Zcash - Internet Money
This report summarizes scanner evidence for zcash/zcash, a C++ project with 5,491 GitHub stars. SynthScan examined 311,575 lines of code across 1378 source files, recording 1038 pattern matches distributed across 20 syntactic categories. The legacy adjusted pattern signal is 4.9 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 815 finding(s).
Are imports declared and package/API names verified? 22 finding(s).
Are wrappers, guards, and repeated structures necessary? 268 finding(s).
Which changes need focused human review? 1038 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 1038 distinct pattern matches across 20 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | test/lint/commit-script-check.sh | 1 | #!/bin/sh | COMMENT |
| LOW | test/lint/lint-shell-locale.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | test/lint/lint-all.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | test/lint/lint-shell.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | qa/zcash/smoke_tests.py | 61 | #('4j', False, False), # Send funds from Sprout z-addr to Sapling z-addr | COMMENT |
| LOW | qa/zcash/updatecheck.py | 1 | #!/usr/bin/env python3 | COMMENT |
| LOW | qa/zcash/updatecheck.py | 21 | # This is typically parsed out of the depends/packages/*.mk files. | COMMENT |
| LOW | qa/zcash/create_wallet_200k_utxos.py | 1 | #!/usr/bin/env python3 | COMMENT |
| LOW | qa/zcash/checksec.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | qa/zcash/checksec.sh | 21 | # * Neither the name of Tobias Klein nor the name of trapkit.de may be | COMMENT |
| LOW | qa/zcash/checksec.sh | 41 | # Author : Brian Davis | COMMENT |
| LOW | qa/zcash/wallet-builder/scripts/validate_binaries.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | qa/zcash/wallet-builder/scripts/download_binaries.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | qa/zcash/wallet-builder/scripts/download_binaries.sh | 21 | # | COMMENT |
| LOW | qa/zcash/wallet-builder/scripts/fetch_params.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | qa/zcash/wallet-builder/scripts/fetch_params.sh | 21 | # | COMMENT |
| LOW | qa/zcash/wallet-builder/scripts/build_chain.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | qa/zcash/wallet-builder/scripts/build_chain.sh | 21 | # With no argument it builds every phase. With STOP_AFTER_PHASE it stops after | COMMENT |
| LOW | qa/zcash/wallet-builder/lib/phase_runner.py | 261 | mine_to_height(rpc, next_activation - 1) | COMMENT |
| LOW | qa/zcash/wallet-builder/lib/constants.py | 41 | """Read {phase -> zcashd_version} from config/versions.json.""" | COMMENT |
| LOW | qa/zcash/wallet-builder/lib/constants.py | 81 | # Network Upgrade Definitions | COMMENT |
| LOW | qa/zcash/wallet-builder/lib/constants.py | 501 | # We shield a subset and keep the rest for future NUs. | COMMENT |
| LOW | qa/zcash/wallet-builder/lib/constants.py | 541 | # Old versions (v1.x-v3.x): zcash-{version}-linux64.tar.gz | COMMENT |
| LOW | qa/zcash/wallet-builder/lib/__init__.py | 1 | # zcash-regtest-wallet-builder: library modules for building a Zcash regtest chain | COMMENT |
| LOW | qa/rpc-tests/legacy_chain_supply_abort.py | 1 | #!/usr/bin/env python3 | COMMENT |
| LOW | qa/rpc-tests/mempool_packages.py | 181 | # Now test the case where node1 has a transaction T in its mempool that | COMMENT |
| LOW | qa/rpc-tests/p2p_nu_peer_management.py | 21 | # | COMMENT |
| LOW | qa/rpc-tests/turnstile.py | 1 | #!/usr/bin/env python3 | COMMENT |
| LOW | qa/rpc-tests/decodescript.py | 101 | # OP_NOP2 is also known as OP_CHECKLOCKTIMEVERIFY. | COMMENT |
| LOW | qa/rpc-tests/test-delta-corruption.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | qa/rpc-tests/mempool_spendcoinbase.py | 1 | #!/usr/bin/env python3 | COMMENT |
| LOW | qa/rpc-tests/pruning.py | 1 | #!/usr/bin/env python3 | COMMENT |
| LOW | qa/rpc-tests/pruning.py | 201 | # Verify that we have enough history to reorg back to the fork point | COMMENT |
| LOW | qa/rpc-tests/pruning.py | 281 | # Extend this chain past the PruneAfterHeight | COMMENT |
| LOW | qa/rpc-tests/pruning.py | 301 | # \ \ \ | COMMENT |
| LOW | qa/rpc-tests/pruning.py | 321 | # \ \ | COMMENT |
| LOW | qa/rpc-tests/pruning.py | 341 | print("Test that we can rerequest a block we previously pruned if needed for a reorg") | COMMENT |
| LOW | qa/rpc-tests/p2p_ban_pool_value_out_of_range.py | 61 | start_nodes, | COMMENT |
| LOW | qa/rpc-tests/p2p_ban_pool_value_out_of_range.py | 281 | COMMENT | |
| LOW | qa/rpc-tests/p2p_ban_pool_value_out_of_range.py | 301 | # Reaching an out-of-range *cumulative* pool value at all requires a | COMMENT |
| LOW | qa/rpc-tests/nu5_block_body_poisoning.py | 481 | COMMENT | |
| LOW | qa/rpc-tests/nu5_block_body_poisoning.py | 501 | # the body without permanently marking the sidechain header invalid. | COMMENT |
| LOW | qa/rpc-tests/nu5_block_body_poisoning.py | 561 | # includes a non-coinbase target for the `scriptSig` mutation. | COMMENT |
| LOW | qa/rpc-tests/nu5_block_body_poisoning.py | 581 | # `WriteBlockToDisk`), so there is no body cleanup to verify; the | COMMENT |
| LOW | qa/rpc-tests/nu5_block_body_poisoning.py | 641 | "mined block coincided with our hand-built block" | COMMENT |
| LOW | qa/rpc-tests/nu5_block_body_poisoning.py | 901 | # `BLOCK_FAILED_VALID`; post-fix it remains reusable. | COMMENT |
| LOW | …/rpc-tests/p2p_duplicate_block_clobbers_chain_value.py | 1 | #!/usr/bin/env python3 | COMMENT |
| LOW | …/rpc-tests/p2p_duplicate_block_clobbers_chain_value.py | 21 | # silently disabled the turnstile checks (ZIP 209 for shielded pools and | COMMENT |
| LOW | …/rpc-tests/p2p_duplicate_block_clobbers_chain_value.py | 41 | # | COMMENT |
| LOW | …/rpc-tests/p2p_duplicate_block_clobbers_chain_value.py | 61 | # | COMMENT |
