tlsfuzzer/tlsfuzzer

View on GitHub

Showing 281 of 284 total issues

Similar blocks of code found in 2 locations. Consider refactoring.
Open

        if os.path.isfile(timing_bin_path) and \
                os.path.isfile(legend_csv_path) and \
                os.path.isfile(timing_bin_shape_path) and \
                os.path.getmtime(timing_csv_path) < \
                os.path.getmtime(timing_bin_path):
Severity: Major
Found in tlsfuzzer/analysis.py and 1 other location - About 1 hr to fix
tlsfuzzer/analysis.py on lines 1519..1523

Duplicated Code

Duplicated code can lead to software that is hard to understand and difficult to change. The Don't Repeat Yourself (DRY) principle states:

Every piece of knowledge must have a single, unambiguous, authoritative representation within a system.

When you violate DRY, bugs and maintenance problems are sure to follow. Duplicated code has a tendency to both continue to replicate and also to diverge (leaving bugs as two similar implementations differ in subtle ways).

Tuning

This issue has a mass of 58.

We set useful threshold defaults for the languages we support but you may want to adjust these settings based on your project guidelines.

The threshold configuration represents the minimum mass a code block must have to be analyzed for duplication. The lower the threshold, the more fine-grained the comparison.

If the engine is too easily reporting duplication, try raising the threshold. If you suspect that the engine isn't catching enough duplication, try lowering the threshold. The best setting tends to differ from language to language.

See codeclimate-duplication's documentation for more information about tuning the mass threshold in your .codeclimate.yml.

Refactorings

Further Reading

Cyclomatic complexity is too high in method diff_ecdf_plot. (11)
Open

    def diff_ecdf_plot(self):
        """Generate ECDF plot of differences between test classes."""
        if not self.draw_ecdf_plot:
            return
        if self.verbose:
Severity: Minor
Found in tlsfuzzer/analysis.py by radon

Cyclomatic Complexity

Cyclomatic Complexity corresponds to the number of decisions a block of code contains plus 1. This number (also called McCabe number) is equal to the number of linearly independent paths through the code. This number can be used as a guide when testing conditional logic in blocks.

Radon analyzes the AST tree of a Python program to compute Cyclomatic Complexity. Statements have the following effects on Cyclomatic Complexity:

Construct Effect on CC Reasoning
if +1 An if statement is a single decision.
elif +1 The elif statement adds another decision.
else +0 The else statement does not cause a new decision. The decision is at the if.
for +1 There is a decision at the start of the loop.
while +1 There is a decision at the while statement.
except +1 Each except branch adds a new conditional path of execution.
finally +0 The finally block is unconditionally executed.
with +1 The with statement roughly corresponds to a try/except block (see PEP 343 for details).
assert +1 The assert statement internally roughly equals a conditional statement.
Comprehension +1 A list/set/dict comprehension of generator expression is equivalent to a for loop.
Boolean Operator +1 Every boolean operator (and, or) adds a decision point.

Source: http://radon.readthedocs.org/en/latest/intro.html

Cyclomatic complexity is too high in function guess_response. (11)
Open

def guess_response(content_type, data, ssl2=False):
    """Guess which kind of message is in the record layer payload"""
    if content_type == ContentType.change_cipher_spec:
        if len(data) != 1:
            return "ChangeCipherSpec(invalid size)"
Severity: Minor
Found in tlsfuzzer/runner.py by radon

Cyclomatic Complexity

Cyclomatic Complexity corresponds to the number of decisions a block of code contains plus 1. This number (also called McCabe number) is equal to the number of linearly independent paths through the code. This number can be used as a guide when testing conditional logic in blocks.

