{
"ground_truth": [],
"labels": [
{
"rule": "EXP33-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 88,
"verdict": "FP",
"confidence": "high",
"reason": "variable filled by luaL_checklstring output param; sqc misses assignment"
},
{
"rule": "EXP33-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 101,
"verdict": "FP",
"confidence": "high",
"reason": "variable filled by luaL_checklstring output param; sqc misses assignment"
},
{
"rule": "EXP34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 103,
"verdict": "FP",
"confidence": "high",
"reason": "pointer from luaL_checklstring/buffinitsize/prepbuffsize never NULL (OOM raises)"
},
{
"rule": "EXP34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 103,
"verdict": "FP",
"confidence": "high",
"reason": "pointer from luaL_checklstring/buffinitsize/prepbuffsize never NULL (OOM raises)"
},
{
"rule": "EXP33-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 114,
"verdict": "FP",
"confidence": "high",
"reason": "variable filled by luaL_checklstring output param; sqc misses assignment"
},
{
"rule": "EXP34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 116,
"verdict": "FP",
"confidence": "high",
"reason": "pointer from luaL_checklstring/buffinitsize/prepbuffsize never NULL (OOM raises)"
},
{
"rule": "STR37-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 116,
"verdict": "FP",
"confidence": "high",
"reason": "argument already cast to unsigned char via cast_uchar macro at call site"
},
{
"rule": "EXP34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 116,
"verdict": "FP",
"confidence": "high",
"reason": "pointer from luaL_checklstring/buffinitsize/prepbuffsize never NULL (OOM raises)"
},
{
"rule": "EXP33-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 127,
"verdict": "FP",
"confidence": "high",
"reason": "variable filled by luaL_checklstring output param; sqc misses assignment"
},
{
"rule": "EXP34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 129,
"verdict": "FP",
"confidence": "high",
"reason": "pointer from luaL_checklstring/buffinitsize/prepbuffsize never NULL (OOM raises)"
},
{
"rule": "STR37-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 129,
"verdict": "FP",
"confidence": "high",
"reason": "argument already cast to unsigned char via cast_uchar macro at call site"
},
{
"rule": "EXP34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 129,
"verdict": "FP",
"confidence": "high",
"reason": "pointer from luaL_checklstring/buffinitsize/prepbuffsize never NULL (OOM raises)"
},
{
"rule": "EXP33-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 144,
"verdict": "FP",
"confidence": "high",
"reason": "variable filled by luaL_checklstring output param; sqc misses assignment"
},
{
"rule": "INT14-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 144,
"verdict": "FP",
"confidence": "high",
"reason": "mixed bitwise/arithmetic is intentional packed-integer manipulation"
},
{
"rule": "INT14-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 144,
"verdict": "FP",
"confidence": "high",
"reason": "mixed bitwise/arithmetic is intentional packed-integer manipulation"
},
{
"rule": "EXP33-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 144,
"verdict": "FP",
"confidence": "high",
"reason": "variable filled by luaL_checklstring output param; sqc misses assignment"
},
{
"rule": "ARR38-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 154,
"verdict": "FP",
"confidence": "high",
"reason": "memcpy sizes validated by overflow guard at line 146; buffer pre-allocated"
},
{
"rule": "EXP05-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 154,
"verdict": "FP",
"confidence": "high",
"reason": "s/sep are source args to memcpy; no const is cast away from a write target"
},
{
"rule": "EXP34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 154,
"verdict": "FP",
"confidence": "high",
"reason": "pointer from luaL_checklstring/buffinitsize/prepbuffsize never NULL (OOM raises)"
},
{
"rule": "EXP34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 154,
"verdict": "FP",
"confidence": "high",
"reason": "pointer from luaL_checklstring/buffinitsize/prepbuffsize never NULL (OOM raises)"
},
{
"rule": "ARR38-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 156,
"verdict": "FP",
"confidence": "high",
"reason": "memcpy sizes validated by overflow guard at line 146; buffer pre-allocated"
},
{
"rule": "EXP05-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 156,
"verdict": "FP",
"confidence": "high",
"reason": "s/sep are source args to memcpy; no const is cast away from a write target"
},
{
"rule": "EXP34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 156,
"verdict": "FP",
"confidence": "high",
"reason": "pointer from luaL_checklstring/buffinitsize/prepbuffsize never NULL (OOM raises)"
},
{
"rule": "ARR38-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 159,
"verdict": "FP",
"confidence": "high",
"reason": "memcpy sizes validated by overflow guard at line 146; buffer pre-allocated"
},
{
"rule": "EXP05-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 159,
"verdict": "FP",
"confidence": "high",
"reason": "s/sep are source args to memcpy; no const is cast away from a write target"
},
{
"rule": "DCL00-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 169,
"verdict": "FP",
"confidence": "high",
"reason": "const-qualify advisory; not a defect in this context"
},
{
"rule": "EXP33-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 170,
"verdict": "FP",
"confidence": "high",
"reason": "variable filled by luaL_checklstring output param; sqc misses assignment"
},
{
"rule": "INT00-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 176,
"verdict": "FP",
"confidence": "high",
"reason": "guarded: posi > pose check returns early; subtraction cannot underflow"
},
{
"rule": "EXP34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 179,
"verdict": "FP",
"confidence": "high",
