hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-16 16:53:25 +01:00
Code Issues Packages Projects Releases Wiki Activity

C#: Change ImplicitCapturedArgumentNode::toString()

Browse Source
This commit is contained in:
Tom Hvitved
2019-03-21 10:20:58 +01:00
parent 639d715d03
commit 26debb846c
7 changed files with 105 additions and 105 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
csharp/ql/src/semmle/code/csharp/dataflow/DataFlow.qll
View File

@@ -552,7 +552,7 @@ module DataFlow {
override Type getType() { result = v.getType() }
override string toString() { result = v + " [implicit argument]" }
override string toString() { result = "[implicit argument] " + v }
}
/**

54
csharp/ql/test/library-tests/dataflow/global/DataFlowEdges.expected
View File

@@ -1,6 +1,6 @@
| Capture.cs:7:20:7:26 | tainted | Capture.cs:14:9:14:20 | tainted [implicit argument] |
| Capture.cs:7:20:7:26 | tainted | Capture.cs:25:9:25:20 | tainted [implicit argument] |
| Capture.cs:7:20:7:26 | tainted | Capture.cs:33:9:33:40 | tainted [implicit argument] |
| Capture.cs:7:20:7:26 | tainted | Capture.cs:14:9:14:20 | [implicit argument] tainted |
| Capture.cs:7:20:7:26 | tainted | Capture.cs:25:9:25:20 | [implicit argument] tainted |
| Capture.cs:7:20:7:26 | tainted | Capture.cs:33:9:33:40 | [implicit argument] tainted |
| Capture.cs:9:9:13:9 | SSA capture def(tainted) | Capture.cs:11:17:11:32 | SSA def(sink27) |
| Capture.cs:9:9:13:9 | SSA capture def(tainted) | Capture.cs:11:17:11:32 | SSA def(sink27) |
| Capture.cs:9:9:13:9 | SSA capture def(tainted) | Capture.cs:11:26:11:32 | access to parameter tainted |
@@ -13,7 +13,7 @@
| Capture.cs:11:26:11:32 | access to parameter tainted | Capture.cs:11:17:11:32 | SSA def(sink27) |
| Capture.cs:11:26:11:32 | access to parameter tainted | Capture.cs:12:19:12:24 | access to local variable sink27 |
| Capture.cs:11:26:11:32 | access to parameter tainted | Capture.cs:12:19:12:24 | access to local variable sink27 |
| Capture.cs:14:9:14:20 | tainted [implicit argument] | Capture.cs:9:9:13:9 | SSA capture def(tainted) |
| Capture.cs:14:9:14:20 | [implicit argument] tainted | Capture.cs:9:9:13:9 | SSA capture def(tainted) |
| Capture.cs:18:13:22:13 | SSA capture def(tainted) | Capture.cs:20:21:20:36 | SSA def(sink28) |
| Capture.cs:18:13:22:13 | SSA capture def(tainted) | Capture.cs:20:21:20:36 | SSA def(sink28) |
| Capture.cs:18:13:22:13 | SSA capture def(tainted) | Capture.cs:20:30:20:36 | access to parameter tainted |
@@ -26,7 +26,7 @@
| Capture.cs:20:30:20:36 | access to parameter tainted | Capture.cs:20:21:20:36 | SSA def(sink28) |
| Capture.cs:20:30:20:36 | access to parameter tainted | Capture.cs:21:23:21:28 | access to local variable sink28 |
| Capture.cs:20:30:20:36 | access to parameter tainted | Capture.cs:21:23:21:28 | access to local variable sink28 |
| Capture.cs:25:9:25:20 | tainted [implicit argument] | Capture.cs:18:13:22:13 | SSA capture def(tainted) |
| Capture.cs:25:9:25:20 | [implicit argument] tainted | Capture.cs:18:13:22:13 | SSA capture def(tainted) |
| Capture.cs:27:30:32:9 | SSA def(captureIn3) | Capture.cs:33:30:33:39 | access to local variable captureIn3 |
| Capture.cs:27:43:27:45 | arg | Capture.cs:27:43:32:9 | return (...) => ... |
| Capture.cs:27:43:27:45 | arg | Capture.cs:31:20:31:22 | access to parameter arg |
@@ -46,7 +46,7 @@
| Capture.cs:29:26:29:32 | access to parameter tainted | Capture.cs:30:19:30:24 | access to local variable sink29 |
| Capture.cs:29:26:29:32 | access to parameter tainted | Capture.cs:30:19:30:24 | access to local variable sink29 |
| Capture.cs:31:20:31:22 | access to parameter arg | Capture.cs:27:43:32:9 | return (...) => ... |
| Capture.cs:33:9:33:40 | tainted [implicit argument] | Capture.cs:27:43:32:9 | SSA capture def(tainted) |
| Capture.cs:33:9:33:40 | [implicit argument] tainted | Capture.cs:27:43:32:9 | SSA capture def(tainted) |
| Capture.cs:35:9:39:9 | SSA capture def(tainted) | Capture.cs:37:17:37:34 | SSA def(nonSink0) |
| Capture.cs:35:9:39:9 | SSA capture def(tainted) | Capture.cs:37:28:37:34 | access to parameter tainted |
| Capture.cs:35:9:39:9 | SSA capture def(tainted) | Capture.cs:38:19:38:26 | access to local variable nonSink0 |
@@ -87,10 +87,10 @@
| Capture.cs:83:27:83:28 | "" | Capture.cs:88:15:88:22 | access to local variable nonSink0 |
| Capture.cs:83:27:83:28 | "" | Capture.cs:98:15:98:22 | access to local variable nonSink0 |
