{"$schema":"http://json.schemastore.org/sarif-2.1.0-rtm.5","version":"2.1.0","runs":[{"tool":{"driver":{"name":"Infer","informationUri":"https://github.com/facebook/infer","version":"1.3.0","rules":[{"id":"TAINT_ERROR","shortDescription":{"text":"Taint Error"},"helpUri":"https://fbinfer.com/docs/next/all-issue-types#taint_error"}]}},"results":[{"message":{"text":"DataFlowBench benchmark-controlled modeling flow. `String Config.fetchRemote()` is tainted by value returned from `String Config.fetchRemote()` with kind `DataFlowBenchModelSource` and flows to value passed as argument `#0` to `void ModelDeclaredSourcePositive.dfb_sink(String)` with kind `DataFlowBenchModelSink`."},"level":"error","ruleId":"TAINT_ERROR","codeFlows":[{"threadFlows":[{"locations":[{"nestingLevel":0,"location":{"physicalLocation":{"artifactLocation":{"uri":"file:dataflowbench/taint/ModelDeclaredSourcePositive.java","uriBaseId":"/Users/dave/.codex/worktrees/9f01/dataflowbench/execution-state/v092/groups/series-01/infer-java-modeling/attempt-01/tmp/dataflowbench-modeling-infer-java/dfb-taint-java-model-declared-source-positive/dataflowbench/taint/ModelDeclaredSourcePositive.java"},"region":{"startLine":17,"startColumn":1}},"message":{"text":"source of the taint here: value returned from `String Config.fetchRemote()` with kind `DataFlowBenchModelSource`"}}},{"nestingLevel":0,"location":{"physicalLocation":{"artifactLocation":{"uri":"file:dataflowbench/taint/ModelDeclaredSourcePositive.java","uriBaseId":"/Users/dave/.codex/worktrees/9f01/dataflowbench/execution-state/v092/groups/series-01/infer-java-modeling/attempt-01/tmp/dataflowbench-modeling-infer-java/dfb-taint-java-model-declared-source-positive/dataflowbench/taint/ModelDeclaredSourcePositive.java"},"region":{"startLine":17,"startColumn":1}},"message":{"text":"flows to this sink: value passed as argument `#0` to `void ModelDeclaredSourcePositive.dfb_sink(String)` with kind `DataFlowBenchModelSink`"}}}]}]}],"locations":[{"physicalLocation":{"artifactLocation":{"uri":"file:dataflowbench/taint/ModelDeclaredSourcePositive.java","uriBaseId":"/Users/dave/.codex/worktrees/9f01/dataflowbench/execution-state/v092/groups/series-01/infer-java-modeling/attempt-01/tmp/dataflowbench-modeling-infer-java/dfb-taint-java-model-declared-source-positive/dataflowbench/taint/ModelDeclaredSourcePositive.java"},"region":{"startLine":17,"startColumn":1}}}],"fingerprints":{"hash/v1":"b3b12d394d8317d9112ad9a883534246","key":"ModelDeclaredSourcePositive.java|run|TAINT_ERROR"}}]}]}