{"$schema":"https://json.schemastore.org/sarif-2.1.0.json","version":"2.1.0","runs":[{"tool":{"driver":{"name":"CodeQL","organization":"GitHub","semanticVersion":"2.27.2","notifications":[{"id":"cpp/baseline/expected-extracted-files","name":"cpp/baseline/expected-extracted-files","shortDescription":{"text":"Expected extracted files"},"fullDescription":{"text":"Files appearing in the source archive that are expected to be extracted."},"defaultConfiguration":{"enabled":true},"properties":{"tags":["expected-extracted-files","telemetry"]}},{"id":"cli/file-coverage-baseline","name":"cli/file-coverage-baseline","shortDescription":{"text":"File coverage baseline telemetry"},"fullDescription":{"text":"File coverage baseline telemetry"},"defaultConfiguration":{"enabled":true}},{"id":"cli/platform","name":"cli/platform","shortDescription":{"text":"Platform"},"fullDescription":{"text":"Platform"},"defaultConfiguration":{"enabled":true}},{"id":"cli/build-mode","name":"cli/build-mode","shortDescription":{"text":"Database build mode"},"fullDescription":{"text":"Database build mode"},"defaultConfiguration":{"enabled":true}},{"id":"cli/sip-enablement","name":"cli/sip-enablement","shortDescription":{"text":"macOS SIP enablement status"},"fullDescription":{"text":"macOS SIP enablement status"},"defaultConfiguration":{"enabled":true}},{"id":"cpp/autobuilder/buildless/mode-active","name":"cpp/autobuilder/buildless/mode-active","shortDescription":{"text":"C/C++ was extracted with build-mode set to 'none'"},"fullDescription":{"text":"C/C++ was extracted with build-mode set to 'none'"},"defaultConfiguration":{"enabled":true}},{"id":"cpp/autobuilder/summary","name":"cpp/autobuilder/summary","shortDescription":{"text":"autobuild summary"},"fullDescription":{"text":"autobuild summary"},"defaultConfiguration":{"enabled":true}},{"id":"cpp/extractor/platform","name":"cpp/extractor/platform","shortDescription":{"text":"C++ extractor platform telemetry"},"fullDescription":{"text":"C++ extractor platform telemetry"},"defaultConfiguration":{"enabled":true}},{"id":"cpp/bmn/standalone-extraction-started","name":"cpp/bmn/standalone-extraction-started","shortDescription":{"text":"Standalone extraction started"},"fullDescription":{"text":"Standalone extraction started"},"defaultConfiguration":{"enabled":true}},{"id":"cpp/bmn/overlay-information","name":"cpp/bmn/overlay-information","shortDescription":{"text":"Overlay information"},"fullDescription":{"text":"Overlay information"},"defaultConfiguration":{"enabled":true}},{"id":"cpp/bmn/platform-information","name":"cpp/bmn/platform-information","shortDescription":{"text":"Platform information"},"fullDescription":{"text":"Platform information"},"defaultConfiguration":{"enabled":true}},{"id":"cpp/bmn/compiler-information","name":"cpp/bmn/compiler-information","shortDescription":{"text":"Compiler information"},"fullDescription":{"text":"Compiler information"},"defaultConfiguration":{"enabled":true}},{"id":"cpp/bmn/folder-scan-information","name":"cpp/bmn/folder-scan-information","shortDescription":{"text":"Folder scan information"},"fullDescription":{"text":"Folder scan information"},"defaultConfiguration":{"enabled":true}},{"id":"cpp/bmn/extraction-information","name":"cpp/bmn/extraction-information","shortDescription":{"text":"Extraction information"},"fullDescription":{"text":"Extraction information"},"defaultConfiguration":{"enabled":true}},{"id":"cpp/bmn/standalone-extraction-completed","name":"cpp/bmn/standalone-extraction-completed","shortDescription":{"text":"Standalone extraction completed"},"fullDescription":{"text":"Standalone extraction completed"},"defaultConfiguration":{"enabled":true}},{"id":"cpp/extractor/summary","name":"cpp/extractor/summary","shortDescription":{"text":"C++ extractor telemetry"},"fullDescription":{"text":"C++ extractor telemetry"},"defaultConfiguration":{"enabled":true}}],"rules":[{"id":"dataflowbench/c-propagation-kernel","name":"dataflowbench/c-propagation-kernel","shortDescription":{"text":"DataFlowBench C propagation kernel"},"fullDescription":{"text":"Finds benchmark-controlled taint flow between the C kernel's source and sink functions."