mirror of
https://github.com/github/codeql.git
synced 2026-04-28 10:15:14 +02:00
Java: Add tests
This commit is contained in:
Joe
60
java/ql/test/library-tests/frameworks/guava/Test.java
Normal file
60
java/ql/test/library-tests/frameworks/guava/Test.java
Normal file
@@ -0,0 +1,60 @@
|
||||
|
||||
import com.google.common.base.Strings;
|
||||
import com.google.common.base.Splitter;
|
||||
import com.google.common.base.Joiner;
|
||||
|
||||
import java.util.Map;
|
||||
import java.util.HashMap;
|
||||
|
||||
class Test {
|
||||
String taint() { return "tainted"; }
|
||||
|
||||
void test1() {
|
||||
String x = taint();
|
||||
|
||||
Strings.padStart(x, 10, ' ');
|
||||
Strings.padEnd(x, 10, ' ');
|
||||
Strings.repeat(x, 3);
|
||||
Strings.emptyToNull(Strings.nullToEmpty(x));
|
||||
Strings.lenientFormat(x, 3);
|
||||
Strings.commonPrefix(x, "abc");
|
||||
Strings.commonSuffix(x, "cde");
|
||||
Strings.lenientFormat("%s = %s", x, 3);
|
||||
}
|
||||
|
||||
void test2() {
|
||||
String x = taint();
|
||||
Splitter s = Splitter.on(x).omitEmptyStrings();
|
||||
|
||||
s.split("x y z");
|
||||
s.split(x);
|
||||
s.splitToList(x);
|
||||
s.withKeyValueSeparator("=").split("a=b");
|
||||
s.withKeyValueSeparator("=").split(x);
|
||||
}
|
||||
|
||||
void test3() {
|
||||
String x = taint();
|
||||
Joiner j1 = Joiner.on(x);
|
||||
Joiner j2 = Joiner.on(", ");
|
||||
|
||||
StringBuilder sb = new StringBuilder();
|
||||
j2.appendTo(sb, "a", "b", "c");
|
||||
sb.toString();
|
||||
j1.appendTo(sb, "a", "b", "c");
|
||||
sb.toString();
|
||||
j2.appendTo(sb, "a", "b", "c");
|
||||
sb.toString();
|
||||
|
||||
sb = new StringBuilder();
|
||||
j2.appendTo(sb, x, x);
|
||||
|
||||
Map<String, String> m = new HashMap<String, String>();
|
||||
m.put("k", "v");
|
||||
j2.withKeyValueSeparator("=").join(m);
|
||||
j2.withKeyValueSeparator(x).join(m);
|
||||
j1.useForNull("(null)").withKeyValueSeparator("=").join(m);
|
||||
m.put("k2", x);
|
||||
j2.withKeyValueSeparator("=").join(m);
|
||||
}
|
||||
}
|
||||
75
java/ql/test/library-tests/frameworks/guava/flow.expected
Normal file
75
java/ql/test/library-tests/frameworks/guava/flow.expected
Normal file
@@ -0,0 +1,75 @@
|
||||
| Test.java:13:20:13:26 | taint(...) | ../../../stubs/guava-29.0/com/google/common/base/Strings.java:18:36:18:48 | string |
|
||||
| Test.java:13:20:13:26 | taint(...) | ../../../stubs/guava-29.0/com/google/common/base/Strings.java:22:36:22:48 | string |
|
||||
| Test.java:13:20:13:26 | taint(...) | ../../../stubs/guava-29.0/com/google/common/base/Strings.java:30:33:30:45 | string |
|
||||
| Test.java:13:20:13:26 | taint(...) | ../../../stubs/guava-29.0/com/google/common/base/Strings.java:34:31:34:43 | string |
|
||||
| Test.java:13:20:13:26 | taint(...) | ../../../stubs/guava-29.0/com/google/common/base/Strings.java:38:31:38:43 | string |
|
||||
| Test.java:13:20:13:26 | taint(...) | ../../../stubs/guava-29.0/com/google/common/base/Strings.java:42:37:42:50 | a |
|
||||
| Test.java:13:20:13:26 | taint(...) | ../../../stubs/guava-29.0/com/google/common/base/Strings.java:46:37:46:50 | a |
|
||||
| Test.java:13:20:13:26 | taint(...) | ../../../stubs/guava-29.0/com/google/common/base/Strings.java:50:38:50:52 | template |
|
||||
| Test.java:13:20:13:26 | taint(...) | ../../../stubs/guava-29.0/com/google/common/base/Strings.java:50:55:50:69 | args |
|
||||
| Test.java:13:20:13:26 | taint(...) | Test.java:13:20:13:26 | taint(...) |
|
||||
