An Alarm Classification Using Shovel

'_prologue_' is an imaginary function that initialize argc, argv

Solid arrow means call edge

Dotted arrow means return edge

Green arrow means branch (pair of call & return)
For details, see II-A.'Backbone-Branch Decomposition' section of our paper

gnuplot_alarm1_1

path 1

(User Feedback)

Path should NOT have an incoming edge to 'gprintf', because there is a string sanitization in the node

UNSAT (false alarm)

gnuplot_alarm1_10

path 1

(User Feedback)

Path should NOT have an incoming edge to 'gprintf', because there is a string sanitization in the node

UNSAT (false alarm)

gnuplot_alarm1_11

path 1

(User Feedback)

Path should NOT have an incoming edge to 'gprintf', because there is a string sanitization in the node

UNSAT (false alarm)

gnuplot_alarm1_12

path 1

(User Feedback)

Path should NOT have an incoming edge to 'gprintf', because there is a string sanitization in the node

UNSAT (false alarm)

gnuplot_alarm1_13

path 1

(User Feedback)

Path should NOT have an incoming edge to 'gprintf', because there is a string sanitization in the node

UNSAT (false alarm)

gnuplot_alarm1_14

path 1

(User Feedback)

Path should NOT have an incoming edge to 'gprintf', because there is a string sanitization in the node

UNSAT (false alarm)

gnuplot_alarm1_15

path 1

(User Feedback)

Path should NOT have an incoming edge to 'gprintf', because there is a string sanitization in the node

UNSAT (false alarm)

gnuplot_alarm1_16

path 1

(User Feedback)

Path should NOT have an incoming edge to 'gprintf', because there is a string sanitization in the node

UNSAT (false alarm)

gnuplot_alarm1_17

path 1

(User Feedback)

Path should NOT have an incoming edge to 'gprintf', because there is a string sanitization in the node

UNSAT (false alarm)

gnuplot_alarm1_18

path 1

(User Feedback)

Path should NOT have an incoming edge to 'gprintf', because there is a string sanitization in the node

UNSAT (false alarm)

gnuplot_alarm1_19

path 1

(User Feedback)

Path should NOT have an incoming edge to 'gprintf', because there is a string sanitization in the node

UNSAT (false alarm)

gnuplot_alarm1_2

path 1

(User Feedback)

Path should NOT have an incoming edge to 'gprintf', because there is a string sanitization in the node

UNSAT (false alarm)

gnuplot_alarm1_20

path 1

(User Feedback)

Path should NOT have an incoming edge to 'gprintf', because there is a string sanitization in the node

UNSAT (false alarm)

gnuplot_alarm1_21

path 1

(User Feedback)

Path should NOT have an incoming edge to 'gprintf', because there is a string sanitization in the node

UNSAT (false alarm)

gnuplot_alarm1_22

path 1

(User Feedback)

Path should NOT have an incoming edge to 'gprintf', because there is a string sanitization in the node

UNSAT (false alarm)

gnuplot_alarm1_23

path 1

(User Feedback)

Path should NOT have an incoming edge to 'gprintf', because there is a string sanitization in the node

UNSAT (false alarm)

gnuplot_alarm1_24

path 1

(User Feedback)

Path should NOT have an incoming edge to 'gprintf', because there is a string sanitization in the node

UNSAT (false alarm)

gnuplot_alarm1_25

path 1

(User Feedback)

Path should NOT have an incoming edge to 'gprintf', because there is a string sanitization in the node

UNSAT (false alarm)

gnuplot_alarm1_26

path 1

(User Feedback)

Path should NOT have an incoming edge to 'gprintf', because there is a string sanitization in the node

UNSAT (false alarm)

gnuplot_alarm1_27

path 1

(User Feedback)

Path should NOT have an incoming edge to 'gprintf', because there is a string sanitization in the node

UNSAT (false alarm)

gnuplot_alarm1_28

path 1

(User Feedback)

