvino_road_segmentation_adas( | CODE |
| LOW | core/iwasm/libraries/wasi-nn/test/run_smoke_test.py | 263 | def execute_wasmedge_ggml_qwen(iwasm_bin: str, wasmedge_bin: str, cwd: Path): | CODE |
| LOW | core/iwasm/libraries/wasi-nn/test/run_smoke_test.py | 320 | def execute_wasmedge_wasinn_examples(iwasm_bin: str, wasmedge_bin: str): | CODE |
| LOW | ci/clang_tidy_diff_check.py | 144 | def generate_preset_compile_commands(root: Path, preset: str) -> str: | CODE |
| LOW | ci/clang_tidy_diff_check.py | 185 | def generate_wamrc_compile_commands(root: Path) -> str: | CODE |
| LOW | ci/clang_tidy_diff_check.py | 259 | def normalize_compile_db_file(root: Path, entry: dict) -> Path: | CODE |
| LOW | ci/coding_guidelines_check.py | 202 | def has_license_header_in_index(root: Path, path: str) -> bool: | CODE |
| LOW | ci/coding_guidelines_check.py | 285 | def analysis_new_item_license(root: Path, commits: str) -> bool: | CODE |
| LOW | ci/coding_guidelines_check.py | 325 | def analysis_staged_new_item_name(root: Path) -> bool: | CODE |
| LOW | ci/coding_guidelines_check.py | 345 | def analysis_staged_new_item_license(root: Path) -> bool: | CODE |
| LOW | ci/coding_guidelines_check.py | 367 | def check_clang_format_config(root: Path) -> bool: | CODE |
| LOW | ci/coding_guidelines_check.py | 378 | def run_staged_clang_format_diff(root: Path) -> bool: | CODE |
| LOW⚡ | ci/coding_guidelines_check.py | 530 | def test_check_dir_name_failed(self): | CODE |
| LOW⚡ | ci/coding_guidelines_check.py | 540 | def test_check_file_name_failed(self): | CODE |
| LOW⚡ | ci/coding_guidelines_check.py | 546 | def test_check_file_name_pass(self): | CODE |
| LOW⚡ | ci/coding_guidelines_check.py | 552 | def test_check_docs_file_name_failed(self): | CODE |
| LOW⚡ | ci/coding_guidelines_check.py | 556 | def test_needs_license_header(self): | CODE |
| LOW⚡ | ci/coding_guidelines_check.py | 561 | def test_has_license_header_pass(self): | CODE |
| LOW⚡ | ci/coding_guidelines_check.py | 567 | def test_has_license_header_failed(self): | CODE |
| LOW | tests/wamr-test-suites/spec-test-script/runtest.py | 417 | def get_module_exp_from_assert(string): | CODE |
| LOW | tests/wamr-test-suites/spec-test-script/runtest.py | 517 | def parse_simple_const_w_type(number, type): | CODE |
| LOW | tests/wamr-test-suites/spec-test-script/runtest.py | 1040 | def test_assert_wasmexception(r,opts,form): | CODE |
| LOW | tests/wamr-test-suites/spec-test-script/runtest.py | 1275 | def test_assert_with_exception(form, wast_tempfile, wasm_tempfile, aot_tempfile, opts, r, loadable = True): | CODE |
| LOW | …requirement-engineering-test-script/run_requirement.py | 20 | def expected_build_func_template(verbose: bool) -> None: | CODE |
| LOW | …requirement-engineering-test-script/run_requirement.py | 27 | def expected_run_func_template( | CODE |
| LOW | tests/regression/ba-issues/build_run.py | 161 | def get_issue_ids_should_test(selected_ids: Optional[List[int]] = None) -> Set[int]: | CODE |
| LOW | tests/requirement-engineering/gc-aot/runtest.py | 398 | def get_module_exp_from_assert(string): | CODE |
| LOW | tests/requirement-engineering/gc-aot/runtest.py | 512 | def parse_simple_const_w_type(number, type): | CODE |
| LOW | tests/requirement-engineering/gc-aot/runtest.py | 1262 | def test_assert_with_exception(form, wast_tempfile, wasm_tempfile, aot_tempfile, opts, r, loadable=True): | CODE |
| LOW | …duct-mini/platforms/zephyr/tests/test_build_and_run.py | 22 | def test_smoke_job_collects_native_coverage_and_runs_qemu_arc(self): | CODE |
| LOW | …duct-mini/platforms/zephyr/tests/test_build_and_run.py | 39 | def test_help_describes_sample_and_test_roots(self): | CODE |