| Test.java:13:20:13:26 | taint(...) | Test.java:15:9:15:36 | padStart(...) |
|
||||
| Test.java:13:20:13:26 | taint(...) | Test.java:15:26:15:26 | x |
|
||||
| Test.java:13:20:13:26 | taint(...) | Test.java:16:9:16:34 | padEnd(...) |
|
||||
| Test.java:13:20:13:26 | taint(...) | Test.java:16:24:16:24 | x |
|
||||
| Test.java:13:20:13:26 | taint(...) | Test.java:17:9:17:28 | repeat(...) |
|
||||
| Test.java:13:20:13:26 | taint(...) | Test.java:17:24:17:24 | x |
|
||||
| Test.java:13:20:13:26 | taint(...) | Test.java:18:9:18:51 | emptyToNull(...) |
|
||||
| Test.java:13:20:13:26 | taint(...) | Test.java:18:29:18:50 | nullToEmpty(...) |
|
||||
| Test.java:13:20:13:26 | taint(...) | Test.java:18:49:18:49 | x |
|
||||
| Test.java:13:20:13:26 | taint(...) | Test.java:19:9:19:35 | lenientFormat(...) |
|
||||
| Test.java:13:20:13:26 | taint(...) | Test.java:19:31:19:31 | x |
|
||||
| Test.java:13:20:13:26 | taint(...) | Test.java:20:30:20:30 | x |
|
||||
| Test.java:13:20:13:26 | taint(...) | Test.java:21:30:21:30 | x |
|
||||
| Test.java:13:20:13:26 | taint(...) | Test.java:22:9:22:46 | lenientFormat(...) |
|
||||
| Test.java:13:20:13:26 | taint(...) | Test.java:22:9:22:46 | new ..[] { .. } |
|
||||
| Test.java:13:20:13:26 | taint(...) | Test.java:22:42:22:42 | x |
|
||||
| Test.java:26:20:26:26 | taint(...) | ../../../stubs/guava-29.0/com/google/common/base/Splitter.java:23:29:23:50 | separator |
|
||||
| Test.java:26:20:26:26 | taint(...) | ../../../stubs/guava-29.0/com/google/common/base/Splitter.java:31:33:31:59 | sequence |
|
||||
| Test.java:26:20:26:26 | taint(...) | ../../../stubs/guava-29.0/com/google/common/base/Splitter.java:35:35:35:55 | sequence |
|
||||
| Test.java:26:20:26:26 | taint(...) | ../../../stubs/guava-29.0/com/google/common/base/Splitter.java:44:38:44:58 | sequence |
|
||||
| Test.java:26:20:26:26 | taint(...) | Test.java:26:20:26:26 | taint(...) |
|
||||
| Test.java:26:20:26:26 | taint(...) | Test.java:27:34:27:34 | x |
|
||||
| Test.java:26:20:26:26 | taint(...) | Test.java:30:9:30:18 | split(...) |
|
||||
| Test.java:26:20:26:26 | taint(...) | Test.java:30:17:30:17 | x |
|
||||
| Test.java:26:20:26:26 | taint(...) | Test.java:31:9:31:24 | splitToList(...) |
|
||||
| Test.java:26:20:26:26 | taint(...) | Test.java:31:23:31:23 | x |
|
||||
| Test.java:26:20:26:26 | taint(...) | Test.java:33:9:33:45 | split(...) |
|
||||
| Test.java:26:20:26:26 | taint(...) | Test.java:33:44:33:44 | x |
|
||||
| Test.java:37:20:37:26 | taint(...) | ../../../stubs/guava-29.0/com/google/common/base/Joiner.java:21:27:21:42 | separator |
|
||||
| Test.java:37:20:37:26 | taint(...) | ../../../stubs/guava-29.0/com/google/common/base/Joiner.java:25:30:25:37 | parameter this |
|
||||
| Test.java:37:20:37:26 | taint(...) | ../../../stubs/guava-29.0/com/google/common/base/Joiner.java:25:39:25:59 | builder |
|
||||
| Test.java:37:20:37:26 | taint(...) | ../../../stubs/guava-29.0/com/google/common/base/Joiner.java:25:62:25:73 | first |
|
||||
| Test.java:37:20:37:26 | taint(...) | ../../../stubs/guava-29.0/com/google/common/base/Joiner.java:25:76:25:88 | second |
|
||||
| Test.java:37:20:37:26 | taint(...) | ../../../stubs/guava-29.0/com/google/common/base/Joiner.java:33:17:33:26 | parameter this |
|
||||
| Test.java:37:20:37:26 | taint(...) | ../../../stubs/guava-29.0/com/google/common/base/Joiner.java:41:20:41:40 | parameter this |
|
||||
| Test.java:37:20:37:26 | taint(...) | ../../../stubs/guava-29.0/com/google/common/base/Joiner.java:41:42:41:65 | keyValueSeparator |