},"defaultConfiguration":{"enabled":true,"level":"warning"},"properties":{"tags":["security"],"description":"Finds benchmark-controlled taint flow between the C kernel's source and sink functions.","id":"dataflowbench/c-propagation-kernel","kind":"path-problem","name":"DataFlowBench C propagation kernel","precision":"high","problem.severity":"warning"}},{"id":"dataflowbench/c-kernel-endpoint-probe","name":"dataflowbench/c-kernel-endpoint-probe","shortDescription":{"text":"DataFlowBench C kernel endpoint-observation probe"},"fullDescription":{"text":"Reports every benchmark-controlled source and sink endpoint the extracted database resolves. The runner evaluates this probe alongside `CKernel.ql` so an empty kernel result set is read as a clean negative only when both endpoints were observed."},"defaultConfiguration":{"enabled":true,"level":"warning"},"properties":{"tags":["security"],"description":"Reports every benchmark-controlled source and sink endpoint the\n              extracted database resolves. The runner evaluates this probe\n              alongside `CKernel.ql` so an empty kernel result set is read as\n              a clean negative only when both endpoints were observed.","id":"dataflowbench/c-kernel-endpoint-probe","kind":"problem","name":"DataFlowBench C kernel endpoint-observation probe","precision":"high","problem.severity":"warning"}}]},"extensions":[{"name":"dataflowbench/codeql-cpp","semanticVersion":"0.0.1","locations":[{"uri":"file:///Users/dave/.codex/worktrees/9f01/dataflowbench/execution-state/v092/groups/series-01/codeql-c-kernel/attempt-01/adapters/codeql/v0.9.2/cpp/","description":{"text":"The QL pack root directory."},"properties":{"tags":["CodeQL/LocalPackRoot"]}},{"uri":"file:///Users/dave/.codex/worktrees/9f01/dataflowbench/execution-state/v092/groups/series-01/codeql-c-kernel/attempt-01/adapters/codeql/v0.9.2/cpp/qlpack.yml","description":{"text":"The QL pack definition file."},"properties":{"tags":["CodeQL/LocalPackDefinitionFile"]}}]},{"name":"codeql/cpp-all","semanticVersion":"12.2.0+a7057b836bf29767461026718b14d20790b9085f","locations":[{"uri":"file:///Users/dave/.codex/worktrees/9f01/dataflowbench/execution-state/v092/tools/codeql-packs/codeql/cpp-all/12.2.0/","description":{"text":"The QL pack root directory."},"properties":{"tags":["CodeQL/LocalPackRoot"]}},{"uri":"file:///Users/dave/.codex/worktrees/9f01/dataflowbench/execution-state/v092/tools/codeql-packs/codeql/cpp-all/12.2.0/qlpack.yml","description":{"text":"The QL pack definition file."},"properties":{"tags":["CodeQL/LocalPackDefinitionFile"]}}]}]},"invocations":[{"toolExecutionNotifications":[{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"map_iteration_positive.c","uriBaseId":"%SRCROOT%","index":0}}}],"message":{"text":""},"level":"none","descriptor":{"id":"cpp/baseline/expected-extracted-files","index":0},"properties":{"formattedMessage":{"text":""}}},{"message":{"text":""},"level":"none","timeUtc":"2026-10-20T02:52:46.517423Z","descriptor":{"id":"cli/file-coverage-baseline","index":1},"properties":{"attributes":{"durationMilliseconds":18},"visibility":{"statusPage":false,"telemetry":true}}},{"message":{"text":""},"level":"none","timeUtc":"2026-10-20T02:52:46.518208Z","descriptor":{"id":"cli/platform","index":2},"properties":{"attributes":{"arch":"aarch64","name":"Mac OS X","version":"27.0.1"},"visibility":{"statusPage":false,"telemetry":true}}},{"message":{"text":""},"level":"none","timeUtc":"2026-10-20T02:52:46.520650Z","descriptor":{"id":"cli/build-mode","index":3},"properties":{"attributes":{"buildMode":"none"},"visibility":{"statusPage":false,"telemetry":true}}},{"message":{"text":""},"level":"none","timeUtc":"2026-10-20T02:52:46.525400Z","descriptor":{"id":"cli/sip-enablement","index":4},"properties":{"attributes":{"isEnabled":true},"visibility":{"statusPage":false,"telemetry":true}}},{"message":{"text":"C/C++ was extracted with build-mode set to 'none'. This means that all C/C++ source in the working directory will be scanned.