vaspera 2.5.0

package/dist/scanners/race-condition.js

@@ -0,0 +1,443 @@
+/**
+ * Race Condition Scanner
+ *
+ * Detects concurrency bugs that could lead to security vulnerabilities.
+ *
+ * Detection targets:
+ * - Go: go vet static race detection, shared state patterns
+ * - Node.js: Shared mutable state + async, TOCTOU patterns
+ * - Python: threading issues, GIL bypass concerns
+ * - Java: Non-atomic operations, check-then-act bugs
+ *
+ * CWE Mappings:
+ * - CWE-362: Concurrent Execution with Improper Synchronization
+ * - CWE-366: Race Condition within a Thread
+ * - CWE-367: TOCTOU Race Condition
+ * - CWE-820: Missing Synchronization
+ */
+import { exec } from "child_process";
+import { promisify } from "util";
+import * as fs from "fs/promises";
+import * as path from "path";
+import { glob } from "glob";
+const execAsync = promisify(exec);
+// Node.js/JavaScript race condition patterns
+const NODE_RACE_PATTERNS = [
+    {
+        pattern: /fs\.exists(?:Sync)?\s*\([^)]+\)[^;]*[\s\S]{0,100}fs\.(write|unlink|rename|mkdir|rmdir)/g,
+        severity: "high",
+        cwe: "CWE-367",
+        ruleId: "race:toctou-fs",
+        message: "TOCTOU race condition: fs.exists() check followed by file operation. Use fs.access() with O_CREAT or handle EEXIST/ENOENT.",
+    },
+    {
+        pattern: /if\s*\(\s*!?\s*(?:await\s+)?fs\.(?:exists|access|stat)[\s\S]{0,200}fs\.(write|unlink|read)/g,
+        severity: "high",
+        cwe: "CWE-367",
+        ruleId: "race:toctou-fs-async",
+        message: "TOCTOU race condition: file existence check followed by operation. Another process may modify the file.",
+    },
+    {
+        pattern: /let\s+\w+\s*=\s*(?:global|module\.exports|this)\.\w+[\s\S]{0,100}async\s+function/g,
+        severity: "medium",
+        cwe: "CWE-362",
+        ruleId: "race:shared-state-async",
+        message: "Shared mutable state accessed in async context. Consider using atomic operations or locks.",
+    },
+    {
+        pattern: /(?:global|globalThis)\.\w+\s*=[\s\S]{0,50}(?:setInterval|setTimeout)/g,
+        severity: "medium",
+        cwe: "CWE-362",
+        ruleId: "race:global-mutation-timer",
+        message: "Global state mutated in timer callback. This may race with other code paths.",
+    },
+    {
+        pattern: /\.then\s*\([^)]*\)\s*[\s\S]{0,50}(?:global|this)\.\w+\s*(?:\+|\-)?=/g,
+        severity: "medium",
+        cwe: "CWE-362",
+        ruleId: "race:promise-mutation",
+        message: "Shared state modified in Promise.then(). Multiple promises may race.",
+    },
+    {
+        pattern: /if\s*\(\s*\w+\.(length|size)\s*[<>=]+\s*\d+\s*\)[\s\S]{0,100}\w+\.(push|pop|shift|delete|add)/g,
+        severity: "medium",
+        cwe: "CWE-362",
+        ruleId: "race:check-then-mutate",
+        message: "Check-then-mutate pattern on collection. Use atomic operations or synchronization.",
+    },
+];
+// Python race condition patterns
+const PYTHON_RACE_PATTERNS = [
+    {
+        pattern: /os\.path\.exists\s*\([^)]+\)[\s\S]{0,100}open\s*\(/g,
+        severity: "high",
+        cwe: "CWE-367",
+        ruleId: "race:toctou-python-file",
+        message: "TOCTOU race condition: os.path.exists() followed by open(). Use exception handling instead.",
+    },
+    {
+        pattern: /threading\.(Thread|Lock|RLock|Condition)[\s\S]{0,200}(?:global|self\.)\w+\s*=/g,
+        severity: "medium",
+        cwe: "CWE-362",
+        ruleId: "race:threading-shared-state",
+        message: "Shared state modified in threaded context. Ensure proper lock acquisition.",
+    },
+    {
+        pattern: /if\s+not\s+\w+\.locked\(\)[\s\S]{0,50}\.acquire\(/g,
