549 lines · plain
1{2 "$schema": "https://docs.oasis-open.org/sarif/sarif/v2.1.0/cos02/schemas/sarif-schema-2.1.0.json",3 "runs": [4 {5 "artifacts": [6 {7 "length": -1,8 "location": {9 "index": 0,10 "uri": "file:///[...]/sarif-multi-diagnostic-test.c"11 },12 "mimeType": "text/plain",13 "roles": [14 "resultFile"15 ]16 }17 ],18 "columnKind": "unicodeCodePoints",19 "results": [20 {21 "codeFlows": [22 {23 "threadFlows": [24 {25 "locations": [26 {27 "importance": "essential",28 "location": {29 "message": {30 "text": "Calling 'f'"31 },32 "physicalLocation": {33 "artifactLocation": {34 "index": 0,35 "uri": "file:///[...]/sarif-multi-diagnostic-test.c"36 },37 "region": {38 "endColumn": 6,39 "endLine": 39,40 "startColumn": 3,41 "startLine": 3942 }43 }44 }45 },46 {47 "importance": "essential",48 "location": {49 "message": {50 "text": "tainted"51 },52 "physicalLocation": {53 "artifactLocation": {54 "index": 0,55 "uri": "file:///[...]/sarif-multi-diagnostic-test.c"56 },57 "region": {58 "endColumn": 18,59 "endLine": 11,60 "startColumn": 11,61 "startLine": 1162 }63 }64 }65 }66 ]67 }68 ]69 }70 ],71 "hostedViewerUri": "file:///[...]/report-5c9648.html",72 "level": "warning",73 "locations": [74 {75 "physicalLocation": {76 "artifactLocation": {77 "index": 0,78 "uri": "file:///[...]/sarif-multi-diagnostic-test.c"79 },80 "region": {81 "endColumn": 18,82 "endLine": 11,83 "startColumn": 11,84 "startLine": 1185 }86 }87 }88 ],89 "message": {90 "text": "tainted"91 },92 "partialFingerprints": {93 "clang/issueHash/v1": "5c964815b8d6db3989bacdd308e657d0"94 },95 "ruleId": "debug.TaintTest",96 "ruleIndex": 097 },98 {99 "codeFlows": [100 {101 "threadFlows": [102 {103 "locations": [104 {105 "importance": "essential",106 "location": {107 "message": {108 "text": "Calling 'g'"109 },110 "physicalLocation": {111 "artifactLocation": {112 "index": 0,113 "uri": "file:///[...]/sarif-multi-diagnostic-test.c"114 },115 "region": {116 "endColumn": 6,117 "endLine": 40,118 "startColumn": 3,119 "startLine": 40120 }121 }122 }123 },124 {125 "importance": "essential",126 "location": {127 "message": {128 "text": "'fp' declared without an initial value"129 },130 "physicalLocation": {131 "artifactLocation": {132 "index": 0,133 "uri": "file:///[...]/sarif-multi-diagnostic-test.c"134 },135 "region": {136 "endColumn": 12,137 "endLine": 15,138 "startColumn": 3,139 "startLine": 15140 }141 }142 }143 },144 {145 "importance": "essential",146 "location": {147 "message": {148 "text": "Called function pointer is an uninitialized pointer value"149 },150 "physicalLocation": {151 "artifactLocation": {152 "index": 0,153 "uri": "file:///[...]/sarif-multi-diagnostic-test.c"154 },155 "region": {156 "endColumn": 9,157 "endLine": 16,158 "startColumn": 3,159 "startLine": 16160 }161 }162 }163 }164 ]165 }166 ]167 }168 ],169 "hostedViewerUri": "file:///[...]/report-256f65.html",170 "level": "warning",171 "locations": [172 {173 "physicalLocation": {174 "artifactLocation": {175 "index": 0,176 "uri": "file:///[...]/sarif-multi-diagnostic-test.c"177 },178 "region": {179 "endColumn": 9,180 "endLine": 16,181 "startColumn": 3,182 "startLine": 16183 }184 }185 }186 ],187 "message": {188 "text": "Called function pointer is an uninitialized pointer value"189 },190 "partialFingerprints": {191 "clang/issueHash/v1": "256f6502719de88bece09a676d4102c6"192 },193 "ruleId": "core.CallAndMessage",194 "ruleIndex": 1195 },196 {197 "codeFlows": [198 {199 "threadFlows": [200 {201 "locations": [202 {203 "importance": "important",204 "location": {205 "message": {206 "text": "Assuming 'i' is equal to 0"207 },208 "physicalLocation": {209 "artifactLocation": {210 "index": 0,211 "uri": "file:///[...]