1{ 2 "$schema": "https://raw.githubusercontent.com/oasis-tcs/sarif-spec/master/Schemata/sarif-schema-2.1.0.json", 3 "runs": [ 4 { 5 "artifacts": [ 6 { 7 "length": 434, 8 "location": { 9 }, 10 "mimeType": "text/plain", 11 "roles": [ 12 "resultFile" 13 ] 14 } 15 ], 16 "columnKind": "unicodeCodePoints", 17 "results": [ 18 { 19 "codeFlows": [ 20 { 21 "threadFlows": [ 22 { 23 "locations": [ 24 { 25 "importance": "essential", 26 "location": { 27 "message": { 28 "text": "Calling 'f'" 29 }, 30 "physicalLocation": { 31 "artifactLocation": { 32 "index": 0, 33 }, 34 "region": { 35 "endColumn": 6, 36 "endLine": 13, 37 "startColumn": 3, 38 "startLine": 13 39 } 40 } 41 } 42 }, 43 { 44 "importance": "essential", 45 "location": { 46 "message": { 47 "text": "tainted" 48 }, 49 "physicalLocation": { 50 "artifactLocation": { 51 "index": 0, 52 }, 53 "region": { 54 "endColumn": 18, 55 "endLine": 9, 56 "startColumn": 11, 57 "startLine": 9 58 } 59 } 60 } 61 } 62 ] 63 } 64 ] 65 } 66 ], 67 "locations": [ 68 { 69 "physicalLocation": { 70 "artifactLocation": { 71 "index": 0, 72 }, 73 "region": { 74 "endColumn": 18, 75 "endLine": 9, 76 "startColumn": 11, 77 "startLine": 9 78 } 79 } 80 } 81 ], 82 "message": { 83 "text": "tainted" 84 }, 85 "ruleId": "debug.TaintTest", 86 "ruleIndex": 0 87 } 88 ], 89 "tool": { 90 "driver": { 91 "fullName": "clang static analyzer", 92 "language": "en-US", 93 "name": "clang", 94 "rules": [ 95 { 96 "fullDescription": { 97 "text": "Mark tainted symbols as such." 98 }, 99 "id": "debug.TaintTest", 100 "name": "debug.TaintTest" 101 } 102 ], 103 } 104 } 105 } 106 ], 107} 108