hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-19 05:54:00 +02:00
Code Issues Packages Projects Releases Wiki Activity

Swift: Model Sequence.withContiguousSrtorageIfAvailable.

Browse Source
This commit is contained in:
Geoffrey White
2023-03-06 18:54:36 +00:00
parent 56b6441ef5
commit 4380495eed
2 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
swift/ql/lib/codeql/swift/frameworks/StandardLibrary/Sequence.qll
View File

@@ -25,6 +25,7 @@ private class SequenceSummaries extends SummaryModelCsv {
";Sequence;true;joined();;;Argument[-1];ReturnValue;taint",
";Sequence;true;joined(separator:);;;Argument[-1..0];ReturnValue;taint",
";Sequence;true;first(where:);;;Argument[-1];ReturnValue;taint",
";Sequence;true;withContiguousStorageIfAvailable(_:);;;Argument[-1];Argument[0].Parameter[0];taint",
]
}
}

4
swift/ql/test/library-tests/dataflow/taint/libraries/string.swift
View File

@@ -433,12 +433,12 @@ func taintThroughEncodings() {
clean.withContiguousStorageIfAvailable({
ptr in
sink(arg: ptr)
sink(arg: ptr) // $ SPURIOUS: tainted=366
sink(arg: ptr.baseAddress!)
})
tainted.withContiguousStorageIfAvailable({
ptr in
sink(arg: ptr)
sink(arg: ptr) // $ tainted=366
sink(arg: ptr.baseAddress!) // $ MISSING: tainted=366
})
}