Radon analyzes the AST tree of a Python program to compute Cyclomatic Complexity. Statements have the following effects on Cyclomatic Complexity:

Construct Effect on CC Reasoning
if +1 An if statement is a single decision.
elif +1 The elif statement adds another decision.
else +0 The else statement does not cause a new decision. The decision is at the if.
for +1 There is a decision at the start of the loop.
while +1 There is a decision at the while statement.
except +1 Each except branch adds a new conditional path of execution.
finally +0 The finally block is unconditionally executed.
with +1 The with statement roughly corresponds to a try/except block (see PEP 343 for details).
assert +1 The assert statement internally roughly equals a conditional statement.
Comprehension +1 A list/set/dict comprehension of generator expression is equivalent to a for loop.
Boolean Operator +1 Every boolean operator (and, or) adds a decision point.

Source: http://radon.readthedocs.org/en/latest/intro.html

Cyclomatic complexity is too high in method generate. (11)
Open

    def generate(self, state):
        """Create a Client Hello message."""
        if self.version is None:
            self.version = state.client_version
        if self.random:
Severity: Minor
Found in tlsfuzzer/messages.py by radon

Cyclomatic Complexity

Cyclomatic Complexity corresponds to the number of decisions a block of code contains plus 1. This number (also called McCabe number) is equal to the number of linearly independent paths through the code. This number can be used as a guide when testing conditional logic in blocks.

Radon analyzes the AST tree of a Python program to compute Cyclomatic Complexity. Statements have the following effects on Cyclomatic Complexity:

Construct Effect on CC Reasoning
if +1 An if statement is a single decision.
elif +1 The elif statement adds another decision.
else +0 The else statement does not cause a new decision. The decision is at the if.
for +1 There is a decision at the start of the loop.
while +1 There is a decision at the while statement.
except +1 Each except branch adds a new conditional path of execution.
finally +0 The finally block is unconditionally executed.
with +1 The with statement roughly corresponds to a try/except block (see PEP 343 for details).
assert +1 The assert statement internally roughly equals a conditional statement.
Comprehension +1 A list/set/dict comprehension of generator expression is equivalent to a for loop.
Boolean Operator +1 Every boolean operator (and, or) adds a decision point.

Source: http://radon.readthedocs.org/en/latest/intro.html

Cyclomatic complexity is too high in method _generate_ciphertext_with_fuzz. (11)
Open

    def _generate_ciphertext_with_fuzz(
            self, subs, padding_byte=None, pms=None):
        while True:
            if pms is None:
                rand_pms = getRandomBytes(self.pms_len)
Severity: Minor
Found in tlsfuzzer/utils/rsa.py by radon

Cyclomatic Complexity

Cyclomatic Complexity corresponds to the number of decisions a block of code contains plus 1. This number (also called McCabe number) is equal to the number of linearly independent paths through the code. This number can be used as a guide when testing conditional logic in blocks.

Radon analyzes the AST tree of a Python program to compute Cyclomatic Complexity. Statements have the following effects on Cyclomatic Complexity:

Construct Effect on CC Reasoning
if +1 An if statement is a single decision.
elif +1 The elif statement adds another decision.
else +0 The else statement does not cause a new decision. The decision is at the if.
for +1 There is a decision at the start of the loop.
while +1 There is a decision at the while statement.
except +1 Each except branch adds a new conditional path of execution.
finally +0 The finally block is unconditionally executed.
with +1 The with statement roughly corresponds to a try/except block (see PEP 343 for details).
assert +1 The assert statement internally roughly equals a conditional statement.
Comprehension +1 A list/set/dict comprehension of generator expression is equivalent to a for loop.
Boolean Operator +1 Every boolean operator (and, or) adds a decision point.