"reason": "pointer from luaL_checklstring/buffinitsize/prepbuffsize never NULL (OOM raises)"
},
{
"rule": "DCL00-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 190,
"verdict": "FP",
"confidence": "high",
"reason": "const-qualify advisory; not a defect in this context"
},
{
"rule": "EXP34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 192,
"verdict": "FP",
"confidence": "high",
"reason": "pointer from luaL_checklstring/buffinitsize/prepbuffsize never NULL (OOM raises)"
},
{
"rule": "INT32-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 192,
"verdict": "FP",
"confidence": "high",
"reason": "i starts at 1, minimum of i-1 is 0; no overflow possible"
},
{
"rule": "API05-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 211,
"verdict": "FP",
"confidence": "high",
"reason": "Lua uses C89-style pointer params; conformant array syntax not applicable"
},
{
"rule": "API05-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 211,
"verdict": "FP",
"confidence": "high",
"reason": "Lua uses C89-style pointer params; conformant array syntax not applicable"
},
{
"rule": "MEM10-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 217,
"verdict": "FP",
"confidence": "high",
"reason": "advisory: centralize NULL checks; not a defect"
},
{
"rule": "ARR02-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 252,
"verdict": "FP",
"confidence": "high",
"reason": "implicit-size array with full initializer; common C idiom, not a defect"
},
{
"rule": "EXP33-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 267,
"verdict": "FP",
"confidence": "high",
"reason": "variable filled by luaL_checklstring output param; sqc misses assignment"
},
{
"rule": "EXP30-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 283,
"verdict": "FP",
"confidence": "high",
"reason": "function args to variadic luaL_error; luaL_typename has no stack side effects"
},
{
"rule": "EXP43-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 294,
"verdict": "FP",
"confidence": "high",
"reason": "trymt params are not restrict-qualified; no restrict aliasing issue"
},
{
"rule": "ARR02-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 332,
"verdict": "FP",
"confidence": "high",
"reason": "implicit-size array with full initializer; common C idiom, not a defect"
},
{
"rule": "DCL13-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 388,
"verdict": "FP",
"confidence": "high",
"reason": "const parameter advisory; function signature is part of internal API"
},
{
"rule": "DCL13-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 397,
"verdict": "FP",
"confidence": "high",
"reason": "const parameter advisory; function signature is part of internal API"
},
{
"rule": "DCL13-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 405,
"verdict": "FP",
"confidence": "high",
"reason": "const parameter advisory; function signature is part of internal API"
},
{
"rule": "CON43-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 406,
"verdict": "FP",
"confidence": "high",
"reason": "single-threaded interpreter; no concurrency; double-fetch pattern inapplicable"
},
{
"rule": "EXP30-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 417,
"verdict": "FP",
"confidence": "high",
"reason": "p++ then p in && operands; sequence point at && makes this well-defined"
},
{
"rule": "STR37-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 431,
"verdict": "FP",
"confidence": "high",
"reason": "argument already cast to unsigned char via cast_uchar macro at call site"
},
{
"rule": "STR37-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 432,
"verdict": "FP",
"confidence": "high",
"reason": "argument already cast to unsigned char via cast_uchar macro at call site"
},
{
"rule": "STR37-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 433,
"verdict": "FP",
"confidence": "high",
"reason": "argument already cast to unsigned char via cast_uchar macro at call site"
},
{
"rule": "STR37-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 434,
"verdict": "FP",
"confidence": "high",
"reason": "argument already cast to unsigned char via cast_uchar macro at call site"
},
{
"rule": "STR37-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 435,
"verdict": "FP",
"confidence": "high",
"reason": "argument already cast to unsigned char via cast_uchar macro at call site"
},
{
"rule": "STR37-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 436,
"verdict": "FP",
"confidence": "high",
"reason": "argument already cast to unsigned char via cast_uchar macro at call site"
},
{
"rule": "STR37-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 437,
"verdict": "FP",
"confidence": "high",
"reason": "argument already cast to unsigned char via cast_uchar macro at call site"
},
{
"rule": "STR37-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 438,
"verdict": "FP",
"confidence": "high",
"reason": "argument already cast to unsigned char via cast_uchar macro at call site"
},
{
"rule": "STR37-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 439,
"verdict": "FP",
"confidence": "high",
"reason": "argument already cast to unsigned char via cast_uchar macro at call site"
},
{
"rule": "STR37-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 440,
"verdict": "FP",
"confidence": "high",
"reason": "argument already cast to unsigned char via cast_uchar macro at call site"
},
{
"rule": "STR37-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 441,
"verdict": "FP",
"confidence": "high",
"reason": "argument already cast to unsigned char via cast_uchar macro at call site"
},
{
"rule": "STR37-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 445,
"verdict": "FP",
"confidence": "high",
"reason": "argument already cast to unsigned char via cast_uchar macro at call site"
},
{
"rule": "DCL13-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 472,
"verdict": "FP",
"confidence": "high",
"reason": "const parameter advisory; function signature is part of internal API"