|
||||
| Test.java:37:20:37:26 | taint(...) | ../../../stubs/guava-29.0/com/google/common/base/Joiner.java:50:19:50:22 | parameter this |
|
||||
| Test.java:37:20:37:26 | taint(...) | ../../../stubs/guava-29.0/com/google/common/base/Joiner.java:50:24:50:36 | map |
|
||||
| Test.java:37:20:37:26 | taint(...) | Test.java:37:20:37:26 | taint(...) |
|
||||
| Test.java:37:20:37:26 | taint(...) | Test.java:38:21:38:32 | on(...) |
|
||||
| Test.java:37:20:37:26 | taint(...) | Test.java:38:31:38:31 | x |
|
||||
| Test.java:37:20:37:26 | taint(...) | Test.java:44:9:44:10 | j1 |
|
||||
| Test.java:37:20:37:26 | taint(...) | Test.java:44:9:44:38 | appendTo(...) |
|
||||
| Test.java:37:20:37:26 | taint(...) | Test.java:44:21:44:22 | sb [post update] |
|
||||
| Test.java:37:20:37:26 | taint(...) | Test.java:45:9:45:10 | sb |
|
||||
| Test.java:37:20:37:26 | taint(...) | Test.java:45:9:45:21 | toString(...) |
|
||||
| Test.java:37:20:37:26 | taint(...) | Test.java:46:9:46:38 | appendTo(...) |
|
||||
| Test.java:37:20:37:26 | taint(...) | Test.java:46:21:46:22 | sb |
|
||||
| Test.java:37:20:37:26 | taint(...) | Test.java:47:9:47:10 | sb |
|
||||
| Test.java:37:20:37:26 | taint(...) | Test.java:47:9:47:21 | toString(...) |
|
||||
| Test.java:37:20:37:26 | taint(...) | Test.java:50:9:50:29 | appendTo(...) |
|
||||
| Test.java:37:20:37:26 | taint(...) | Test.java:50:21:50:22 | sb [post update] |
|
||||
| Test.java:37:20:37:26 | taint(...) | Test.java:50:25:50:25 | x |
|
||||
| Test.java:37:20:37:26 | taint(...) | Test.java:50:28:50:28 | x |
|
||||
| Test.java:37:20:37:26 | taint(...) | Test.java:55:9:55:35 | withKeyValueSeparator(...) |
|
||||
| Test.java:37:20:37:26 | taint(...) | Test.java:55:9:55:43 | join(...) |
|
||||
| Test.java:37:20:37:26 | taint(...) | Test.java:55:34:55:34 | x |
|
||||
| Test.java:37:20:37:26 | taint(...) | Test.java:56:9:56:10 | j1 |
|
||||
| Test.java:37:20:37:26 | taint(...) | Test.java:56:9:56:31 | useForNull(...) |
|
||||
| Test.java:37:20:37:26 | taint(...) | Test.java:56:9:56:58 | withKeyValueSeparator(...) |
|
||||
| Test.java:37:20:37:26 | taint(...) | Test.java:56:9:56:66 | join(...) |
|
||||
| Test.java:37:20:37:26 | taint(...) | Test.java:57:9:57:9 | m [post update] |
|
||||
| Test.java:37:20:37:26 | taint(...) | Test.java:57:21:57:21 | x |
|
||||
| Test.java:37:20:37:26 | taint(...) | Test.java:58:9:58:45 | join(...) |
|
||||
| Test.java:37:20:37:26 | taint(...) | Test.java:58:44:58:44 | m |
|
||||
16
java/ql/test/library-tests/frameworks/guava/flow.ql
Normal file
16
java/ql/test/library-tests/frameworks/guava/flow.ql
Normal file
@@ -0,0 +1,16 @@
|
||||
import java
|
||||
import semmle.code.java.dataflow.TaintTracking
|
||||
|
||||
class Conf extends TaintTracking::Configuration {
|
||||
Conf() { this = "qltest:frameworks:guava" }
|
||||
|
||||
override predicate isSource(DataFlow::Node n) {
|
||||
n.asExpr().(MethodAccess).getMethod().hasName("taint")
|
||||
}
|
||||
|
||||
override predicate isSink(DataFlow::Node n) { any() }
|
||||
}
|
||||
|
||||
from DataFlow::Node src, DataFlow::Node sink, Conf conf
|
||||
where conf.hasFlow(src, sink)
|
||||
select src, sink
|
||||
1
java/ql/test/library-tests/frameworks/guava/options
Normal file
1
java/ql/test/library-tests/frameworks/guava/options
Normal file
@@ -0,0 +1 @@
|
||||
//semmle-extractor-options: --javac-args -cp ${testdir}/../../../stubs/guava-29.0
|
||||
Reference in New Issue
Block a user