hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-26 09:15:12 +02:00
Code Issues Packages Projects Releases Wiki Activity

feat: add log injection query to testing GoMicro

Browse Source
This commit is contained in:
Mathew Payne
2023-06-30 12:26:16 +01:00
parent b3df568550
commit 62bad6c02f
2 changed files with 25 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

24
go/ql/test/library-tests/semmle/go/frameworks/GoMicro/LogInjection.expected Normal file
View File

@@ -0,0 +1,24 @@
edges
| main.go:14:46:14:48 | definition of req | main.go:14:46:14:48 | definition of req |
| main.go:14:46:14:48 | definition of req | main.go:14:46:14:48 | definition of req |
| main.go:14:46:14:48 | definition of req | main.go:17:28:17:31 | name |
| main.go:14:46:14:48 | definition of req | main.go:17:28:17:31 | name |
| main.go:14:46:14:48 | definition of req | proto/Hello.pb.micro.go:85:53:85:54 | definition of in |
| proto/Hello.pb.micro.go:85:53:85:54 | definition of in | proto/Hello.pb.micro.go:85:53:85:54 | definition of in |
| proto/Hello.pb.micro.go:85:53:85:54 | definition of in | proto/Hello.pb.micro.go:86:37:86:38 | in |
| proto/Hello.pb.micro.go:85:53:85:54 | definition of in | proto/Hello.pb.micro.go:86:37:86:38 | in |
| proto/Hello.pb.micro.go:86:37:86:38 | in | main.go:14:46:14:48 | definition of req |
| proto/Hello.pb.micro.go:86:37:86:38 | in | main.go:14:46:14:48 | definition of req |
| proto/Hello.pb.micro.go:86:37:86:38 | in | proto/Hello.pb.micro.go:85:53:85:54 | definition of in |
| proto/Hello.pb.micro.go:86:37:86:38 | in | proto/Hello.pb.micro.go:85:53:85:54 | definition of in |
nodes
| main.go:14:46:14:48 | definition of req | semmle.label | definition of req |
| main.go:14:46:14:48 | definition of req | semmle.label | definition of req |
| main.go:17:28:17:31 | name | semmle.label | name |
| proto/Hello.pb.micro.go:85:53:85:54 | definition of in | semmle.label | definition of in |
| proto/Hello.pb.micro.go:85:53:85:54 | definition of in | semmle.label | definition of in |
| proto/Hello.pb.micro.go:86:37:86:38 | in | semmle.label | in |
| proto/Hello.pb.micro.go:86:37:86:38 | in | semmle.label | in |
subpaths
#select
| main.go:17:28:17:31 | name | main.go:14:46:14:48 | definition of req | main.go:17:28:17:31 | name | This log entry depends on a $@. | main.go:14:46:14:48 | definition of req | user-provided value |

1
go/ql/test/library-tests/semmle/go/frameworks/GoMicro/LogInjection.qlref Normal file
View File

@@ -0,0 +1 @@
Security/CWE-117/LogInjection.ql