mirror of
https://github.com/norandom/OpenUltraSAST.git
synced 2026-10-16 03:49:26 +00:00
Marius Ciepluch
1ae41eea19
Regex inventory stays the proposer. MAP attaches promote/demote/unadjudicated/coverage from intra-file taint (tree-sitter when a grammar parses, Python ast as last resort). Deep sandboxes promotions only, ordered by the existing heuristic ranker plus optional OpenRouter mechanism recall. The SAST pair slice scores overlay outcomes; the stage-1 detection gate and local pair gate stay inventory-only.
11 lines
356 B
C
11 lines
356 B
C
/* Juliet CWE-121 goodG2B still copies with strcpy (larger buffer, same sink).
|
|
* Regex SAST is expected to keep firing — that is the Juliet goodG2B trap.
|
|
* Upstream: CWE121_Stack_Based_Buffer_Overflow__CWE193_char_declare_cpy_01.c
|
|
*/
|
|
#include <string.h>
|
|
|
|
void CWE121_char_declare_cpy_01_goodG2B(char *data, char *source)
|
|
{
|
|
strcpy(data, source);
|
|
}
|