| LOW⚡ | …duct-mini/platforms/zephyr/tests/test_build_and_run.py | 51 | def test_resolves_existing_sample(self): | CODE |
| LOW⚡ | …duct-mini/platforms/zephyr/tests/test_build_and_run.py | 54 | def test_resolves_nested_test_application(self): | CODE |
| LOW⚡ | …duct-mini/platforms/zephyr/tests/test_build_and_run.py | 60 | def test_resolves_no_root_to_all_of_them(self): | CODE |
| LOW⚡ | …duct-mini/platforms/zephyr/tests/test_build_and_run.py | 67 | def test_rejects_parent_traversal(self): | CODE |
| LOW | …duct-mini/platforms/zephyr/tests/test_build_and_run.py | 83 | def test_no_docker_paths_remain_single_shell_arguments(self): | CODE |
| LOW | …duct-mini/platforms/zephyr/tests/test_build_and_run.py | 109 | def test_docker_coverage_uses_container_paths(self): | CODE |
| LOW | …duct-mini/platforms/zephyr/tests/test_build_and_run.py | 124 | def test_coverage_uses_a_separate_output_tree(self): | CODE |
| LOW | test-tools/addr2line/addr2line.py | 108 | def build_subprogram_intervals(dwarf_dump: Path, wasm_file: Path) -> list: | CODE |
| LOW | test-tools/addr2line/addr2line.py | 372 | def get_line_info_from_function_name_dwarf( | CODE |
| LOW | test-tools/addr2line/addr2line.py | 447 | def get_line_info_from_function_addr_sourcemapping( | CODE |
| LOW | test-tools/addr2line/tests/test_addr2line.py | 139 | def test_multi_frame_callstack(build_wasm, wabt, run_addr2line, wasi_sdk): | CODE |
| LOW | test-tools/addr2line/tests/test_addr2line.py | 243 | def test_offset_zero_fallback(build_wasm, run_addr2line): | CODE |
| LOW | test-tools/addr2line/tests/test_addr2line.py | 264 | def test_build_subprogram_intervals_filters_invalid_dies( | CODE |
| LOW | test-tools/ip2function/ip2function.py | 74 | def parse_objdump_function_line( | CODE |
| LOW | …-ide/VSCode-Extension/src/utilities/dockerUtilities.ts | 115 | function getDockerImagesDownloadUrl( | CODE |
| LOW | test-tools/append-aot-to-wasm/append_aot_to_wasm.py | 88 | def create_custom_section_aligned( | CODE |
| LOW | test-tools/flame-graph-helper/process_folded_data.py | 50 | def calculate_import_function_count( | CODE |
| LOW | test-tools/flame-graph-helper/process_folded_data.py | 99 | def collect_name_section_content( | CODE |
| LOW | .github/scripts/fetch_and_compare_version.py | 92 | def is_major_or_minor_changed(v1, v2): | CODE |
| LOW | .github/scripts/codeql_fail_on_error.py | 57 | def codeql_sarif_contain_error(filename, dismissed_alerts): | CODE |
| LOW⚡ | .github/scripts/ci_gate_decision_test.py | 134 | def test_upstream_push_does_not_run(self): | CODE |
| LOW⚡ | .github/scripts/ci_gate_decision_test.py | 139 | def test_other_events_always_run(self): | CODE |
| LOW⚡ | .github/scripts/ci_gate_decision_test.py | 146 | def test_review_comment_waits_when_current_state_is_not_approved(self): | CODE |
| LOW⚡ | .github/scripts/ci_gate_decision_test.py | 153 | def test_approval_event_waits_when_current_state_is_not_approved(self): | CODE |
| 279 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH⚡ | tests/wamr-test-suites/spec-test-script/runtest.py | 955 | # convert (ref.null extern/func) into (ref.null null) | COMMENT |
| HIGH⚡ | tests/wamr-test-suites/spec-test-script/runtest.py | 983 | # convert (ref.null extern/func) into (ref.null null) | COMMENT |
| HIGH⚡ | tests/wamr-test-suites/spec-test-script/runtest.py | 956 | n1 = n.group(3).replace("(ref.null extern)", "(ref.null null)") | CODE |
| HIGH⚡ | tests/wamr-test-suites/spec-test-script/runtest.py | 957 | n1 = n1.replace("ref.null func)", "(ref.null null)") | CODE |
