Proof Portal

Sign in
Projects

jsonparser

ProbeLabs23 findings · 123 requirements

The fastest JSON parser for Go — formally verified with ReqProof (real library, master).

Compare findings

The compared side's slice of new, resolved and changed findings versus its base — read live from git.

Base
6454f95de679fdd0c623a6183f7cff82da56b4426454f95common ancestor of master
Partial9 warnings
116/116 realizable123/123 meet policyverification complete: 123
Compared
6454f95de679fdd0c623a6183f7cff82da56b4426454f95
Partial9 warnings
116/116 realizable123/123 meet policyverification complete: 123
+0 new·−0 resolved·0 changed·11 unchanged
New (0)
Findings introduced by the compared side — its own slice of issues.

No new findings on the compared side.

Resolved (0)
Findings present at the base but gone on the compared side.

No findings resolved on the compared side.

Changed (0)
Same finding on both sides, with severity and/or status moved (old → new).

No findings changed severity or status.

▸Still open / unchanged (11)
Delete left dangling trailing comma on array/object element followed by whitespace+commaProblem reportSet with array-index path component under an object parent produces malformed JSON output (silent corruption)Problem reportEmpty-string key path component panics (hazard-sweep finding)Problem reportUnescape lone-Unicode-surrogate mishandling synthesizes bogus non-BMP charsProblem reportSet beyond-length array index on scalar array destroys all elements (SYS-REQ-110 violation)Problem reportSet with array-index path component under an object parent produces malformed JSON outputKnown issueArrayEach on non-array root emitted spurious callback before erroringProblem reportSet on top-level array-index beyond length returns KeyPathNotFoundError (SYS-REQ-110 contract gap)Problem reportSet on top-level array-index beyond length returns KeyPathNotFoundError instead of appendingKnown issueParseInt("-") returns (0, nil) — silent false-success on sign-only inputProblem reportParseInt("-") returns (0, nil) — silent false-success on sign-only inputKnown issue

Comparing findings for jsonparser. Requirement coverage is intentionally not shown here — see Requirements for coverage.