mirror of
https://github.com/elicpeter/nyx.git
synced 2026-06-15 20:05:13 +02:00
13 lines
799 B
Markdown
13 lines
799 B
Markdown
# c_utils
|
|||
|
|||
## Purpose
|
|||
Realistic C CLI/utilities collection fixture used as a multi-file scan regression.
|
|||
|
|||
## Expectations
|
|||
- **required**: `taint-unsanitised-flow` (≥4), `c.memory.strcpy` (≥1), `c.memory.strcat` (≥1), `c.memory.sprintf` (≥4), `c.memory.gets` (≥1), `c.memory.scanf_percent_s` (≥1), `c.cmdi.system` (≥3), `cfg-unguarded-sink` (≥1)
|
|||
- **forbidden**: (none)
|
|||
- **noise_budget**: max_total=50, max_high=20
|
|||
|
|||
## Why `noise_budget` stays
|
|||
Realistic apps produce a natural mix of true-positive findings plus minor framework/helper noise. `noise_budget` is a loose upper bound that guards against precision regressions without requiring an exact per-finding pin. The `required_findings` list captures the must-fire truth set; anything new within the budget is permitted variance.
|