| Capture.cs:88:15:88:22 | access to local variable nonSink0 | Capture.cs:98:15:98:22 | access to local variable nonSink0 |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:108:9:108:25 | tainted [implicit argument] |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:120:9:120:25 | tainted [implicit argument] |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:129:9:129:45 | tainted [implicit argument] |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:136:22:136:38 | tainted [implicit argument] |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:108:9:108:25 | [implicit argument] tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:120:9:120:25 | [implicit argument] tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:129:9:129:45 | [implicit argument] tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:136:22:136:38 | [implicit argument] tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:144:25:144:31 | access to parameter tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:170:25:170:31 | access to parameter tainted |
| Capture.cs:103:25:103:26 | "" | Capture.cs:103:16:103:26 | SSA def(sink33) |
@@ -103,8 +103,8 @@
| Capture.cs:106:22:106:28 | access to parameter tainted | Capture.cs:106:13:106:28 | SSA def(sink33) |
| Capture.cs:108:9:108:25 | SSA call def(sink33) | Capture.cs:109:15:109:20 | access to local variable sink33 |
| Capture.cs:108:9:108:25 | SSA call def(sink33) | Capture.cs:109:15:109:20 | access to local variable sink33 |
| Capture.cs:108:9:108:25 | tainted [implicit argument] | Capture.cs:104:9:107:9 | SSA capture def(tainted) |
| Capture.cs:108:9:108:25 | tainted [implicit argument] | Capture.cs:108:9:108:25 | SSA call def(sink33) |
| Capture.cs:108:9:108:25 | [implicit argument] tainted | Capture.cs:104:9:107:9 | SSA capture def(tainted) |
| Capture.cs:108:9:108:25 | [implicit argument] tainted | Capture.cs:108:9:108:25 | SSA call def(sink33) |
| Capture.cs:111:25:111:26 | "" | Capture.cs:111:16:111:26 | SSA def(sink34) |
| Capture.cs:114:13:117:13 | SSA capture def(tainted) | Capture.cs:116:17:116:32 | SSA def(sink34) |
| Capture.cs:114:13:117:13 | SSA capture def(tainted) | Capture.cs:116:17:116:32 | SSA def(sink34) |
@@ -115,8 +115,8 @@
| Capture.cs:116:26:116:32 | access to parameter tainted | Capture.cs:116:17:116:32 | SSA def(sink34) |
| Capture.cs:120:9:120:25 | SSA call def(sink34) | Capture.cs:121:15:121:20 | access to local variable sink34 |
| Capture.cs:120:9:120:25 | SSA call def(sink34) | Capture.cs:121:15:121:20 | access to local variable sink34 |
| Capture.cs:120:9:120:25 | tainted [implicit argument] | Capture.cs:114:13:117:13 | SSA capture def(tainted) |
| Capture.cs:120:9:120:25 | tainted [implicit argument] | Capture.cs:120:9:120:25 | SSA call def(sink34) |
| Capture.cs:120:9:120:25 | [implicit argument] tainted | Capture.cs:114:13:117:13 | SSA capture def(tainted) |
| Capture.cs:120:9:120:25 | [implicit argument] tainted | Capture.cs:120:9:120:25 | SSA call def(sink34) |
| Capture.cs:123:25:123:26 | "" | Capture.cs:123:16:123:26 | SSA def(sink35) |
| Capture.cs:124:30:128:9 | SSA def(captureThrough3) | Capture.cs:129:30:129:44 | access to local variable captureThrough3 |
| Capture.cs:124:48:124:50 | arg | Capture.cs:124:48:128:9 | return (...) => ... |
@@ -134,8 +134,8 @@
| Capture.cs:127:20:127:22 | access to parameter arg | Capture.cs:124:48:128:9 | return (...) => ... |
| Capture.cs:129:9:129:45 | SSA call def(sink35) | Capture.cs:130:15:130:20 | access to local variable sink35 |
| Capture.cs:129:9:129:45 | SSA call def(sink35) | Capture.cs:130:15:130:20 | access to local variable sink35 |
| Capture.cs:129:9:129:45 | tainted [implicit argument] | Capture.cs:124:48:128:9 | SSA capture def(tainted) |
| Capture.cs:129:9:129:45 | tainted [implicit argument] | Capture.cs:129:9:129:45 | SSA call def(sink35) |
| Capture.cs:129:9:129:45 | [implicit argument] tainted | Capture.cs:124:48:128:9 | SSA capture def(tainted) |
| Capture.cs:129:9:129:45 | [implicit argument] tainted | Capture.cs:129:9:129:45 | SSA call def(sink35) |
| Capture.cs:132:9:135:9 | SSA capture def(tainted) | Capture.cs:132:9:135:9 | return CaptureThrough4 |
| Capture.cs:132:9:135:9 | SSA capture def(tainted) | Capture.cs:132:9:135:9 | return CaptureThrough4 |
| Capture.cs:132:9:135:9 | SSA capture def(tainted) | Capture.cs:134:20:134:26 | access to parameter tainted |
@@ -145,12 +145,12 @@
| Capture.cs:134:20:134:26 | access to parameter tainted | Capture.cs:132:9:135:9 | return CaptureThrough4 |
| Capture.cs:136:13:136:38 | SSA def(sink36) | Capture.cs:137:15:137:20 | access to local variable sink36 |
| Capture.cs:136:13:136:38 | SSA def(sink36) | Capture.cs:137:15:137:20 | access to local variable sink36 |
