A security focused static analysis tool for Android and Java applications.
by facebookC++
Last 12 weeks · 22 commits
4 of 6 standards met
Summary The flag in the Python shim was the odd one out among the boolean CLI options: every other boolean flag uses , , , , but used with and no converter or const. This made the flag broken in both usage patterns: the option is -> the shim writes into the config JSON -> treats null as "use default" (false), so the analysis silently runs in parallel even though the user asked for sequential. or -> the option is the string / -> the shim writes into the config -> requires a JSON boolean and throws , aborting the whole analysis. The option is consumed by , where it forces the analysis onto a single thread, so the bug is user-visible. This change aligns with all the other boolean flags so it always serializes to a real JSON boolean.
Repository: facebook/mariana-trench. Description: A security focused static analysis tool for Android and Java applications. Stars: 1250, Forks: 157. Primary language: C++. Languages: C++ (87.9%), Java (7.7%), Python (2.3%), CMake (0.8%), Common Lisp (0.8%). License: MIT. Homepage: https://mariana-tren.ch/ Open PRs: 4, open issues: 40. Last activity: 10h ago. Community health: 87%. Top contributors: anwesht, arthaud, yuhshin-oss, SimranVirk, jinghao-meta-oss, nikolait-meta, agampe, shannonzhu, antonk52, dkgi and others.