marius/Open_Ultra_SAST
1
0
Fork 0
mirror of https://github.com/norandom/OpenUltraSAST.git synced 2026-10-20 21:49:28 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat(real-world-vfc-slice): add labeled OpenSSL/Firefox/Chromium/curl pair corpus

Browse Source 
Harvest 176 isolated vuln-vs-fix functions (109 CVEs, 352 training rows)
into benchmarks/pairs/vfc with provenance and a JSONL training manifest.
Score the slice as an honesty dashboard (ousast pairs --slice vfc);
keep the pair gate on the local fixtures only.
This commit is contained in:
Marius Ciepluch
2026-09-04 16:45:38 +02:00
parent e9f185da59
commit 0116f9bea6
372 changed files with 49209 additions and 49 deletions
Download Patch File Download Diff File Expand all files Collapse all files
benchmarks/pairs/vfc/openssl-cve-2025-15467/fixed.c
+30
View File
@@ -0,0 +1,30 @@
/* Provenance: openssl/openssl evp_cipher_get_asn1_aead_params (fixed).
* repo: openssl/openssl
* commit: ce39170276daec87f55c39dad1f629b56344429e
* parent: 3250efdfe99d2d7fe4fb05231add7fba864b7653
* commit_url: https://github.com/openssl/openssl/commit/ce39170276daec87f55c39dad1f629b56344429e
* cve: CVE-2025-15467
* license: Apache-2.0
* function: evp_cipher_get_asn1_aead_params
* relpath: crypto/evp/evp_lib.c
*/
int evp_cipher_get_asn1_aead_params(EVP_CIPHER_CTX *c, ASN1_TYPE *type,
evp_cipher_aead_asn1_params *asn1_params)
{
int i = 0;
long tl;
unsigned char iv[EVP_MAX_IV_LENGTH];
if (type == NULL || asn1_params == NULL)
return 0;
i = ossl_asn1_type_get_octetstring_int(type, &tl, iv, EVP_MAX_IV_LENGTH);
if (i <= 0 || i > EVP_MAX_IV_LENGTH)
return -1;
memcpy(asn1_params->iv, iv, i);
asn1_params->iv_len = i;
return i;
}
benchmarks/pairs/vfc/openssl-cve-2025-15467/vuln.c
+31
View File
@@ -0,0 +1,31 @@
/* Provenance: openssl/openssl evp_cipher_get_asn1_aead_params (vuln).
* repo: openssl/openssl
* commit: 3250efdfe99d2d7fe4fb05231add7fba864b7653
* parent: 3250efdfe99d2d7fe4fb05231add7fba864b7653
* commit_url: https://github.com/openssl/openssl/commit/ce39170276daec87f55c39dad1f629b56344429e
* cve: CVE-2025-15467
* license: Apache-2.0
* function: evp_cipher_get_asn1_aead_params
* relpath: crypto/evp/evp_lib.c
*/
int evp_cipher_get_asn1_aead_params(EVP_CIPHER_CTX *c, ASN1_TYPE *type,
evp_cipher_aead_asn1_params *asn1_params)
{
int i = 0;
long tl;
unsigned char iv[EVP_MAX_IV_LENGTH];
if (type == NULL || asn1_params == NULL)
return 0;
i = ossl_asn1_type_get_octetstring_int(type, &tl, NULL, EVP_MAX_IV_LENGTH);
if (i <= 0)
return -1;
ossl_asn1_type_get_octetstring_int(type, &tl, iv, i);
memcpy(asn1_params->iv, iv, i);
asn1_params->iv_len = i;
return i;
}