| Capture.cs:136:22:136:38 | [implicit argument] tainted | Capture.cs:132:9:135:9 | SSA capture def(tainted) |
| Capture.cs:136:22:136:38 | [implicit argument] tainted | Capture.cs:136:22:136:38 | call to local function CaptureThrough4 |
| Capture.cs:136:22:136:38 | call to local function CaptureThrough4 | Capture.cs:136:13:136:38 | SSA def(sink36) |
| Capture.cs:136:22:136:38 | call to local function CaptureThrough4 | Capture.cs:136:13:136:38 | SSA def(sink36) |
| Capture.cs:136:22:136:38 | call to local function CaptureThrough4 | Capture.cs:137:15:137:20 | access to local variable sink36 |
| Capture.cs:136:22:136:38 | call to local function CaptureThrough4 | Capture.cs:137:15:137:20 | access to local variable sink36 |
| Capture.cs:136:22:136:38 | tainted [implicit argument] | Capture.cs:132:9:135:9 | SSA capture def(tainted) |
| Capture.cs:136:22:136:38 | tainted [implicit argument] | Capture.cs:136:22:136:38 | call to local function CaptureThrough4 |
| Capture.cs:139:22:139:23 | "" | Capture.cs:139:13:139:23 | SSA def(sink37) |
| Capture.cs:140:37:140:37 | p | Capture.cs:142:13:142:22 | SSA def(sink37) |
| Capture.cs:140:37:140:37 | p | Capture.cs:142:13:142:22 | SSA def(sink37) |
@@ -176,9 +176,9 @@
| Capture.cs:164:9:168:9 | return Id | Capture.cs:170:22:170:32 | call to local function Id |
| Capture.cs:164:9:168:9 | return Id | Capture.cs:172:20:172:25 | call to local function Id |
| Capture.cs:164:9:168:9 | return Id | Capture.cs:172:20:172:25 | call to local function Id |
| Capture.cs:164:26:164:26 | s | Capture.cs:167:20:167:22 | s [implicit argument] |
| Capture.cs:164:26:164:26 | s | Capture.cs:167:20:167:22 | s [implicit argument] |
| Capture.cs:164:26:164:26 | s | Capture.cs:167:20:167:22 | s [implicit argument] |
| Capture.cs:164:26:164:26 | s | Capture.cs:167:20:167:22 | [implicit argument] s |
| Capture.cs:164:26:164:26 | s | Capture.cs:167:20:167:22 | [implicit argument] s |
| Capture.cs:164:26:164:26 | s | Capture.cs:167:20:167:22 | [implicit argument] s |
| Capture.cs:166:13:166:28 | SSA capture def(s) | Capture.cs:166:13:166:28 | return M |
| Capture.cs:166:13:166:28 | SSA capture def(s) | Capture.cs:166:13:166:28 | return M |
| Capture.cs:166:13:166:28 | SSA capture def(s) | Capture.cs:166:27:166:27 | access to parameter s |
@@ -186,16 +186,16 @@
| Capture.cs:166:13:166:28 | return M | Capture.cs:167:20:167:22 | call to local function M |
| Capture.cs:166:27:166:27 | access to parameter s | Capture.cs:166:13:166:28 | return M |
| Capture.cs:166:27:166:27 | access to parameter s | Capture.cs:166:13:166:28 | return M |
| Capture.cs:167:20:167:22 | [implicit argument] s | Capture.cs:166:13:166:28 | SSA capture def(s) |
| Capture.cs:167:20:167:22 | [implicit argument] s | Capture.cs:166:13:166:28 | SSA capture def(s) |
| Capture.cs:167:20:167:22 | [implicit argument] s | Capture.cs:166:13:166:28 | SSA capture def(s) |
| Capture.cs:167:20:167:22 | [implicit argument] s | Capture.cs:167:20:167:22 | call to local function M |
| Capture.cs:167:20:167:22 | [implicit argument] s | Capture.cs:167:20:167:22 | call to local function M |
| Capture.cs:167:20:167:22 | [implicit argument] s | Capture.cs:167:20:167:22 | call to local function M |
| Capture.cs:167:20:167:22 | call to local function M | Capture.cs:164:9:168:9 | return Id |
| Capture.cs:167:20:167:22 | call to local function M | Capture.cs:164:9:168:9 | return Id |
| Capture.cs:167:20:167:22 | call to local function M | Capture.cs:164:9:168:9 | return Id |
| Capture.cs:167:20:167:22 | call to local function M | Capture.cs:164:9:168:9 | return Id |
| Capture.cs:167:20:167:22 | s [implicit argument] | Capture.cs:166:13:166:28 | SSA capture def(s) |
| Capture.cs:167:20:167:22 | s [implicit argument] | Capture.cs:166:13:166:28 | SSA capture def(s) |
| Capture.cs:167:20:167:22 | s [implicit argument] | Capture.cs:166:13:166:28 | SSA capture def(s) |
| Capture.cs:167:20:167:22 | s [implicit argument] | Capture.cs:167:20:167:22 | call to local function M |
| Capture.cs:167:20:167:22 | s [implicit argument] | Capture.cs:167:20:167:22 | call to local function M |
| Capture.cs:167:20:167:22 | s [implicit argument] | Capture.cs:167:20:167:22 | call to local function M |
| Capture.cs:170:13:170:32 | SSA def(sink38) | Capture.cs:171:15:171:20 | access to local variable sink38 |
| Capture.cs:170:13:170:32 | SSA def(sink38) | Capture.cs:171:15:171:20 | access to local variable sink38 |
| Capture.cs:170:22:170:32 | call to local function Id | Capture.cs:170:13:170:32 | SSA def(sink38) |