},
{
"rule": "DCL00-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 477,
"verdict": "FP",
"confidence": "high",
"reason": "const-qualify advisory; not a defect in this context"
},
{
"rule": "STR34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 477,
"verdict": "FP",
"confidence": "high",
"reason": "char used intentionally as byte index; cast_uchar applied at all critical sites"
},
{
"rule": "STR34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 477,
"verdict": "FP",
"confidence": "high",
"reason": "char used intentionally as byte index; cast_uchar applied at all critical sites"
},
{
"rule": "STR34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 477,
"verdict": "FP",
"confidence": "high",
"reason": "char used intentionally as byte index; cast_uchar applied at all critical sites"
},
{
"rule": "STR34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 477,
"verdict": "FP",
"confidence": "high",
"reason": "char used intentionally as byte index; cast_uchar applied at all critical sites"
},
{
"rule": "CON43-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 478,
"verdict": "FP",
"confidence": "high",
"reason": "single-threaded interpreter; no concurrency; double-fetch pattern inapplicable"
},
{
"rule": "DCL13-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 488,
"verdict": "FP",
"confidence": "high",
"reason": "const parameter advisory; function signature is part of internal API"
},
{
"rule": "STR34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 494,
"verdict": "FP",
"confidence": "high",
"reason": "char used intentionally as byte index; cast_uchar applied at all critical sites"
},
{
"rule": "STR34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 494,
"verdict": "FP",
"confidence": "high",
"reason": "char used intentionally as byte index; cast_uchar applied at all critical sites"
},
{
"rule": "STR34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 494,
"verdict": "FP",
"confidence": "high",
"reason": "char used intentionally as byte index; cast_uchar applied at all critical sites"
},
{
"rule": "STR34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 494,
"verdict": "FP",
"confidence": "high",
"reason": "char used intentionally as byte index; cast_uchar applied at all critical sites"
},
{
"rule": "STR34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 494,
"verdict": "FP",
"confidence": "high",
"reason": "char used intentionally as byte index; cast_uchar applied at all critical sites"
},
{
"rule": "STR34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 494,
"verdict": "FP",
"confidence": "high",
"reason": "char used intentionally as byte index; cast_uchar applied at all critical sites"
},
{
"rule": "DCL00-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 495,
"verdict": "FP",
"confidence": "high",
"reason": "const-qualify advisory; not a defect in this context"
},
{
"rule": "STR34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 495,
"verdict": "FP",
"confidence": "high",
"reason": "char used intentionally as byte index; cast_uchar applied at all critical sites"
},
{
"rule": "STR34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 495,
"verdict": "FP",
"confidence": "high",
"reason": "char used intentionally as byte index; cast_uchar applied at all critical sites"
},
{
"rule": "MSC04-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 508,
"verdict": "FP",
"confidence": "high",
"reason": "mutual recursion is intentional design of pattern-matching engine"
},
{
"rule": "EXP33-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 515,
"verdict": "FP",
"confidence": "high",
"reason": "match() is a function call not a variable; forward declaration is fine"
},
{
"rule": "MSC04-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 523,
"verdict": "FP",
"confidence": "high",
"reason": "mutual recursion is intentional design of pattern-matching engine"
},
{
"rule": "MSC37-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 523,
"verdict": "FP",
"confidence": "high",
"reason": "for(;;) loop with explicit return on all paths; compiler sees all returns"
},
{
"rule": "EXP33-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 526,
"verdict": "FP",
"confidence": "high",
"reason": "match() is a function call not a variable; forward declaration is fine"
},
{
"rule": "MSC04-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 536,
"verdict": "FP",
"confidence": "high",
"reason": "mutual recursion is intentional design of pattern-matching engine"
},
{
"rule": "EXP33-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 544,
"verdict": "FP",
"confidence": "high",
"reason": "match() is a function call not a variable; forward declaration is fine"
},
{
"rule": "DCL30-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 546,
"verdict": "FP",
"confidence": "high",
"reason": "res stores pointer into original string buffer, not dangling local data"
},
{
"rule": "MSC04-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 550,
"verdict": "FP",
"confidence": "high",
"reason": "mutual recursion is intentional design of pattern-matching engine"
},
{
"rule": "EXP33-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 555,
"verdict": "FP",
"confidence": "high",
"reason": "match() is a function call not a variable; forward declaration is fine"
},
{
"rule": "DCL30-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 557,
"verdict": "FP",
"confidence": "high",
"reason": "res stores pointer into original string buffer, not dangling local data"
},
{
"rule": "MSC04-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 572,
"verdict": "FP",
"confidence": "high",
"reason": "mutual recursion is intentional design of pattern-matching engine"
},
{
"rule": "CON43-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 577,
"verdict": "FP",
"confidence": "high",
"reason": "single-threaded interpreter; no concurrency; double-fetch pattern inapplicable"
},
{
