marius/Open_Ultra_SAST
1
0
Fork 0
mirror of https://github.com/norandom/OpenUltraSAST.git synced 2026-10-22 06:29:29 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat(real-world-vfc-slice): add labeled OpenSSL/Firefox/Chromium/curl pair corpus

Browse Source 
Harvest 176 isolated vuln-vs-fix functions (109 CVEs, 352 training rows)
into benchmarks/pairs/vfc with provenance and a JSONL training manifest.
Score the slice as an honesty dashboard (ousast pairs --slice vfc);
keep the pair gate on the local fixtures only.
This commit is contained in:
Marius Ciepluch
2026-09-04 16:45:38 +02:00
parent e9f185da59
commit 0116f9bea6
372 changed files with 49209 additions and 49 deletions
Download Patch File Download Diff File Expand all files Collapse all files
benchmarks/pairs/vfc/openssl-cve-2024-4741-ssl_free_buffers/fixed.c
+24
View File
@@ -0,0 +1,24 @@
/* Provenance: openssl/openssl SSL_free_buffers (fixed).
* repo: openssl/openssl
* commit: b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d
* parent: ec559c2a6cca3fd4cedae5c47f2dfa38e5e24865
* commit_url: https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d
* cve: CVE-2024-4741
* license: Apache-2.0
* function: SSL_free_buffers
* relpath: ssl/ssl_lib.c
*/
int SSL_free_buffers(SSL *ssl)
{
RECORD_LAYER *rl = &ssl->rlayer;
if (RECORD_LAYER_read_pending(rl) || RECORD_LAYER_write_pending(rl))
return 0;
if (RECORD_LAYER_data_present(rl))
return 0;
RECORD_LAYER_release(rl);
return 1;
}
benchmarks/pairs/vfc/openssl-cve-2024-4741-ssl_free_buffers/vuln.c
+21
View File
@@ -0,0 +1,21 @@
/* Provenance: openssl/openssl SSL_free_buffers (vuln).
* repo: openssl/openssl
* commit: ec559c2a6cca3fd4cedae5c47f2dfa38e5e24865
* parent: ec559c2a6cca3fd4cedae5c47f2dfa38e5e24865
* commit_url: https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d
* cve: CVE-2024-4741
* license: Apache-2.0
* function: SSL_free_buffers
* relpath: ssl/ssl_lib.c
*/
int SSL_free_buffers(SSL *ssl)
{
RECORD_LAYER *rl = &ssl->rlayer;
if (RECORD_LAYER_read_pending(rl) || RECORD_LAYER_write_pending(rl))
return 0;
RECORD_LAYER_release(rl);
return 1;
}