+        severity: "high",
+        cwe: "CWE-367",
+        ruleId: "race:lock-check-acquire",
+        message: "Race between lock check and acquire. Use blocking acquire() or try_acquire() instead.",
+    },
+    {
+        pattern: /global\s+\w+[\s\S]{0,100}@app\.route|def\s+\w+.*request/g,
+        severity: "medium",
+        cwe: "CWE-362",
+        ruleId: "race:global-flask-handler",
+        message: "Global variable modified in Flask route handler. This races between concurrent requests.",
+    },
+    {
+        pattern: /multiprocessing\.Value|multiprocessing\.Array[\s\S]{0,100}(?!\bwith\s+\w+\.get_lock\(\))/g,
+        severity: "medium",
+        cwe: "CWE-820",
+        ruleId: "race:multiprocessing-unlocked",
+        message: "Multiprocessing shared value without explicit lock. Use .get_lock() for compound operations.",
+    },
+];
+// Go race condition patterns
+const GO_RACE_PATTERNS = [
+    {
+        pattern: /go\s+func\s*\([^)]*\)\s*\{[\s\S]{0,200}\w+\s*(?:\+|\-)?\s*=/g,
+        severity: "high",
+        cwe: "CWE-362",
+        ruleId: "race:goroutine-shared-write",
+        message: "Write to shared variable in goroutine without synchronization. Use sync.Mutex or channels.",
+    },
+    {
+        pattern: /if\s+\w+\s*==\s*nil\s*\{[\s\S]{0,50}\w+\s*=\s*(?:make|new|&)/g,
+        severity: "medium",
+        cwe: "CWE-367",
+        ruleId: "race:lazy-init",
+        message: "Lazy initialization pattern without sync.Once. May initialize multiple times under contention.",
+    },
+    {
+        pattern: /var\s+\w+\s+(?:map|slice|\[\])[\s\S]{0,200}go\s+func/g,
+        severity: "high",
+        cwe: "CWE-362",
+        ruleId: "race:concurrent-map",
+        message: "Map or slice shared with goroutine. Maps are not safe for concurrent use without sync.RWMutex.",
+    },
+    {
+        pattern: /for\s+\w+,\s*\w+\s*:=\s*range[\s\S]{0,50}go\s+func\s*\(\)\s*\{/g,
+        severity: "high",
+        cwe: "CWE-362",
+        ruleId: "race:closure-variable",
+        message: "Loop variable captured by closure in goroutine. Capture by value or use Go 1.22+ semantics.",
+    },
+    {
+        pattern: /atomic\.\w+\s*\([^)]+\)[\s\S]{0,50}(?!atomic\.)\w+\s*=/g,
+        severity: "medium",
+        cwe: "CWE-362",
+        ruleId: "race:mixed-atomic",
+        message: "Mixing atomic and non-atomic operations on same variable. Use atomic for all accesses.",
+    },
+];
+// Java race condition patterns
+const JAVA_RACE_PATTERNS = [
+    {
+        pattern: /if\s*\(\s*\w+\s*==\s*null\s*\)\s*\{[\s\S]{0,50}\w+\s*=\s*new\s+/g,
+        severity: "medium",
+        cwe: "CWE-367",
+        ruleId: "race:double-checked-locking",
+        message: "Potential double-checked locking issue. Use volatile + synchronized or Initialization-on-demand holder.",
+    },
+    {
+        pattern: /(?<!synchronized\s*\([^)]+\)\s*\{[\s\S]{0,100})\w+\+\+|--\w+|\w+--/g,
+        severity: "medium",
+        cwe: "CWE-362",
+        ruleId: "race:non-atomic-increment",
+        message: "Non-atomic increment/decrement outside synchronized block. Use AtomicInteger.",
+    },
+    {
+        pattern: /HashMap\s*<[\s\S]{0,100}(?:Thread|Runnable|@Async|CompletableFuture)/g,
+        severity: "high",
+        cwe: "CWE-362",
+        ruleId: "race:concurrent-hashmap",
+        message: "HashMap used in concurrent context. Use ConcurrentHashMap for thread safety.",
+    },
+    {
+        pattern: /\.contains\s*\([^)]+\)\s*\)[\s\S]{0,50}\.(?:add|put|remove)\s*\(/g,
+        severity: "medium",
+        cwe: "CWE-367",
+        ruleId: "race:check-then-modify",