\n\nIf you would prefer to analyse using a build command, see the manual[1].\n\n[1]: https://docs.github.com/en/enterprise-server/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-the-codeql-workflow-for-compiled-languages#adding-build-steps-for-a-compiled-language","markdown":"C/C++ was extracted with build-mode set to 'none'. This means that all C/C++ source in the working directory will be scanned.\n\nIf you would prefer to analyse using a build command, see the manual[1].\n\n[1]: https://docs.github.com/en/enterprise-server/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-the-codeql-workflow-for-compiled-languages#adding-build-steps-for-a-compiled-language"},"level":"note","timeUtc":"2026-10-20T02:52:46Z","descriptor":{"id":"cpp/autobuilder/buildless/mode-active","index":5},"properties":{"visibility":{"statusPage":true,"telemetry":true}}},{"message":{"text":""},"level":"note","timeUtc":"2026-10-20T02:52:46Z","descriptor":{"id":"cpp/autobuilder/summary","index":6},"properties":{"attributes":{"tried":[]},"visibility":{"statusPage":false,"telemetry":true}}},{"message":{"text":"Internal telemetry for the C++ extractor.\n\nNo action needed.","markdown":"Internal telemetry for the C++ extractor.\n\nNo action needed."},"level":"note","timeUtc":"2026-10-20T02:52:46.958153Z","descriptor":{"id":"cpp/extractor/platform","index":7},"properties":{"attributes":{"armcc_version":0,"build_mode":"none","clang_version":210106,"compiler":"clang","compiler family":"Clang","gnu_version":80100,"microsoft_version":1926,"os":"macos","sizeof(int)":4,"sizeof(long long)":8,"sizeof(long)":8,"sizeof(nullptr)":8,"std_version":201710},"visibility":{"statusPage":false,"telemetry":true}}},{"message":{"text":""},"level":"note","timeUtc":"2026-10-20T02:52:46.571417Z","descriptor":{"id":"cpp/bmn/standalone-extraction-started","index":8},"properties":{"visibility":{"statusPage":false,"telemetry":true}}},{"message":{"text":""},"level":"note","timeUtc":"2026-10-20T02:52:46.571655Z","descriptor":{"id":"cpp/bmn/overlay-information","index":9},"properties":{"attributes":{"overlay_mode":"full","overlay_support_enabled":false},"visibility":{"statusPage":false,"telemetry":true}}},{"message":{"text":""},"level":"note","timeUtc":"2026-10-20T02:52:46.571775Z","descriptor":{"id":"cpp/bmn/platform-information","index":10},"properties":{"attributes":{"arch":"aarch64","family":"unix","num_cpus":10,"os":"macos"},"visibility":{"statusPage":false,"telemetry":true}}},{"message":{"text":""},"level":"note","timeUtc":"2026-10-20T02:52:46.753285Z","descriptor":{"id":"cpp/bmn/compiler-information","index":11},"properties":{"attributes":{"Clang C compiler version":"21.0.0","Clang C++ compiler version":"21.0.0","family":"Clang"},"visibility":{"statusPage":false,"telemetry":true}}},{"message":{"text":""},"level":"note","timeUtc":"2026-10-20T02:52:46.753724Z","descriptor":{"id":"cpp/bmn/folder-scan-information","index":12},"properties":{"attributes":{"folder_indexing_time_seconds":1.892080035759136E-4,"include_directories_added":0,"missing_includes":0,"project_stats":{"#all_files":1,"#header_files":0,"#source_files":1}},"visibility":{"statusPage":false,"telemetry":true}}},{"message":{"text":""},"level":"note","timeUtc":"2026-10-20T02:52:46.975591Z","descriptor":{"id":"cpp/bmn/extraction-information","index":13},"properties":{"attributes":{"extraction_cpu_time_seconds":0.22144529223442078,"extraction_status":{"#errors":0,"#partial":0,"#success":1,"#total":1,"all_counts":{"ExitCode: 0":1}},"slowest_extraction_args":["--mimic","/usr/bin/clang","-c","/Users/dave/.codex/worktrees/9f01/dataflowbench/execution-state/v092/groups/series-01/codeql-c-kernel/attempt-01/tmp/dataflowbench-codeql-workspaces/dfb-taint-c-map-iteration-positive/map_iteration_positive.c"],"slowest_extraction_time_seconds":0.22144529223442078,"total_extraction_time_seconds":0.22166649997234344},"visibility":{"statusPage":false,"telemetry":true}}},{"message":{"text":""},"level":"note","timeUtc":"2026-10-20T02:52:46.976260Z","descriptor":{"id":"cpp/bmn/standalone-extraction-completed","index":14},"properties":{"attributes":{"standalone_extraction_time_seconds":0},"visibility":{"statusPage":false,"telemetry":true}}},{"message":{"text":"Internal telemetry for the C++ extractor.