| LOW | …/rpc-tests/p2p_duplicate_block_clobbers_chain_value.py | 281 | assert_pool_monitored(node, 'orchard') | COMMENT |
| LOW | …/rpc-tests/p2p_duplicate_block_clobbers_chain_value.py | 301 | # catch the merkle mismatch) is never reached. Either way, the | COMMENT |
| LOW | …/rpc-tests/p2p_duplicate_block_clobbers_chain_value.py | 341 | # Under the buggy code, the in-memory corruption from Scenario B | COMMENT |
| LOW | …/rpc-tests/p2p_duplicate_block_clobbers_chain_value.py | 361 | # This scenario verifies that the fix prevents the in-memory | COMMENT |
| LOW | …/rpc-tests/p2p_duplicate_block_clobbers_chain_value.py | 381 | # flush its (corrupted, on the buggy code) per-block deltas to | COMMENT |
| LOW | qa/rpc-tests/chain_supply_checkpoint.py | 1 | #!/usr/bin/env python3 | COMMENT |
| LOW | qa/rpc-tests/shielded_balance_accounting_coinbase.py | 1 | #!/usr/bin/env python3 | COMMENT |
| LOW | qa/rpc-tests/addressindex.py | 1 | #!/usr/bin/env python3 | COMMENT |
| LOW | qa/rpc-tests/sapling_v4_value_balance.py | 1 | #!/usr/bin/env python3 | COMMENT |
| LOW | qa/rpc-tests/sapling_v4_value_balance.py | 21 | # the original wire bytes. Zebra rejects such transactions per spec, so the | COMMENT |
| 567 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | qa/zcash/wallet-builder/scripts/validate_binaries.sh | 2 | # ============================================================================= | COMMENT |
| MEDIUM | qa/zcash/wallet-builder/scripts/validate_binaries.sh | 27 | # ============================================================================= | COMMENT |
| MEDIUM | qa/zcash/wallet-builder/scripts/download_binaries.sh | 2 | # ============================================================================= | COMMENT |
| MEDIUM | qa/zcash/wallet-builder/scripts/download_binaries.sh | 29 | # ============================================================================= | COMMENT |
| MEDIUM | qa/zcash/wallet-builder/scripts/fetch_params.sh | 2 | # ============================================================================= | COMMENT |
| MEDIUM | qa/zcash/wallet-builder/scripts/fetch_params.sh | 41 | # ============================================================================= | COMMENT |
| MEDIUM | qa/zcash/wallet-builder/scripts/build_chain.sh | 2 | # ============================================================================= | COMMENT |
| MEDIUM | qa/zcash/wallet-builder/scripts/build_chain.sh | 39 | # ============================================================================= | COMMENT |
| MEDIUM⚡ | qa/zcash/wallet-builder/lib/phase_runner.py | 202 | # --------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | qa/zcash/wallet-builder/lib/phase_runner.py | 204 | # --------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | qa/zcash/wallet-builder/lib/phase_runner.py | 207 | # --------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | qa/zcash/wallet-builder/lib/phase_runner.py | 209 | # --------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | qa/zcash/wallet-builder/lib/phase_runner.py | 215 | # --------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | qa/zcash/wallet-builder/lib/phase_runner.py | 217 | # --------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | qa/zcash/wallet-builder/lib/phase_runner.py | 255 | # --------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | qa/zcash/wallet-builder/lib/phase_runner.py | 257 | # --------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | qa/zcash/wallet-builder/lib/phase_runner.py | 266 | # --------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | qa/zcash/wallet-builder/lib/phase_runner.py | 268 | # --------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | qa/zcash/wallet-builder/lib/phase_runner.py | 271 | # --------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | qa/zcash/wallet-builder/lib/phase_runner.py | 273 | # --------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | qa/zcash/wallet-builder/lib/phase_runner.py | 276 | # --------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | qa/zcash/wallet-builder/lib/phase_runner.py | 278 | # --------------------------------------------------------------- | COMMENT |
| MEDIUM | qa/zcash/wallet-builder/lib/phase_runner.py | 116 | # --------------------------------------------------------------- | COMMENT |
| MEDIUM | qa/zcash/wallet-builder/lib/phase_runner.py | 118 | # --------------------------------------------------------------- | COMMENT |
| MEDIUM | qa/zcash/wallet-builder/lib/phase_runner.py | 181 | # --------------------------------------------------------------- | COMMENT |
| MEDIUM | qa/zcash/wallet-builder/lib/phase_runner.py | 183 | # --------------------------------------------------------------- | COMMENT |
| MEDIUM | qa/zcash/wallet-builder/lib/phase_runner.py | 242 | # --------------------------------------------------------------- | COMMENT |
| MEDIUM | qa/zcash/wallet-builder/lib/phase_runner.py | 244 | # --------------------------------------------------------------- | COMMENT |
| MEDIUM | qa/zcash/wallet-builder/lib/constants.py | 25 | # ===================================================================== | COMMENT |
| MEDIUM | qa/zcash/wallet-builder/lib/constants.py | 27 | # ===================================================================== | COMMENT |
| MEDIUM | qa/zcash/wallet-builder/lib/constants.py | 50 | # ===================================================================== | COMMENT |
| MEDIUM | qa/zcash/wallet-builder/lib/constants.py | 52 | # ===================================================================== | COMMENT |
| MEDIUM | qa/zcash/wallet-builder/lib/constants.py | 63 | # ===================================================================== | COMMENT |
