vaspera 2.5.0

package/dist/scanners/memory-safety.test.js

@@ -0,0 +1,321 @@
+/**
+ * Unit tests for memory-safety scanner module
+ */
+import { describe, it, expect, beforeEach, afterEach, afterAll } from "vitest";
+import { mkdir, rm, writeFile } from "fs/promises";
+import { join } from "path";
+import { tmpdir } from "os";
+import { runMemorySafetyAnalysis, checkCppcheckAvailable, checkCargoGeigerAvailable, detectUnsafeLanguages, } from "./memory-safety.js";
+const TEST_BASE = join(tmpdir(), "vaspera-memory-test-" + Date.now() + "-" + Math.random().toString(36).slice(2));
+let testProjectPath;
+beforeEach(async () => {
+    testProjectPath = join(TEST_BASE, "project-" + Math.random().toString(36).slice(2));
+    await mkdir(testProjectPath, { recursive: true });
+});
+afterEach(async () => {
+    try {
+        await rm(testProjectPath, { recursive: true, force: true });
+    }
+    catch {
+        // Ignore cleanup errors
+    }
+});
+afterAll(async () => {
+    try {
+        await rm(TEST_BASE, { recursive: true, force: true });
+    }
+    catch {
+        // Ignore cleanup errors
+    }
+});
+describe("checkCppcheckAvailable", () => {
+    it("returns boolean", async () => {
+        const result = await checkCppcheckAvailable();
+        expect(typeof result).toBe("boolean");
+    });
+});
+describe("checkCargoGeigerAvailable", () => {
+    it("returns boolean", async () => {
+        const result = await checkCargoGeigerAvailable();
+        expect(typeof result).toBe("boolean");
+    });
+});
+describe("detectUnsafeLanguages", () => {
+    it("returns correct LanguageDetection structure", async () => {
+        await writeFile(join(testProjectPath, "index.ts"), `export const x = 1;`);
+        const result = await detectUnsafeLanguages(testProjectPath);
+        expect(result).toHaveProperty("cpp");
+        expect(result).toHaveProperty("rust");
+        expect(result).toHaveProperty("nodeNative");
+        expect(typeof result.cpp).toBe("boolean");
+        expect(typeof result.rust).toBe("boolean");
+        expect(typeof result.nodeNative).toBe("boolean");
+    });
+    it("detects C files", async () => {
+        await writeFile(join(testProjectPath, "main.c"), `#include <stdio.h>
+int main() { return 0; }
+`);
+        const result = await detectUnsafeLanguages(testProjectPath);
+        expect(result.cpp).toBe(true);
+    });
+    it("detects C++ files", async () => {
+        await writeFile(join(testProjectPath, "main.cpp"), `#include <iostream>
+int main() { return 0; }
+`);
+        const result = await detectUnsafeLanguages(testProjectPath);
+        expect(result.cpp).toBe(true);
+    });
+    it("detects header files", async () => {
+        await writeFile(join(testProjectPath, "header.h"), `#ifndef HEADER_H
+#define HEADER_H
+#endif
+`);
+        const result = await detectUnsafeLanguages(testProjectPath);
+        expect(result.cpp).toBe(true);
+    });
+    it("detects Rust projects", async () => {
+        await writeFile(join(testProjectPath, "Cargo.toml"), `[package]
+name = "my-project"
+version = "0.1.0"
+`);
+        const result = await detectUnsafeLanguages(testProjectPath);
+        expect(result.rust).toBe(true);
+    });
+    it("detects Node.js native addons", async () => {
+        await writeFile(join(testProjectPath, "binding.gyp"), `{"targets": []}`);
+        const result = await detectUnsafeLanguages(testProjectPath);
+        expect(result.nodeNative).toBe(true);
+    });
+    it("returns all false for TypeScript-only project", async () => {
+        await writeFile(join(testProjectPath, "index.ts"), `export const x = 1;`);
+        const result = await detectUnsafeLanguages(testProjectPath);
+        expect(result.cpp).toBe(false);
+        expect(result.rust).toBe(false);
+        expect(result.nodeNative).toBe(false);
+    });
+});
+describe("runMemorySafetyAnalysis", () => {
+    it("returns proper ScannerResult structure", async () => {
+        await writeFile(join(testProjectPath, "index.ts"), `export const x = 1;`);
+        const result = await runMemorySafetyAnalysis(testProjectPath);
+        expect(result).toHaveProperty("scanner", "memory-safety");
+        expect(result).toHaveProperty("findings");
+        expect(result).toHaveProperty("duration");
+        expect(result).toHaveProperty("success");
+        expect(Array.isArray(result.findings)).toBe(true);