/sarif-multi-diagnostic-test.c"212 },213 "region": {214 "endColumn": 13,215 "endLine": 20,216 "startColumn": 7,217 "startLine": 20218 }219 }220 }221 },222 {223 "importance": "unimportant",224 "location": {225 "message": {226 "text": "Taking true branch"227 },228 "physicalLocation": {229 "artifactLocation": {230 "index": 0,231 "uri": "file:///[...]/sarif-multi-diagnostic-test.c"232 },233 "region": {234 "endColumn": 3,235 "startColumn": 3,236 "startLine": 20237 }238 }239 }240 },241 {242 "importance": "essential",243 "location": {244 "message": {245 "text": "Division by zero"246 },247 "physicalLocation": {248 "artifactLocation": {249 "index": 0,250 "uri": "file:///[...]/sarif-multi-diagnostic-test.c"251 },252 "region": {253 "endColumn": 14,254 "startColumn": 14,255 "startLine": 21256 }257 }258 }259 }260 ]261 }262 ]263 }264 ],265 "hostedViewerUri": "file:///[...]/report-91023b.html",266 "level": "warning",267 "locations": [268 {269 "physicalLocation": {270 "artifactLocation": {271 "index": 0,272 "uri": "file:///[...]/sarif-multi-diagnostic-test.c"273 },274 "region": {275 "endColumn": 14,276 "startColumn": 14,277 "startLine": 21278 }279 }280 }281 ],282 "message": {283 "text": "Division by zero"284 },285 "partialFingerprints": {286 "clang/issueHash/v1": "91023b85b7e0ff79f11ab603e63cfa58"287 },288 "ruleId": "core.DivideZero",289 "ruleIndex": 2290 },291 {292 "codeFlows": [293 {294 "threadFlows": [295 {296 "locations": [297 {298 "importance": "essential",299 "location": {300 "message": {301 "text": "Memory is allocated"302 },303 "physicalLocation": {304 "artifactLocation": {305 "index": 0,306 "uri": "file:///[...]/sarif-multi-diagnostic-test.c"307 },308 "region": {309 "endColumn": 24,310 "endLine": 26,311 "startColumn": 15,312 "startLine": 26313 }314 }315 }316 },317 {318 "importance": "important",319 "location": {320 "message": {321 "text": "Assuming 'i' is < 4"322 },323 "physicalLocation": {324 "artifactLocation": {325 "index": 0,326 "uri": "file:///[...]/sarif-multi-diagnostic-test.c"327 },328 "region": {329 "endColumn": 12,330 "endLine": 27,331 "startColumn": 7,332 "startLine": 27333 }334 }335 }336 },337 {338 "importance": "unimportant",339 "location": {340 "message": {341 "text": "Taking true branch"342 },343 "physicalLocation": {344 "artifactLocation": {345 "index": 0,346 "uri": "file:///[...]/sarif-multi-diagnostic-test.c"347 },348 "region": {349 "endColumn": 3,350 "startColumn": 3,351 "startLine": 27352 }353 }354 }355 },356 {357 "importance": "essential",358 "location": {359 "message": {360 "text": "Potential leak of memory pointed to by 'mem'"361 },362 "physicalLocation": {363 "artifactLocation": {364 "index": 0,365 "uri": "file:///[...]/sarif-multi-diagnostic-test.c"366 },367 "region": {368 "endColumn": 12,369 "startColumn": 12,370 "startLine": 28371 }372 }373 }374 }375 ]376 }377 ]378 }379 ],380 "hostedViewerUri": "file:///[...]/report-b18daa.html",381 "level": "warning",382 "locations": [383 {384 "physicalLocation": {385 "artifactLocation": {386 "index": 0,387 "uri": "file:///[...]