Skip to content

Commit 607dc67

Browse files
hyperpolymathhypatia-estate-rescan
hyperpolymath
and
hypatia-estate-rescan
authored
scan: estate rescan (run 29843933209) (#54)
Automated estate rescan from hyperpolymath/hypatia run 29843933209. Squash-merged: it is the only merge method that satisfies required_signatures + required_linear_history on this repo. Co-authored-by: hypatia-estate-rescan <hypatia-bot@users.noreply.github.com>
1 parent 725cdb4 commit 607dc67

332 files changed

Lines changed: 111654 additions & 111906 deletions

File tree

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

‎scans/0patch-lsa-sentinel.json‎

Lines changed: 159 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,159 @@
1+
{
2+
"schema_version": "2.5",
3+
"program_path": "0patch-lsa-sentinel",
4+
"language": "rust",
5+
"frameworks": [],
6+
"weak_points": [
7+
{
8+
"category": "UnsafeCode",
9+
"location": "host-rust/src/ffi.rs",
10+
"file": "host-rust/src/ffi.rs",
11+
"severity": "High",
12+
"description": "1 unsafe blocks in host-rust/src/ffi.rs",
13+
"recommended_attack": [
14+
"memory",
15+
"concurrency"
16+
],
17+
"suppressed": true,
18+
"test_context": "production"
19+
},
20+
{
21+
"category": "UnboundedAllocation",
22+
"location": "host-rust/src/collectors/opatch.rs",
23+
"file": "host-rust/src/collectors/opatch.rs",
24+
"severity": "Medium",
25+
"description": "Potential unbounded allocation pattern detected in host-rust/src/collectors/opatch.rs",
26+
"recommended_attack": [
27+
"memory",
28+
"cpu"
29+
],
30+
"test_context": "production"
31+
},
32+
{
33+
"category": "SupplyChain",
34+
"location": "flake.nix",
35+
"file": "flake.nix",
36+
"severity": "Low",
37+
"description": "flake.nix declares inputs without narHash, rev pinning, or sibling flake.lock — dependency revision is unpinned in flake.nix. Suggested fix: run `nix flake update` to generate flake.lock.",
38+
"recommended_attack": [],
39+
"test_context": "production"
40+
}
41+
],
42+
"statistics": {
43+
"total_lines": 1723,
44+
"unsafe_blocks": 1,
45+
"panic_sites": 0,
46+
"unwrap_calls": 0,
47+
"allocation_sites": 4,
48+
"io_operations": 4,
49+
"threading_constructs": 0
50+
},
51+
"file_statistics": [
52+
{
53+
"file_path": "host-rust/src/ffi.rs",
54+
"lines": 26,
55+
"unsafe_blocks": 1,
56+
"panic_sites": 0,
57+
"unwrap_calls": 0,
58+
"allocation_sites": 0,
59+
"io_operations": 0,
60+
"threading_constructs": 0
61+
},
62+
{
63+
"file_path": "host-rust/src/collectors/opatch.rs",
64+
"lines": 77,
65+
"unsafe_blocks": 0,
66+
"panic_sites": 0,
67+
"unwrap_calls": 0,
68+
"allocation_sites": 0,
69+
"io_operations": 2,
70+
"threading_constructs": 0
71+
},
72+
{
73+
"file_path": "host-rust/src/collectors/snapshot.rs",
74+
"lines": 76,
75+
"unsafe_blocks": 0,
76+
"panic_sites": 0,
77+
"unwrap_calls": 0,
78+
"safe_unwrap_calls": 1,
79+
"allocation_sites": 2,
80+
"io_operations": 2,
81+
"threading_constructs": 0
82+
},
83+
{
84+
"file_path": "host-rust/src/collectors/parse.rs",
85+
"lines": 294,
86+
"unsafe_blocks": 0,
87+
"panic_sites": 0,
88+
"unwrap_calls": 0,
89+
"allocation_sites": 2,
90+
"io_operations": 0,
91+
"threading_constructs": 0
92+
}
93+
],
94+
"recommended_attacks": [
95+
"concurrency",
96+
"memory",
97+
"cpu"
98+
],
99+
"dependency_graph": {
100+
"edges": [
101+
{
102+
"from": "host-rust/src/collectors/opatch.rs",
103+
"to": "host-rust/src/collectors/snapshot.rs",
104+
"relation": "shared_dir:host-rust/src/collectors",
105+
"weight": 1.0
106+
},
107+
{
108+
"from": "host-rust/src/collectors/snapshot.rs",
109+
"to": "host-rust/src/collectors/parse.rs",
110+
"relation": "shared_dir:host-rust/src/collectors",
111+
"weight": 1.0
112+
}
113+
]
114+
},
115+
"taint_matrix": {
116+
"rows": [
117+
{
118+
"source_category": "UnboundedAllocation",
119+
"sink_axis": "memory",
120+
"severity_value": 2.5,
121+
"files": [
122+
"host-rust/src/collectors/opatch.rs"
123+
],
124+
"frameworks": [],
125+
"relation": "UnboundedAllocation->Memory"
126+
},
127+
{
128+
"source_category": "UnsafeCode",
129+
"sink_axis": "memory",
130+
"severity_value": 3.5,
131+
"files": [
132+
"host-rust/src/ffi.rs"
133+
],
134+
"frameworks": [],
135+
"relation": "UnsafeCode->Memory"
136+
},
137+
{
138+
"source_category": "UnboundedAllocation",
139+
"sink_axis": "cpu",
140+
"severity_value": 2.5,
141+
"files": [
142+
"host-rust/src/collectors/opatch.rs"
143+
],
144+
"frameworks": [],
145+
"relation": "UnboundedAllocation->Cpu"
146+
},
147+
{
148+
"source_category": "UnsafeCode",
149+
"sink_axis": "concurrency",
150+
"severity_value": 3.5,
151+
"files": [
152+
"host-rust/src/ffi.rs"
153+
],
154+
"frameworks": [],
155+
"relation": "UnsafeCode->Concurrency"
156+
}
157+
]
158+
}
159+
}

‎scans/AcceleratorGate.jl.json‎

Lines changed: 12 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -81,24 +81,14 @@
8181
}
8282
],
8383
"recommended_attacks": [
84-
"memory",
85-
"cpu"
84+
"cpu",
85+
"memory"
8686
],
8787
"dependency_graph": {
8888
"edges": []
8989
},
9090
"taint_matrix": {
9191
"rows": [
92-
{
93-
"source_category": "DynamicCodeExecution",
94-
"sink_axis": "cpu",
95-
"severity_value": 3.5,
96-
"files": [
97-
"src/AcceleratorGate.jl"
98-
],
99-
"frameworks": [],
100-
"relation": "DynamicCodeExecution->Cpu"
101-
},
10292
{
10393
"source_category": "ProofDrift",
10494
"sink_axis": "cpu",
@@ -120,6 +110,16 @@
120110
],
121111
"frameworks": [],
122112
"relation": "DynamicCodeExecution->Memory"
113+
},
114+
{
115+
"source_category": "DynamicCodeExecution",
116+
"sink_axis": "cpu",
117+
"severity_value": 3.5,
118+
"files": [
119+
"src/AcceleratorGate.jl"
120+
],
121+
"frameworks": [],
122+
"relation": "DynamicCodeExecution->Cpu"
123123
}
124124
]
125125
}

0 commit comments

Comments
 (0)