Source: http://radon.readthedocs.org/en/latest/intro.html

Function main has 45 lines of code (exceeds 25 allowed). Consider refactoring.
Open

def main():
    """Process arguments and start extraction."""
    logfile = None
    capture = None
    output = None
Severity: Minor
Found in tlsfuzzer/extract.py - About 1 hr to fix

    Function generate has 44 lines of code (exceeds 25 allowed). Consider refactoring.
    Open

        def generate(self):
            """Create a dict() with test cases, where keys are descriptions and
            values are the ciphertexts."""
            ret = {}
    
    
    Severity: Minor
    Found in tlsfuzzer/utils/rsa.py - About 1 hr to fix

      Function generate has a Cognitive Complexity of 19 (exceeds 10 allowed). Consider refactoring.
      Open

          def generate(self):
              """Create a dict() with test cases, where keys are descriptions and
              values are the ciphertexts."""
              ret = {}
      
      
      Severity: Minor
      Found in tlsfuzzer/utils/rsa.py - About 1 hr to fix

      Cognitive Complexity

      Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

      A method's cognitive complexity is based on a few simple rules:

      • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
      • Code is considered more complex for each "break in the linear flow of the code"
      • Code is considered more complex when "flow breaking structures are nested"

      Further reading

      Function _create_and_write_line has a Cognitive Complexity of 19 (exceeds 10 allowed). Consider refactoring.
      Open

          def _create_and_write_line(self):
              """
              Takes multiple possible values for each key value, selecting one
              in random for each key and writes the created line into the
              intermediate file.
      Severity: Minor
      Found in tlsfuzzer/extract.py - About 1 hr to fix

      Cognitive Complexity

      Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

      A method's cognitive complexity is based on a few simple rules:

      • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
      • Code is considered more complex for each "break in the linear flow of the code"
      • Code is considered more complex when "flow breaking structures are nested"

      Further reading

      Function _summarise_chunk has a Cognitive Complexity of 19 (exceeds 10 allowed). Consider refactoring.
      Open

      def _summarise_chunk(args):
          global _groups
          groups = _groups
          global _values
          values = _values
      Severity: Minor
      Found in tlsfuzzer/utils/stats.py - About 1 hr to fix

      Cognitive Complexity

      Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

      A method's cognitive complexity is based on a few simple rules:

      • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
      • Code is considered more complex for each "break in the linear flow of the code"
      • Code is considered more complex when "flow breaking structures are nested"

      Further reading

      Function _generate_ciphertext_with_fuzz has a Cognitive Complexity of 18 (exceeds 10 allowed). Consider refactoring.
      Open

          def _generate_ciphertext_with_fuzz(
                  self, subs, padding_byte=None, pms=None):
              while True:
                  if pms is None:
                      rand_pms = getRandomBytes(self.pms_len)
      Severity: Minor
      Found in tlsfuzzer/utils/rsa.py - About 1 hr to fix

      Cognitive Complexity

      Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

      A method's cognitive complexity is based on a few simple rules:

      • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
      • Code is considered more complex for each "break in the linear flow of the code"
      • Code is considered more complex when "flow breaking structures are nested"

      Further reading

      Function guess_response has a Cognitive Complexity of 18 (exceeds 10 allowed). Consider refactoring.
      Open

      def guess_response(content_type, data, ssl2=False):
          """Guess which kind of message is in the record layer payload"""
          if content_type == ContentType.change_cipher_spec:
              if len(data) != 1:
                  return "ChangeCipherSpec(invalid size)"
      Severity: Minor
      Found in tlsfuzzer/runner.py - About 1 hr to fix

      Cognitive Complexity

      Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

      A method's cognitive complexity is based on a few simple rules:

      • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
      • Code is considered more complex for each "break in the linear flow of the code"
      • Code is considered more complex when "flow breaking structures are nested"

      Further reading

      Method main has 36 lines of code (exceeds 25 allowed). Consider refactoring.
      Open

          public static void main(String[] args) {
      
              try {
                  // setup the socket address
                  InetSocketAddress address = new InetSocketAddress(4433);
      Severity: Minor
      Found in 3rd-party-scripts/SimpleHTTPSServer.java - About 1 hr to fix

        Function ecdsa_iter has a Cognitive Complexity of 17 (exceeds 10 allowed). Consider refactoring.
        Open

            def ecdsa_iter(self, return_type="k-size"):
                """
                Iterator. Iterator to use for signatures signed by ECDSA private key.
                """
                k_map_filename = join(self.output, "ecdsa-k-time-map.csv")
        Severity: Minor
        Found in tlsfuzzer/extract.py - About 1 hr to fix