| HIGH⚡ | tests/wamr-test-suites/spec-test-script/runtest.py | 984 | m1 = m.group(2).replace("(ref.null extern)", "(ref.null null)") | CODE |
| HIGH⚡ | tests/wamr-test-suites/spec-test-script/runtest.py | 985 | m1 = m1.replace("ref.null func)", "(ref.null null)") | CODE |
| HIGH⚡ | tests/requirement-engineering/gc-aot/runtest.py | 981 | # convert (ref.null extern/func) into (ref.null null) | COMMENT |
| HIGH⚡ | tests/requirement-engineering/gc-aot/runtest.py | 1016 | # convert (ref.null extern/func) into (ref.null null) | COMMENT |
| HIGH⚡ | tests/requirement-engineering/gc-aot/runtest.py | 982 | n1 = n.group(3).replace("(ref.null extern)", "(ref.null null)") | CODE |
| HIGH⚡ | tests/requirement-engineering/gc-aot/runtest.py | 983 | n1 = n1.replace("ref.null func)", "(ref.null null)") | CODE |
| HIGH⚡ | tests/requirement-engineering/gc-aot/runtest.py | 1017 | m1 = m.group(2).replace("(ref.null extern)", "(ref.null null)") | CODE |
| HIGH⚡ | tests/requirement-engineering/gc-aot/runtest.py | 1018 | m1 = m1.replace("ref.null func)", "(ref.null null)") | CODE |
| HIGH | .github/scripts/ci_gate_decision_test.py | 6 | cd .github/scripts && python3 -m unittest ci_gate_decision_test -v | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | tests/regression/ba-issues/build_run.py | 121 | # --------------------------------------------------------------------------- | STRING |
| MEDIUM | tests/regression/ba-issues/build_run.py | 123 | # --------------------------------------------------------------------------- | STRING |
| MEDIUM | tests/regression/ba-issues/build_run.py | 146 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tests/regression/ba-issues/build_run.py | 148 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tests/regression/ba-issues/build_run.py | 176 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tests/regression/ba-issues/build_run.py | 178 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tests/regression/ba-issues/build_run.py | 286 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tests/regression/ba-issues/build_run.py | 288 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tests/regression/ba-issues/build_run.py | 478 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tests/regression/ba-issues/build_run.py | 480 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | samples/debug-tools-optimized/verify.py | 10 | # ------------ | COMMENT |
| MEDIUM | samples/debug-tools-optimized/verify.py | 18 | # ----------- | COMMENT |
| MEDIUM | samples/debug-tools/verify.py | 9 | # ------------ | COMMENT |
| MEDIUM | samples/debug-tools/verify.py | 17 | # ----------- | COMMENT |
| MEDIUM | samples/socket-api/socket_test.py | 9 | # ------------ | COMMENT |
| MEDIUM | samples/socket-api/socket_test.py | 17 | # ----------- | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | ci/clang_tidy_diff_check.py | 285 | CODE | |
| LOW | ci/clang_tidy_diff_check.py | 466 | CODE | |
| LOW | tests/wamr-test-suites/spec-test-script/runtest.py | 369 | CODE | |
| LOW | tests/wamr-test-suites/spec-test-script/runtest.py | 417 | CODE | |
| LOW | tests/wamr-test-suites/spec-test-script/runtest.py | 446 | CODE | |
| LOW | tests/wamr-test-suites/spec-test-script/runtest.py | 471 | CODE | |
| LOW | tests/wamr-test-suites/spec-test-script/runtest.py | 517 | CODE | |
| LOW | tests/wamr-test-suites/spec-test-script/runtest.py | 691 | CODE | |
| LOW | tests/wamr-test-suites/spec-test-script/runtest.py | 818 | CODE | |
| LOW | tests/wamr-test-suites/spec-test-script/runtest.py | 963 | CODE | |
| LOW | tests/wamr-test-suites/spec-test-script/runtest.py | 1103 | CODE | |
| LOW | tests/wamr-test-suites/spec-test-script/runtest.py | 1195 | CODE | |
