hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-04 05:05:12 +02:00
Code Issues Packages Projects Releases Wiki Activity

Python: Add StringConstCompare BarrierGuard

Browse Source
This commit is contained in:
Rasmus Wriedt Larsen
2020-11-20 10:40:04 +01:00
parent a82936c904
commit 1a52f17da3
5 changed files with 28 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
python/ql/test/experimental/dataflow/tainttracking/defaultSanitizer/TestTaint.expected → python/ql/test/experimental/dataflow/tainttracking/commonSanitizer/TestTaint.expected
View File

@@ -1,4 +1,4 @@
| test_string_eq.py:16 | fail | const_eq_clears_taint | ts |
| test_string_eq.py:16 | ok | const_eq_clears_taint | ts |
| test_string_eq.py:18 | ok | const_eq_clears_taint | ts |
| test_string_eq.py:20 | ok | const_eq_clears_taint | ts |
| test_string_eq.py:27 | fail | const_eq_clears_taint2 | ts |

7
python/ql/test/experimental/dataflow/tainttracking/commonSanitizer/TestTaint.ql Normal file
View File

@@ -0,0 +1,7 @@
import experimental.dataflow.tainttracking.TestTaintLib
class CustomSanitizerOverrides extends TestTaintTrackingConfiguration {
override predicate isSanitizerGuard(DataFlow::BarrierGuard guard) {
guard instanceof DataFlow::BarrierGuard::StringConstCompare
}
}

0
python/ql/test/experimental/dataflow/tainttracking/defaultSanitizer/test_string_eq.py → python/ql/test/experimental/dataflow/tainttracking/commonSanitizer/test_string_eq.py
View File

1
python/ql/test/experimental/dataflow/tainttracking/defaultSanitizer/TestTaint.ql
View File

@@ -1 +0,0 @@
import experimental.dataflow.tainttracking.TestTaintLib