42
csharp/ql/test/library-tests/dataflow/global/DataFlowPath.expected
View File

@@ -1,13 +1,13 @@
edges
| Capture.cs:7:20:7:26 | tainted | Capture.cs:14:9:14:20 | tainted [implicit argument] |
| Capture.cs:7:20:7:26 | tainted | Capture.cs:25:9:25:20 | tainted [implicit argument] |
| Capture.cs:7:20:7:26 | tainted | Capture.cs:33:9:33:40 | tainted [implicit argument] |
| Capture.cs:7:20:7:26 | tainted | Capture.cs:14:9:14:20 | [implicit argument] tainted |
| Capture.cs:7:20:7:26 | tainted | Capture.cs:25:9:25:20 | [implicit argument] tainted |
| Capture.cs:7:20:7:26 | tainted | Capture.cs:33:9:33:40 | [implicit argument] tainted |
| Capture.cs:9:9:13:9 | SSA capture def(tainted) | Capture.cs:12:19:12:24 | access to local variable sink27 |
| Capture.cs:14:9:14:20 | tainted [implicit argument] | Capture.cs:9:9:13:9 | SSA capture def(tainted) |
| Capture.cs:14:9:14:20 | [implicit argument] tainted | Capture.cs:9:9:13:9 | SSA capture def(tainted) |
| Capture.cs:18:13:22:13 | SSA capture def(tainted) | Capture.cs:21:23:21:28 | access to local variable sink28 |
| Capture.cs:25:9:25:20 | tainted [implicit argument] | Capture.cs:18:13:22:13 | SSA capture def(tainted) |
| Capture.cs:25:9:25:20 | [implicit argument] tainted | Capture.cs:18:13:22:13 | SSA capture def(tainted) |
| Capture.cs:27:43:32:9 | SSA capture def(tainted) | Capture.cs:30:19:30:24 | access to local variable sink29 |
| Capture.cs:33:9:33:40 | tainted [implicit argument] | Capture.cs:27:43:32:9 | SSA capture def(tainted) |
| Capture.cs:33:9:33:40 | [implicit argument] tainted | Capture.cs:27:43:32:9 | SSA capture def(tainted) |
| Capture.cs:57:13:57:35 | SSA def(sink30) | Capture.cs:59:9:59:21 | SSA call def(sink30) |
| Capture.cs:57:22:57:35 | "taint source" | Capture.cs:57:13:57:35 | SSA def(sink30) |
| Capture.cs:59:9:59:21 | SSA call def(sink30) | Capture.cs:60:15:60:20 | access to local variable sink30 |
@@ -17,20 +17,20 @@ edges
| Capture.cs:77:13:77:35 | SSA def(sink32) | Capture.cs:80:9:80:41 | SSA call def(sink32) |
| Capture.cs:77:22:77:35 | "taint source" | Capture.cs:77:13:77:35 | SSA def(sink32) |
| Capture.cs:80:9:80:41 | SSA call def(sink32) | Capture.cs:81:15:81:20 | access to local variable sink32 |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:108:9:108:25 | tainted [implicit argument] |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:120:9:120:25 | tainted [implicit argument] |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:129:9:129:45 | tainted [implicit argument] |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:136:22:136:38 | tainted [implicit argument] |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:108:9:108:25 | [implicit argument] tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:120:9:120:25 | [implicit argument] tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:129:9:129:45 | [implicit argument] tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:136:22:136:38 | [implicit argument] tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:144:25:144:31 | access to parameter tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:170:25:170:31 | access to parameter tainted |
| Capture.cs:108:9:108:25 | SSA call def(sink33) | Capture.cs:109:15:109:20 | access to local variable sink33 |
| Capture.cs:108:9:108:25 | tainted [implicit argument] | Capture.cs:108:9:108:25 | SSA call def(sink33) |
| Capture.cs:108:9:108:25 | [implicit argument] tainted | Capture.cs:108:9:108:25 | SSA call def(sink33) |
| Capture.cs:120:9:120:25 | SSA call def(sink34) | Capture.cs:121:15:121:20 | access to local variable sink34 |
| Capture.cs:120:9:120:25 | tainted [implicit argument] | Capture.cs:120:9:120:25 | SSA call def(sink34) |
| Capture.cs:120:9:120:25 | [implicit argument] tainted | Capture.cs:120:9:120:25 | SSA call def(sink34) |
| Capture.cs:129:9:129:45 | SSA call def(sink35) | Capture.cs:130:15:130:20 | access to local variable sink35 |
| Capture.cs:129:9:129:45 | tainted [implicit argument] | Capture.cs:129:9:129:45 | SSA call def(sink35) |
| Capture.cs:129:9:129:45 | [implicit argument] tainted | Capture.cs:129:9:129:45 | SSA call def(sink35) |
| Capture.cs:136:22:136:38 | [implicit argument] tainted | Capture.cs:136:22:136:38 | call to local function CaptureThrough4 |
| Capture.cs:136:22:136:38 | call to local function CaptureThrough4 | Capture.cs:137:15:137:20 | access to local variable sink36 |
| Capture.cs:136:22:136:38 | tainted [implicit argument] | Capture.cs:136:22:136:38 | call to local function CaptureThrough4 |
| Capture.cs:144:9:144:32 | SSA call def(sink37) | Capture.cs:145:15:145:20 | access to local variable sink37 |
| Capture.cs:144:25:144:31 | access to parameter tainted | Capture.cs:144:9:144:32 | SSA call def(sink37) |
| Capture.cs:170:22:170:32 | call to local function Id | Capture.cs:171:15:171:20 | access to local variable sink38 |
@@ -210,13 +210,13 @@ nodes
| Capture.cs:7:20:7:26 | tainted |
| Capture.cs:9:9:13:9 | SSA capture def(tainted) |
| Capture.cs:12:19:12:24 | access to local variable sink27 |
| Capture.cs:14:9:14:20 | tainted [implicit argument] |
| Capture.cs:14:9:14:20 | [implicit argument] tainted |
| Capture.cs:18:13:22:13 | SSA capture def(tainted) |
| Capture.cs:21:23:21:28 | access to local variable sink28 |
| Capture.cs:25:9:25:20 | tainted [implicit argument] |
| Capture.cs:25:9:25:20 | [implicit argument] tainted |
| Capture.cs:27:43:32:9 | SSA capture def(tainted) |
| Capture.cs:30:19:30:24 | access to local variable sink29 |
| Capture.cs:33:9:33:40 | tainted [implicit argument] |
| Capture.cs:33:9:33:40 | [implicit argument] tainted |
| Capture.cs:57:13:57:35 | SSA def(sink30) |
| Capture.cs:57:22:57:35 | "taint source" |
| Capture.cs:59:9:59:21 | SSA call def(sink30) |
@@ -231,16 +231,16 @@ nodes
| Capture.cs:81:15:81:20 | access to local variable sink32 |
| Capture.cs:101:25:101:31 | tainted |
| Capture.cs:108:9:108:25 | SSA call def(sink33) |
| Capture.cs:108:9:108:25 | tainted [implicit argument] |
| Capture.cs:108:9:108:25 | [implicit argument] tainted |
| Capture.cs:109:15:109:20 | access to local variable sink33 |
| Capture.cs:120:9:120:25 | SSA call def(sink34) |
| Capture.cs:120:9:120:25 | tainted [implicit argument] |
| Capture.cs:120:9:120:25 | [implicit argument] tainted |
| Capture.cs:121:15:121:20 | access to local variable sink34 |
| Capture.cs:129:9:129:45 | SSA call def(sink35) |
| Capture.cs:129:9:129:45 | tainted [implicit argument] |
| Capture.cs:129:9:129:45 | [implicit argument] tainted |
| Capture.cs:130:15:130:20 | access to local variable sink35 |
| Capture.cs:136:22:136:38 | [implicit argument] tainted |
| Capture.cs:136:22:136:38 | call to local function CaptureThrough4 |
| Capture.cs:136:22:136:38 | tainted [implicit argument] |
| Capture.cs:137:15:137:20 | access to local variable sink36 |
| Capture.cs:144:9:144:32 | SSA call def(sink37) |
| Capture.cs:144:25:144:31 | access to parameter tainted |

54
csharp/ql/test/library-tests/dataflow/global/TaintTrackingEdges.expected
View File

