auditor

An aarch64 constant-time memory access auditing tool.
git clone git://git.ppad.tech/auditor.git
Log | Files | Refs | README | LICENSE

commit b38f3199721e08f9af7efc144f15888224a6b3a1
parent 91d3d7ae853629a3b7b35bfd55f2601593a375ff
Author: Jared Tobin <jared@jtobin.io>
Date:   Fri, 13 Feb 2026 07:51:28 +0400

style: hide symbols with only GHC runtime findings

Symbols where all findings are GHC runtime (count 0) are now
omitted from output entirely.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

Diffstat:
Mapp/Main.hs | 13++++++-------
1 file changed, 6 insertions(+), 7 deletions(-)

diff --git a/app/Main.hs b/app/Main.hs @@ -173,18 +173,17 @@ outputNct opts lineMap findings = do let syms = Map.toList findings -- Count only non-GHC-runtime findings countReal = length . filter (not . isGhcRuntimeFinding lineMap) - realCounts = map (countReal . snd) syms - total = sum realCounts - -- Filter to functions with real findings for the count - realFuncs = length (filter (> 0) realCounts) + -- Filter to symbols with at least one real finding + realSyms = filter ((> 0) . countReal . snd) syms + total = sum (map (countReal . snd) realSyms) if optNctDetail opts - then mapM_ (printNctDetail lineMap) syms - else mapM_ (printNctSummary lineMap) syms + then mapM_ (printNctDetail lineMap) realSyms + else mapM_ (printNctSummary lineMap) realSyms if optQuiet opts then pure () else do TIO.putStrLn "" - TIO.putStrLn $ "Functions scanned: " <> T.pack (show realFuncs) + TIO.putStrLn $ "Functions scanned: " <> T.pack (show (length realSyms)) TIO.putStrLn $ "NCT findings: " <> T.pack (show total) if total == 0 then exitSuccess