| LOW | tests/wamr-test-suites/spec-test-script/all.py | 161 | CODE | |
| LOW | tests/wamr-test-suites/spec-test-script/all.py | 298 | CODE | |
| LOW | tests/regression/ba-issues/build_run.py | 406 | CODE | |
| LOW | tests/requirement-engineering/gc-aot/runtest.py | 345 | CODE | |
| LOW | tests/requirement-engineering/gc-aot/runtest.py | 398 | CODE | |
| LOW | tests/requirement-engineering/gc-aot/runtest.py | 430 | CODE | |
| LOW | tests/requirement-engineering/gc-aot/runtest.py | 458 | CODE | |
| LOW | tests/requirement-engineering/gc-aot/runtest.py | 512 | CODE | |
| LOW | tests/requirement-engineering/gc-aot/runtest.py | 700 | CODE | |
| LOW | tests/requirement-engineering/gc-aot/runtest.py | 828 | CODE | |
| LOW | tests/requirement-engineering/gc-aot/runtest.py | 992 | CODE | |
| LOW | tests/requirement-engineering/gc-aot/runtest.py | 1201 | CODE | |
| LOW | test-tools/pick-up-emscripten-headers/collect_files.py | 76 | CODE | |
| LOW | test-tools/dynamic-aot-debug/dynamic_aot_debug.py | 60 | CODE | |
| LOW | test-tools/addr2line/addr2line.py | 545 | CODE | |
| LOW | test-tools/wamr-ide/VSCode-Extension/formatters/rust.py | 144 | CODE | |
| LOW | test-tools/flame-graph-helper/process_folded_data.py | 160 | CODE | |
| LOW | .github/scripts/pr_touches_paths.py | 18 | CODE | |
| LOW | .github/scripts/extract_from_release_notes.py | 17 | CODE | |
| LOW | .github/scripts/codeql_fail_on_error.py | 57 | CODE | |
| LOW | language-bindings/python/wasm-c-api/utils/bindgen.py | 92 | CODE | |
| LOW | language-bindings/python/src/wamr/wasmcapi/ffi.py | 170 | CODE | |
| LOW | language-bindings/python/src/wamr/wasmcapi/ffi.py | 294 | CODE | |
| LOW | language-bindings/python/src/wamr/wasmcapi/ffi.py | 322 | CODE | |
| LOW | language-bindings/python/src/wamr/wasmcapi/ffi.py | 394 | CODE | |
| LOW | language-bindings/python/src/wamr/wasmcapi/ffi.py | 415 | CODE | |
| LOW | language-bindings/python/src/wamr/wasmcapi/ffi.py | 516 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | tests/unit/aot-stack-frame/wasm-apps/CMakeLists.txt | 20 | # Step 1: Build wamrc | COMMENT |
| LOW⚡ | tests/unit/aot-stack-frame/wasm-apps/CMakeLists.txt | 25 | # Step 2: Compile .wast to .wasm | COMMENT |
| LOW⚡ | tests/unit/aot-stack-frame/wasm-apps/CMakeLists.txt | 29 | # Step 3: Compile .wasm to .aot using wamrc | COMMENT |
| LOW⚡ | tests/unit/aot-stack-frame/wasm-apps/CMakeLists.txt | 33 | # Step 4: Build binarydump tool | COMMENT |
| LOW⚡ | tests/unit/aot-stack-frame/wasm-apps/CMakeLists.txt | 38 | # Step 5: Generate .h file from .aot | COMMENT |
| LOW | doc/export_native_api.md | 10 | #### Step 1: Declare the function interface in WASM app | COMMENT |
| LOW | doc/export_native_api.md | 23 | #### Step 2: Define the native API | COMMENT |
| LOW | doc/export_native_api.md | 45 | #### Step 3: Register the native APIs | COMMENT |
| LOW⚡ | doc/security_issue_runbook.md | 7 | ## Step 1: Initial Response to Security Advisory | COMMENT |
| LOW⚡ | doc/security_issue_runbook.md | 12 | ## Step 2: Investigating the Vulnerability | COMMENT |
| LOW⚡ | doc/security_issue_runbook.md | 17 | ## Step 3: Communication and Collaboration | COMMENT |
| LOW⚡ | doc/security_issue_runbook.md | 23 | ## Step 4: Finalizing and Preparing for Release | COMMENT |
| LOW | doc/security_issue_runbook.md | 39 | ## Step 5: Preparing and Testing Patch Releases | COMMENT |
| LOW | doc/security_issue_runbook.md | 44 | ## Step 6: Public Release and Communication | COMMENT |
| LOW | doc/port_wamr.md | 10 | # Step 1: Implement platform API layer | COMMENT |