@@ -1,6 +1,6 @@
| Capture.cs:7:20:7:26 | tainted | Capture.cs:14:9:14:20 | tainted [implicit argument] |
| Capture.cs:7:20:7:26 | tainted | Capture.cs:25:9:25:20 | tainted [implicit argument] |
| Capture.cs:7:20:7:26 | tainted | Capture.cs:33:9:33:40 | tainted [implicit argument] |
| Capture.cs:7:20:7:26 | tainted | Capture.cs:14:9:14:20 | [implicit argument] tainted |
| Capture.cs:7:20:7:26 | tainted | Capture.cs:25:9:25:20 | [implicit argument] tainted |
| Capture.cs:7:20:7:26 | tainted | Capture.cs:33:9:33:40 | [implicit argument] tainted |
| Capture.cs:9:9:13:9 | SSA capture def(tainted) | Capture.cs:11:17:11:32 | SSA def(sink27) |
| Capture.cs:9:9:13:9 | SSA capture def(tainted) | Capture.cs:11:17:11:32 | SSA def(sink27) |
| Capture.cs:9:9:13:9 | SSA capture def(tainted) | Capture.cs:11:26:11:32 | access to parameter tainted |
@@ -13,7 +13,7 @@
| Capture.cs:11:26:11:32 | access to parameter tainted | Capture.cs:11:17:11:32 | SSA def(sink27) |
| Capture.cs:11:26:11:32 | access to parameter tainted | Capture.cs:12:19:12:24 | access to local variable sink27 |
| Capture.cs:11:26:11:32 | access to parameter tainted | Capture.cs:12:19:12:24 | access to local variable sink27 |
| Capture.cs:14:9:14:20 | tainted [implicit argument] | Capture.cs:9:9:13:9 | SSA capture def(tainted) |
| Capture.cs:14:9:14:20 | [implicit argument] tainted | Capture.cs:9:9:13:9 | SSA capture def(tainted) |
| Capture.cs:18:13:22:13 | SSA capture def(tainted) | Capture.cs:20:21:20:36 | SSA def(sink28) |
| Capture.cs:18:13:22:13 | SSA capture def(tainted) | Capture.cs:20:21:20:36 | SSA def(sink28) |
| Capture.cs:18:13:22:13 | SSA capture def(tainted) | Capture.cs:20:30:20:36 | access to parameter tainted |
@@ -26,7 +26,7 @@
| Capture.cs:20:30:20:36 | access to parameter tainted | Capture.cs:20:21:20:36 | SSA def(sink28) |
| Capture.cs:20:30:20:36 | access to parameter tainted | Capture.cs:21:23:21:28 | access to local variable sink28 |
| Capture.cs:20:30:20:36 | access to parameter tainted | Capture.cs:21:23:21:28 | access to local variable sink28 |
| Capture.cs:25:9:25:20 | tainted [implicit argument] | Capture.cs:18:13:22:13 | SSA capture def(tainted) |
| Capture.cs:25:9:25:20 | [implicit argument] tainted | Capture.cs:18:13:22:13 | SSA capture def(tainted) |
| Capture.cs:27:30:32:9 | SSA def(captureIn3) | Capture.cs:33:30:33:39 | access to local variable captureIn3 |
| Capture.cs:27:43:27:45 | arg | Capture.cs:27:43:32:9 | return (...) => ... |
| Capture.cs:27:43:27:45 | arg | Capture.cs:27:43:32:9 | return (...) => ... |
@@ -51,9 +51,9 @@
| Capture.cs:31:20:31:22 | access to parameter arg | Capture.cs:27:43:32:9 | return (...) => ... |
| Capture.cs:33:9:33:21 | array creation of type String[] | Capture.cs:27:43:27:45 | arg |
| Capture.cs:33:9:33:21 | array creation of type String[] | Capture.cs:33:30:33:39 | [implicit call] access to local variable captureIn3 |
| Capture.cs:33:9:33:40 | [implicit argument] tainted | Capture.cs:27:43:32:9 | SSA capture def(tainted) |
| Capture.cs:33:9:33:40 | call to method Select | Capture.cs:33:9:33:50 | call to method ToArray |
| Capture.cs:33:9:33:40 | call to method Select | Capture.cs:33:9:33:50 | call to method ToArray |
| Capture.cs:33:9:33:40 | tainted [implicit argument] | Capture.cs:27:43:32:9 | SSA capture def(tainted) |
| Capture.cs:33:17:33:19 | " " | Capture.cs:33:9:33:21 | array creation of type String[] |
| Capture.cs:33:30:33:39 | [implicit call] access to local variable captureIn3 | Capture.cs:33:9:33:40 | call to method Select |
| Capture.cs:33:30:33:39 | [implicit call] access to local variable captureIn3 | Capture.cs:33:9:33:40 | call to method Select |
@@ -111,10 +111,10 @@
| Capture.cs:83:27:83:28 | "" | Capture.cs:88:15:88:22 | access to local variable nonSink0 |
| Capture.cs:83:27:83:28 | "" | Capture.cs:98:15:98:22 | access to local variable nonSink0 |
| Capture.cs:88:15:88:22 | access to local variable nonSink0 | Capture.cs:98:15:98:22 | access to local variable nonSink0 |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:108:9:108:25 | tainted [implicit argument] |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:120:9:120:25 | tainted [implicit argument] |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:129:9:129:45 | tainted [implicit argument] |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:136:22:136:38 | tainted [implicit argument] |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:108:9:108:25 | [implicit argument] tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:120:9:120:25 | [implicit argument] tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:129:9:129:45 | [implicit argument] tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:136:22:136:38 | [implicit argument] tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:144:25:144:31 | access to parameter tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:170:25:170:31 | access to parameter tainted |
| Capture.cs:103:25:103:26 | "" | Capture.cs:103:16:103:26 | SSA def(sink33) |
@@ -127,8 +127,8 @@
| Capture.cs:106:22:106:28 | access to parameter tainted | Capture.cs:106:13:106:28 | SSA def(sink33) |
| Capture.cs:108:9:108:25 | SSA call def(sink33) | Capture.cs:109:15:109:20 | access to local variable sink33 |
| Capture.cs:108:9:108:25 | SSA call def(sink33) | Capture.cs:109:15:109:20 | access to local variable sink33 |
| Capture.cs:108:9:108:25 | tainted [implicit argument] | Capture.cs:104:9:107:9 | SSA capture def(tainted) |
| Capture.cs:108:9:108:25 | tainted [implicit argument] | Capture.cs:108:9:108:25 | SSA call def(sink33) |
| Capture.cs:108:9:108:25 | [implicit argument] tainted | Capture.cs:104:9:107:9 | SSA capture def(tainted) |
| Capture.cs:108:9:108:25 | [implicit argument] tainted | Capture.cs:108:9:108:25 | SSA call def(sink33) |
| Capture.cs:111:25:111:26 | "" | Capture.cs:111:16:111:26 | SSA def(sink34) |
| Capture.cs:114:13:117:13 | SSA capture def(tainted) | Capture.cs:116:17:116:32 | SSA def(sink34) |
| Capture.cs:114:13:117:13 | SSA capture def(tainted) | Capture.cs:116:17:116:32 | SSA def(sink34) |
@@ -139,8 +139,8 @@
| Capture.cs:116:26:116:32 | access to parameter tainted | Capture.cs:116:17:116:32 | SSA def(sink34) |
| Capture.cs:120:9:120:25 | SSA call def(sink34) | Capture.cs:121:15:121:20 | access to local variable sink34 |
| Capture.cs:120:9:120:25 | SSA call def(sink34) | Capture.cs:121:15:121:20 | access to local variable sink34 |
| Capture.cs:120:9:120:25 | tainted [implicit argument] | Capture.cs:114:13:117:13 | SSA capture def(tainted) |
| Capture.cs:120:9:120:25 | tainted [implicit argument] | Capture.cs:120:9:120:25 | SSA call def(sink34) |
| Capture.cs:120:9:120:25 | [implicit argument] tainted | Capture.cs:114:13:117:13 | SSA capture def(tainted) |
