37 lines
934 B
JSON
37 lines
934 B
JSON
{
|
|
"version": "1.0.0",
|
|
"cases": [
|
|
{
|
|
"case_id": "c-guarded-system:001",
|
|
"case_version": "1.0.0",
|
|
"notes": "system() is gated by ALLOW_CMD env; default unreachable.",
|
|
"sinks": [
|
|
{
|
|
"sink_id": "GuardedSystem::main",
|
|
"label": "unreachable",
|
|
"confidence": "medium",
|
|
"static_evidence": {
|
|
"call_path": [
|
|
"main(argv)",
|
|
"run_guarded",
|
|
"system() (guarded by ALLOW_CMD)"
|
|
]
|
|
},
|
|
"dynamic_evidence": {
|
|
"covered_by_tests": [
|
|
"tests/run-tests.sh"
|
|
],
|
|
"coverage_files": [
|
|
"outputs/coverage.json"
|
|
]
|
|
},
|
|
"config_conditions": [
|
|
"ALLOW_CMD=1"
|
|
],
|
|
"notes": "Sink activates only when ALLOW_CMD=1; default benchmark assumes flag disabled."
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|