| MEDIUM | qa/zcash/wallet-builder/lib/constants.py | 80 | # ===================================================================== | COMMENT |
| MEDIUM | qa/zcash/wallet-builder/lib/constants.py | 82 | # ===================================================================== | COMMENT |
| MEDIUM | qa/zcash/wallet-builder/lib/constants.py | 94 | # ===================================================================== | COMMENT |
| MEDIUM | qa/zcash/wallet-builder/lib/constants.py | 422 | # ===================================================================== | COMMENT |
| MEDIUM | qa/zcash/wallet-builder/lib/constants.py | 424 | # ===================================================================== | COMMENT |
| MEDIUM | qa/zcash/wallet-builder/lib/constants.py | 475 | # ===================================================================== | COMMENT |
| MEDIUM | qa/zcash/wallet-builder/lib/constants.py | 477 | # ===================================================================== | COMMENT |
| MEDIUM | qa/zcash/wallet-builder/lib/constants.py | 513 | # ===================================================================== | COMMENT |
| MEDIUM | qa/zcash/wallet-builder/lib/constants.py | 515 | # ===================================================================== | COMMENT |
| MEDIUM | qa/zcash/wallet-builder/lib/constants.py | 537 | # ===================================================================== | COMMENT |
| MEDIUM | qa/zcash/wallet-builder/lib/constants.py | 539 | # ===================================================================== | COMMENT |
| MEDIUM⚡ | qa/zcash/wallet-builder/lib/operations.py | 422 | # --------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | qa/zcash/wallet-builder/lib/operations.py | 424 | # --------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | qa/zcash/wallet-builder/lib/operations.py | 435 | # --------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | qa/zcash/wallet-builder/lib/operations.py | 437 | # --------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | qa/zcash/wallet-builder/lib/operations.py | 462 | # --------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | qa/zcash/wallet-builder/lib/operations.py | 464 | # --------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | qa/zcash/wallet-builder/lib/operations.py | 471 | # --------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | qa/zcash/wallet-builder/lib/operations.py | 473 | # --------------------------------------------------------------- | COMMENT |
| MEDIUM | qa/zcash/wallet-builder/lib/operations.py | 387 | # --------------------------------------------------------------- | COMMENT |
| MEDIUM | qa/zcash/wallet-builder/lib/operations.py | 389 | # --------------------------------------------------------------- | COMMENT |
| MEDIUM | qa/zcash/wallet-builder/lib/rpc_client.py | 157 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM | qa/zcash/wallet-builder/lib/rpc_client.py | 159 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | qa/zcash/wallet-builder/lib/rpc_client.py | 205 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | qa/zcash/wallet-builder/lib/rpc_client.py | 207 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM | qa/zcash/wallet-builder/lib/rpc_client.py | 271 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM | qa/zcash/wallet-builder/lib/rpc_client.py | 274 | # ------------------------------------------------------------------ | COMMENT |
| 16 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | qa/zcash/create_wallet_200k_utxos.py | 7 | # Create a large wallet | COMMENT |
| MEDIUM | qa/zcash/wallet-builder/scripts/fetch_params.sh | 65 | # This file is NOT at the usual /downloads/ path -- it's under /zcashfinalmpc/. | COMMENT |
| MEDIUM | qa/zcash/wallet-builder/lib/addresses.py | 126 | # Create a new HD account (or reuse account 0) | COMMENT |
| MEDIUM | qa/pull-tester/rpc-tests.py | 220 | # Create a set to store arguments and create the passon string | COMMENT |
| MEDIUM | qa/rpc-tests/receivedby.py | 156 | # Create a new account named "mynewaccount" that has a 0 balance | COMMENT |
| MEDIUM | qa/rpc-tests/tx_expiry_helper.py | 68 | # The following function is mostly copied from p2p-acceptblock.py | COMMENT |
| MEDIUM | qa/rpc-tests/wallet_listreceived.py | 213 | # Create a unified address on one node, try z_listreceivedbyaddress on another node | COMMENT |
| MEDIUM | qa/rpc-tests/wallet_listreceived.py | 246 | # Create a note in this UA on node1 | COMMENT |
| MEDIUM | qa/rpc-tests/wallet_listreceived.py | 251 | # Create a UTXO that unified_address's transparent component references, on node1 | COMMENT |
| MEDIUM | qa/rpc-tests/maxuploadtarget.py | 150 | # Create a basic transaction that will send change back to ourself after account for a fee | COMMENT |
| MEDIUM | qa/rpc-tests/wallet_zip317_default.py | 41 | # Create an account with funds in the Sapling receiver. | COMMENT |
| MEDIUM | qa/rpc-tests/wallet_orchard_change.py | 48 | # Create an account with funds in the Sapling receiver. | COMMENT |
| MEDIUM | qa/rpc-tests/prioritisetransaction.py | 79 | # Create a tx that will not be accepted to the mempool because it has | COMMENT |
| MEDIUM | qa/rpc-tests/prioritisetransaction.py | 88 | # Create a tx that will not be mined unless prioritised. | COMMENT |
| MEDIUM | qa/rpc-tests/pruning.py | 252 | # Create a basic transaction that will send change back to ourself after account for a fee | COMMENT |
| MEDIUM | qa/rpc-tests/feature_zip221.py | 97 | # Create the initial history tree, containing a single node. | COMMENT |
| MEDIUM | qa/rpc-tests/wallet_doublespend.py | 48 | # Create a note matching recipient_type on node 1 | COMMENT |
| MEDIUM | qa/rpc-tests/wallet_orchard_reindex.py | 50 | # Create a transaction with an Orchard output to advance the Orchard | COMMENT |
