{"$schema":"https://json.schemastore.org/sarif-2.1.0.json","version":"2.1.0","runs":[{"tool":{"driver":{"name":"CodeQL","organization":"GitHub","semanticVersion":"2.27.2","notifications":[{"id":"cli/file-coverage-baseline","name":"cli/file-coverage-baseline","shortDescription":{"text":"File coverage baseline telemetry"},"fullDescription":{"text":"File coverage baseline telemetry"},"defaultConfiguration":{"enabled":true}},{"id":"cli/platform","name":"cli/platform","shortDescription":{"text":"Platform"},"fullDescription":{"text":"Platform"},"defaultConfiguration":{"enabled":true}},{"id":"cli/build-mode","name":"cli/build-mode","shortDescription":{"text":"Database build mode"},"fullDescription":{"text":"Database build mode"},"defaultConfiguration":{"enabled":true}},{"id":"cli/sip-enablement","name":"cli/sip-enablement","shortDescription":{"text":"macOS SIP enablement status"},"fullDescription":{"text":"macOS SIP enablement status"},"defaultConfiguration":{"enabled":true}},{"id":"rust/extractor/telemetry","name":"rust/extractor/telemetry","shortDescription":{"text":"telemetry"},"fullDescription":{"text":"telemetry"},"defaultConfiguration":{"enabled":true}}],"rules":[{"id":"dataflowbench/rust-propagation-kernel","name":"dataflowbench/rust-propagation-kernel","shortDescription":{"text":"DataFlowBench Rust propagation kernel"},"fullDescription":{"text":"Finds benchmark-controlled taint flow between the Rust kernel's source and sink functions."},"defaultConfiguration":{"enabled":true,"level":"warning"},"properties":{"tags":["security"],"description":"Finds benchmark-controlled taint flow between the Rust kernel's source and sink functions.","id":"dataflowbench/rust-propagation-kernel","kind":"path-problem","name":"DataFlowBench Rust propagation kernel","precision":"high","problem.severity":"warning"}},{"id":"dataflowbench/rust-kernel-endpoint-probe","name":"dataflowbench/rust-kernel-endpoint-probe","shortDescription":{"text":"DataFlowBench Rust kernel endpoint-observation probe"},"fullDescription":{"text":"Reports every benchmark-controlled source and sink endpoint the extracted database resolves. The runner evaluates this probe alongside `RustKernel.ql` so an empty kernel result set is read as a clean negative only when both endpoints were observed."},"defaultConfiguration":{"enabled":true,"level":"warning"},"properties":{"tags":["security"],"description":"Reports every benchmark-controlled source and sink endpoint the\n              extracted database resolves. The runner evaluates this probe\n              alongside `RustKernel.ql` so an empty kernel result set is read\n              as a clean negative only when both endpoints were observed.","id":"dataflowbench/rust-kernel-endpoint-probe","kind":"problem","name":"DataFlowBench Rust kernel endpoint-observation probe","precision":"high","problem.severity":"warning"}}]},"extensions":[{"name":"dataflowbench/codeql-rust","semanticVersion":"0.0.1","locations":[{"uri":"file:///Users/dave/.codex/worktrees/9f01/dataflowbench/execution-state/v092/groups/series-01/codeql-rust-kernel/attempt-01/adapters/codeql/v0.9.2/rust/","description":{"text":"The QL pack root directory."},"properties":{"tags":["CodeQL/LocalPackRoot"]}},{"uri":"file:///Users/dave/.codex/worktrees/9f01/dataflowbench/execution-state/v092/groups/series-01/codeql-rust-kernel/attempt-01/adapters/codeql/v0.9.2/rust/qlpack.yml","description":{"text":"The QL pack definition file."},"properties":{"tags":["CodeQL/LocalPackDefinitionFile"]}}]},{"name":"codeql/rust-all","semanticVersion":"0.2.23+a7057b836bf29767461026718b14d20790b9085f","locations":[{"uri":"file:///Users/dave/.codex/worktrees/9f01/dataflowbench/execution-state/v092/tools/codeql-packs/codeql/rust-all/0.2.23/","description":{"text":"The QL pack root directory."