+        message: "Check-then-modify pattern on collection. Use putIfAbsent() or computeIfAbsent().",
+    },
+];
+/**
+ * Detect languages in the project
+ */
+async function detectProjectLanguages(projectPath) {
+    const detection = {
+        go: false,
+        javascript: false,
+        python: false,
+        java: false,
+    };
+    const absolutePath = path.resolve(projectPath);
+    const ignorePatterns = ["**/node_modules/**", "**/vendor/**", "**/build/**", "**/dist/**", "**/target/**"];
+    // Check for Go
+    const goFiles = await glob("**/*.go", { cwd: absolutePath, ignore: ignorePatterns, nodir: true });
+    detection.go = goFiles.length > 0;
+    // Check for JavaScript/TypeScript
+    const jsFiles = await glob("**/*.{js,ts,mjs,cjs}", { cwd: absolutePath, ignore: ignorePatterns, nodir: true });
+    detection.javascript = jsFiles.length > 0;
+    // Check for Python
+    const pyFiles = await glob("**/*.py", { cwd: absolutePath, ignore: ignorePatterns, nodir: true });
+    detection.python = pyFiles.length > 0;
+    // Check for Java
+    const javaFiles = await glob("**/*.java", { cwd: absolutePath, ignore: ignorePatterns, nodir: true });
+    detection.java = javaFiles.length > 0;
+    return detection;
+}
+/**
+ * Check if Go vet is available
+ */
+async function checkGoVetAvailable() {
+    try {
+        await execAsync("go version");
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Run go vet for race detection hints
+ */
+async function runGoVetRace(projectPath, timeout = 60000) {
+    const findings = [];
+    const absolutePath = path.resolve(projectPath);
+    try {
+        // Find go.mod files to identify Go modules
+        const goModFiles = await glob("**/go.mod", {
+            cwd: absolutePath,
+            ignore: ["**/vendor/**"],
+        });
+        for (const goMod of goModFiles) {
+            const moduleDir = path.dirname(path.join(absolutePath, goMod));
+            try {
+                // Run go vet with race-related checks
+                const { stderr } = await execAsync("go vet -copylocks -loopclosure ./... 2>&1 || true", {
+                    cwd: moduleDir,
+                    timeout,
+                    maxBuffer: 5 * 1024 * 1024,
+                });
+                // Parse go vet output
+                const vetLines = stderr.split("\n").filter(line => line.trim());
+                for (const line of vetLines) {
+                    // Format: file.go:line:col: message
+                    const match = line.match(/^([^:]+):(\d+):(\d+)?:\s*(.+)/);
+                    if (match) {
+                        const [, file, lineNum, col, message] = match;
+                        const relativePath = path.relative(absolutePath, path.join(moduleDir, file));
+                        let ruleId = "race:go-vet-generic";
+                        let cwe = "CWE-362";
+                        let severity = "medium";
+                        if (message.includes("loop variable") || message.includes("loopclosure")) {
+                            ruleId = "race:go-closure-capture";
+                            severity = "high";
+                        }
+                        else if (message.includes("copies lock") || message.includes("copylocks")) {
+                            ruleId = "race:go-lock-copy";
+                            cwe = "CWE-820";
+                            severity = "high";
+                        }
+                        findings.push({
+                            scanner: "race-condition",
+                            ruleId,
+                            file: relativePath,
