mirror of
https://github.com/github/codeql.git
synced 2026-05-05 13:45:19 +02:00
Dataflow: Add test for FlowState.
This commit is contained in:
98
java/ql/test/library-tests/dataflow/state/test.ql
Normal file
98
java/ql/test/library-tests/dataflow/state/test.ql
Normal file
@@ -0,0 +1,98 @@
|
||||
import java
|
||||
import semmle.code.java.dataflow.DataFlow
|
||||
import TestUtilities.InlineExpectationsTest
|
||||
import DataFlow
|
||||
|
||||
class TestState extends FlowState {
|
||||
TestState() { src(_, this) or sink(_, this) or step(_, _, this, _) or step(_, _, _, this) }
|
||||
}
|
||||
|
||||
predicate src(Node n, string s) {
|
||||
exists(MethodAccess ma |
|
||||
n.asExpr() = ma and
|
||||
ma.getMethod().hasName("source") and
|
||||
ma.getAnArgument().(StringLiteral).getValue() = s
|
||||
)
|
||||
}
|
||||
|
||||
predicate sink(Node n, string s) {
|
||||
exists(MethodAccess ma |
|
||||
ma.getMethod().hasName("sink") and
|
||||
n.asExpr() = ma.getArgument(0) and
|
||||
ma.getArgument(1).(StringLiteral).getValue() = s
|
||||
)
|
||||
}
|
||||
|
||||
predicate bar(Node n, string s) {
|
||||
exists(MethodAccess ma |
|
||||
ma.getMethod().hasName("stateBarrier") and
|
||||
n.asExpr() = ma.getArgument(0) and
|
||||
ma.getArgument(1).(StringLiteral).getValue() = s
|
||||
)
|
||||
}
|
||||
|
||||
predicate step(Node n1, Node n2, string s1, string s2) {
|
||||
exists(MethodAccess ma |
|
||||
ma.getMethod().hasName("step") and
|
||||
n1.asExpr() = ma.getArgument(0) and
|
||||
ma.getArgument(1).(StringLiteral).getValue() = s1 and
|
||||
ma.getArgument(2).(StringLiteral).getValue() = s2 and
|
||||
ma = n2.asExpr()
|
||||
)
|
||||
}
|
||||
|
||||
predicate checkNode(Node n) { n.asExpr().(Argument).getCall().getCallee().hasName("check") }
|
||||
|
||||
class Conf extends Configuration {
|
||||
Conf() { this = "qltest:state" }
|
||||
|
||||
override predicate isSource(Node n) { none() }
|
||||
|
||||
override predicate isSource(Node n, FlowState s) { src(n, s) }
|
||||
|
||||
override predicate isSink(Node n) { none() }
|
||||
|
||||
override predicate isSink(Node n, FlowState s) { sink(n, s) }
|
||||
|
||||
override predicate isBarrier(Node n, FlowState s) { bar(n, s) }
|
||||
|
||||
override predicate isAdditionalFlowStep(Node n1, FlowState s1, Node n2, FlowState s2) {
|
||||
step(n1, n2, s1, s2)
|
||||
}
|
||||
|
||||
override int explorationLimit() { result = 0 }
|
||||
}
|
||||
|
||||
class HasFlowTest extends InlineExpectationsTest {
|
||||
HasFlowTest() { this = "HasFlowTest" }
|
||||
|
||||
override string getARelevantTag() { result = ["pFwd", "pRev", "flow"] }
|
||||
|
||||
override predicate hasActualResult(Location location, string element, string tag, string value) {
|
||||
tag = "flow" and
|
||||
exists(PathNode src, PathNode sink, Conf conf |
|
||||
conf.hasFlowPath(src, sink) and
|
||||
sink.getNode().getLocation() = location and
|
||||
element = sink.toString() and
|
||||
value = src.getState()
|
||||
)
|
||||
or
|
||||
tag = "pFwd" and
|
||||
exists(PartialPathNode src, PartialPathNode node, Conf conf |
|
||||
conf.hasPartialFlow(src, node, _) and
|
||||
checkNode(node.getNode()) and
|
||||
node.getNode().getLocation() = location and
|
||||
element = node.toString() and
|
||||
value = src.getState() + "-" + node.getState()
|
||||
)
|
||||
or
|
||||
tag = "pRev" and
|
||||
exists(PartialPathNode node, PartialPathNode sink, Conf conf |
|
||||
conf.hasPartialFlowRev(node, sink, _) and
|
||||
checkNode(node.getNode()) and
|
||||
node.getNode().getLocation() = location and
|
||||
element = node.toString() and
|
||||
value = node.getState() + "-" + sink.getState()
|
||||
)
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user