},"properties":{"tags":["CodeQL/LocalPackRoot"]}},{"uri":"file:///Users/dave/.codex/worktrees/9f01/dataflowbench/execution-state/v092/tools/codeql-packs/codeql/rust-all/0.2.23/qlpack.yml","description":{"text":"The QL pack definition file."},"properties":{"tags":["CodeQL/LocalPackDefinitionFile"]}}]},{"name":"codeql/threat-models","semanticVersion":"1.0.59+a7057b836bf29767461026718b14d20790b9085f","locations":[{"uri":"file:///Users/dave/.codex/worktrees/9f01/dataflowbench/execution-state/v092/tools/codeql-packs/codeql/threat-models/1.0.59/","description":{"text":"The QL pack root directory."},"properties":{"tags":["CodeQL/LocalPackRoot"]}},{"uri":"file:///Users/dave/.codex/worktrees/9f01/dataflowbench/execution-state/v092/tools/codeql-packs/codeql/threat-models/1.0.59/qlpack.yml","description":{"text":"The QL pack definition file."},"properties":{"tags":["CodeQL/LocalPackDefinitionFile"]}}]}]},"invocations":[{"toolExecutionNotifications":[{"message":{"text":""},"level":"none","timeUtc":"2026-10-20T11:42:08.927433Z","descriptor":{"id":"cli/file-coverage-baseline","index":0},"properties":{"attributes":{"durationMilliseconds":34},"visibility":{"statusPage":false,"telemetry":true}}},{"message":{"text":""},"level":"none","timeUtc":"2026-10-20T11:42:08.928801Z","descriptor":{"id":"cli/platform","index":1},"properties":{"attributes":{"arch":"aarch64","name":"Mac OS X","version":"27.0.1"},"visibility":{"statusPage":false,"telemetry":true}}},{"message":{"text":""},"level":"none","timeUtc":"2026-10-20T11:42:08.935908Z","descriptor":{"id":"cli/build-mode","index":2},"properties":{"attributes":{"buildMode":"none"},"visibility":{"statusPage":false,"telemetry":true}}},{"message":{"text":""},"level":"none","timeUtc":"2026-10-20T11:42:08.946171Z","descriptor":{"id":"cli/sip-enablement","index":3},"properties":{"attributes":{"isEnabled":true},"visibility":{"statusPage":false,"telemetry":true}}},{"message":{"text":""},"level":"note","timeUtc":"2026-10-20T11:42:09.714591Z","descriptor":{"id":"rust/extractor/telemetry","index":4},"properties":{"attributes":{"durations":{"findManifests":{"ms":0,"pretty":"0.000s"},"loadManifest":{"ms":3,"pretty":"0.003s"},"extract":{"ms":0,"pretty":"0.000s"},"extractLibrary":{"ms":2,"pretty":"0.002s"},"parse":{"ms":0,"pretty":"0.000s"},"parseLibrary":{"ms":0,"pretty":"0.000s"},"total":{"ms":16,"pretty":"0.016s"}},"numberOfFiles":1,"numberOfManifests":1},"visibility":{"statusPage":false,"telemetry":true}}}],"executionSuccessful":true}],"artifacts":[{"location":{"uri":"local_overwrite_negative.rs","uriBaseId":"%SRCROOT%","index":0}}],"results":[{"ruleId":"dataflowbench/rust-kernel-endpoint-probe","ruleIndex":1,"rule":{"id":"dataflowbench/rust-kernel-endpoint-probe","index":1},"message":{"text":"Benchmark sink endpoint observed."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"local_overwrite_negative.rs","uriBaseId":"%SRCROOT%","index":0},"region":{"startLine":10,"startColumn":14,"endColumn":19}}}],"partialFingerprints":{"primaryLocationLineHash":"7d4e6d163f007f49:1","primaryLocationStartColumnFingerprint":"9"}},{"ruleId":"dataflowbench/rust-kernel-endpoint-probe","ruleIndex":1,"rule":{"id":"dataflowbench/rust-kernel-endpoint-probe","index":1},"message":{"text":"Benchmark source endpoint observed."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"local_overwrite_negative.rs","uriBaseId":"%SRCROOT%","index":0},"region":{"startLine":8,"startColumn":21,"endColumn":33}}}],"partialFingerprints":{"primaryLocationLineHash":"5cb8a3893f2cf82f:1","primaryLocationStartColumnFingerprint":"16"}}],"columnKind":"utf16CodeUnits","properties":{"semmle.formatSpecifier":"sarif-latest"}}]}