"rule": "CON43-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 596,
"verdict": "FP",
"confidence": "high",
"reason": "single-threaded interpreter; no concurrency; double-fetch pattern inapplicable"
},
{
"rule": "CON43-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 642,
"verdict": "FP",
"confidence": "high",
"reason": "single-threaded interpreter; no concurrency; double-fetch pattern inapplicable"
},
{
"rule": "EXP33-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 645,
"verdict": "FP",
"confidence": "high",
"reason": "match() is a function call not a variable; forward declaration is fine"
},
{
"rule": "API05-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 675,
"verdict": "FP",
"confidence": "high",
"reason": "Lua uses C89-style pointer params; conformant array syntax not applicable"
},
{
"rule": "API05-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 676,
"verdict": "FP",
"confidence": "high",
"reason": "Lua uses C89-style pointer params; conformant array syntax not applicable"
},
{
"rule": "EXP34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 685,
"verdict": "FP",
"confidence": "high",
"reason": "pointer from luaL_checklstring/buffinitsize/prepbuffsize never NULL (OOM raises)"
},
{
"rule": "DCL13-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 704,
"verdict": "FP",
"confidence": "high",
"reason": "const parameter advisory; function signature is part of internal API"
},
{
"rule": "STR34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 709,
"verdict": "FP",
"confidence": "high",
"reason": "char used intentionally as byte index; cast_uchar applied at all critical sites"
},
{
"rule": "ARR36-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 710,
"verdict": "FP",
"confidence": "high",
"reason": "both pointers are within same string buffer (src_init..src_end or capture range)"
},
{
"rule": "STR34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 714,
"verdict": "FP",
"confidence": "high",
"reason": "char used intentionally as byte index; cast_uchar applied at all critical sites"
},
{
"rule": "STR34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 731,
"verdict": "FP",
"confidence": "high",
"reason": "char used intentionally as byte index; cast_uchar applied at all critical sites"
},
{
"rule": "STR34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 731,
"verdict": "FP",
"confidence": "high",
"reason": "char used intentionally as byte index; cast_uchar applied at all critical sites"
},
{
"rule": "STR34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 731,
"verdict": "FP",
"confidence": "high",
"reason": "char used intentionally as byte index; cast_uchar applied at all critical sites"
},
{
"rule": "STR34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 731,
"verdict": "FP",
"confidence": "high",
"reason": "char used intentionally as byte index; cast_uchar applied at all critical sites"
},
{
"rule": "STR34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 731,
"verdict": "FP",
"confidence": "high",
"reason": "char used intentionally as byte index; cast_uchar applied at all critical sites"
},
{
"rule": "EXP33-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 733,
"verdict": "FP",
"confidence": "high",
"reason": "variable is initialized before use; sqc false-positive on output param pattern"
},
{
"rule": "STR34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 740,
"verdict": "FP",
"confidence": "high",
"reason": "char used intentionally as byte index; cast_uchar applied at all critical sites"
},
{
"rule": "STR34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 740,
"verdict": "FP",
"confidence": "high",
"reason": "char used intentionally as byte index; cast_uchar applied at all critical sites"
},
{
"rule": "API05-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 749,
"verdict": "FP",
"confidence": "high",
"reason": "Lua uses C89-style pointer params; conformant array syntax not applicable"
},
{
"rule": "DCL13-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 763,
"verdict": "FP",
"confidence": "high",
"reason": "const parameter advisory; function signature is part of internal API"
},
{
"rule": "API05-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 764,
"verdict": "FP",
"confidence": "high",
"reason": "Lua uses C89-style pointer params; conformant array syntax not applicable"
},
{
"rule": "API05-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 764,
"verdict": "FP",
"confidence": "high",
"reason": "Lua uses C89-style pointer params; conformant array syntax not applicable"
},
{
"rule": "EXP33-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 786,
"verdict": "FP",
"confidence": "high",
"reason": "variable is initialized before use; sqc false-positive on output param pattern"
},
{
"rule": "EXP33-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 792,
"verdict": "FP",
"confidence": "high",
"reason": "variable is initialized before use; sqc false-positive on output param pattern"
},
{
"rule": "EXP34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 804,
"verdict": "FP",
"confidence": "high",
"reason": "pointer from luaL_checklstring/buffinitsize/prepbuffsize never NULL (OOM raises)"
},
{
"rule": "STR34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 804,
"verdict": "FP",
"confidence": "high",
"reason": "char used intentionally as byte index; cast_uchar applied at all critical sites"
},
{
"rule": "STR34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 804,
"verdict": "FP",
"confidence": "high",
"reason": "char used intentionally as byte index; cast_uchar applied at all critical sites"
},
{
"rule": "STR34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 804,
"verdict": "FP",
"confidence": "high",
"reason": "char used intentionally as byte index; cast_uchar applied at all critical sites"
},
{
"rule": "STR34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 804,
"verdict": "FP",
