CASR Report Format (.casrep and SARIF)

{
  "Date": "2024-03-15T10:22:31.418262+00:00",
  "Uname": "Linux fuzzer-host 6.5.0-25-generic #25-Ubuntu SMP x86_64 GNU/Linux",
  "OS": "Ubuntu",
  "OSRelease": "22.04",
  "Architecture": "amd64",
  "ExecutablePath": "/usr/bin/target_binary",
  "ProcCmdline": "/usr/bin/target_binary /tmp/crash-input",
  "Stdin": "/tmp/crash-input",
  "ProcEnviron": [
    "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
    "ASAN_OPTIONS=abort_on_error=0:symbolize=1"
  ],
  "ProcStatus": [
    "Name:\ttarget_binary",
    "State:\tZ (zombie)",
    "Pid:\t12345"
  ],
  "ProcMaps": [
    "0x555555554000     0x555555600000     0xac000        0x0 /usr/bin/target_binary",
    "0x7ffff7a00000     0x7ffff7bca000     0x1ca000       0x0 /lib/x86_64-linux-gnu/libc.so.6"
  ],
  "CrashSeverity": {
    "Type": "EXPLOITABLE",
    "ShortDescription": "heap-buffer-overflow(write)",
    "Description": "Heap buffer overflow",
    "Explanation": "The target writes data past the end, or before the beginning, of the intended heap buffer."
  },
  "Stacktrace": [
    "    #0 0x555555578c41 in process_input /src/target/parser.c:142:5",
    "    #1 0x55555557a013 in main /src/target/main.c:87:3",
    "    #2 0x7ffff7a29d8f in __libc_start_call_main ../sysdeps/nptl/libc_start_call_main.h:58:16"
  ],
  "CrashLine": "/src/target/parser.c:142:5",
  "Source": [
    "    138        size_t n = get_length(buf);\n",
    "    139        char *out = malloc(n);\n",
    "    140        for (size_t i = 0; i <= n; i++) {\n",
    "--> 141            out[i] = buf[i];\n",
    "    142        }\n"
  ],
  "AsanReport": [
    "==12345==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x602000000051",
    "WRITE of size 1 at 0x602000000051 thread T0",
    "    #0 0x555555578c41 in process_input /src/target/parser.c:142:5",
    "    #1 0x55555557a013 in main /src/target/main.c:87:3",
    "SUMMARY: AddressSanitizer: heap-buffer-overflow /src/target/parser.c:142:5 in process_input"
  ]
}

casr-cli --sarif results.sarif \
         --source-root /path/to/source \
         /path/to/casrep/directory

# Convert all .casrep files in the crashes/ directory to SARIF,
# tagging the tool as "AFL++" and mapping source paths under /home/user/project
casr-cli \
  --sarif ./report.sarif \
  --source-root /home/user/project \
  --tool "AFL++" \
  ./crashes/

{
  "$schema": "https://json.schemastore.org/sarif-2.1.0.json",
  "version": "2.1.0",
  "runs": [
    {
      "tool": {
        "driver": {
          "name": "AFL++",
          "rules": [
            {
              "id": "F30",
              "name": "heap-buffer-overflow(write)",
              "shortDescription": { "text": "Heap buffer overflow" },
              "fullDescription": {
                "text": "The target writes data past the end, or before the beginning, of the intended heap buffer."
              },
              "defaultConfiguration": { "level": "error" }
            }
          ]
        }
      },
      "results": [
        {
          "ruleId": "F30",
          "level": "error",
          "message": { "text": "heap-buffer-overflow(write)" },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "src/target/parser.c",
                  "uriBaseId": "%SRCROOT%"
                },
                "region": { "startLine": 142, "startColumn": 5 }
              }
            }
          ]
        }
      ]
    }
  ]
}