+                            line: parseInt(lineNum, 10),
+                            column: col ? parseInt(col, 10) : 0,
+                            message: message.trim(),
+                            severity,
+                            confidence: 95,
+                            category: "race-condition",
+                            cweIds: [cwe],
+                            evidence: `go vet: ${message}`,
+                            metadata: { tool: "go-vet" },
+                        });
+                    }
+                }
+            }
+            catch {
+                // go vet failed for this module
+            }
+        }
+    }
+    catch {
+        // No Go modules or go not available
+    }
+    return findings;
+}
+/**
+ * Run pattern-based analysis for race conditions
+ */
+async function runPatternAnalysis(projectPath, patterns, filePatterns) {
+    const findings = [];
+    const absolutePath = path.resolve(projectPath);
+    try {
+        const files = await glob(filePatterns, {
+            cwd: absolutePath,
+            ignore: ["**/node_modules/**", "**/vendor/**", "**/build/**", "**/dist/**", "**/target/**", "**/*.test.*", "**/*.spec.*"],
+            nodir: true,
+        });
+        for (const file of files.slice(0, 200)) { // Limit to 200 files
+            try {
+                const content = await fs.readFile(path.join(absolutePath, file), "utf-8");
+                for (const pattern of patterns) {
+                    // Reset regex lastIndex
+                    pattern.pattern.lastIndex = 0;
+                    let match;
+                    while ((match = pattern.pattern.exec(content)) !== null) {
+                        // Find line number
+                        const upToMatch = content.slice(0, match.index);
+                        const lineNumber = upToMatch.split("\n").length;
+                        const columnNumber = match.index - upToMatch.lastIndexOf("\n");
+                        findings.push({
+                            scanner: "race-condition",
+                            ruleId: pattern.ruleId,
+                            file,
+                            line: lineNumber,
+                            column: columnNumber,
+                            message: pattern.message,
+                            severity: pattern.severity,
+                            confidence: 75, // Pattern matching has lower confidence
+                            category: "race-condition",
+                            cweIds: [pattern.cwe],
+                            evidence: `Found pattern: ${match[0].slice(0, 100).replace(/\n/g, " ")}...`,
+                            metadata: {
+                                context: pattern.context,
+                            },
+                        });
+                    }
+                }
+            }
+            catch {
+                // Could not read file
+            }
+        }
+    }
+    catch {
+        // Glob failed
+    }
+    return findings;
+}
+/**
+ * Detect Node.js-specific race conditions in async code
+ */
+async function detectNodeRacePatterns(projectPath) {
+    return runPatternAnalysis(projectPath, NODE_RACE_PATTERNS, ["**/*.js", "**/*.ts", "**/*.mjs", "**/*.cjs"]);
+}
+/**
+ * Detect Python race conditions
+ */
+async function detectPythonRacePatterns(projectPath) {
+    return runPatternAnalysis(projectPath, PYTHON_RACE_PATTERNS, ["**/*.py"]);
+}
+/**
+ * Detect Go race conditions (pattern-based, supplements go vet)
+ */
+async function detectGoRacePatterns(projectPath) {