| MEDIUM | qa/rpc-tests/wallet_sendmany_any_taddr.py | 37 | # Create the addresses we will be using. | COMMENT |
| MEDIUM | qa/rpc-tests/wallet_sendmany_any_taddr.py | 119 | # Create a transaction that will expire on node 3. | COMMENT |
| MEDIUM | qa/rpc-tests/p2p_txexpiringsoon.py | 195 | # Create a transaction to verify that processing of "getdata" messages is functioning | COMMENT |
| MEDIUM | qa/rpc-tests/orchard_reorg.py | 67 | # Create an Orchard note. | COMMENT |
| MEDIUM | qa/rpc-tests/wallet_listnotes.py | 148 | # Create an Orchard note. | COMMENT |
| MEDIUM | qa/rpc-tests/orchard_action_identity_point.py | 171 | # Create an Orchard-to-Orchard spend to get a transaction with | COMMENT |
| MEDIUM | qa/rpc-tests/mempool_reorg.py | 71 | # Create a block-height-locked transaction which will be invalid after reorg | COMMENT |
| MEDIUM | qa/rpc-tests/soft_fork_disabling_orchard.py | 211 | # Create a non-Orchard transaction in the same half (coinbase -> | COMMENT |
| MEDIUM | qa/rpc-tests/p2p-fullblocktest.py | 63 | # Create a block on top of self.tip, and advance self.tip to point to the new block | COMMENT |
| MEDIUM | qa/rpc-tests/p2p-fullblocktest.py | 146 | # Create a new block | COMMENT |
| MEDIUM | qa/rpc-tests/p2p-fullblocktest.py | 230 | # Create a fork that ends in a block with too much fee (the one that causes the reorg) | COMMENT |
| MEDIUM | qa/rpc-tests/mempool_nu_activation.py | 162 | # Create a shielded Y transaction | COMMENT |
| MEDIUM | qa/rpc-tests/wallet_orchard_init.py | 69 | # Create an Orchard spend, so that the note commitment tree root gets altered. | COMMENT |
| MEDIUM | qa/rpc-tests/wallet.py | 86 | # Create a couple of transactions to send them to node2, submit them through | COMMENT |
| MEDIUM | qa/rpc-tests/wallet.py | 191 | # Create a couple of transactions, then start up a fourth | COMMENT |
| MEDIUM | qa/rpc-tests/test_framework/util.py | 308 | # Create a 200-block-long chain; each of the 4 first nodes | COMMENT |
| MEDIUM | qa/rpc-tests/test_framework/util.py | 644 | # Create an extra change output to break up big inputs | COMMENT |
| MEDIUM | qa/rpc-tests/test_framework/key.py | 5 | # This file is modified from python-bitcoinlib. | COMMENT |
| MEDIUM | qa/rpc-tests/test_framework/blocktools.py | 17 | # Create a block (with regtest difficulty) | COMMENT |
| MEDIUM | qa/rpc-tests/test_framework/blocktools.py | 100 | # Create a coinbase transaction, assuming no miner fees. | COMMENT |
| MEDIUM | qa/rpc-tests/test_framework/blocktools.py | 139 | # Create a transaction with an anyone-can-spend output, that spends the | COMMENT |
| MEDIUM | qa/rpc-tests/test_framework/mininode.py | 1838 | # This class provides an interface for a p2p connection to a specified node | COMMENT |
| MEDIUM | qa/rpc-tests/test_framework/bignum.py | 5 | # This file is copied from python-bitcoinlib. | COMMENT |
| MEDIUM | qa/rpc-tests/test_framework/zip244.py | 11 | # This file is modified from zcash/zcash-test-vectors. | COMMENT |
| MEDIUM | qa/rpc-tests/test_framework/script.py | 10 | # This file is modified from python-bitcoinlib. | COMMENT |
| MEDIUM | qa/rpc-tests/test_framework/comptool.py | 212 | # Create a p2p connection to each node | COMMENT |
| MEDIUM | contrib/devtools/gen-manpages.sh | 20 | # Create a footer file with copyright content. | COMMENT |
| MEDIUM | contrib/gitian-descriptors/gitian-win.yml | 115 | # Create the release tarball using (arbitrarily) the first host | COMMENT |
| MEDIUM | contrib/gitian-descriptors/gitian-linux.yml | 100 | # Create the release tarball using (arbitrarily) the first host | COMMENT |
| MEDIUM | contrib/gitian-descriptors/gitian-linux-parallel.yml | 100 | # Create the release tarball using (arbitrarily) the first host | COMMENT |
| MEDIUM | contrib/gitian-descriptors/gitian-osx.yml | 94 | # Create the release tarball using (arbitrarily) the first host | COMMENT |
| MEDIUM | zcutil/build-debian-package.sh | 69 | # Create the control file | COMMENT |
| MEDIUM | zcutil/build-debian-package.sh | 73 | # Create the Debian package | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | qa/zcash/smoke_tests.py | 270 | print("Error establishing session at:", URL_FAUCET_TAP) | CODE |
| MEDIUM⚡ | qa/zcash/smoke_tests.py | 278 | print("Error tapping faucet at:", URL_FAUCET_TAP) | CODE |
| MEDIUM⚡ | qa/zcash/smoke_tests.py | 285 | print("Error establishing session at:", URL_FAUCET_DONATION) | CODE |
| LOW | qa/zcash/smoke_tests.py | 488 | except Exception as e: | CODE |
| MEDIUM | qa/zcash/smoke_tests.py | 489 | print('Error: %s' % e) | CODE |
| MEDIUM | qa/zcash/updatecheck.py | 396 | print("Error: Please remove " + dep + " from the list of unchecked dependencies.") | CODE |
| LOW | qa/zcash/wallet-builder/lib/phase_runner.py | 359 | except Exception as e: | CODE |
| LOW | qa/zcash/wallet-builder/lib/verification.py | 151 | except Exception: | CODE |
| LOW | qa/zcash/wallet-builder/lib/verification.py | 160 | except Exception: | CODE |
| LOW | qa/zcash/wallet-builder/lib/verification.py | 175 | except Exception: | CODE |
| LOW | qa/zcash/wallet-builder/lib/verification.py | 185 | except Exception: | CODE |
| LOW | qa/zcash/wallet-builder/lib/verification.py | 232 | except Exception as e: | CODE |
| LOW | qa/zcash/wallet-builder/lib/verification.py | 269 | except Exception as e: | CODE |
| LOW | qa/zcash/wallet-builder/lib/verification.py | 286 | except Exception as e: | CODE |
| LOW | qa/zcash/wallet-builder/lib/verification.py | 313 | except Exception as e: | CODE |
| LOW | qa/zcash/wallet-builder/lib/verification.py | 341 | except Exception as e: | CODE |
| LOW | qa/zcash/wallet-builder/lib/verification.py | 366 | except Exception as e: | CODE |
| LOW | qa/zcash/wallet-builder/lib/manifest.py | 69 | except Exception as e: | CODE |
