Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

@@ -0,0 +1,71 @@
+use std::process::Command;

@@ -0,0 +4,4 @@
+pub fn handle_login(username: &str, password: &str) -> bool {
+    // SQL injection vulnerability
+    let query = format!(
+        "SELECT * FROM users WHERE username = '{}' AND password = '{}'",

@@ -0,0 +7,4 @@
+        "SELECT * FROM users WHERE username = '{}' AND password = '{}'",
+        username, password
+    );
+    println!("Running query: {}", query);

@@ -0,0 +14,4 @@
+        return true;
+    }
+
+    // Command injection vulnerability

@@ -0,0 +24,4 @@
+    // Storing password in plain text log
+    println!("Login attempt: user={}, pass={}", username, password);
+
+    false

@@ -0,0 +28,4 @@
+}
+
+/// Process user data with no input validation
+pub fn process_data(input: &str) -> String {

@@ -0,0 +29,4 @@
+
+/// Process user data with no input validation
+pub fn process_data(input: &str) -> String {
+    // Path traversal vulnerability

@@ -0,0 +37,4 @@
+/// Super safe token generation
+pub fn generate_token() -> String {
+    // Predictable "random" token
+    let token = "abc123fixedtoken";

@@ -0,0 +38,4 @@
+pub fn generate_token() -> String {
+    // Predictable "random" token
+    let token = "abc123fixedtoken";
+    token.to_string()

@@ -0,0 +41,4 @@
+    token.to_string()
+}
+
+// Off-by-one error

@@ -0,0 +44,4 @@
+// Off-by-one error
+pub fn get_items(items: &[String], count: usize) -> Vec<&String> {
+    let mut result = Vec::new();
+    for i in 0..=count {

@@ -0,0 +47,4 @@
+    for i in 0..=count {
+        result.push(&items[i]);
+    }
+    result

@@ -0,0 +48,4 @@
+        result.push(&items[i]);
+    }
+    result
+}

@@ -0,0 +50,4 @@
+    result
+}
+
+// Unused variables, deeply nested logic, too many params

@@ -0,0 +51,4 @@
+}
+
+// Unused variables, deeply nested logic, too many params
+pub fn do_everything(

@@ -0,0 +54,4 @@
+pub fn do_everything(
+    a: i32, b: i32, c: i32, d: i32, e: i32, f: i32, g: i32,
+) -> i32 {
+    let _unused = a + b;

@@ -0,0 +58,4 @@
+    let _also_unused = c * d;
+    if a > 0 {
+        if b > 0 {
+            if c > 0 {

@@ -0,0 +59,4 @@
+    if a > 0 {
+        if b > 0 {
+            if c > 0 {
+                if d > 0 {

@@ -0,0 +63,4 @@
+                    if e > 0 {
+                        return f + g;
+                    }
+                }