+    });
+    it("returns empty findings for projects without C/C++/Rust", async () => {
+        await writeFile(join(testProjectPath, "index.ts"), `export const x = 1;`);
+        const result = await runMemorySafetyAnalysis(testProjectPath);
+        expect(result.success).toBe(true);
+        expect(result.findings).toHaveLength(0);
+        expect(result.metadata?.message).toContain("No C/C++/Rust");
+    });
+    it("tracks duration", async () => {
+        await writeFile(join(testProjectPath, "index.ts"), `export const x = 1;`);
+        const result = await runMemorySafetyAnalysis(testProjectPath);
+        expect(result.duration).toBeGreaterThanOrEqual(0);
+    });
+    it("handles non-existent directories gracefully", async () => {
+        const result = await runMemorySafetyAnalysis("/nonexistent/path/that/does/not/exist");
+        expect(result.scanner).toBe("memory-safety");
+        expect(result).toHaveProperty("success");
+    });
+    it("accepts timeout option", async () => {
+        await writeFile(join(testProjectPath, "index.ts"), `export const x = 1;`);
+        const result = await runMemorySafetyAnalysis(testProjectPath, { timeout: 5000 });
+        expect(result.scanner).toBe("memory-safety");
+    });
+});
+describe("runMemorySafetyAnalysis - C/C++ pattern detection", () => {
+    it("detects unsafe strcpy usage", async () => {
+        await writeFile(join(testProjectPath, "unsafe.c"), `#include <string.h>
+void copy(char *dest, char *src) {
+  strcpy(dest, src);
+}
+`);
+        const result = await runMemorySafetyAnalysis(testProjectPath);
+        if (result.success && result.findings.length > 0) {
+            const strcpyFinding = result.findings.find(f => f.ruleId === "memory:unsafe-strcpy");
+            expect(strcpyFinding).toBeDefined();
+            expect(strcpyFinding?.severity).toBe("high");
+            expect(strcpyFinding?.cweIds).toContain("CWE-120");
+        }
+    });
+    it("detects unsafe sprintf usage", async () => {
+        await writeFile(join(testProjectPath, "format.c"), `#include <stdio.h>
+void format(char *buf, int x) {
+  sprintf(buf, "%d", x);
+}
+`);
+        const result = await runMemorySafetyAnalysis(testProjectPath);
+        if (result.success && result.findings.length > 0) {
+            const sprintfFinding = result.findings.find(f => f.ruleId === "memory:unsafe-sprintf");
+            expect(sprintfFinding).toBeDefined();
+            expect(sprintfFinding?.severity).toBe("high");
+            expect(sprintfFinding?.cweIds).toContain("CWE-134");
+        }
+    });
+    it("detects banned gets() function", async () => {
+        await writeFile(join(testProjectPath, "banned.c"), `#include <stdio.h>
+void read_input(char *buf) {
+  gets(buf);
+}
+`);
+        const result = await runMemorySafetyAnalysis(testProjectPath);
+        if (result.success && result.findings.length > 0) {
+            const getsFinding = result.findings.find(f => f.ruleId === "memory:banned-gets");
+            expect(getsFinding).toBeDefined();
+            expect(getsFinding?.severity).toBe("critical");
+            expect(getsFinding?.cweIds).toContain("CWE-242");
+        }
+    });
+    it("detects unsafe strcat usage", async () => {
+        await writeFile(join(testProjectPath, "concat.c"), `#include <string.h>
+void concat(char *dest, char *src) {
+  strcat(dest, src);
+}
+`);
+        const result = await runMemorySafetyAnalysis(testProjectPath);
+        if (result.success && result.findings.length > 0) {
+            const strcatFinding = result.findings.find(f => f.ruleId === "memory:unsafe-strcat");
+            expect(strcatFinding).toBeDefined();
+            expect(strcatFinding?.severity).toBe("high");
+        }
+    });
+    it("detects unsafe alloca usage", async () => {
+        await writeFile(join(testProjectPath, "alloca.c"), `#include <alloca.h>
+void allocate(int size) {
+  char *buf = alloca(size);
+}
+`);
+        const result = await runMemorySafetyAnalysis(testProjectPath);
+        if (result.success && result.findings.length > 0) {
+            const allocaFinding = result.findings.find(f => f.ruleId === "memory:unsafe-alloca");
+            expect(allocaFinding).toBeDefined();
+            expect(allocaFinding?.severity).toBe("high");
+        }
+    });
+});
+describe("runMemorySafetyAnalysis - Rust pattern detection", () => {