Path should NOT have an incoming edge to 'gprintf', because there is a string sanitization in the node

UNSAT (false alarm)

gnuplot_alarm1_29

path 1

(User Feedback)

Path should NOT have an incoming edge to 'gprintf', because there is a string sanitization in the node

UNSAT (false alarm)

gnuplot_alarm1_3

path 1

(User Feedback)

Path should NOT have an incoming edge to 'gprintf', because there is a string sanitization in the node

UNSAT (false alarm)

gnuplot_alarm1_30

path 1

(User Feedback)

Path should NOT have an incoming edge to 'gprintf', because there is a string sanitization in the node

UNSAT (false alarm)

gnuplot_alarm1_31

path 1

(User Feedback)

Path should NOT have an incoming edge to 'gprintf', because there is a string sanitization in the node

UNSAT (false alarm)

gnuplot_alarm1_4

path 1

(User Feedback)

Path should NOT have an incoming edge to 'gprintf', because there is a string sanitization in the node

UNSAT (false alarm)

gnuplot_alarm1_5

path 1

(User Feedback)

Path should NOT have an incoming edge to 'gprintf', because there is a string sanitization in the node

UNSAT (false alarm)

gnuplot_alarm1_6

path 1

(User Feedback)

Path should NOT have an incoming edge to 'gprintf', because there is a string sanitization in the node

UNSAT (false alarm)

gnuplot_alarm1_7

path 1

(User Feedback)

Path should NOT have an incoming edge to 'gprintf', because there is a string sanitization in the node

UNSAT (false alarm)

gnuplot_alarm1_8

path 1

(User Feedback)

Path should NOT have an incoming edge to 'gprintf', because there is a string sanitization in the node

UNSAT (false alarm)

gnuplot_alarm1_9

path 1

(User Feedback)

Path should NOT have an incoming edge to 'gprintf', because there is a string sanitization in the node

UNSAT (false alarm)

gnuplot_alarm2_1

path 1

(User Feedback)

Path should NOT have an incoming edge to 'PS_load_fontfile', because tainted data cannot flow through the node

UNSAT (false alarm)

gnuplot_alarm2_10

path 1

(User Feedback)

Path should NOT have an incoming edge to 'PS_load_fontfile', because tainted data cannot flow through the node

UNSAT (false alarm)

gnuplot_alarm2_11

path 1

(User Feedback)

Path should NOT have an incoming edge to 'PS_load_fontfile', because tainted data cannot flow through the node

UNSAT (false alarm)

gnuplot_alarm2_12

path 1

(User Feedback)

Path should NOT have an incoming edge to 'PS_load_fontfile', because tainted data cannot flow through the node

UNSAT (false alarm)

gnuplot_alarm2_13

path 1

Found Bug (true alarm)

gnuplot_alarm2_14

path 1

(User Feedback)

Path should NOT have an incoming edge to 'PS_load_fontfile', because tainted data cannot flow through the node

UNSAT (false alarm)

gnuplot_alarm2_15

path 1

(User Feedback)

Path should NOT have an incoming edge to 'PS_load_fontfile', because tainted data cannot flow through the node

UNSAT (false alarm)

gnuplot_alarm2_16

path 1

(User Feedback)

Path should NOT have an incoming edge to 'PS_load_fontfile', because tainted data cannot flow through the node

UNSAT (false alarm)

gnuplot_alarm2_17

path 1

(User Feedback)

Path should NOT have an incoming edge to 'PS_load_fontfile', because tainted data cannot flow through the node

UNSAT (false alarm)

gnuplot_alarm2_18

path 1

(User Feedback)

Path should NOT have an incoming edge to 'PS_load_fontfile', because tainted data cannot flow through the node

UNSAT (false alarm)

gnuplot_alarm2_19

path 1

(User Feedback)

Path should NOT have an incoming edge to 'PS_load_fontfile', because tainted data cannot flow through the node