| LOW | qa/zcash/wallet-builder/lib/manifest.py | 90 | except Exception: | CODE |
| LOW | qa/zcash/wallet-builder/lib/manifest.py | 115 | except Exception as e: | CODE |
| LOW | qa/zcash/wallet-builder/lib/zcashd_manager.py | 175 | except Exception as e: | CODE |
| LOW | qa/zcash/wallet-builder/lib/zcashd_manager.py | 290 | except Exception as e: | CODE |
| LOW | qa/zcash/wallet-builder/lib/zcashd_manager.py | 319 | except Exception: | CODE |
| LOW | qa/zcash/wallet-builder/lib/zcashd_manager.py | 373 | except Exception as e: | CODE |
| LOW⚡ | qa/zcash/wallet-builder/lib/operations.py | 432 | except Exception as e: | CODE |
| LOW⚡ | qa/zcash/wallet-builder/lib/operations.py | 455 | except Exception as e: | CODE |
| LOW | qa/zcash/wallet-builder/lib/operations.py | 409 | except Exception as e: | CODE |
| LOW | qa/zcash/wallet-builder/lib/operations.py | 568 | except Exception as e: | CODE |
| LOW | qa/zcash/wallet-builder/lib/operations.py | 579 | except Exception: | CODE |
| LOW | qa/zcash/wallet-builder/lib/operations.py | 622 | except Exception as e: | CODE |
| LOW⚡ | qa/zcash/wallet-builder/lib/rpc_client.py | 202 | except Exception: | CODE |
| LOW⚡ | qa/zcash/wallet-builder/lib/key_imports.py | 163 | except Exception as e: | CODE |
| LOW⚡ | qa/zcash/wallet-builder/lib/key_imports.py | 181 | except Exception as e: | CODE |
| LOW⚡ | qa/zcash/wallet-builder/lib/key_imports.py | 216 | except Exception as e: | CODE |
| LOW⚡ | qa/zcash/wallet-builder/lib/key_imports.py | 241 | except Exception as e: | CODE |
| LOW⚡ | qa/zcash/wallet-builder/lib/key_imports.py | 267 | except Exception as e: | CODE |
| LOW⚡ | qa/zcash/wallet-builder/lib/key_imports.py | 285 | except Exception as e: | CODE |
| LOW⚡ | qa/zcash/wallet-builder/lib/key_imports.py | 309 | except Exception as e: | CODE |
| LOW | qa/zcash/wallet-builder/lib/key_imports.py | 333 | except Exception as e: | CODE |
| LOW | qa/zcash/wallet-builder/lib/addresses.py | 244 | except Exception as e: | CODE |
| LOW | qa/zcash/wallet-builder/lib/addresses.py | 252 | except Exception as e: | CODE |
| LOW | qa/zcash/wallet-builder/lib/addresses.py | 264 | except Exception as e: | CODE |
| LOW | qa/rpc-tests/manual-corruption-test.py | 212 | except Exception as e: | CODE |
| LOW | qa/rpc-tests/wallet_shieldingcoinbase.py | 288 | except Exception as e: | CODE |
| LOW | qa/rpc-tests/mergetoaddress_helper.py | 23 | except Exception as e: | CODE |
| MEDIUM | qa/rpc-tests/mergetoaddress_helper.py | 18 | def assert_mergetoaddress_exception(expected_error_msg, merge_to_address_lambda) | CODE |
| LOW | qa/rpc-tests/test_framework/util.py | 533 | except Exception as e: | CODE |
| LOW | qa/rpc-tests/test_framework/util.py | 703 | except Exception as e: | CODE |
| MEDIUM | qa/rpc-tests/test_framework/util.py | 569 | def stop_node(node, i): | CODE |
| LOW | qa/rpc-tests/test_framework/socks5.py | 122 | except Exception as e: | CODE |
| LOW | qa/rpc-tests/test_framework/mininode.py | 1980 | except Exception as e: | CODE |
| MEDIUM | qa/rpc-tests/test_framework/mininode.py | 1915 | def handle_read(self): | CODE |
| LOW | qa/rpc-tests/test_framework/authproxy.py | 112 | except Exception as e: | CODE |
| LOW | qa/rpc-tests/test_framework/test_framework.py | 156 | except Exception as e: | CODE |
| LOW⚡ | contrib/bitrpc/bitrpc.py | 35 | except Exception as inst: | CODE |
| LOW⚡ | contrib/bitrpc/bitrpc.py | 42 | except Exception as inst: | CODE |
| LOW⚡ | contrib/bitrpc/bitrpc.py | 49 | except Exception as inst: | CODE |
| LOW⚡ | contrib/bitrpc/bitrpc.py | 56 | except Exception as inst: | CODE |
| LOW⚡ | contrib/bitrpc/bitrpc.py | 67 | except Exception as inst: | CODE |
| LOW⚡ | contrib/bitrpc/bitrpc.py | 74 | except Exception as inst: | CODE |
| 31 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | qa/zcash/wallet-builder/lib/verification.py | 151 | except Exception: | CODE |
| HIGH | qa/zcash/wallet-builder/lib/verification.py | 175 | except Exception: | CODE |
| HIGH | qa/zcash/wallet-builder/lib/verification.py | 185 | except Exception: | CODE |
| HIGH | qa/zcash/wallet-builder/lib/verification.py | 160 | except Exception: | CODE |
| HIGH | qa/zcash/wallet-builder/lib/operations.py | 579 | except Exception: | CODE |
| HIGH | qa/zcash/wallet-builder/lib/rpc_client.py | 636 | except ConnectionError: | CODE |
| HIGH | qa/zcash/wallet-builder/lib/rpc_client.py | 145 | except (json.JSONDecodeError, UnicodeDecodeError): | CODE |
| HIGH | qa/rpc-tests/legacy_chain_supply_abort.py | 70 | except (JSONRPCException, ConnectionError, BrokenPipeError): | CODE |
| HIGH | qa/rpc-tests/signrawtransaction_offline.py | 63 | except JSONRPCException: | CODE |
| HIGH | qa/rpc-tests/nodehandling.py | 35 | except: | CODE |
| HIGH | qa/rpc-tests/nodehandling.py | 40 | except: | CODE |
| HIGH | qa/rpc-tests/rpcbind_test.py | 121 | except JSONRPCException: | CODE |
| HIGH | qa/rpc-tests/getblocktemplate_proposals.py | 137 | except JSONRPCException: | CODE |
| HIGH | qa/rpc-tests/getblocktemplate_proposals.py | 161 | except JSONRPCException: | CODE |
| HIGH | qa/rpc-tests/test_framework/mininode.py | 1911 | except: | CODE |
| HIGH | qa/rpc-tests/test_framework/mininode.py | 1921 | except: | CODE |
| HIGH | qa/rpc-tests/test_framework/authproxy.py | 70 | except AttributeError: | CODE |
| HIGH | qa/rpc-tests/test_framework/authproxy.py | 74 | except AttributeError: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | qa/zcash/smoke_tests.py | 235 | def check_z_sendmany_parallel(results, zcash, runs): | CODE |
| LOW | qa/zcash/smoke_tests.py | 257 | def check_z_mergetoaddress_parallel(results, zcash, runs): | CODE |
| LOW | qa/zcash/updatecheck.py | 197 | def released_versions_after_current_version(self): | CODE |
| LOW | qa/zcash/full_test_suite.py | 145 | def ensure_no_dot_so_in_depends(): | CODE |