| LOW | doc/port_wamr.md | 46 | # Step 2: Create the mini product for the platform | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/wamr-test-suites/spec-test-script/runtest.py | 191 | except Exception as e: | CODE |
| LOW | tests/wamr-test-suites/spec-test-script/runtest.py | 1132 | except Exception as e: | CODE |
| LOW | tests/wamr-test-suites/spec-test-script/runtest.py | 1555 | except Exception as e: | CODE |
| LOW | tests/wamr-test-suites/spec-test-script/runtest.py | 1561 | except Exception as e: | CODE |
| LOW | tests/wamr-test-suites/spec-test-script/runtest.py | 1577 | except Exception as e: | CODE |
| LOW | tests/wamr-test-suites/spec-test-script/runtest.py | 1600 | except Exception as e: | CODE |
| LOW | tests/wamr-test-suites/spec-test-script/all.py | 294 | except Exception as e: | CODE |
| LOW | tests/wamr-test-suites/spec-test-script/all.py | 446 | except Exception as e: | CODE |
| LOW | tests/wamr-test-suites/spec-test-script/all.py | 676 | except Exception: | CODE |
| LOW | tests/regression/ba-issues/build_run.py | 568 | except Exception as exc: | CODE |
| LOW | tests/requirement-engineering/gc-aot/runtest.py | 1547 | except Exception as e: | CODE |
| MEDIUM | test-tools/dynamic-aot-debug/dynamic_aot_debug.py | 25 | print("Error: 'code' or 'name' missing in AOT module info.") | CODE |
| LOW | test-tools/dynamic-aot-debug/dynamic_aot_debug.py | 50 | except Exception as e: | CODE |
| MEDIUM | test-tools/dynamic-aot-debug/dynamic_aot_debug.py | 90 | print(f"An error occurred: {e}") | CODE |
| LOW | test-tools/wamr-ide/VSCode-Extension/formatters/rust.py | 112 | except Exception as e: | CODE |
| LOW | test-tools/wamr-ide/VSCode-Extension/formatters/rust.py | 227 | except Exception as e: | CODE |
| LOW | test-tools/wamr-ide/VSCode-Extension/formatters/rust.py | 258 | except Exception as e: | CODE |
| LOW | test-tools/wamr-ide/VSCode-Extension/formatters/rust.py | 313 | except Exception as e: | CODE |
| MEDIUM | test-tools/wamr-ide/VSCode-Extension/formatters/rust.py | 107 | def get_synth_summary(synth_class, valobj, dict): | CODE |
| MEDIUM | test-tools/wamr-ide/VSCode-Extension/formatters/rust.py | 252 | def get_child_at_index(self, index): | CODE |
| MEDIUM | test-tools/wamr-ide/VSCode-Extension/formatters/rust.py | 307 | def get_child_at_index(self, index): | CODE |
| LOW | .github/scripts/ci_gate_decision.py | 232 | except Exception as err: # noqa: BLE001 - a gate bug must never block a PR | CODE |
| LOW | .github/scripts/ci_gate_decision.py | 342 | except Exception as err: # any failure means "run", see the module docstring | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | tests/wamr-test-suites/spec-test-script/runtest.py | 244 | except OSError: | CODE |
| HIGH | tests/wamr-test-suites/spec-test-script/runtest.py | 246 | except IOError: | CODE |
| HIGH | tests/requirement-engineering/gc-aot/runtest.py | 231 | except OSError: | CODE |
| HIGH | tests/requirement-engineering/gc-aot/runtest.py | 233 | except IOError: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | core/iwasm/libraries/wasi-nn/test/run_smoke_test.py | 11 | CODE | |
| LOW | tests/wamr-test-suites/spec-test-script/runtest.py | 3 | CODE | |
| LOW | tests/malformed/malformed_test.py | 8 | CODE | |
| LOW | tests/requirement-engineering/gc-aot/runtest.py | 7 | CODE | |
| LOW | test-tools/addr2line/addr2line.py | 7 | CODE | |
| LOW | test-tools/addr2line/tests/conftest.py | 12 | CODE | |
| LOW | test-tools/addr2line/tests/test_addr2line.py | 15 | CODE | |
| LOW | test-tools/addr2line/tests/test_addr2line.py | 16 | CODE | |
| LOW | test-tools/wamr-ide/VSCode-Extension/formatters/rust.py | 6 | CODE | |
| LOW | test-tools/wamr-ide/VSCode-Extension/formatters/rust.py | 6 | CODE | |