+    it("detects unsafe transmute", async () => {
+        await writeFile(join(testProjectPath, "Cargo.toml"), `[package]
+name = "test"
+version = "0.1.0"
+`);
+        await mkdir(join(testProjectPath, "src"), { recursive: true });
+        await writeFile(join(testProjectPath, "src", "lib.rs"), `unsafe {
+  let x: u32 = std::mem::transmute(y);
+}
+`);
+        const result = await runMemorySafetyAnalysis(testProjectPath);
+        if (result.success && result.findings.length > 0) {
+            const transmuteFinding = result.findings.find(f => f.ruleId === "memory:rust-transmute");
+            expect(transmuteFinding).toBeDefined();
+            expect(transmuteFinding?.severity).toBe("high");
+        }
+    });
+    it("detects FFI boundaries", async () => {
+        await writeFile(join(testProjectPath, "Cargo.toml"), `[package]
+name = "test"
+version = "0.1.0"
+`);
+        await mkdir(join(testProjectPath, "src"), { recursive: true });
+        await writeFile(join(testProjectPath, "src", "lib.rs"), `#[no_mangle]
+pub extern "C" fn my_function() {
+  // FFI function
+}
+`);
+        const result = await runMemorySafetyAnalysis(testProjectPath);
+        if (result.success && result.findings.length > 0) {
+            const ffiFinding = result.findings.find(f => f.ruleId === "memory:rust-ffi-boundary");
+            expect(ffiFinding).toBeDefined();
+            expect(ffiFinding?.severity).toBe("info");
+        }
+    });
+});
+describe("runMemorySafetyAnalysis - finding properties", () => {
+    it("findings have scanner property set to memory-safety", async () => {
+        await writeFile(join(testProjectPath, "unsafe.c"), `#include <string.h>
+void copy(char *dest, char *src) {
+  strcpy(dest, src);
+}
+`);
+        const result = await runMemorySafetyAnalysis(testProjectPath);
+        for (const finding of result.findings) {
+            expect(finding.scanner).toBe("memory-safety");
+        }
+    });
+    it("findings have valid severity levels", async () => {
+        await writeFile(join(testProjectPath, "unsafe.c"), `#include <string.h>
+void copy(char *dest, char *src) {
+  strcpy(dest, src);
+}
+`);
+        const result = await runMemorySafetyAnalysis(testProjectPath);
+        for (const finding of result.findings) {
+            expect(["critical", "high", "medium", "low", "info"]).toContain(finding.severity);
+        }
+    });
+    it("findings have category memory-safety", async () => {
+        await writeFile(join(testProjectPath, "unsafe.c"), `#include <string.h>
+void copy(char *dest, char *src) {
+  strcpy(dest, src);
+}
+`);
+        const result = await runMemorySafetyAnalysis(testProjectPath);
+        for (const finding of result.findings) {
+            expect(finding.category).toBe("memory-safety");
+        }
+    });
+    it("findings have CWE IDs in correct format", async () => {
+        await writeFile(join(testProjectPath, "unsafe.c"), `#include <string.h>
+void copy(char *dest, char *src) {
+  strcpy(dest, src);
+}
+`);
+        const result = await runMemorySafetyAnalysis(testProjectPath);
+        for (const finding of result.findings) {
+            if (finding.cweIds && finding.cweIds.length > 0) {
+                for (const cwe of finding.cweIds) {
+                    expect(cwe).toMatch(/^CWE-\d+$/);
+                }
+            }
+        }
+    });
+});
+describe("runMemorySafetyAnalysis - deduplication", () => {
+    it("deduplicates findings by file+line+ruleId", async () => {
+        // Create a file with the same pattern multiple times on different lines
+        await writeFile(join(testProjectPath, "multi.c"), `#include <string.h>
+void copy1(char *dest, char *src) { strcpy(dest, src); }
+void copy2(char *dest, char *src) { strcpy(dest, src); }
+`);
+        const result = await runMemorySafetyAnalysis(testProjectPath);
+        if (result.findings.length > 0) {
+            // Each finding should be on a different line
+            const lineNumbers = result.findings
+                .filter(f => f.ruleId === "memory:unsafe-strcpy")
+                .map(f => f.line);
+            const uniqueLines = new Set(lineNumbers);
+            expect(uniqueLines.size).toBe(lineNumbers.length);
+        }
+    });
+});
+describe("runMemorySafetyAnalysis - metadata", () => {
+    it("includes languages in metadata", async () => {