+    return runPatternAnalysis(projectPath, GO_RACE_PATTERNS, ["**/*.go"]);
+}
+/**
+ * Detect Java race conditions
+ */
+async function detectJavaRacePatterns(projectPath) {
+    return runPatternAnalysis(projectPath, JAVA_RACE_PATTERNS, ["**/*.java"]);
+}
+/**
+ * Main entry point: Run race condition analysis on a project
+ */
+export async function runRaceConditionAnalysis(projectPath, options) {
+    const startTime = Date.now();
+    const findings = [];
+    const timeout = options?.timeout || 60000;
+    try {
+        // 1. Detect project languages
+        const languages = await detectProjectLanguages(projectPath);
+        const hasAnyLanguage = languages.go || languages.javascript || languages.python || languages.java;
+        if (!hasAnyLanguage) {
+            return {
+                scanner: "race-condition",
+                findings: [],
+                duration: Date.now() - startTime,
+                success: true,
+                metadata: {
+                    message: "No supported languages detected",
+                    languages,
+                },
+            };
+        }
+        // 2. Check tool availability
+        const hasGoVet = languages.go && await checkGoVetAvailable();
+        // 3. Run Go analysis
+        if (languages.go) {
+            // Run go vet if available
+            if (hasGoVet) {
+                const vetFindings = await runGoVetRace(projectPath, timeout);
+                findings.push(...vetFindings);
+            }
+            // Run pattern analysis
+            const goPatternFindings = await detectGoRacePatterns(projectPath);
+            findings.push(...goPatternFindings);
+        }
+        // 4. Run Node.js analysis
+        if (languages.javascript) {
+            const nodeFindings = await detectNodeRacePatterns(projectPath);
+            findings.push(...nodeFindings);
+        }
+        // 5. Run Python analysis
+        if (languages.python) {
+            const pyFindings = await detectPythonRacePatterns(projectPath);
+            findings.push(...pyFindings);
+        }
+        // 6. Run Java analysis
+        if (languages.java) {
+            const javaFindings = await detectJavaRacePatterns(projectPath);
+            findings.push(...javaFindings);
+        }
+        // Deduplicate findings by file+line+ruleId
+        const seen = new Set();
+        const dedupedFindings = findings.filter(f => {
+            const key = `${f.file}:${f.line}:${f.ruleId}`;
+            if (seen.has(key))
+                return false;
+            seen.add(key);
+            return true;
+        });
+        return {
+            scanner: "race-condition",
+            findings: dedupedFindings,
+            duration: Date.now() - startTime,
+            success: true,
+            metadata: {
+                languages,
+                toolsUsed: {
+                    goVet: hasGoVet,
+                    patternAnalysis: true,
+                },
+            },
+        };
+    }
+    catch (error) {
+        return {
+            scanner: "race-condition",
+            findings,
+            duration: Date.now() - startTime,
+            success: false,
+            error: error instanceof Error ? error.message : "Unknown error",
+        };
+    }
+}
+//# sourceMappingURL=race-condition.js.map