        Cognitive Complexity

        Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

        A method's cognitive complexity is based on a few simple rules:

        • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
        • Code is considered more complex for each "break in the linear flow of the code"
        • Code is considered more complex when "flow breaking structures are nested"

        Further reading

        Function _figure_out_analysis_data_size has a Cognitive Complexity of 16 (exceeds 10 allowed). Consider refactoring.
        Open

            def _figure_out_analysis_data_size(self):
                pair = TestPair(0, 1)
                old_vebose = self.verbose
                self.verbose = False
                max_limit = 0
        Severity: Minor
        Found in tlsfuzzer/analysis.py - About 1 hr to fix

        Cognitive Complexity

        Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

        A method's cognitive complexity is based on a few simple rules:

        • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
        • Code is considered more complex for each "break in the linear flow of the code"
        • Code is considered more complex when "flow breaking structures are nested"

        Further reading

        Function _write_summary has a Cognitive Complexity of 16 (exceeds 10 allowed). Consider refactoring.
        Open

            def _write_summary(self, difference, p_vals, sign_p_vals, worst_pair,
                               friedman_p, worst_pair_conf_int):
                """Write the report.txt file and print summary."""
                report_filename = join(self.output, "report.csv")
                text_report_filename = join(self.output, "report.txt")
        Severity: Minor
        Found in tlsfuzzer/analysis.py - About 1 hr to fix

        Cognitive Complexity

        Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

        A method's cognitive complexity is based on a few simple rules:

        • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
        • Code is considered more complex for each "break in the linear flow of the code"
        • Code is considered more complex when "flow breaking structures are nested"

        Further reading

        Function process has 28 lines of code (exceeds 25 allowed). Consider refactoring.
        Open

            def process(self, state, msg):
                """
                Process the message and update state accordingly
        
                :type state: ConnectionState
        Severity: Minor
        Found in tlsfuzzer/expect.py - About 1 hr to fix

          Function _write_individual_results has a Cognitive Complexity of 15 (exceeds 10 allowed). Consider refactoring.
          Open

              def _write_individual_results(self):
                  """Write results to report.csv"""
                  if self.verbose:
                      start_time = time.time()
                      print("[i] Starting calculation of individual results")
          Severity: Minor
          Found in tlsfuzzer/analysis.py - About 1 hr to fix

          Cognitive Complexity

          Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

          A method's cognitive complexity is based on a few simple rules:

          • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
          • Code is considered more complex for each "break in the linear flow of the code"
          • Code is considered more complex when "flow breaking structures are nested"

          Further reading

          Function generate has a Cognitive Complexity of 15 (exceeds 10 allowed). Consider refactoring.
          Open

              def generate(self, state):
                  """Generate a new CLIENT-MASTER-KEY message."""
                  if self.cipher is None:
                      raise NotImplementedError("No cipher autonegotiation")
                  if self.master_key is None:
          Severity: Minor
          Found in tlsfuzzer/messages.py - About 1 hr to fix

          Cognitive Complexity

          Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

          A method's cognitive complexity is based on a few simple rules:

          • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
          • Code is considered more complex for each "break in the linear flow of the code"
          • Code is considered more complex when "flow breaking structures are nested"

          Further reading

          Function run has a Cognitive Complexity of 15 (exceeds 10 allowed). Consider refactoring.
          Open

              def run(self):
                  """
                  Run test the specified number of times and start analysis
          
                  :return: int 0 for no difference, 1 for difference, 2 if unavailable
          Severity: Minor
          Found in tlsfuzzer/timing_runner.py - About 1 hr to fix

          Cognitive Complexity

          Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

          A method's cognitive complexity is based on a few simple rules:

          • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
          • Code is considered more complex for each "break in the linear flow of the code"
          • Code is considered more complex when "flow breaking structures are nested"

          Further reading

          Severity
          Category
          Status
          Source
          Language