+        await writeFile(join(testProjectPath, "main.c"), `int main() { return 0; }`);
+        const result = await runMemorySafetyAnalysis(testProjectPath);
+        expect(result.metadata?.languages).toBeDefined();
+        const languages = result.metadata?.languages;
+        expect(languages?.cpp).toBe(true);
+    });
+    it("includes tools used in metadata", async () => {
+        await writeFile(join(testProjectPath, "main.c"), `int main() { return 0; }`);
+        const result = await runMemorySafetyAnalysis(testProjectPath);
+        expect(result.metadata?.toolsUsed).toBeDefined();
+        const toolsUsed = result.metadata?.toolsUsed;
+        expect(toolsUsed?.patternAnalysis).toBe(true);
+    });
+});
+//# sourceMappingURL=memory-safety.test.js.map

package/dist/scanners/memory-safety.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-safety.test.js","sourceRoot":"","sources":["../../src/scanners/memory-safety.test.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAC/E,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;AAC5B,OAAO,EACL,uBAAuB,EACvB,sBAAsB,EACtB,yBAAyB,EACzB,qBAAqB,GACtB,MAAM,oBAAoB,CAAC;AAE5B,MAAM,SAAS,GAAG,IAAI,CACpB,MAAM,EAAE,EACR,sBAAsB,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAChF,CAAC;AACF,IAAI,eAAuB,CAAC;AAE5B,UAAU,CAAC,KAAK,IAAI,EAAE;IACpB,eAAe,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACpF,MAAM,KAAK,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AACpD,CAAC,CAAC,CAAC;AAEH,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,wBAAwB;IAC1B,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,KAAK,IAAI,EAAE;IAClB,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,wBAAwB;IAC1B,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,EAAE,CAAC,iBAAiB,EAAE,KAAK,IAAI,EAAE;QAC/B,MAAM,MAAM,GAAG,MAAM,sBAAsB,EAAE,CAAC;QAC9C,MAAM,CAAC,OAAO,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;IACzC,EAAE,CAAC,iBAAiB,EAAE,KAAK,IAAI,EAAE;QAC/B,MAAM,MAAM,GAAG,MAAM,yBAAyB,EAAE,CAAC;QACjD,MAAM,CAAC,OAAO,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,SAAS,CAAC,IAAI,CAAC,eAAe,EAAE,UAAU,CAAC,EAAE,qBAAqB,CAAC,CAAC;QAE1E,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,eAAe,CAAC,CAAC;QAE5D,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;QAC5C,MAAM,CAAC,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC1C,MAAM,CAAC,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC3C,MAAM,CAAC,OAAO,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iBAAiB,EAAE,KAAK,IAAI,EAAE;QAC/B,MAAM,SAAS,CACb,IAAI,CAAC,eAAe,EAAE,QAAQ,CAAC,EAC/B;;CAEL,CACI,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,eAAe,CAAC,CAAC;QAE5D,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mBAAmB,EAAE,KAAK,IAAI,EAAE;QACjC,MAAM,SAAS,CACb,IAAI,CAAC,eAAe,EAAE,UAAU,CAAC,EACjC;;CAEL,CACI,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,eAAe,CAAC,CAAC;QAE5D,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE;QACpC,MAAM,SAAS,CACb,IAAI,CAAC,eAAe,EAAE,UAAU,CAAC,EACjC;;;CAGL,CACI,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,eAAe,CAAC,CAAC;QAE5D,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uBAAuB,EAAE,KAAK,IAAI,EAAE;QACrC,MAAM,SAAS,CACb,IAAI,CAAC,eAAe,EAAE,YAAY,CAAC,EACnC;;;CAGL,CACI,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,eAAe,CAAC,CAAC;QAE5D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;QAC7C,MAAM,SAAS,CACb,IAAI,CAAC,eAAe,EAAE,aAAa,CAAC,EACpC,iBAAiB,CAClB,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,eAAe,CAAC,CAAC;QAE5D,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,SAAS,CAAC,IAAI,CAAC,eAAe,EAAE,UAAU,CAAC,EAAE,qBAAqB,CAAC,CAAC;QAE1E,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,eAAe,CAAC,CAAC;QAE5D,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,SAAS,CAAC,IAAI,CAAC,eAAe,EAAE,UAAU,CAAC,EAAE,qBAAqB,CAAC,CAAC;QAE1E,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,eAAe,CAAC,CAAC;QAE9D,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;QAC1D,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QACzC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,SAAS,CAAC,IAAI,CAAC,eAAe,EAAE,UAAU,CAAC,EAAE,qBAAqB,CAAC,CAAC;QAE1E,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,eAAe,CAAC,CAAC;QAE9D,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iBAAiB,EAAE,KAAK,IAAI,EAAE;QAC/B,MAAM,SAAS,CAAC,IAAI,CAAC,eAAe,EAAE,UAAU,CAAC,EAAE,qBAAqB,CAAC,CAAC;QAE1E,