"confidence": "high",
"reason": "char used intentionally as byte index; cast_uchar applied at all critical sites"
},
{
"rule": "EXP33-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 812,
"verdict": "FP",
"confidence": "high",
"reason": "match() is a function call not a variable; forward declaration is fine"
},
{
"rule": "EXP34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 850,
"verdict": "FP",
"confidence": "high",
"reason": "pointer from luaL_checklstring/buffinitsize/prepbuffsize never NULL (OOM raises)"
},
{
"rule": "EXP30-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 854,
"verdict": "FP",
"confidence": "high",
"reason": "assignment in condition is well-defined; sequence point before &&"
},
{
"rule": "EXP33-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 854,
"verdict": "FP",
"confidence": "high",
"reason": "match() is a function call not a variable; forward declaration is fine"
},
{
"rule": "EXP33-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 854,
"verdict": "FP",
"confidence": "high",
"reason": "variable is initialized before use; sqc false-positive on output param pattern"
},
{
"rule": "EXP33-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 867,
"verdict": "FP",
"confidence": "high",
"reason": "variable is initialized before use; sqc false-positive on output param pattern"
},
{
"rule": "EXP34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 873,
"verdict": "FP",
"confidence": "high",
"reason": "pointer from luaL_checklstring/buffinitsize/prepbuffsize never NULL (OOM raises)"
},
{
"rule": "EXP33-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 873,
"verdict": "FP",
"confidence": "high",
"reason": "variable is initialized before use; sqc false-positive on output param pattern"
},
{
"rule": "ARR30-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 886,
"verdict": "FP",
"confidence": "high",
"reason": "memchr bounded by l; loop reduces l; no OOB possible"
},
{
"rule": "EXP33-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 886,
"verdict": "FP",
"confidence": "high",
"reason": "variable filled by luaL_checklstring output param; sqc misses assignment"
},
{
"rule": "EXP34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 889,
"verdict": "FP",
"confidence": "high",
"reason": "pointer from luaL_checklstring/buffinitsize/prepbuffsize never NULL (OOM raises)"
},
{
"rule": "ARR36-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 892,
"verdict": "FP",
"confidence": "high",
"reason": "both pointers are within same string buffer (src_init..src_end or capture range)"
},
{
"rule": "STR37-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 893,
"verdict": "FP",
"confidence": "high",
"reason": "argument already cast to unsigned char via cast_uchar macro at call site"
},
{
"rule": "EXP33-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 894,
"verdict": "FP",
"confidence": "high",
"reason": "variable is initialized before use; sqc false-positive on output param pattern"
},
{
"rule": "STR34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 895,
"verdict": "FP",
"confidence": "high",
"reason": "char used intentionally as byte index; cast_uchar applied at all critical sites"
},
{
"rule": "STR34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 895,
"verdict": "FP",
"confidence": "high",
"reason": "char used intentionally as byte index; cast_uchar applied at all critical sites"
},
{
"rule": "STR34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 895,
"verdict": "FP",
"confidence": "high",
"reason": "char used intentionally as byte index; cast_uchar applied at all critical sites"
},
{
"rule": "STR34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 895,
"verdict": "FP",
"confidence": "high",
"reason": "char used intentionally as byte index; cast_uchar applied at all critical sites"
},
{
"rule": "STR34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 895,
"verdict": "FP",
"confidence": "high",
"reason": "char used intentionally as byte index; cast_uchar applied at all critical sites"
},
{
"rule": "STR34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 895,
"verdict": "FP",
"confidence": "high",
"reason": "char used intentionally as byte index; cast_uchar applied at all critical sites"
},
{
"rule": "STR34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 895,
"verdict": "FP",
"confidence": "high",
"reason": "char used intentionally as byte index; cast_uchar applied at all critical sites"
},
{
"rule": "STR34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 895,
"verdict": "FP",
"confidence": "high",
"reason": "char used intentionally as byte index; cast_uchar applied at all critical sites"
},
{
"rule": "STR34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 895,
"verdict": "FP",
"confidence": "high",
"reason": "char used intentionally as byte index; cast_uchar applied at all critical sites"
},
{
"rule": "ARR36-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 938,
"verdict": "FP",
"confidence": "high",
"reason": "both pointers are within same string buffer (src_init..src_end or capture range)"
},
{
"rule": "EXP33-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 958,
"verdict": "FP",
"confidence": "high",
"reason": "variable filled by luaL_checklstring output param; sqc misses assignment"
},
{
"rule": "EXP34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 959,
"verdict": "FP",
"confidence": "high",
"reason": "pointer from luaL_checklstring/buffinitsize/prepbuffsize never NULL (OOM raises)"
},
{
"rule": "STR34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 959,
"verdict": "FP",
"confidence": "high",
"reason": "char used intentionally as byte index; cast_uchar applied at all critical sites"
},
{
"rule": "STR34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 959,
"verdict": "FP",
"confidence": "high",
"reason": "char used intentionally as byte index; cast_uchar applied at all critical sites"