package/dist/scanners/race-condition.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"race-condition.js","sourceRoot":"","sources":["../../src/scanners/race-condition.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AACrC,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,KAAK,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAG5B,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;AAWlC,6CAA6C;AAC7C,MAAM,kBAAkB,GAAkB;IACxC;QACE,OAAO,EAAE,yFAAyF;QAClG,QAAQ,EAAE,MAAM;QAChB,GAAG,EAAE,SAAS;QACd,MAAM,EAAE,gBAAgB;QACxB,OAAO,EAAE,4HAA4H;KACtI;IACD;QACE,OAAO,EAAE,6FAA6F;QACtG,QAAQ,EAAE,MAAM;QAChB,GAAG,EAAE,SAAS;QACd,MAAM,EAAE,sBAAsB;QAC9B,OAAO,EAAE,yGAAyG;KACnH;IACD;QACE,OAAO,EAAE,oFAAoF;QAC7F,QAAQ,EAAE,QAAQ;QAClB,GAAG,EAAE,SAAS;QACd,MAAM,EAAE,yBAAyB;QACjC,OAAO,EAAE,4FAA4F;KACtG;IACD;QACE,OAAO,EAAE,uEAAuE;QAChF,QAAQ,EAAE,QAAQ;QAClB,GAAG,EAAE,SAAS;QACd,MAAM,EAAE,4BAA4B;QACpC,OAAO,EAAE,8EAA8E;KACxF;IACD;QACE,OAAO,EAAE,sEAAsE;QAC/E,QAAQ,EAAE,QAAQ;QAClB,GAAG,EAAE,SAAS;QACd,MAAM,EAAE,uBAAuB;QAC/B,OAAO,EAAE,sEAAsE;KAChF;IACD;QACE,OAAO,EAAE,gGAAgG;QACzG,QAAQ,EAAE,QAAQ;QAClB,GAAG,EAAE,SAAS;QACd,MAAM,EAAE,wBAAwB;QAChC,OAAO,EAAE,oFAAoF;KAC9F;CACF,CAAC;AAEF,iCAAiC;AACjC,MAAM,oBAAoB,GAAkB;IAC1C;QACE,OAAO,EAAE,qDAAqD;QAC9D,QAAQ,EAAE,MAAM;QAChB,GAAG,EAAE,SAAS;QACd,MAAM,EAAE,yBAAyB;QACjC,OAAO,EAAE,6FAA6F;KACvG;IACD;QACE,OAAO,EAAE,gFAAgF;QACzF,QAAQ,EAAE,QAAQ;QAClB,GAAG,EAAE,SAAS;QACd,MAAM,EAAE,6BAA6B;QACrC,OAAO,EAAE,4EAA4E;KACtF;IACD;QACE,OAAO,EAAE,oDAAoD;QAC7D,QAAQ,EAAE,MAAM;QAChB,GAAG,EAAE,SAAS;QACd,MAAM,EAAE,yBAAyB;QACjC,OAAO,EAAE,uFAAuF;KACjG;IACD;QACE,OAAO,EAAE,0DAA0D;QACnE,QAAQ,EAAE,QAAQ;QAClB,GAAG,EAAE,SAAS;QACd,MAAM,EAAE,2BAA2B;QACnC,OAAO,EAAE,0FAA0F;KACpG;IACD;QACE,OAAO,EAAE,2FAA2F;QACpG,QAAQ,EAAE,QAAQ;QAClB,GAAG,EAAE,SAAS;QACd,MAAM,EAAE,+BAA+B;QACvC,OAAO,EAAE,8FAA8F;KACxG;CACF,CAAC;AAEF,6BAA6B;AAC7B,MAAM,gBAAgB,GAAkB;IACtC;QACE,OAAO,EAAE,8DAA8D;QACvE,QAAQ,EAAE,MAAM;QAChB,GAAG,EAAE,SAAS;QACd,MAAM,EAAE,6BAA6B;QACrC,OAAO,EAAE,4FAA4F;KACtG;IACD;QACE,OAAO,EAAE,+DAA+D;QACxE,QAAQ,EAAE,QAAQ;QAClB,GAAG,EAAE,SAAS;QACd,MAAM,EAAE,gBAAgB;QACxB,OAAO,EAAE,gGAAgG;KAC1G;IACD;QACE,OAAO,EAAE,uDAAuD;QAChE,QAAQ,EAAE,MAAM;QAChB,GAAG,EAAE,SAAS;QACd,MAAM,EAAE,qBAAqB;QAC7B,OAAO,EAAE,gGAAgG;KAC1G;IACD;QACE,OAAO,EAAE,iEAAiE;QAC1E,QAAQ,EAAE,MAAM;QAChB,GAAG,EAAE,SAAS;QACd,MAAM,EAAE,uBAAuB;QAC/B,OAAO,EAAE,6FAA6F;KACvG;IACD;QACE,OAAO,EAAE,yDAAyD;QAClE,QAAQ,EAAE,QAAQ;QAClB,GAAG,EAAE,SAAS;QACd,MAAM,EAAE,mBAAmB;QAC3B,OAAO,EAAE,wFAAwF;KAClG;CACF,CAAC;AAEF,+BAA+B;AAC/B,MAAM,kBAAkB,GAAkB;IACxC;QACE,OAAO,EAAE,kEAAkE;QAC3E,QAAQ,EAAE,QAAQ;QAClB,GAAG,EAAE,SAAS;QACd,MAAM,EAAE,6BAA6B;QACrC,OAAO,EAAE,yGAAyG;KACnH;IACD;QACE,OAAO,EAAE,qEAAqE;QAC9E,QAAQ,EAAE,QAAQ;QAClB,GAAG,EAAE,SAAS;QACd,MAAM,EAAE,2BAA2B;QACnC,OAAO,EAAE,+EAA+E;KACzF;IACD;QACE,OAAO,EAAE,uEAAuE;QAChF,QAAQ,EAAE,MAAM;QAChB,GAAG,EAAE,SAAS;QACd,MAAM,EAAE,yBAAyB;QACjC,OAAO,EAAE,8EAA8E;KACxF;IACD;QACE,OAAO,EAAE,mEAAmE;QAC5E,QAAQ,EAAE,QAAQ;QAClB,GAAG,EAAE,SAAS;QACd,MAAM,EAAE,wBAAwB;QAChC,OAAO,EAAE,kFAAkF;KAC5F;CACF,CAAC;AASF;;GAEG;AACH,KAAK,UAAU,sBAAsB,CAAC,WAAmB;IACvD,MAAM,SAAS,GAAsB;QACnC,EAAE,EAAE,KAAK;QACT,UAAU,EAAE,KAAK;QACjB,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,KAAK;KACZ,CAAC;IAEF,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC/C,MAAM,cAAc,GAAG,CAAC,oBAAoB,EAAE,cAAc,EAAE,aAAa,EAAE,YAAY,EAAE,cAAc,CAAC,CAAC;IAE3G,eAAe;IACf,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAClG,SAAS,CAAC,EAAE,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;IAElC,kCAAkC;IAClC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,sBAAsB,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/G,SAAS,CAAC,UAAU,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;IAE1C,mBAAmB;IACnB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAClG,SAAS,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;IAEtC,iBAAiB;IACjB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtG,SAAS,CAAC,IAAI,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;IAEtC,