| Capture.cs:120:9:120:25 | [implicit argument] tainted | Capture.cs:120:9:120:25 | SSA call def(sink34) |
| Capture.cs:123:25:123:26 | "" | Capture.cs:123:16:123:26 | SSA def(sink35) |
| Capture.cs:124:30:128:9 | SSA def(captureThrough3) | Capture.cs:129:30:129:44 | access to local variable captureThrough3 |
| Capture.cs:124:48:124:50 | arg | Capture.cs:124:48:128:9 | return (...) => ... |
@@ -163,10 +163,10 @@
| Capture.cs:129:9:129:21 | array creation of type String[] | Capture.cs:129:30:129:44 | [implicit call] access to local variable captureThrough3 |
| Capture.cs:129:9:129:45 | SSA call def(sink35) | Capture.cs:130:15:130:20 | access to local variable sink35 |
| Capture.cs:129:9:129:45 | SSA call def(sink35) | Capture.cs:130:15:130:20 | access to local variable sink35 |
| Capture.cs:129:9:129:45 | [implicit argument] tainted | Capture.cs:124:48:128:9 | SSA capture def(tainted) |
| Capture.cs:129:9:129:45 | [implicit argument] tainted | Capture.cs:129:9:129:45 | SSA call def(sink35) |
| Capture.cs:129:9:129:45 | call to method Select | Capture.cs:129:9:129:55 | call to method ToArray |
| Capture.cs:129:9:129:45 | call to method Select | Capture.cs:129:9:129:55 | call to method ToArray |
| Capture.cs:129:9:129:45 | tainted [implicit argument] | Capture.cs:124:48:128:9 | SSA capture def(tainted) |
| Capture.cs:129:9:129:45 | tainted [implicit argument] | Capture.cs:129:9:129:45 | SSA call def(sink35) |
| Capture.cs:129:17:129:19 | " " | Capture.cs:129:9:129:21 | array creation of type String[] |
| Capture.cs:129:30:129:44 | [implicit call] access to local variable captureThrough3 | Capture.cs:129:9:129:45 | call to method Select |
| Capture.cs:129:30:129:44 | [implicit call] access to local variable captureThrough3 | Capture.cs:129:9:129:45 | call to method Select |
@@ -181,12 +181,12 @@
| Capture.cs:134:20:134:26 | access to parameter tainted | Capture.cs:132:9:135:9 | return CaptureThrough4 |
| Capture.cs:136:13:136:38 | SSA def(sink36) | Capture.cs:137:15:137:20 | access to local variable sink36 |
| Capture.cs:136:13:136:38 | SSA def(sink36) | Capture.cs:137:15:137:20 | access to local variable sink36 |
| Capture.cs:136:22:136:38 | [implicit argument] tainted | Capture.cs:132:9:135:9 | SSA capture def(tainted) |
| Capture.cs:136:22:136:38 | [implicit argument] tainted | Capture.cs:136:22:136:38 | call to local function CaptureThrough4 |
| Capture.cs:136:22:136:38 | call to local function CaptureThrough4 | Capture.cs:136:13:136:38 | SSA def(sink36) |
| Capture.cs:136:22:136:38 | call to local function CaptureThrough4 | Capture.cs:136:13:136:38 | SSA def(sink36) |
| Capture.cs:136:22:136:38 | call to local function CaptureThrough4 | Capture.cs:137:15:137:20 | access to local variable sink36 |
| Capture.cs:136:22:136:38 | call to local function CaptureThrough4 | Capture.cs:137:15:137:20 | access to local variable sink36 |
| Capture.cs:136:22:136:38 | tainted [implicit argument] | Capture.cs:132:9:135:9 | SSA capture def(tainted) |
| Capture.cs:136:22:136:38 | tainted [implicit argument] | Capture.cs:136:22:136:38 | call to local function CaptureThrough4 |
| Capture.cs:139:22:139:23 | "" | Capture.cs:139:13:139:23 | SSA def(sink37) |
| Capture.cs:140:37:140:37 | p | Capture.cs:142:13:142:22 | SSA def(sink37) |
| Capture.cs:140:37:140:37 | p | Capture.cs:142:13:142:22 | SSA def(sink37) |
@@ -212,9 +212,9 @@
| Capture.cs:164:9:168:9 | return Id | Capture.cs:170:22:170:32 | call to local function Id |
| Capture.cs:164:9:168:9 | return Id | Capture.cs:172:20:172:25 | call to local function Id |
| Capture.cs:164:9:168:9 | return Id | Capture.cs:172:20:172:25 | call to local function Id |
| Capture.cs:164:26:164:26 | s | Capture.cs:167:20:167:22 | s [implicit argument] |
| Capture.cs:164:26:164:26 | s | Capture.cs:167:20:167:22 | s [implicit argument] |
| Capture.cs:164:26:164:26 | s | Capture.cs:167:20:167:22 | s [implicit argument] |
| Capture.cs:164:26:164:26 | s | Capture.cs:167:20:167:22 | [implicit argument] s |
| Capture.cs:164:26:164:26 | s | Capture.cs:167:20:167:22 | [implicit argument] s |
| Capture.cs:164:26:164:26 | s | Capture.cs:167:20:167:22 | [implicit argument] s |
| Capture.cs:166:13:166:28 | SSA capture def(s) | Capture.cs:166:13:166:28 | return M |
| Capture.cs:166:13:166:28 | SSA capture def(s) | Capture.cs:166:13:166:28 | return M |
| Capture.cs:166:13:166:28 | SSA capture def(s) | Capture.cs:166:27:166:27 | access to parameter s |
@@ -222,16 +222,16 @@
| Capture.cs:166:13:166:28 | return M | Capture.cs:167:20:167:22 | call to local function M |
| Capture.cs:166:27:166:27 | access to parameter s | Capture.cs:166:13:166:28 | return M |
| Capture.cs:166:27:166:27 | access to parameter s | Capture.cs:166:13:166:28 | return M |
| Capture.cs:167:20:167:22 | [implicit argument] s | Capture.cs:166:13:166:28 | SSA capture def(s) |
| Capture.cs:167:20:167:22 | [implicit argument] s | Capture.cs:166:13:166:28 | SSA capture def(s) |
| Capture.cs:167:20:167:22 | [implicit argument] s | Capture.cs:166:13:166:28 | SSA capture def(s) |
| Capture.cs:167:20:167:22 | [implicit argument] s | Capture.cs:167:20:167:22 | call to local function M |
| Capture.cs:167:20:167:22 | [implicit argument] s | Capture.cs:167:20:167:22 | call to local function M |
| Capture.cs:167:20:167:22 | [implicit argument] s | Capture.cs:167:20:167:22 | call to local function M |
| Capture.cs:167:20:167:22 | call to local function M | Capture.cs:164:9:168:9 | return Id |
| Capture.cs:167:20:167:22 | call to local function M | Capture.cs:164:9:168:9 | return Id |
| Capture.cs:167:20:167:22 | call to local function M | Capture.cs:164:9:168:9 | return Id |
| Capture.cs:167:20:167:22 | call to local function M | Capture.cs:164:9:168:9 | return Id |
| Capture.cs:167:20:167:22 | s [implicit argument] | Capture.cs:166:13:166:28 | SSA capture def(s) |
| Capture.cs:167:20:167:22 | s [implicit argument] | Capture.cs:166:13:166:28 | SSA capture def(s) |
| Capture.cs:167:20:167:22 | s [implicit argument] | Capture.cs:166:13:166:28 | SSA capture def(s) |
| Capture.cs:167:20:167:22 | s [implicit argument] | Capture.cs:167:20:167:22 | call to local function M |
| Capture.cs:167:20:167:22 | s [implicit argument] | Capture.cs:167:20:167:22 | call to local function M |
| Capture.cs:167:20:167:22 | s [implicit argument] | Capture.cs:167:20:167:22 | call to local function M |
| Capture.cs:170:13:170:32 | SSA def(sink38) | Capture.cs:171:15:171:20 | access to local variable sink38 |
| Capture.cs:170:13:170:32 | SSA def(sink38) | Capture.cs:171:15:171:20 | access to local variable sink38 |
| Capture.cs:170:22:170:32 | call to local function Id | Capture.cs:170:13:170:32 | SSA def(sink38) |