| LOW | test-tools/flame-graph-helper/process_folded_data.py | 38 | CODE | |
| LOW | .github/scripts/ci_gate_decision_test.py | 16 | CODE | |
| LOW | language-bindings/python/wasm-c-api/tests/test_basic.py | 13 | CODE | |
| LOW | language-bindings/python/wasm-c-api/tests/test_basic.py | 15 | CODE | |
| LOW | language-bindings/python/wasm-c-api/tests/context.py | 13 | CODE | |
| LOW | …nguage-bindings/python/wasm-c-api/samples/hello_oop.py | 6 | CODE | |
| LOW | …nguage-bindings/python/wasm-c-api/samples/hello_oop.py | 7 | CODE | |
| LOW | language-bindings/python/src/wamr/wamrapi/wamr.py | 4 | CODE | |
| LOW | language-bindings/python/src/wamr/wamrapi/wamr.py | 7 | CODE | |
| LOW | language-bindings/python/src/wamr/wasmcapi/binding.py | 9 | CODE | |
| LOW | language-bindings/python/src/wamr/wasmcapi/ffi.py | 147 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | ci/install_sgx_for_applicaiton_developer.sh | 354 | # Check if everything is already installed | COMMENT |
| LOW | tests/standalone/test-aot-x18-reserve/run.sh | 40 | # Check if required binaries exist | COMMENT |
| LOW | tests/wamr-test-suites/test_wamr.sh | 1190 | # Check if REQUIREMENT_NAME is set, if set, only calling requirement test and early return | COMMENT |
| LOW | …requirement-engineering-test-script/run_requirement.py | 67 | # Check if the variable is a dictionary | COMMENT |
| LOW | tests/regression/ba-issues/helper.sh | 49 | # Check if at least one argument is provided | COMMENT |
| LOW | tests/regression/ba-issues/helper.sh | 67 | # Check if the second argument is greater than the first | COMMENT |
| LOW | test-tools/dynamic-aot-debug/dynamic_aot_debug.py | 70 | # Check if it's a structure type | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | tests/unit/linear-memory-aot/build_aot.sh | 8 | # Define a list of .wasm files | COMMENT |
| MEDIUM | …requirement-engineering-test-script/run_requirement.py | 201 | # Define the subrequirement IDs as a list of integers | COMMENT |
| MEDIUM | tests/requirement-engineering/gc-aot/run.py | 77 | # Create the parser | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | samples/sgx-ra/README.md | 238 | # Configuring the Intel PCCS. Input the PCS/PCCS password as requested. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/standalone/standalone.sh | 13 | # Usage: | COMMENT |
| LOW | test-tools/addr2line/tests/run_tests.sh | 7 | # Usage: | COMMENT |
| LOW | samples/linux-perf/wasm/ackermann.c | 31 | // Example usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/wamr-test-suites/spec-test-script/all.py | 72 | CODE | |
| LOW | tests/wamr-test-suites/spec-test-script/all.py | 161 | CODE | |
| LOW | tests/wamr-test-suites/spec-test-script/all.py | 298 | CODE | |
| LOW | .github/scripts/ci_gate_decision_test.py | 51 | CODE | |
| LOW | language-bindings/python/src/wamr/wasmcapi/ffi.py | 131 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | tests/wamr-test-suites/test_wamr.sh | 690 | # Dec 20, 2024. Use WPT version of test harness for HTML core test conversion (#1859) | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | language-bindings/python/wasm-c-api/tests/__init__.py | 7 | __all__ = ["test_basic", "test_advanced"] | CODE |
| LOW | language-bindings/python/src/wamr/wamrapi/wamr.py | 146 | def _set_wasi_args(self, module: Module, dir_list: List[str]) -> None: | CODE |
| LOW | language-bindings/python/src/wamr/wasmcapi/__init__.py | 7 | __all__ = ["ffi"] | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | core/config.h | 532 | * Note: on platforms with lazy function binding, don't forget to consider | COMMENT |