marius/Open_Ultra_SAST
1
0
Fork 0
mirror of https://github.com/norandom/OpenUltraSAST.git synced 2026-10-21 05:59:29 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat(real-world-vfc-slice): add labeled OpenSSL/Firefox/Chromium/curl pair corpus

Browse Source 
Harvest 176 isolated vuln-vs-fix functions (109 CVEs, 352 training rows)
into benchmarks/pairs/vfc with provenance and a JSONL training manifest.
Score the slice as an honesty dashboard (ousast pairs --slice vfc);
keep the pair gate on the local fixtures only.
This commit is contained in:
Marius Ciepluch
2026-09-04 16:45:38 +02:00
parent e9f185da59
commit 0116f9bea6
372 changed files with 49209 additions and 49 deletions
Download Patch File Download Diff File Expand all files Collapse all files
benchmarks/pairs/vfc/openssl-cve-2021-3449-init_sig_algs/fixed.c
+20
View File
@@ -0,0 +1,20 @@
/* Provenance: openssl/openssl init_sig_algs (fixed).
* repo: openssl/openssl
* commit: 02b1636fe3db274497304a3e95a4e32ced7e841b
* parent: 112580c27b829b0ac0874d5c5787195f27c7952c
* commit_url: https://github.com/openssl/openssl/commit/02b1636fe3db274497304a3e95a4e32ced7e841b
* cve: CVE-2021-3449
* license: OpenSSL License
* function: init_sig_algs
* relpath: ssl/statem/extensions.c
*/
static int init_sig_algs(SSL *s, unsigned int context)
{
/* Clear any signature algorithms extension received */
OPENSSL_free(s->s3.tmp.peer_sigalgs);
s->s3.tmp.peer_sigalgs = NULL;
s->s3.tmp.peer_sigalgslen = 0;
return 1;
}
benchmarks/pairs/vfc/openssl-cve-2021-3449-init_sig_algs/vuln.c
+19
View File
@@ -0,0 +1,19 @@
/* Provenance: openssl/openssl init_sig_algs (vuln).
* repo: openssl/openssl
* commit: 112580c27b829b0ac0874d5c5787195f27c7952c
* parent: 112580c27b829b0ac0874d5c5787195f27c7952c
* commit_url: https://github.com/openssl/openssl/commit/02b1636fe3db274497304a3e95a4e32ced7e841b
* cve: CVE-2021-3449
* license: OpenSSL License
* function: init_sig_algs
* relpath: ssl/statem/extensions.c
*/
static int init_sig_algs(SSL *s, unsigned int context)
{
/* Clear any signature algorithms extension received */
OPENSSL_free(s->s3.tmp.peer_sigalgs);
s->s3.tmp.peer_sigalgs = NULL;
return 1;
}