UNSAT (false alarm)

gnuplot_alarm2_2

path 1

(User Feedback)

Path should NOT have an incoming edge to 'PS_load_fontfile', because tainted data cannot flow through the node

UNSAT (false alarm)

gnuplot_alarm2_20

path 1

(User Feedback)

Path should NOT have an incoming edge to 'PS_load_fontfile', because tainted data cannot flow through the node

UNSAT (false alarm)

gnuplot_alarm2_21

path 1

(User Feedback)

Path should NOT have an incoming edge to 'PS_load_fontfile', because tainted data cannot flow through the node

UNSAT (false alarm)

gnuplot_alarm2_22

path 1

(User Feedback)

Path should NOT have an incoming edge to 'PS_load_fontfile', because tainted data cannot flow through the node

UNSAT (false alarm)

gnuplot_alarm2_23

path 1

(User Feedback)

Path should NOT have an incoming edge to 'PS_load_fontfile', because tainted data cannot flow through the node

UNSAT (false alarm)

gnuplot_alarm2_24

path 1

(User Feedback)

Path should NOT have an incoming edge to 'PS_load_fontfile', because tainted data cannot flow through the node

UNSAT (false alarm)

gnuplot_alarm2_25

path 1

(User Feedback)

Path should NOT have an incoming edge to 'PS_load_fontfile', because tainted data cannot flow through the node

UNSAT (false alarm)

gnuplot_alarm2_26

path 1

(User Feedback)

Path should NOT have an incoming edge to 'PS_load_fontfile', because tainted data cannot flow through the node

UNSAT (false alarm)

gnuplot_alarm2_27

path 1

(User Feedback)

Path should NOT have an incoming edge to 'PS_load_fontfile', because tainted data cannot flow through the node

UNSAT (false alarm)

gnuplot_alarm2_28

path 1

(User Feedback)

Path should NOT have an incoming edge to 'PS_load_fontfile', because tainted data cannot flow through the node

UNSAT (false alarm)

gnuplot_alarm2_29

path 1

(User Feedback)

Path should NOT have an incoming edge to 'PS_load_fontfile', because tainted data cannot flow through the node

UNSAT (false alarm)

gnuplot_alarm2_3

path 1

(User Feedback)

Path should NOT have an incoming edge to 'PS_load_fontfile', because tainted data cannot flow through the node

UNSAT (false alarm)

gnuplot_alarm2_30

path 1

(User Feedback)

Path should NOT have an incoming edge to 'PS_load_fontfile', because tainted data cannot flow through the node

UNSAT (false alarm)

gnuplot_alarm2_31

path 1

(User Feedback)

Path should NOT have an incoming edge to 'PS_load_fontfile', because tainted data cannot flow through the node

UNSAT (false alarm)

gnuplot_alarm2_4

path 1

(User Feedback)

Path should NOT have an incoming edge to 'PS_load_fontfile', because tainted data cannot flow through the node

UNSAT (false alarm)

gnuplot_alarm2_5

path 1

(User Feedback)

Path should NOT have an incoming edge to 'PS_load_fontfile', because tainted data cannot flow through the node

UNSAT (false alarm)

gnuplot_alarm2_6

path 1

(User Feedback)

Path should NOT have an incoming edge to 'PS_load_fontfile', because tainted data cannot flow through the node

UNSAT (false alarm)

gnuplot_alarm2_7

path 1

(User Feedback)

Path should NOT have an incoming edge to 'PS_load_fontfile', because tainted data cannot flow through the node

UNSAT (false alarm)

gnuplot_alarm2_8

path 1

(User Feedback)

Path should NOT have an incoming edge to 'PS_load_fontfile', because tainted data cannot flow through the node

UNSAT (false alarm)

gnuplot_alarm2_9

path 1

(User Feedback)

Path should NOT have an incoming edge to 'PS_load_fontfile', because tainted data cannot flow through the node

UNSAT (false alarm)