| LOW | qa/zcash/wallet-builder/lib/verification.py | 131 | def _verify_address_diversity(rpc: ZcashRPC) -> list[VerificationError]: | CODE |
| LOW | qa/zcash/wallet-builder/lib/manifest.py | 126 | def compute_shielded_balances_from_txs( | CODE |
| LOW | qa/zcash/wallet-builder/lib/operations.py | 43 | def _version_supports_privacy_policy(phase_index: int) -> bool: | CODE |
| LOW | qa/zcash/wallet-builder/lib/operations.py | 485 | def _execute_cross_pool_transfers(rpc: ZcashRPC, nu: NetworkUpgrade, | CODE |
| LOW | qa/zcash/wallet-builder/lib/addresses.py | 163 | def generate_external_addresses(rpc: ZcashRPC, phase_index: int) -> GeneratedAddresses: | CODE |
| LOW | qa/pull-tester/rpc-tests.py | 516 | def _get_uncovered_rpc_commands(self): | CODE |
| LOW | qa/rpc-tests/wallet_listunspent.py | 34 | def expected_matured_at_height(height): | CODE |
| LOW | qa/rpc-tests/wallet_golden_5_6_0.py | 166 | def golden_check_spendability(test_instance, block_offset): | CODE |
| LOW | qa/rpc-tests/decodescript.py | 59 | def decodescript_script_pub_key(self): | CODE |
| LOW | qa/rpc-tests/decodescript.py | 116 | def decoderawtransaction_asm_sighashtype(self): | CODE |
| LOW | qa/rpc-tests/prioritisetransaction.py | 130 | def send_fully_paid_transaction(): | CODE |
| LOW | qa/rpc-tests/pruning.py | 110 | def create_chain_with_staleblocks(self): | CODE |
| LOW | qa/rpc-tests/p2p_ban_pool_value_out_of_range.py | 314 | def test_setchainpoolvalues_ban(self): | CODE |
| LOW | qa/rpc-tests/wallet_doublespend.py | 35 | def run_test_for_recipient_type(self, recipient_type): | CODE |
| LOW | qa/rpc-tests/getblocktemplate.py | 68 | def add_transparent_tx_to_mempool(self): | CODE |
| LOW | qa/rpc-tests/nu5_block_body_poisoning.py | 159 | def build_block_from_template(self): | CODE |
| LOW | qa/rpc-tests/nu5_block_body_poisoning.py | 188 | def build_poisoned_pair_via_commitments(self): | CODE |
| LOW | qa/rpc-tests/nu5_block_body_poisoning.py | 221 | def build_poisoned_pair_via_blk_sigops(self, num_extra_sigops=20100): | CODE |
| LOW | qa/rpc-tests/nu5_block_body_poisoning.py | 264 | def build_poisoned_pair_via_cb_length(self): | CODE |
| LOW | qa/rpc-tests/nu5_block_body_poisoning.py | 313 | def build_poisoned_pair_via_blk_length(self): | CODE |
| LOW | qa/rpc-tests/nu5_block_body_poisoning.py | 410 | def test_active_tip_poisoning_via_commitments(self): | CODE |
| LOW | qa/rpc-tests/nu5_block_body_poisoning.py | 451 | def test_sidechain_poisoning_cleanup_via_commitments(self): | CODE |
| LOW | qa/rpc-tests/nu5_block_body_poisoning.py | 530 | def test_active_tip_poisoning_via_blk_sigops(self): | CODE |
| LOW | qa/rpc-tests/nu5_block_body_poisoning.py | 604 | def test_sidechain_poisoning_via_blk_sigops(self): | CODE |
| LOW | qa/rpc-tests/nu5_block_body_poisoning.py | 672 | def test_active_tip_poisoning_via_cb_length(self): | CODE |
| LOW | qa/rpc-tests/nu5_block_body_poisoning.py | 730 | def test_sidechain_poisoning_via_cb_length(self): | CODE |
| LOW | qa/rpc-tests/nu5_block_body_poisoning.py | 796 | def test_active_tip_poisoning_via_blk_length(self): | CODE |
| LOW | qa/rpc-tests/nu5_block_body_poisoning.py | 857 | def test_sidechain_poisoning_via_blk_length(self): | CODE |
| LOW | qa/rpc-tests/orchard_action_identity_point.py | 89 | def find_orchard_actions_offset(tx): | CODE |
| LOW | qa/rpc-tests/mergetoaddress_helper.py | 18 | def assert_mergetoaddress_exception(expected_error_msg, merge_to_address_lambda): | CODE |
| LOW | qa/rpc-tests/signrawtransactions.py | 51 | def script_verification_error_test(self): | CODE |
| LOW | qa/rpc-tests/soft_fork_disabling_orchard.py | 81 | def build_block_from_template(self, node): | CODE |
| LOW | qa/rpc-tests/soft_fork_disabling_orchard.py | 182 | def test_mempool_cleared_at_boundary(self, ua1, ua0_orchard, ua0_sapling): | CODE |
| LOW | qa/rpc-tests/soft_fork_disabling_orchard.py | 262 | def test_rejected_after_activation(self): | CODE |
| LOW | qa/rpc-tests/p2p-fullblocktest.py | 57 | def add_transactions_to_block(self, block, tx_list): | CODE |
| LOW | qa/rpc-tests/wallet_deprecation.py | 49 | def setup_network_with_config(self, allowed_deprecated): | CODE |
| LOW | qa/rpc-tests/test_framework/util.py | 528 | def assert_start_raises_init_error(i, dirname, extra_args=None, expected_msg=None): | CODE |
| LOW | qa/rpc-tests/test_framework/util.py | 713 | def wait_and_assert_operationid_status_result(node, myopid, in_status='success', in_errormsg=None, timeout=300): | CODE |
| LOW | qa/rpc-tests/test_framework/util.py | 744 | def wait_and_assert_operationid_status(node, myopid, in_status='success', in_errormsg=None, timeout=300): | CODE |
| LOW | qa/rpc-tests/test_framework/blocktools.py | 40 | def derive_block_commitments_hash(chain_history_root, auth_data_root): | CODE |
| LOW | qa/rpc-tests/test_framework/blocktools.py | 65 | def solve_block_from_template(gbt, coinbase, extra_txs=None): | CODE |
| LOW | qa/rpc-tests/test_framework/mininode.py | 103 | def onetimelockboxdisbursement(idx, branch_id, zatoshis, addr): | CODE |
| LOW | qa/rpc-tests/test_framework/zip244.py | 41 | def transparent_scripts_digest(tx): | CODE |
| LOW | qa/rpc-tests/test_framework/zip244.py | 84 | def sapling_spends_compact_digest(saplingBundle): | CODE |
| LOW | qa/rpc-tests/test_framework/zip244.py | 90 | def sapling_spends_noncompact_digest(saplingBundle): | CODE |
| LOW⚡ | qa/rpc-tests/test_framework/zip244.py | 110 | def sapling_outputs_compact_digest(saplingBundle): | CODE |
| LOW⚡ | qa/rpc-tests/test_framework/zip244.py | 118 | def sapling_outputs_memos_digest(saplingBundle): | CODE |
| LOW⚡ | qa/rpc-tests/test_framework/zip244.py | 124 | def sapling_outputs_noncompact_digest(saplingBundle): | CODE |