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,mBAAmB;IAChC,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,YAAY,CAAC,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,YAAY,CACzB,WAAmB,EACnB,UAAkB,KAAK;IAEvB,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAE/C,IAAI,CAAC;QACH,2CAA2C;QAC3C,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE;YACzC,GAAG,EAAE,YAAY;YACjB,MAAM,EAAE,CAAC,cAAc,CAAC;SACzB,CAAC,CAAC;QAEH,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;YAC/B,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC;YAE/D,IAAI,CAAC;gBACH,sCAAsC;gBACtC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAChC,mDAAmD,EACnD;oBACE,GAAG,EAAE,SAAS;oBACd,OAAO;oBACP,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;iBAC3B,CACF,CAAC;gBAEF,sBAAsB;gBACtB,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;gBAEhE,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;oBAC5B,oCAAoC;oBACpC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;oBAC1D,IAAI,KAAK,EAAE,CAAC;wBACV,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,KAAK,CAAC;wBAC9C,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;wBAE7E,IAAI,MAAM,GAAG,qBAAqB,CAAC;wBACnC,IAAI,GAAG,GAAG,SAAS,CAAC;wBACpB,IAAI,QAAQ,GAAa,QAAQ,CAAC;wBAElC,IAAI,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;4BACzE,MAAM,GAAG,yBAAyB,CAAC;4BACnC,QAAQ,GAAG,MAAM,CAAC;wBACpB,CAAC;6BAAM,IAAI,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;4BAC5E,MAAM,GAAG,mBAAmB,CAAC;4BAC7B,GAAG,GAAG,SAAS,CAAC;4BAChB,QAAQ,GAAG,MAAM,CAAC;wBACpB,CAAC;wBAED,QAAQ,CAAC,IAAI,CAAC;4BACZ,OAAO,EAAE,gBAAgB;4BACzB,MAAM;4BACN,IAAI,EAAE,YAAY;4BAClB,IAAI,EAAE,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;4BAC3B,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;4BACnC,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE;4BACvB,QAAQ;4BACR,UAAU,EAAE,EAAE;4BACd,QAAQ,EAAE,gBAAgB;4BAC1B,MAAM,EAAE,CAAC,GAAG,CAAC;4BACb,QAAQ,EAAE,WAAW,OAAO,EAAE;4BAC9B,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;yBAC7B,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,gCAAgC;YAClC,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,oCAAoC;IACtC,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,kBAAkB,CAC/B,WAAmB,EACnB,QAAuB,EACvB,YAAsB;IAEtB,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAE/C,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE;YACrC,GAAG,EAAE,YAAY;YACjB,MAAM,EAAE,CAAC,oBAAoB,EAAE,cAAc,EAAE,aAAa,EAAE,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,aAAa,CAAC;YACzH,KAAK,EAAE,IAAI;SACZ,CAAC,CAAC;QAEH,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,qBAAqB;YAC7D,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;gBAE1E,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;oBAC/B,wBAAwB;oBACxB,OAAO,CAAC,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;oBAC9B,IAAI,KAAK,CAAC;oBAEV,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;wBACxD,mBAAmB;wBACnB,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;wBAChD,MAAM,UAAU,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;wBAChD,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,GAAG,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;wBAE/D,QAAQ,CAAC,IAAI,CAAC;4BACZ,OAAO,EAAE,gBAAgB;4BACzB,MAAM,EAAE,OAAO,CAAC,MAAM;4BACtB,IAAI;4BACJ,IAAI,EAAE,UAAU;4BAChB,MAAM,EAAE,YAAY;4BACpB,OAAO,EAAE,OAAO,CAAC,OAAO;4BACxB,QAAQ,EAAE,OAAO,CAAC,QAAQ;4BAC1B,UAAU,EAAE,EAAE,EAAE,wCAAwC;4BACxD,QAAQ,EAAE,gBAAgB;4BAC1B,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;4BACrB,QAAQ,EAAE,kBAAkB,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK;4BAC3E,QAAQ,EAAE;gCACR,OAAO,EAAE,OAAO,CAAC,OAAO;6BACzB;yBACF,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