},
{
"rule": "STR34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 959,
"verdict": "FP",
"confidence": "high",
"reason": "char used intentionally as byte index; cast_uchar applied at all critical sites"
},
{
"rule": "STR34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 959,
"verdict": "FP",
"confidence": "high",
"reason": "char used intentionally as byte index; cast_uchar applied at all critical sites"
},
{
"rule": "EXP33-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 971,
"verdict": "FP",
"confidence": "high",
"reason": "variable is initialized before use; sqc false-positive on output param pattern"
},
{
"rule": "EXP30-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 975,
"verdict": "FP",
"confidence": "high",
"reason": "assignment in condition is well-defined; sequence point before &&"
},
{
"rule": "EXP33-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 975,
"verdict": "FP",
"confidence": "high",
"reason": "match() is a function call not a variable; forward declaration is fine"
},
{
"rule": "EXP33-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 975,
"verdict": "FP",
"confidence": "high",
"reason": "variable is initialized before use; sqc false-positive on output param pattern"
},
{
"rule": "ARR30-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1029,
"verdict": "FP",
"confidence": "high",
"reason": "check_capture validates index before array access"
},
{
"rule": "INT14-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1051,
"verdict": "FP",
"confidence": "high",
"reason": "mixed bitwise/arithmetic is intentional packed-integer manipulation"
},
{
"rule": "INT34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1051,
"verdict": "FP",
"confidence": "high",
"reason": "L_NBFD is 1-4; shift of 1 << L_NBFD on int is within range"
},
{
"rule": "EXP33-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1052,
"verdict": "FP",
"confidence": "high",
"reason": "variable is initialized before use; sqc false-positive on output param pattern"
},
{
"rule": "ERR02-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1059,
"verdict": "FP",
"confidence": "high",
"reason": "sprintf return value IS used (added to n); no unchecked return"
},
{
"rule": "INT00-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1059,
"verdict": "FP",
"confidence": "high",
"reason": "subtraction is guard-protected by preceding bounds check"
},
{
"rule": "STR34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1068,
"verdict": "FP",
"confidence": "high",
"reason": "char used intentionally as byte index; cast_uchar applied at all critical sites"
},
{
"rule": "STR37-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1072,
"verdict": "FP",
"confidence": "high",
"reason": "argument already cast to unsigned char via cast_uchar macro at call site"
},
{
"rule": "API05-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1132,
"verdict": "FP",
"confidence": "high",
"reason": "Lua uses C89-style pointer params; conformant array syntax not applicable"
},
{
"rule": "STR37-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1139,
"verdict": "FP",
"confidence": "high",
"reason": "argument already cast to unsigned char via cast_uchar macro at call site"
},
{
"rule": "STR37-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1141,
"verdict": "FP",
"confidence": "high",
"reason": "argument already cast to unsigned char via cast_uchar macro at call site"
},
{
"rule": "STR34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1170,
"verdict": "FP",
"confidence": "high",
"reason": "char used intentionally as byte index; cast_uchar applied at all critical sites"
},
{
"rule": "STR34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1176,
"verdict": "FP",
"confidence": "high",
"reason": "char used intentionally as byte index; cast_uchar applied at all critical sites"
},
{
"rule": "STR37-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1221,
"verdict": "FP",
"confidence": "high",
"reason": "argument already cast to unsigned char via cast_uchar macro at call site"
},
{
"rule": "STR37-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1223,
"verdict": "FP",
"confidence": "high",
"reason": "argument already cast to unsigned char via cast_uchar macro at call site"
},
{
"rule": "EXP34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1241,
"verdict": "FP",
"confidence": "high",
"reason": "pointer from luaL_checklstring/buffinitsize/prepbuffsize never NULL (OOM raises)"
},
{
"rule": "INT07-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1242,
"verdict": "FP",
"confidence": "high",
"reason": "char used as printable character comparison; advisory not a defect"
},
{
"rule": "STR37-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1246,
"verdict": "FP",
"confidence": "high",
"reason": "argument already cast to unsigned char via cast_uchar macro at call site"
},
{
"rule": "STR34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1258,
"verdict": "FP",
"confidence": "high",
"reason": "char used intentionally as byte index; cast_uchar applied at all critical sites"
},
{
"rule": "STR34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1263,
"verdict": "FP",
"confidence": "high",
"reason": "char used intentionally as byte index; cast_uchar applied at all critical sites"
},
{
"rule": "ARR38-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1264,
"verdict": "FP",
"confidence": "high",
"reason": "size validated before memcpy; buffer pre-allocated to sufficient size"
},
{
"rule": "STR31-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1264,
"verdict": "FP",
"confidence": "high",
"reason": "len < MAX_FORMAT-10 guard ensures form[MAX_FORMAT] has enough space"
},
{
"rule": "STR34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1274,
"verdict": "FP",
"confidence": "high",
"reason": "char used intentionally as byte index; cast_uchar applied at all critical sites"
},
{