/sarif-multi-diagnostic-test.c"388 },389 "region": {390 "endColumn": 12,391 "startColumn": 12,392 "startLine": 28393 }394 }395 }396 ],397 "message": {398 "text": "Potential leak of memory pointed to by 'mem'"399 },400 "partialFingerprints": {401 "clang/issueHash/v1": "b18daabce2816b9efb6afffaa64ca9f9"402 },403 "ruleId": "unix.Malloc",404 "ruleIndex": 3405 },406 {407 "codeFlows": [408 {409 "threadFlows": [410 {411 "locations": [412 {413 "importance": "essential",414 "location": {415 "message": {416 "text": "'løçål' initialized to 0"417 },418 "physicalLocation": {419 "artifactLocation": {420 "index": 0,421 "uri": "file:///[...]/sarif-multi-diagnostic-test.c"422 },423 "region": {424 "endColumn": 12,425 "endLine": 34,426 "startColumn": 3,427 "startLine": 34428 }429 }430 }431 },432 {433 "importance": "essential",434 "location": {435 "message": {436 "text": "Division by zero"437 },438 "physicalLocation": {439 "artifactLocation": {440 "index": 0,441 "uri": "file:///[...]/sarif-multi-diagnostic-test.c"442 },443 "region": {444 "endColumn": 20,445 "startColumn": 20,446 "startLine": 35447 }448 }449 }450 }451 ]452 }453 ]454 }455 ],456 "hostedViewerUri": "file:///[...]/report-4e5361.html",457 "level": "warning",458 "locations": [459 {460 "physicalLocation": {461 "artifactLocation": {462 "index": 0,463 "uri": "file:///[...]/sarif-multi-diagnostic-test.c"464 },465 "region": {466 "endColumn": 20,467 "startColumn": 20,468 "startLine": 35469 }470 }471 }472 ],473 "message": {474 "text": "Division by zero"475 },476 "partialFingerprints": {477 "clang/issueHash/v1": "4e53611783411e0dae06a4084b00281c"478 },479 "ruleId": "core.DivideZero",480 "ruleIndex": 2481 }482 ],483 "tool": {484 "driver": {485 "fullName": "clang static analyzer",486 "informationUri": "https://clang.llvm.org/docs/UsersManual.html",487 "language": "en-US",488 "name": "clang",489 "rules": [490 {491 "defaultConfiguration": {492 "enabled": true,493 "level": "warning",494 "rank": -1495 },496 "fullDescription": {497 "text": "Mark tainted symbols as such."498 },499 "id": "debug.TaintTest",500 "name": "debug.TaintTest"501 },502 {503 "defaultConfiguration": {504 "enabled": true,505 "level": "warning",506 "rank": -1507 },508 "fullDescription": {509 "text": "Check for logical errors for function calls and Objective-C message expressions (e.g., uninitialized arguments, null function pointers)"510 },511 "helpUri": "https://clang.llvm.org/docs/analyzer/checkers.html#core-callandmessage",512 "id": "core.CallAndMessage",513 "name": "core.CallAndMessage"514 },515 {516 "defaultConfiguration": {517 "enabled": true,518 "level": "warning",519 "rank": -1520 },521 "fullDescription": {522 "text": "Check for division by zero"523 },524 "helpUri": "https://clang.llvm.org/docs/analyzer/checkers.html#core-dividezero",525 "id": "core.DivideZero",526 "name": "core.DivideZero"527 },528 {529 "defaultConfiguration": {530 "enabled": true,531 "level": "warning",532 "rank": -1533 },534 "fullDescription": {535 "text": "Check for memory leaks, double free, and use-after-free problems. Traces memory managed by malloc()/free()."536 },537 "helpUri": "https://clang.llvm.org/docs/analyzer/checkers.html#unix-malloc",538 "id": "unix.Malloc",539 "name": "unix.Malloc"540 }541 ],542 "version": "[clang version]"543 }544 }545 }546 ],547 "version": "[SARIF version]"548}549