,sBAAsB;YACxB,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,cAAc;IAChB,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,sBAAsB,CAAC,WAAmB;IACvD,OAAO,kBAAkB,CAAC,WAAW,EAAE,kBAAkB,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC;AAC7G,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,wBAAwB,CAAC,WAAmB;IACzD,OAAO,kBAAkB,CAAC,WAAW,EAAE,oBAAoB,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,oBAAoB,CAAC,WAAmB;IACrD,OAAO,kBAAkB,CAAC,WAAW,EAAE,gBAAgB,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;AACxE,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,sBAAsB,CAAC,WAAmB;IACvD,OAAO,kBAAkB,CAAC,WAAW,EAAE,kBAAkB,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,WAAmB,EACnB,OAA8B;IAE9B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,MAAM,OAAO,GAAG,OAAO,EAAE,OAAO,IAAI,KAAK,CAAC;IAE1C,IAAI,CAAC;QACH,8BAA8B;QAC9B,MAAM,SAAS,GAAG,MAAM,sBAAsB,CAAC,WAAW,CAAC,CAAC;QAE5D,MAAM,cAAc,GAAG,SAAS,CAAC,EAAE,IAAI,SAAS,CAAC,UAAU,IAAI,SAAS,CAAC,MAAM,IAAI,SAAS,CAAC,IAAI,CAAC;QAClG,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,OAAO;gBACL,OAAO,EAAE,gBAAgB;gBACzB,QAAQ,EAAE,EAAE;gBACZ,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;gBAChC,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE;oBACR,OAAO,EAAE,iCAAiC;oBAC1C,SAAS;iBACV;aACF,CAAC;QACJ,CAAC;QAED,6BAA6B;QAC7B,MAAM,QAAQ,GAAG,SAAS,CAAC,EAAE,IAAI,MAAM,mBAAmB,EAAE,CAAC;QAE7D,qBAAqB;QACrB,IAAI,SAAS,CAAC,EAAE,EAAE,CAAC;YACjB,0BAA0B;YAC1B,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,WAAW,GAAG,MAAM,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;gBAC7D,QAAQ,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,CAAC;YAChC,CAAC;YAED,uBAAuB;YACvB,MAAM,iBAAiB,GAAG,MAAM,oBAAoB,CAAC,WAAW,CAAC,CAAC;YAClE,QAAQ,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,CAAC;QACtC,CAAC;QAED,0BAA0B;QAC1B,IAAI,SAAS,CAAC,UAAU,EAAE,CAAC;YACzB,MAAM,YAAY,GAAG,MAAM,sBAAsB,CAAC,WAAW,CAAC,CAAC;YAC/D,QAAQ,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC;QACjC,CAAC;QAED,yBAAyB;QACzB,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC;YACrB,MAAM,UAAU,GAAG,MAAM,wBAAwB,CAAC,WAAW,CAAC,CAAC;YAC/D,QAAQ,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,CAAC;QAC/B,CAAC;QAED,uBAAuB;QACvB,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC;YACnB,MAAM,YAAY,GAAG,MAAM,sBAAsB,CAAC,WAAW,CAAC,CAAC;YAC/D,QAAQ,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC;QACjC,CAAC;QAED,2CAA2C;QAC3C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,MAAM,eAAe,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;YAC1C,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;YAC9C,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAC;YAChC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;QAEH,OAAO;YACL,OAAO,EAAE,gBAAgB;YACzB,QAAQ,EAAE,eAAe;YACzB,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;YAChC,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE;gBACR,SAAS;gBACT,SAAS,EAAE;oBACT,KAAK,EAAE,QAAQ;oBACf,eAAe,EAAE,IAAI;iBACtB;aACF;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE,gBAAgB;YACzB,QAAQ;YACR,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;YAChC,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;SAChE,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/scanners/race-condition.test.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Unit tests for race-condition scanner module
+ */
+export {};
+//# sourceMappingURL=race-condition.test.d.ts.map

package/dist/scanners/race-condition.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"race-condition.test.d.ts","sourceRoot":"","sources":["../../src/scanners/race-condition.test.ts"],"names":[],"mappings":"AAAA;;GAEG"}