| LOW⚡ | qa/rpc-tests/test_framework/zip244.py | 160 | def orchard_actions_compact_digest(orchardBundle): | CODE |
| LOW⚡ | qa/rpc-tests/test_framework/zip244.py | 169 | def orchard_actions_memos_digest(orchardBundle): | CODE |
| LOW⚡ | qa/rpc-tests/test_framework/zip244.py | 175 | def orchard_actions_noncompact_digest(orchardBundle): | CODE |
| LOW | contrib/simulations/worstcase.py | 118 | def worst_case_many_identical_txs(tx): | CODE |
| LOW | contrib/simulations/worstcase.py | 128 | def worst_case_one_tx_containing(item): | CODE |
| LOW | contrib/simulations/worstcase.py | 175 | def worst_case_one_sapling_spend_per_tx(times): | CODE |
| LOW | contrib/simulations/worstcase.py | 187 | def worst_case_one_tx_containing_sapling_spends(times): | CODE |
| LOW | contrib/simulations/worstcase.py | 193 | def worst_case_one_sapling_output_per_tx(times): | CODE |
| 7 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | qa/rpc-tests/wallet_orchard_persistence.py | 34 | # Sanity-check the test harness | COMMENT |
| MEDIUM | qa/rpc-tests/wallet_golden_5_6_0.py | 50 | # Sanity-check the test harness | COMMENT |
| MEDIUM | qa/rpc-tests/wallet_golden_5_6_0.py | 179 | # Sanity-check the test harness | COMMENT |
| MEDIUM | qa/rpc-tests/turnstile.py | 91 | # Sanity-check the test harness | COMMENT |
| MEDIUM | qa/rpc-tests/wallet_zip317_default.py | 38 | # Sanity-check the test harness. | COMMENT |
| MEDIUM | qa/rpc-tests/wallet_orchard_change.py | 45 | # Sanity-check the test harness. | COMMENT |
| MEDIUM | qa/rpc-tests/wallet_doublespend.py | 170 | # Sanity-check the test harness | COMMENT |
| MEDIUM | qa/rpc-tests/wallet_sapling.py | 30 | # Sanity-check the test harness | COMMENT |
| LOW | qa/rpc-tests/mergetoaddress_ua_nu5.py | 17 | # TODO: Until we can merge from Orchard, we just use 'ANY_SAPLING' as the wildcard here, since | COMMENT |
| MEDIUM | qa/rpc-tests/wallet_persistence.py | 51 | # Sanity-check the test harness | COMMENT |
| MEDIUM | qa/rpc-tests/wallet_sendmany_any_taddr.py | 34 | # Sanity-check the test harness | COMMENT |
| MEDIUM | qa/rpc-tests/wallet_orchard.py | 32 | # Sanity-check the test harness | COMMENT |
| MEDIUM | qa/rpc-tests/soft_fork_disabling_orchard.py | 116 | # Sanity-check the test harness | COMMENT |
| MEDIUM | qa/rpc-tests/wallet_orchard_init.py | 38 | # Sanity-check the test harness | COMMENT |
| MEDIUM | qa/rpc-tests/test_framework/comptool.py | 180 | # just added to the block_store. This is to facilitate block delivery | COMMENT |
| MEDIUM | src/protocol.h | 80 | // unauthenticated advertisements, so your code must be robust against | COMMENT |
| MEDIUM | src/test/base58_tests.cpp | 172 | // Goal: check that base58 parsing code is robust against a variety of corrupted data | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | qa/rpc-tests/invalidblockrequest.py | 0 | can either run this test as 1 node with expected answers, or two and compare them. change the "outcome" variable from ea | STRING |
| HIGH | qa/rpc-tests/invalidtxrequest.py | 0 | can either run this test as 1 node with expected answers, or two and compare them. change the "outcome" variable from ea | STRING |
| HIGH | qa/rpc-tests/p2p-fullblocktest.py | 0 | can either run this test as 1 node with expected answers, or two and compare them. change the "outcome" variable from ea | STRING |
| HIGH | qa/rpc-tests/listtransactions.py | 0 | pass in array of json objects, a dictionary with key/value pairs to match against, and another dictionary with expected | STRING |
| HIGH | qa/rpc-tests/keypool.py | 0 | pass in array of json objects, a dictionary with key/value pairs to match against, and another dictionary with expected | STRING |
| HIGH | qa/rpc-tests/getblocktemplate_proposals.py | 0 | pass in array of json objects, a dictionary with key/value pairs to match against, and another dictionary with expected | STRING |
| HIGH | qa/rpc-tests/getblocktemplate_longpoll.py | 0 | pass in array of json objects, a dictionary with key/value pairs to match against, and another dictionary with expected | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | qa/zcash/smoke_tests.py | 137 | CODE | |
| LOW | qa/zcash/updatecheck.py | 372 | CODE | |
| LOW | qa/zcash/updatecheck.py | 326 | CODE | |
| LOW | qa/zcash/create_benchmark_archive.py | 157 | CODE | |
| LOW | qa/zcash/wallet-builder/lib/verification.py | 84 | CODE | |
| LOW | qa/zcash/wallet-builder/lib/verification.py | 131 | CODE | |
| LOW | qa/zcash/wallet-builder/lib/verification.py | 294 | CODE | |
| LOW | qa/zcash/wallet-builder/lib/manifest.py | 38 | CODE | |
| LOW | qa/zcash/wallet-builder/lib/manifest.py | 126 | CODE | |
| LOW | qa/zcash/wallet-builder/lib/manifest.py | 322 | CODE | |
| LOW | qa/zcash/wallet-builder/lib/operations.py | 136 | CODE | |
| LOW | qa/zcash/wallet-builder/lib/operations.py | 485 | CODE | |
| LOW | qa/zcash/wallet-builder/lib/key_imports.py | 129 | CODE | |
| LOW | qa/rpc-tests/maxblocksinflight.py | 49 | CODE | |
| LOW | qa/rpc-tests/upgrade_golden.py | 80 | CODE | |
| LOW | qa/rpc-tests/test_framework/util.py | 528 | CODE | |
| LOW | qa/rpc-tests/test_framework/netutil.py | 115 | CODE | |
| LOW | qa/rpc-tests/test_framework/socks5.py | 61 | CODE | |
| LOW | qa/rpc-tests/test_framework/mininode.py | 1941 | CODE | |
| LOW | qa/rpc-tests/test_framework/script.py | 874 | CODE | |
| LOW | qa/rpc-tests/test_framework/script.py | 46 | CODE | |
| LOW | qa/rpc-tests/test_framework/script.py | 653 | CODE | |
| LOW | qa/rpc-tests/test_framework/script.py | 699 | CODE | |
| LOW | qa/rpc-tests/test_framework/script.py | 805 | CODE | |
| LOW | qa/rpc-tests/test_framework/equihash.py | 131 | CODE | |
| LOW | qa/rpc-tests/test_framework/comptool.py | 286 | CODE | |
| LOW | qa/rpc-tests/test_framework/comptool.py | 313 | CODE | |
| LOW | qa/rpc-tests/test_framework/comptool.py | 335 | CODE | |
