mirror of
https://github.com/github/codeql.git
synced 2026-05-05 21:55:19 +02:00
Initial commit of Python queries and QL libraries.
This commit is contained in:
committed by
Mark Shannon
parent
90c75cd362
commit
5f58824d1b
24
python/ql/src/Statements/AssertOnTuple.ql
Normal file
24
python/ql/src/Statements/AssertOnTuple.ql
Normal file
@@ -0,0 +1,24 @@
|
||||
/**
|
||||
* @name Asserting a tuple
|
||||
* @description Using an assert statement to test a tuple provides no validity checking.
|
||||
* @kind problem
|
||||
* @tags reliability
|
||||
* maintainability
|
||||
* external/cwe/cwe-670
|
||||
* @problem.severity error
|
||||
* @sub-severity low
|
||||
* @precision very-high
|
||||
* @id py/asserts-tuple
|
||||
*/
|
||||
|
||||
import python
|
||||
|
||||
from Assert a, string b, string non
|
||||
where a.getTest() instanceof Tuple and
|
||||
(if exists(((Tuple)a.getTest()).getAnElt()) then
|
||||
(b = "True" and non = "non-")
|
||||
else
|
||||
(b = "False" and non = "")
|
||||
)
|
||||
select a, "Assertion of " + non + "empty tuple is always " + b + "."
|
||||
|
||||
Reference in New Issue
Block a user