"rule": "STR34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1275,
"verdict": "FP",
"confidence": "high",
"reason": "char used intentionally as byte index; cast_uchar applied at all critical sites"
},
{
"rule": "STR31-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1277,
"verdict": "FP",
"confidence": "high",
"reason": "addlenmod writes to pre-sized MAX_FORMAT buffer with computed offsets"
},
{
"rule": "EXP05-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1277,
"verdict": "FP",
"confidence": "high",
"reason": "cast is on already-non-const form buffer; no real const violation"
},
{
"rule": "EXP33-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1288,
"verdict": "FP",
"confidence": "high",
"reason": "sfl filled by luaL_checklstring output param before use"
},
{
"rule": "EXP34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1293,
"verdict": "FP",
"confidence": "high",
"reason": "pointer from luaL_checklstring/buffinitsize/prepbuffsize never NULL (OOM raises)"
},
{
"rule": "ENV01-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1298,
"verdict": "FP",
"confidence": "high",
"reason": "form[] is a local format buffer, not related to environment variables"
},
{
"rule": "CON43-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1305,
"verdict": "FP",
"confidence": "high",
"reason": "single-threaded interpreter; no concurrency; double-fetch pattern inapplicable"
},
{
"rule": "EXP34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1365,
"verdict": "FP",
"confidence": "high",
"reason": "pointer from luaL_checklstring/buffinitsize/prepbuffsize never NULL (OOM raises)"
},
{
"rule": "API05-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1459,
"verdict": "FP",
"confidence": "high",
"reason": "Lua uses C89-style pointer params; conformant array syntax not applicable"
},
{
"rule": "DCL13-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1476,
"verdict": "FP",
"confidence": "high",
"reason": "const parameter advisory; function signature is part of internal API"
},
{
"rule": "API05-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1476,
"verdict": "FP",
"confidence": "high",
"reason": "Lua uses C89-style pointer params; conformant array syntax not applicable"
},
{
"rule": "STR34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1477,
"verdict": "FP",
"confidence": "high",
"reason": "char used intentionally as byte index; cast_uchar applied at all critical sites"
},
{
"rule": "DCL13-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1488,
"verdict": "FP",
"confidence": "high",
"reason": "const parameter advisory; function signature is part of internal API"
},
{
"rule": "API05-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1498,
"verdict": "FP",
"confidence": "high",
"reason": "Lua uses C89-style pointer params; conformant array syntax not applicable"
},
{
"rule": "STR34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1501,
"verdict": "FP",
"confidence": "high",
"reason": "char used intentionally as byte index; cast_uchar applied at all critical sites"
},
{
"rule": "STR34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1501,
"verdict": "FP",
"confidence": "high",
"reason": "char used intentionally as byte index; cast_uchar applied at all critical sites"
},
{
"rule": "STR34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1501,
"verdict": "FP",
"confidence": "high",
"reason": "char used intentionally as byte index; cast_uchar applied at all critical sites"
},
{
"rule": "STR34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1501,
"verdict": "FP",
"confidence": "high",
"reason": "char used intentionally as byte index; cast_uchar applied at all critical sites"
},
{
"rule": "API05-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1551,
"verdict": "FP",
"confidence": "high",
"reason": "Lua uses C89-style pointer params; conformant array syntax not applicable"
},
{
"rule": "API05-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1552,
"verdict": "FP",
"confidence": "high",
"reason": "Lua uses C89-style pointer params; conformant array syntax not applicable"
},
{
"rule": "INT14-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1570,
"verdict": "FP",
"confidence": "high",
"reason": "mixed bitwise/arithmetic is intentional packed-integer manipulation"
},
{
"rule": "INT14-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1571,
"verdict": "FP",
"confidence": "high",
"reason": "mixed bitwise/arithmetic is intentional packed-integer manipulation"
},
{
"rule": "INT00-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1571,
"verdict": "FP",
"confidence": "high",
"reason": "szmoda = totalsize & (align-1) ensures szmoda < align; subtraction safe"
},
{
"rule": "EXP34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1588,
"verdict": "FP",
"confidence": "high",
"reason": "pointer from luaL_checklstring/buffinitsize/prepbuffsize never NULL (OOM raises)"
},
{
"rule": "INT13-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1588,
"verdict": "FP",
"confidence": "high",
"reason": "bitwise ops on int for byte masking; MC=(1<<NB)-1 makes sign bits zero"
},
{
"rule": "INT13-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1591,
"verdict": "FP",
"confidence": "high",
"reason": "bitwise ops on int for byte masking; MC=(1<<NB)-1 makes sign bits zero"
},
{
"rule": "MEM33-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1612,
"verdict": "FP",
"confidence": "high",
"reason": "copywithendian does byte-by-byte copy; no flexible array member involved"
},
{
"rule": "STR34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1612,
"verdict": "FP",
"confidence": "high",
"reason": "char used intentionally as byte index; cast_uchar applied at all critical sites"
},
{
"rule": "STR34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1612,
"verdict": "FP",
"confidence": "high",
"reason": "char used intentionally as byte index; cast_uchar applied at all critical sites"
