elastic / go-seccomp-bpf - Conditional Complexity

Intro

Conditional complexity (also called cyclomatic complexity) is a term used to measure the complexity of software. The term refers to the number of possible paths through a program function. A higher value ofter means higher maintenance and testing costs (infosecinstitute.com).
Conditional complexity is calculated by counting all conditions in the program that can affect the execution path (e.g. if statement, loops, switches, and/or operators, try and catch blocks...).
Conditional complexity is measured at the unit level (methods, functions...).
Units are classified in four categories based on the measured McCabe index: 1-5 (simple units), 6-10 (medium complex units), 11-25 (complex units), 26+ (very complex units).

Learn more...

Conditional Complexity Overall

There are 76 units with 1,270 lines of code in units (32.0% of code).

0 very complex units (0 lines of code)
0 complex units (0 lines of code)
3 medium complex units (152 lines of code)
18 simple units (582 lines of code)
55 very simple units (536 lines of code)

Legend:

51+

26-50

11-25

6-10

1-5

Alternative Visuals

3D view of all units

Conditional Complexity per Extension

51+

26-50

11-25

6-10

1-5

Conditional Complexity per Logical Component

primary logical decomposition

51+

26-50

11-25

6-10

1-5

Most Complex Units

Top 50 most complex units

Unit	# lines	McCabe index	# params
func main() in cmd/seccomp-profiler/main.go	71	17	0
func() in filter.go	67	13	1
func isSyscallFunction() in cmd/seccomp-profiler/disasm/disasm.go	14	12	1
func() in filter.go	45	10	1
func buildARM() in arch/mk_syscalls_linux.go	58	10	1
func() in filter.go	43	9	1
func getBinaryArch() in cmd/seccomp-profiler/main.go	32	9	1
func doObjdump() in cmd/seccomp-profiler/main.go	33	9	2
func parseX86_64() in cmd/seccomp-profiler/disasm/disasm.go	32	9	4
func() in cmd/seccomp-profiler/disasm/disasm.go	41	8	1
func LoadFilter() in seccomp_linux.go	28	7	1
func buildX32() in arch/mk_syscalls_linux.go	33	7	1
func buildX86_64() in arch/mk_syscalls_linux.go	33	7	1
func addWhitelist() in cmd/seccomp-profiler/main.go	21	6	2
func openOutput() in cmd/seccomp-profiler/main.go	26	6	1
func() in assembler.go	20	6	1
func() in assembler.go	14	6	1
func buildAARCH64() in arch/mk_syscalls_linux.go	35	6	1
func build386() in arch/mk_syscalls_linux.go	30	6	1
func readSyscalls() in arch/mk_syscalls_linux.go	25	6	3
func main() in arch/mk_syscalls_linux.go	33	6	0
func() in filter.go	16	5	1
func() in filter.go	18	5	1
func main() in cmd/sandbox/main.go	32	5	0
func cachedDumpFile() in cmd/seccomp-profiler/main.go	21	5	1
func findSyscallNum() in cmd/seccomp-profiler/disasm/disasm.go	19	5	3
func() in assembler.go	23	5	1
func downloadFile() in arch/mk_syscalls_linux.go	20	5	2
func filterBlacklist() in cmd/seccomp-profiler/main.go	16	4	1
func GetInfo() in arch/info.go	12	4	1
func() in filter.go	10	3	1
func() in filter.go	9	3	1
func() in filter.go	10	3	1
func() in filter.go	9	3	1
func() in filter.go	10	3	1
func getSyscall() in filter.go	9	3	2
func parsePolicy() in cmd/sandbox/main.go	14	3	0
func() in cmd/seccomp-profiler/main.go	7	3	1
func hashBinary() in cmd/seccomp-profiler/main.go	12	3	1
func writeGoTemplate() in cmd/seccomp-profiler/main.go	21	3	3
func ExtractSyscalls() in cmd/seccomp-profiler/disasm/disasm.go	12	3	2
func() in cmd/seccomp-profiler/disasm/disasm.go	8	3	1
func init() in assembler.go	12	3	0
func findInsertAfter() in assembler.go	10	3	2
func prctl() in seccomp_linux.go	12	3	2
func() in filter.go	7	2	1
func writeDebugYAML() in cmd/seccomp-profiler/main.go	16	2	2
func writeProfileConfig() in cmd/seccomp-profiler/main.go	22	2	2
func lastInstruction() in cmd/seccomp-profiler/disasm/disasm.go	6	2	1
func() in assembler.go	6	2	1