\n\nNo action needed.","markdown":"Internal telemetry for the C++ extractor.\n\nNo action needed."},"level":"note","timeUtc":"2026-10-20T02:52:47.016977Z","descriptor":{"id":"cpp/extractor/summary","index":15},"properties":{"attributes":{"cache-hits":0,"cache-misses":1,"compilers":[{"program":"clang","version":"Apple clang version 21.0.0 (clang-2100.3.34.2)"}],"extractor-failures":0,"extractor-successes":1,"trap-caching":"disabled"},"visibility":{"statusPage":false,"telemetry":true}}}],"executionSuccessful":true}],"artifacts":[{"location":{"uri":"map_iteration_positive.c","uriBaseId":"%SRCROOT%","index":0}}],"results":[{"ruleId":"dataflowbench/c-propagation-kernel","ruleIndex":0,"rule":{"id":"dataflowbench/c-propagation-kernel","index":0},"message":{"text":"Controlled input reaches the benchmark sink."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"map_iteration_positive.c","uriBaseId":"%SRCROOT%","index":0},"region":{"startLine":22,"startColumn":37,"endColumn":42}}}],"partialFingerprints":{"primaryLocationLineHash":"9fb5cbeb18f38a77:1","primaryLocationStartColumnFingerprint":"24"},"codeFlows":[{"threadFlows":[{"locations":[{"location":{"physicalLocation":{"artifactLocation":{"uri":"map_iteration_positive.c","uriBaseId":"%SRCROOT%","index":0},"region":{"startLine":17,"startColumn":24,"endColumn":34}},"message":{"text":"call to dfb_source"}}},{"location":{"physicalLocation":{"artifactLocation":{"uri":"map_iteration_positive.c","uriBaseId":"%SRCROOT%","index":0},"region":{"startLine":17,"startColumn":5,"endColumn":36}},"message":{"text":"... = ..."}}},{"location":{"physicalLocation":{"artifactLocation":{"uri":"map_iteration_positive.c","uriBaseId":"%SRCROOT%","index":0},"region":{"startLine":17,"startColumn":5,"endColumn":15}},"message":{"text":"*access to array [post update] [value]"}}},{"location":{"physicalLocation":{"artifactLocation":{"uri":"map_iteration_positive.c","uriBaseId":"%SRCROOT%","index":0},"region":{"startLine":22,"startColumn":22,"endColumn":36}},"message":{"text":"*access to array [value]"}}},{"location":{"physicalLocation":{"artifactLocation":{"uri":"map_iteration_positive.c","uriBaseId":"%SRCROOT%","index":0},"region":{"startLine":22,"startColumn":37,"endColumn":42}},"message":{"text":"value"}}}]}]}],"relatedLocations":[{"physicalLocation":{"artifactLocation":{"uri":"map_iteration_positive.c","uriBaseId":"%SRCROOT%","index":0},"region":{"startLine":17,"startColumn":24,"endColumn":34}}}]},{"ruleId":"dataflowbench/c-kernel-endpoint-probe","ruleIndex":1,"rule":{"id":"dataflowbench/c-kernel-endpoint-probe","index":1},"message":{"text":"Benchmark source endpoint observed."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"map_iteration_positive.c","uriBaseId":"%SRCROOT%","index":0},"region":{"startLine":17,"startColumn":24,"endColumn":34}}}],"partialFingerprints":{"primaryLocationLineHash":"7042d712c49bbcd3:1","primaryLocationStartColumnFingerprint":"19"}},{"ruleId":"dataflowbench/c-kernel-endpoint-probe","ruleIndex":1,"rule":{"id":"dataflowbench/c-kernel-endpoint-probe","index":1},"message":{"text":"Benchmark sink endpoint observed."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"map_iteration_positive.c","uriBaseId":"%SRCROOT%","index":0},"region":{"startLine":22,"startColumn":37,"endColumn":42}}}],"partialFingerprints":{"primaryLocationLineHash":"9fb5cbeb18f38a77:1","primaryLocationStartColumnFingerprint":"24"}}],"columnKind":"utf16CodeUnits","properties":{"semmle.formatSpecifier":"sarif-latest"}}]}