},
{
"rule": "STR34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1612,
"verdict": "FP",
"confidence": "high",
"reason": "char used intentionally as byte index; cast_uchar applied at all critical sites"
},
{
"rule": "EXP33-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1630,
"verdict": "FP",
"confidence": "high",
"reason": "size/ntoalign filled by getdetails call before use"
},
{
"rule": "INT14-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1630,
"verdict": "FP",
"confidence": "high",
"reason": "mixed bitwise/arithmetic is intentional packed-integer manipulation"
},
{
"rule": "EXP33-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1630,
"verdict": "FP",
"confidence": "high",
"reason": "size/ntoalign filled by getdetails call before use"
},
{
"rule": "DCL02-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1638,
"verdict": "FP",
"confidence": "high",
"reason": "n and h are in different scopes; no real confusion risk"
},
{
"rule": "INT34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1640,
"verdict": "FP",
"confidence": "high",
"reason": "shift amount guarded by size < SZINT check; max shift fits in 64-bit type"
},
{
"rule": "DCL02-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1647,
"verdict": "FP",
"confidence": "high",
"reason": "n and h are in different scopes; no real confusion risk"
},
{
"rule": "INT34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1649,
"verdict": "FP",
"confidence": "high",
"reason": "shift amount guarded by size < SZINT check; max shift fits in 64-bit type"
},
{
"rule": "FLP34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1655,
"verdict": "FP",
"confidence": "high",
"reason": "float/double conversion is intentional pack format behavior; Lua validates via API"
},
{
"rule": "FLP34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1671,
"verdict": "FP",
"confidence": "high",
"reason": "float/double conversion is intentional pack format behavior; Lua validates via API"
},
{
"rule": "EXP34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1686,
"verdict": "FP",
"confidence": "high",
"reason": "pointer from luaL_checklstring/buffinitsize/prepbuffsize never NULL (OOM raises)"
},
{
"rule": "INT34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1695,
"verdict": "FP",
"confidence": "high",
"reason": "shift amount guarded by size < SZINT check; max shift fits in 64-bit type"
},
{
"rule": "EXP34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1706,
"verdict": "FP",
"confidence": "high",
"reason": "pointer from luaL_checklstring/buffinitsize/prepbuffsize never NULL (OOM raises)"
},
{
"rule": "EXP33-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1734,
"verdict": "FP",
"confidence": "high",
"reason": "size/ntoalign filled by getdetails call before use"
},
{
"rule": "EXP33-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1734,
"verdict": "FP",
"confidence": "high",
"reason": "size/ntoalign filled by getdetails call before use"
},
{
"rule": "INT14-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1758,
"verdict": "FP",
"confidence": "high",
"reason": "mixed bitwise/arithmetic is intentional packed-integer manipulation"
},
{
"rule": "INT14-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1759,
"verdict": "FP",
"confidence": "high",
"reason": "mixed bitwise/arithmetic is intentional packed-integer manipulation"
},
{
"rule": "INT34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1763,
"verdict": "FP",
"confidence": "high",
"reason": "shift amount guarded by size < SZINT check; max shift fits in 64-bit type"
},
{
"rule": "INT14-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1764,
"verdict": "FP",
"confidence": "high",
"reason": "mixed bitwise/arithmetic is intentional packed-integer manipulation"
},
{
"rule": "INT13-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1764,
"verdict": "FP",
"confidence": "high",
"reason": "bitwise ops on int for byte masking; MC=(1<<NB)-1 makes sign bits zero"
},
{
"rule": "EXP33-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1783,
"verdict": "FP",
"confidence": "high",
"reason": "ld filled by luaL_checklstring output param"
},
{
"rule": "DCL02-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1784,
"verdict": "FP",
"confidence": "high",
"reason": "n and h are in different scopes; no real confusion risk"
},
{
"rule": "EXP33-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1791,
"verdict": "FP",
"confidence": "high",
"reason": "size/ntoalign filled by getdetails call before use"
},
{
"rule": "EXP33-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1791,
"verdict": "FP",
"confidence": "high",
"reason": "size/ntoalign filled by getdetails call before use"
},
{
"rule": "STR34-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1836,
"verdict": "FP",
"confidence": "high",
"reason": "char used intentionally as byte index; cast_uchar applied at all critical sites"
},
{
"rule": "ARR02-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1856,
"verdict": "FP",
"confidence": "high",
"reason": "implicit-size array with full initializer; common C idiom, not a defect"
},
{
"rule": "STR30-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1887,
"verdict": "FP",
"confidence": "high",
"reason": "lua_setfield takes const char*; string literal is safe as key argument"
},
{
"rule": "API00-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1895,
"verdict": "FP",
"confidence": "high",
"reason": "L is internal VM state; always valid when Lua calls C functions"
},
{
"rule": "DCL15-C",
"file": "/home/brandon/toolchain/lua/lstrlib.c",
"line": 1895,
"verdict": "FP",
"confidence": "high",
"reason": "luaopen_string is LUAMOD_API public entry point declared in lualib.h"
}
],
"fns": [],
"files_reviewed": [
"/home/brandon/toolchain/lua/lstrlib.c"
],
"files_clean": [
"/home/brandon/toolchain/lua/lstrlib.c"
],
"summary": {
"ground_truth": 0,
"tp": 0,
"fp": 231,
"fn": 0
}
}