42
csharp/ql/test/library-tests/dataflow/global/TaintTrackingPath.expected
View File

@@ -1,13 +1,13 @@
edges
| Capture.cs:7:20:7:26 | tainted | Capture.cs:14:9:14:20 | tainted [implicit argument] |
| Capture.cs:7:20:7:26 | tainted | Capture.cs:25:9:25:20 | tainted [implicit argument] |
| Capture.cs:7:20:7:26 | tainted | Capture.cs:33:9:33:40 | tainted [implicit argument] |
| Capture.cs:7:20:7:26 | tainted | Capture.cs:14:9:14:20 | [implicit argument] tainted |
| Capture.cs:7:20:7:26 | tainted | Capture.cs:25:9:25:20 | [implicit argument] tainted |
| Capture.cs:7:20:7:26 | tainted | Capture.cs:33:9:33:40 | [implicit argument] tainted |
| Capture.cs:9:9:13:9 | SSA capture def(tainted) | Capture.cs:12:19:12:24 | access to local variable sink27 |
| Capture.cs:14:9:14:20 | tainted [implicit argument] | Capture.cs:9:9:13:9 | SSA capture def(tainted) |
| Capture.cs:14:9:14:20 | [implicit argument] tainted | Capture.cs:9:9:13:9 | SSA capture def(tainted) |
| Capture.cs:18:13:22:13 | SSA capture def(tainted) | Capture.cs:21:23:21:28 | access to local variable sink28 |
| Capture.cs:25:9:25:20 | tainted [implicit argument] | Capture.cs:18:13:22:13 | SSA capture def(tainted) |
| Capture.cs:25:9:25:20 | [implicit argument] tainted | Capture.cs:18:13:22:13 | SSA capture def(tainted) |
| Capture.cs:27:43:32:9 | SSA capture def(tainted) | Capture.cs:30:19:30:24 | access to local variable sink29 |
| Capture.cs:33:9:33:40 | tainted [implicit argument] | Capture.cs:27:43:32:9 | SSA capture def(tainted) |
| Capture.cs:33:9:33:40 | [implicit argument] tainted | Capture.cs:27:43:32:9 | SSA capture def(tainted) |
| Capture.cs:57:13:57:35 | SSA def(sink30) | Capture.cs:59:9:59:21 | SSA call def(sink30) |
| Capture.cs:57:22:57:35 | "taint source" | Capture.cs:57:13:57:35 | SSA def(sink30) |
| Capture.cs:59:9:59:21 | SSA call def(sink30) | Capture.cs:60:15:60:20 | access to local variable sink30 |
@@ -17,20 +17,20 @@ edges
| Capture.cs:77:13:77:35 | SSA def(sink32) | Capture.cs:80:9:80:41 | SSA call def(sink32) |
| Capture.cs:77:22:77:35 | "taint source" | Capture.cs:77:13:77:35 | SSA def(sink32) |
| Capture.cs:80:9:80:41 | SSA call def(sink32) | Capture.cs:81:15:81:20 | access to local variable sink32 |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:108:9:108:25 | tainted [implicit argument] |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:120:9:120:25 | tainted [implicit argument] |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:129:9:129:45 | tainted [implicit argument] |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:136:22:136:38 | tainted [implicit argument] |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:108:9:108:25 | [implicit argument] tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:120:9:120:25 | [implicit argument] tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:129:9:129:45 | [implicit argument] tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:136:22:136:38 | [implicit argument] tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:144:25:144:31 | access to parameter tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:170:25:170:31 | access to parameter tainted |
| Capture.cs:108:9:108:25 | SSA call def(sink33) | Capture.cs:109:15:109:20 | access to local variable sink33 |
| Capture.cs:108:9:108:25 | tainted [implicit argument] | Capture.cs:108:9:108:25 | SSA call def(sink33) |
| Capture.cs:108:9:108:25 | [implicit argument] tainted | Capture.cs:108:9:108:25 | SSA call def(sink33) |
| Capture.cs:120:9:120:25 | SSA call def(sink34) | Capture.cs:121:15:121:20 | access to local variable sink34 |
| Capture.cs:120:9:120:25 | tainted [implicit argument] | Capture.cs:120:9:120:25 | SSA call def(sink34) |
| Capture.cs:120:9:120:25 | [implicit argument] tainted | Capture.cs:120:9:120:25 | SSA call def(sink34) |
| Capture.cs:129:9:129:45 | SSA call def(sink35) | Capture.cs:130:15:130:20 | access to local variable sink35 |
| Capture.cs:129:9:129:45 | tainted [implicit argument] | Capture.cs:129:9:129:45 | SSA call def(sink35) |
| Capture.cs:129:9:129:45 | [implicit argument] tainted | Capture.cs:129:9:129:45 | SSA call def(sink35) |
| Capture.cs:136:22:136:38 | [implicit argument] tainted | Capture.cs:136:22:136:38 | call to local function CaptureThrough4 |
| Capture.cs:136:22:136:38 | call to local function CaptureThrough4 | Capture.cs:137:15:137:20 | access to local variable sink36 |
| Capture.cs:136:22:136:38 | tainted [implicit argument] | Capture.cs:136:22:136:38 | call to local function CaptureThrough4 |
| Capture.cs:144:9:144:32 | SSA call def(sink37) | Capture.cs:145:15:145:20 | access to local variable sink37 |
| Capture.cs:144:25:144:31 | access to parameter tainted | Capture.cs:144:9:144:32 | SSA call def(sink37) |
| Capture.cs:170:22:170:32 | call to local function Id | Capture.cs:171:15:171:20 | access to local variable sink38 |
@@ -257,13 +257,13 @@ nodes
| Capture.cs:7:20:7:26 | tainted |
| Capture.cs:9:9:13:9 | SSA capture def(tainted) |
| Capture.cs:12:19:12:24 | access to local variable sink27 |
| Capture.cs:14:9:14:20 | tainted [implicit argument] |
| Capture.cs:14:9:14:20 | [implicit argument] tainted |
| Capture.cs:18:13:22:13 | SSA capture def(tainted) |
| Capture.cs:21:23:21:28 | access to local variable sink28 |
| Capture.cs:25:9:25:20 | tainted [implicit argument] |
| Capture.cs:25:9:25:20 | [implicit argument] tainted |
| Capture.cs:27:43:32:9 | SSA capture def(tainted) |
| Capture.cs:30:19:30:24 | access to local variable sink29 |
| Capture.cs:33:9:33:40 | tainted [implicit argument] |
| Capture.cs:33:9:33:40 | [implicit argument] tainted |
| Capture.cs:57:13:57:35 | SSA def(sink30) |
| Capture.cs:57:22:57:35 | "taint source" |
| Capture.cs:59:9:59:21 | SSA call def(sink30) |
@@ -278,16 +278,16 @@ nodes
| Capture.cs:81:15:81:20 | access to local variable sink32 |
| Capture.cs:101:25:101:31 | tainted |
| Capture.cs:108:9:108:25 | SSA call def(sink33) |
| Capture.cs:108:9:108:25 | tainted [implicit argument] |
| Capture.cs:108:9:108:25 | [implicit argument] tainted |
| Capture.cs:109:15:109:20 | access to local variable sink33 |
| Capture.cs:120:9:120:25 | SSA call def(sink34) |
| Capture.cs:120:9:120:25 | tainted [implicit argument] |
| Capture.cs:120:9:120:25 | [implicit argument] tainted |
| Capture.cs:121:15:121:20 | access to local variable sink34 |
| Capture.cs:129:9:129:45 | SSA call def(sink35) |
| Capture.cs:129:9:129:45 | tainted [implicit argument] |
| Capture.cs:129:9:129:45 | [implicit argument] tainted |
| Capture.cs:130:15:130:20 | access to local variable sink35 |
| Capture.cs:136:22:136:38 | [implicit argument] tainted |
| Capture.cs:136:22:136:38 | call to local function CaptureThrough4 |
| Capture.cs:136:22:136:38 | tainted [implicit argument] |
| Capture.cs:137:15:137:20 | access to local variable sink36 |
| Capture.cs:144:9:144:32 | SSA call def(sink37) |
| Capture.cs:144:25:144:31 | access to parameter tainted |