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,eAAe,CAAC,CAAC;QAE9D,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,uCAAuC,CAAC,CAAC;QAEtF,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC7C,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wBAAwB,EAAE,KAAK,IAAI,EAAE;QACtC,MAAM,SAAS,CAAC,IAAI,CAAC,eAAe,EAAE,UAAU,CAAC,EAAE,qBAAqB,CAAC,CAAC;QAE1E,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,eAAe,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAEjF,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mDAAmD,EAAE,GAAG,EAAE;IACjE,EAAE,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;QAC3C,MAAM,SAAS,CACb,IAAI,CAAC,eAAe,EAAE,UAAU,CAAC,EACjC;;;;CAIL,CACI,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,eAAe,CAAC,CAAC;QAE9D,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjD,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CACxC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,sBAAsB,CACzC,CAAC;YACF,MAAM,CAAC,aAAa,CAAC,CAAC,WAAW,EAAE,CAAC;YACpC,MAAM,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC7C,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACrD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;QAC5C,MAAM,SAAS,CACb,IAAI,CAAC,eAAe,EAAE,UAAU,CAAC,EACjC;;;;CAIL,CACI,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,eAAe,CAAC,CAAC;QAE9D,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjD,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CACzC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,uBAAuB,CAC1C,CAAC;YACF,MAAM,CAAC,cAAc,CAAC,CAAC,WAAW,EAAE,CAAC;YACrC,MAAM,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC9C,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACtD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;QAC9C,MAAM,SAAS,CACb,IAAI,CAAC,eAAe,EAAE,UAAU,CAAC,EACjC;;;;CAIL,CACI,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,eAAe,CAAC,CAAC;QAE9D,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjD,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CACtC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,oBAAoB,CACvC,CAAC;YACF,MAAM,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,CAAC;YAClC,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC/C,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACnD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;QAC3C,MAAM,SAAS,CACb,IAAI,CAAC,eAAe,EAAE,UAAU,CAAC,EACjC;;;;CAIL,CACI,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,eAAe,CAAC,CAAC;QAE9D,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjD,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CACxC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,sBAAsB,CACzC,CAAC;YACF,MAAM,CAAC,aAAa,CAAC,CAAC,WAAW,EAAE,CAAC;YACpC,MAAM,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;QAC3C,MAAM,SAAS,CACb,IAAI,CAAC,eAAe,EAAE,UAAU,CAAC,EACjC;;;;CAIL,CACI,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,eAAe,CAAC,CAAC;QAE9D,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjD,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CACxC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,sBAAsB,CACzC,CAAC;YACF,MAAM,CAAC,aAAa,CAAC,CAAC,WAAW,EAAE,CAAC;YACpC,MAAM,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,kDAAkD,EAAE,GAAG,EAAE;IAChE,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;QACxC,MAAM,SAAS,CACb,IAAI,CAAC,eAAe,EAAE,YAAY,CAAC,EACnC;;;CAGL,CACI,CAAC;QACF,MAAM,KAAK,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/D,MAAM,SAAS,CACb,IAAI,CAAC,eAAe,EAAE,KAAK,EAAE,QAAQ,CAAC,EACtC;;;CAGL,CACI,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,eAAe,CAAC,CAAC;QAE9D,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjD,MAAM,gBAAgB,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAC3C,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,uBAAuB,CAC1C,CAAC;YACF,MAAM,CAAC,gBAAgB,CAAC,CAAC,WAAW,EAAE,CAAC;YACvC,MAAM,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAClD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wBAAwB,EAAE,KAAK,IAAI,EAAE;QACtC,MAAM,SAAS,CACb,IAAI,CAAC,eAAe,EAAE,YAAY,CAAC,EACnC;;;CAGL,CACI,CAAC;QACF,MAAM,KAAK,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/D,MAAM,SAAS,CACb,IAAI,CAAC,eAAe,EAAE,KAAK,EAAE,QAAQ,CAAC,EACtC;;;;CAIL,CACI,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,eAAe,CAAC,CAAC;QAE9D,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjD,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CACrC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