mirror of
https://github.com/norandom/OpenUltraSAST.git
synced 2026-10-18 04:29:27 +00:00
Marius Ciepluch
1ae41eea19
Regex inventory stays the proposer. MAP attaches promote/demote/unadjudicated/coverage from intra-file taint (tree-sitter when a grammar parses, Python ast as last resort). Deep sandboxes promotions only, ordered by the existing heuristic ranker plus optional OpenRouter mechanism recall. The SAST pair slice scores overlay outcomes; the stage-1 detection gate and local pair gate stay inventory-only.
13 lines
445 B
C
13 lines
445 B
C
/* Juliet CWE-134 flow variant 01 — bad sink only.
|
|
* Upstream: testcases/CWE134_Uncontrolled_Format_String/s01/
|
|
* CWE134_Uncontrolled_Format_String__char_console_printf_01.c
|
|
* https://github.com/arichardson/juliet-test-suite-c (NIST Juliet 1.3, CC0)
|
|
*/
|
|
#include <stdio.h>
|
|
|
|
void CWE134_char_console_printf_01_bad(char *data)
|
|
{
|
|
/* POTENTIAL FLAW: Do not specify the format allowing a format string vulnerability */
|
|
printf(data);
|
|
}
|