An Alarm Classification Using Shovel

'_prologue_' is an imaginary function that initialize argc, argv

Solid arrow means call edge

Dotted arrow means return edge

Green arrow means branch (pair of call & return)
(For details, see II-A.'Backbone-Branch Decomposition' section of our paper)

Alarm #1

+ Taint Source : hyphen.c:54 (Hyphen_Init)
+ Sink (Allocation) : misc.c:27 (Hyphen_Init)

path 1

Found Bug (True Alarm)

Alarm #2

+ Taint Source : font.c:155 (font_loadtables)
+ Sink (Allocation) : font.c:227 (font_loadtables)

path 1

(User Feedback)

Confirmed False Alarm (trivial reasoning inside the function)

UNSAT (False Alarm)

Alarm #3

+ Taint Source : font.c:210 (font_loadtables)
+ Sink (Allocation) : font.c:227 (font_loadtables)

path 1

Found Bug (True Alarm)

Alarm #4

+ Taint Source : font.c:238 (font_loadtables)
+ Sink (Allocation) : font.c:227 (font_loadtables)

path 1

(User Feedback)

Confirmed False Alarm (trivial reasoning inside the function)

UNSAT (False Alarm)

Alarm #5

+ Taint Source : index.c:111 (init_collation_data)
+ Sink (Allocation) : misc.c:27 (init_collation_data)

path 1

Found Bug (True Alarm)

Alarm #6

+ Taint Source : index.c:111 (init_collation_data)
+ Sink (Allocation) : misc.c:27 (init_collation_data)

path 1

Found Bug (True Alarm)

Alarm #7

+ Taint Source : index.c:136 (init_collation_data)
+ Sink (Allocation) : misc.c:27 (init_collation_data)

path 1

(User Feedback)

Confirmed False Alarm (trivial reasoning inside the function)

UNSAT (False Alarm)

Alarm #8

+ Taint Source : index.c:136 (init_collation_data)
+ Sink (Allocation) : misc.c:27 (init_collation_data)

path 1

(User Feedback)

Confirmed False Alarm (trivial reasoning inside the function)

UNSAT (False Alarm)

Alarm #9

+ Taint Source : png.c:59 (read_PNG_file)
+ Sink (Allocation) : png.c:83 (read_PNG_file)

path 1

(User Feedback)

Confirmed False Alarm (trivial reasoning inside the function)

UNSAT (False Alarm)