,0BAA0B,CAC7C,CAAC;YACF,MAAM,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;YACjC,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,8CAA8C,EAAE,GAAG,EAAE;IAC5D,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,SAAS,CACb,IAAI,CAAC,eAAe,EAAE,UAAU,CAAC,EACjC;;;;CAIL,CACI,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,eAAe,CAAC,CAAC;QAE9D,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACtC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAChD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,SAAS,CACb,IAAI,CAAC,eAAe,EAAE,UAAU,CAAC,EACjC;;;;CAIL,CACI,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,eAAe,CAAC,CAAC;QAE9D,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACtC,MAAM,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACpF,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,SAAS,CACb,IAAI,CAAC,eAAe,EAAE,UAAU,CAAC,EACjC;;;;CAIL,CACI,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,eAAe,CAAC,CAAC;QAE9D,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACtC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACjD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,SAAS,CACb,IAAI,CAAC,eAAe,EAAE,UAAU,CAAC,EACjC;;;;CAIL,CACI,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,eAAe,CAAC,CAAC;QAE9D,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACtC,IAAI,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAChD,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;oBACjC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;gBACnC,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,yCAAyC,EAAE,GAAG,EAAE;IACvD,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,wEAAwE;QACxE,MAAM,SAAS,CACb,IAAI,CAAC,eAAe,EAAE,SAAS,CAAC,EAChC;;;CAGL,CACI,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,eAAe,CAAC,CAAC;QAE9D,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,6CAA6C;YAC7C,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ;iBAChC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,sBAAsB,CAAC;iBAChD,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACpB,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;YACzC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACpD,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,oCAAoC,EAAE,GAAG,EAAE;IAClD,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;QAC9C,MAAM,SAAS,CACb,IAAI,CAAC,eAAe,EAAE,QAAQ,CAAC,EAC/B,0BAA0B,CAC3B,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,eAAe,CAAC,CAAC;QAE9D,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;QACjD,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,EAAE,SAA8B,CAAC;QAClE,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;QAC/C,MAAM,SAAS,CACb,IAAI,CAAC,eAAe,EAAE,QAAQ,CAAC,EAC/B,0BAA0B,CAC3B,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,eAAe,CAAC,CAAC;QAE9D,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;QACjD,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,EAAE,SAA0C,CAAC;QAC9E,MAAM,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/scanners/race-condition.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Race Condition Scanner
+ *
+ * Detects concurrency bugs that could lead to security vulnerabilities.
+ *
+ * Detection targets:
+ * - Go: go vet static race detection, shared state patterns
+ * - Node.js: Shared mutable state + async, TOCTOU patterns
+ * - Python: threading issues, GIL bypass concerns
+ * - Java: Non-atomic operations, check-then-act bugs
+ *
+ * CWE Mappings:
+ * - CWE-362: Concurrent Execution with Improper Synchronization
+ * - CWE-366: Race Condition within a Thread
+ * - CWE-367: TOCTOU Race Condition
+ * - CWE-820: Missing Synchronization
+ */
+import type { ScannerResult } from "./types.js";
+/**
+ * Main entry point: Run race condition analysis on a project
+ */
+export declare function runRaceConditionAnalysis(projectPath: string, options?: {
+    timeout?: number;
+}): Promise<ScannerResult>;
+//# sourceMappingURL=race-condition.d.ts.map

package/dist/scanners/race-condition.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"race-condition.d.ts","sourceRoot":"","sources":["../../src/scanners/race-condition.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAOH,OAAO,KAAK,EAAwB,aAAa,EAAY,MAAM,YAAY,CAAC;AAwYhF;;GAEG;AACH,wBAAsB,wBAAwB,CAC5C,WAAW,EAAE,MAAM,EACnB,OAAO,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAC7B,OAAO,CAAC,aAAa,CAAC,CAwFxB"}