8
csharp/ql/test/library-tests/dataflow/local/DataFlowStep.expected
View File

@@ -1,11 +1,11 @@
| Capture.cs:7:13:7:17 | SSA def(i) | Capture.cs:13:9:13:16 | i [implicit argument] |
| Capture.cs:7:13:7:17 | SSA def(i) | Capture.cs:23:9:23:16 | i [implicit argument] |
| Capture.cs:7:13:7:17 | SSA def(i) | Capture.cs:34:9:34:16 | i [implicit argument] |
| Capture.cs:7:13:7:17 | SSA def(i) | Capture.cs:13:9:13:16 | [implicit argument] i |
| Capture.cs:7:13:7:17 | SSA def(i) | Capture.cs:23:9:23:16 | [implicit argument] i |
| Capture.cs:7:13:7:17 | SSA def(i) | Capture.cs:34:9:34:16 | [implicit argument] i |
| Capture.cs:7:17:7:17 | 0 | Capture.cs:7:13:7:17 | SSA def(i) |
| Capture.cs:9:9:12:9 | SSA capture def(i) | Capture.cs:11:17:11:17 | access to local variable i |
| Capture.cs:17:13:20:13 | SSA capture def(i) | Capture.cs:19:21:19:21 | access to local variable i |
| Capture.cs:27:13:30:13 | SSA capture def(i) | Capture.cs:29:21:29:21 | access to local variable i |
| Capture.cs:31:13:31:17 | SSA def(i) | Capture.cs:32:13:32:20 | i [implicit argument] |
| Capture.cs:31:13:31:17 | SSA def(i) | Capture.cs:32:13:32:20 | [implicit argument] i |
| Capture.cs:31:17:31:17 | 1 | Capture.cs:31:13:31:17 | SSA def(i) |
| Capture.cs:38:17:38:17 | 0 | Capture.cs:38:13:38:17 | SSA def(i) |
| Capture.cs:40:9:40:17 | SSA call def(i) | Capture.cs:41:13:41:13 | access to local variable i |

8
csharp/ql/test/library-tests/dataflow/local/TaintTrackingStep.expected
View File

@@ -1,11 +1,11 @@
| Capture.cs:7:13:7:17 | SSA def(i) | Capture.cs:13:9:13:16 | i [implicit argument] |
| Capture.cs:7:13:7:17 | SSA def(i) | Capture.cs:23:9:23:16 | i [implicit argument] |
| Capture.cs:7:13:7:17 | SSA def(i) | Capture.cs:34:9:34:16 | i [implicit argument] |
| Capture.cs:7:13:7:17 | SSA def(i) | Capture.cs:13:9:13:16 | [implicit argument] i |
| Capture.cs:7:13:7:17 | SSA def(i) | Capture.cs:23:9:23:16 | [implicit argument] i |
| Capture.cs:7:13:7:17 | SSA def(i) | Capture.cs:34:9:34:16 | [implicit argument] i |
| Capture.cs:7:17:7:17 | 0 | Capture.cs:7:13:7:17 | SSA def(i) |
| Capture.cs:9:9:12:9 | SSA capture def(i) | Capture.cs:11:17:11:17 | access to local variable i |
| Capture.cs:17:13:20:13 | SSA capture def(i) | Capture.cs:19:21:19:21 | access to local variable i |
| Capture.cs:27:13:30:13 | SSA capture def(i) | Capture.cs:29:21:29:21 | access to local variable i |
| Capture.cs:31:13:31:17 | SSA def(i) | Capture.cs:32:13:32:20 | i [implicit argument] |
| Capture.cs:31:13:31:17 | SSA def(i) | Capture.cs:32:13:32:20 | [implicit argument] i |
| Capture.cs:31:17:31:17 | 1 | Capture.cs:31:13:31:17 | SSA def(i) |
| Capture.cs:38:17:38:17 | 0 | Capture.cs:38:13:38:17 | SSA def(i) |
| Capture.cs:40:9:40:17 | SSA call def(i) | Capture.cs:41:13:41:13 | access to local variable i |