| LOW | contrib/metrics/supply_check/supply_deltas.py | 30 | CODE | |
| LOW | contrib/testgen/gen_base58_test_vectors.py | 89 | CODE | |
| LOW | contrib/seeds/generate-seeds.py | 45 | CODE | |
| LOW | contrib/devtools/security-check.py | 34 | CODE | |
| LOW | zcutil/make-release.py | 400 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | qa/zcash/wallet-builder/lib/zcashd_manager.py | 46 | Return the path to the zcashd binary for a given version. The download_binaries.sh script extracts each versio | STRING |
| HIGH | qa/zcash/wallet-builder/lib/rpc_client.py | 88 | Make a JSON-RPC call to zcashd. Args: method: RPC method name (e.g., "getblockchaininfo") | STRING |
| HIGH | qa/zcash/wallet-builder/lib/rpc_client.py | 210 | Poll an async operation until it completes or fails. Many zcashd operations (z_sendmany, z_shieldcoinb | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | contrib/testgen/gen_base58_test_vectors.py | 13 | CODE | |
| LOW | contrib/testgen/gen_base58_test_vectors.py | 13 | CODE | |
| LOW | contrib/linearize/linearize-hashes.py | 10 | CODE | |
| LOW | contrib/linearize/linearize-hashes.py | 12 | CODE | |
| LOW | contrib/seeds/generate-seeds.py | 34 | CODE | |
| LOW | contrib/seeds/generate-seeds.py | 34 | CODE | |
| LOW | contrib/devtools/symbol-check.py | 15 | CODE | |
| LOW | contrib/devtools/symbol-check.py | 15 | CODE | |
| LOW | contrib/devtools/security-check.py | 8 | CODE | |
| LOW | contrib/devtools/security-check.py | 8 | CODE | |
| LOW | contrib/devtools/security-check.py | 8 | CODE | |
| LOW | contrib/devtools/test-security-check.py | 9 | CODE | |
| LOW | contrib/simulations/worstcase.py | 2 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | test/lint/lint-whitespace.sh | 50 | # Check if trailing whitespace was found in the diff. | COMMENT |
| LOW | test/lint/lint-whitespace.sh | 82 | # Check if tab characters were found in the diff. | COMMENT |
| LOW | qa/zcash/wallet-builder/scripts/download_binaries.sh | 86 | # Check if already downloaded | COMMENT |
| LOW | qa/zcash/wallet-builder/scripts/download_binaries.sh | 104 | # Check if cached | COMMENT |
| LOW | qa/rpc-tests/zkey_import_export.py | 160 | # Check if amount bob spent is deducted for charlie and daira | COMMENT |
| LOW | qa/rpc-tests/test_framework/flyclient.py | 135 | # Check if the number of leaves in this subtree is a power of two. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | qa/zcash/wallet-builder/lib/phase_runner.py | 66 | logger = logging.getLogger(__name__) | CODE |
| LOW | qa/zcash/wallet-builder/lib/verification.py | 27 | logger = logging.getLogger(__name__) | CODE |
| LOW | qa/zcash/wallet-builder/lib/manifest.py | 35 | logger = logging.getLogger(__name__) | CODE |
| LOW | qa/zcash/wallet-builder/lib/conf_generator.py | 35 | logger = logging.getLogger(__name__) | CODE |
| LOW | qa/zcash/wallet-builder/lib/zcashd_manager.py | 42 | logger = logging.getLogger(__name__) | CODE |
| LOW | qa/zcash/wallet-builder/lib/operations.py | 68 | logger = logging.getLogger(__name__) | CODE |
| LOW | qa/zcash/wallet-builder/lib/rpc_client.py | 29 | logger = logging.getLogger(__name__) | CODE |
| LOW | qa/zcash/wallet-builder/lib/key_imports.py | 37 | logger = logging.getLogger(__name__) | CODE |
| LOW | qa/zcash/wallet-builder/lib/addresses.py | 32 | logger = logging.getLogger(__name__) | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | src/crypto/sha256.cpp | 474 | "Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do " | CODE |
| LOW | src/crypto/sha256.cpp | 474 | "Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do " | CODE |
| LOW | src/wallet/rpcwallet.cpp | 197 | const UniValue& dummy_value = params[0]; | CODE |
| LOW | src/wallet/rpcwallet.cpp | 198 | if (!dummy_value.isNull() && dummy_value.get_str() != "") { | CODE |
| LOW | src/wallet/rpcwallet.cpp | 1208 | const UniValue& dummy_value = params[0]; | CODE |
| LOW | src/wallet/rpcwallet.cpp | 1209 | if (!dummy_value.isNull() && dummy_value.get_str() != "*" && dummy_value.get_str() != "") { | CODE |
| LOW | src/wallet/rpcwallet.cpp | 1404 | const UniValue& dummy_value = params[2]; | CODE |
| LOW | src/wallet/rpcwallet.cpp | 1405 | if (!dummy_value.isNull() && dummy_value.get_str() != "") { | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | contrib/macdeploy/README.md | 5 | ### Step 1: Obtaining `Xcode.app` | COMMENT |
| LOW | contrib/macdeploy/README.md | 38 | ### Step 2: Generating `Xcode-11.3.1-11C505-extracted-SDK-with-libcxx-headers.tar.gz` from `Xcode.app` | COMMENT |
| LOW | contrib/linearize/README.md | 4 | ## Step 1: Download hash list | COMMENT |
| LOW | contrib/linearize/README.md | 15 | ## Step 2: Copy local block data | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | qa/rpc-tests/sapling_v4_value_balance.py | 78 | tx += b'\x00' * 32 # prevout.hash (null) | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | qa/zcash/smoke_tests.py | 5 | # Usage: | COMMENT |
| LOW | zcutil/build-debian-package.sh | 2 | ## Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | qa/zcash/wallet-builder/scripts/build_chain.sh | 7 | # It orchestrates the entire chain-building process by calling the | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | src/rust/bin/wallet_tool.rs | 241 | "(Don't forget to restart zcashd without '-exportdir' after finishing\n", | CODE |
| LOW | src/rust/bin/wallet_tool.rs | 264 | "(Don't forget to restart zcashd without '-exportdir' after finishing\n", | CODE |
| LOW | src/rust/bin/wallet_tool.rs | 636 | "Don't forget to restart zcashd without '-exportdir', if running it\n", | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | src/secp256k1/include/secp256k1_preallocated.h | 29 | * The purpose of this function is to determine how much memory must be provided | COMMENT |