mirror of
https://github.com/github/codeql.git
synced 2026-04-29 18:55:14 +02:00
Generate tests for Spring util
This commit is contained in:
Sauyon Lee
1483
java/ql/test/library-tests/frameworks/spring/util/Test.java
Normal file
1483
java/ql/test/library-tests/frameworks/spring/util/Test.java
Normal file
File diff suppressed because it is too large
Load Diff
144
java/ql/test/library-tests/frameworks/spring/util/springutil.ssv
Normal file
144
java/ql/test/library-tests/frameworks/spring/util/springutil.ssv
Normal file
@@ -0,0 +1,144 @@
|
||||
org.springframework.util;AntPathMatcher;false;combine;;;Argument[0..1];ReturnValue;taint
|
||||
//org.springframework.util;AntPathMatcher;false;doMatch;;;Argument[0];MapValue of Argument[3];taint
|
||||
org.springframework.util;AntPathMatcher;false;extractPathWithinPattern;;;Argument[1];ReturnValue;taint
|
||||
org.springframework.util;AntPathMatcher;false;extractUriTemplateVariables;;;Argument[1];MapValue of ReturnValue;taint
|
||||
//org.springframework.util;AntPathMatcher;false;tokenizePath;;;Argument[0];ReturnValue;taint
|
||||
//org.springframework.util;AntPathMatcher;false;tokenizePattern;;;Argument[0];ReturnValue;taint
|
||||
//org.springframework.util.AntPathMatcher;AntPathStringMatcher;false;matchStrings;;;Argument[0];MapValue of Argument[1];taint
|
||||
org.springframework.util;AutoPopulatingList;false;AutoPopulatingList;(java.util.List,org.springframework.util.AutoPopulatingList.ElementFactory);;Element of Argument[0];Element of Argument[-1];value
|
||||
org.springframework.util;AutoPopulatingList;false;AutoPopulatingList;(java.util.List,java.lang.Class);;Element of Argument[0];Element of Argument[-1];value
|
||||
org.springframework.util;Base64Utils;false;decode;;;Argument[0];ReturnValue;taint
|
||||
org.springframework.util;Base64Utils;false;decodeFromString;;;Argument[0];ReturnValue;taint
|
||||
org.springframework.util;Base64Utils;false;decodeFromUrlSafeString;;;Argument[0];ReturnValue;taint
|
||||
org.springframework.util;Base64Utils;false;decodeUrlSafe;;;Argument[0];ReturnValue;taint
|
||||
org.springframework.util;Base64Utils;false;encode;;;Argument[0];ReturnValue;taint
|
||||
org.springframework.util;Base64Utils;false;encodeToString;;;Argument[0];ReturnValue;taint
|
||||
org.springframework.util;Base64Utils;false;encodeToUrlSafeString;;;Argument[0];ReturnValue;taint
|
||||
org.springframework.util;Base64Utils;false;encodeUrlSafe;;;Argument[0];ReturnValue;taint
|
||||
org.springframework.util;CollectionUtils;false;arrayToList;;;ArrayElement of Argument[0];Element of ReturnValue;value
|
||||
org.springframework.util;CollectionUtils;false;findValueOfType;;;Element of Argument[0];Element of ReturnValue;value
|
||||
org.springframework.util;CollectionUtils;false;firstElement;;;Element of Argument[0];Element of ReturnValue;value
|
||||
org.springframework.util;CollectionUtils;false;lastElement;;;Element of Argument[0];Element of ReturnValue;value
|
||||
org.springframework.util;CollectionUtils;false;mergeArrayIntoCollection;;;ArrayElement of Argument[0];Element of Argument[1];value
|
||||
org.springframework.util;CollectionUtils;false;mergePropertiesIntoMap;;;MapKey of Argument[0];MapKey of Argument[1];value
|
||||
org.springframework.util;CollectionUtils;false;mergePropertiesIntoMap;;;MapValue of Argument[0];MapValue of Argument[1];value
|
||||
org.springframework.util;CollectionUtils;false;toArray;;;Element of Argument[0];ArrayElement of ReturnValue;value
|
||||
org.springframework.util;CollectionUtils;false;toIterator;;;Element of Argument[0];Element of ReturnValue;value
|
||||
org.springframework.util;CollectionUtils;false;toMultiValueMap;;;MapKey of Argument[0];MapKey of ReturnValue;value
|
||||
org.springframework.util;CollectionUtils;false;toMultiValueMap;;;Element of MapValue of Argument[0];Element of MapValue of ReturnValue;value
|
||||
org.springframework.util;CollectionUtils;false;unmodifiableMultiValueMap;;;MapKey of Argument[0];MapKey of ReturnValue;value
|
||||
org.springframework.util;CollectionUtils;false;unmodifiableMultiValueMap;;;MapValue of Argument[0];MapValue of ReturnValue;value
|
||||
org.springframework.util;CompositeIterator;false;add;;;Element of Argument[0];Element of Argument[-1];value
|
||||
org.springframework.util;CompositeIterator;false;next;;;Element of Argument[-1];ReturnValue;value
|
||||
//org.springframework.util.ConcurrentReferenceHashMap;Reference;false;get;;;MapKey of Argument[-1];MapKey of ReturnValue;value
|
||||
//org.springframework.util.ConcurrentReferenceHashMap;Reference;false;get;;;MapKey of Argument[-1];MapKey of ReturnValue;value
|
||||
//org.springframework.util.ConcurrentReferenceHashMap;Reference;false;get;;;MapValue of Argument[-1];MapValue of ReturnValue;value
|
||||
//org.springframework.util.ConcurrentReferenceHashMap;Segment;false;getReference;;;MapKey of Argument[-1];MapKey of ReturnValue;value
|
||||
//org.springframework.util.ConcurrentReferenceHashMap;Segment;false;getReference;;;MapValue of Argument[-1];MapValue of ReturnValue;value
|
||||
//org.springframework.util;ConcurrentReferenceHashMap;false;getReference;;;MapKey of Argument[-1];MapKey of ReturnValue;value
|
||||
//org.springframework.util;ConcurrentReferenceHashMap;false;getReference;;;MapValue of Argument[-1];MapValue of ReturnValue;value
|
||||
//org.springframework.util;ConcurrentReferenceHashMap;false;getSegment;;;MapKey of Argument[-1];MapKey of ReturnValue;value
|
||||
//org.springframework.util;ConcurrentReferenceHashMap;false;getSegment;;;MapValue of Argument[-1];MapValue of ReturnValue;value
|
||||
org.springframework.util;FastByteArrayOutputStream;false;getInputStream;;;Argument[-1];ReturnValue;taint
|
||||
org.springframework.util;FastByteArrayOutputStream;false;toByteArray;;;Argument[-1];ReturnValue;taint
|
||||
org.springframework.util;FastByteArrayOutputStream;false;write;;;Argument[0];Argument[-1];taint
|
||||
org.springframework.util;FastByteArrayOutputStream;false;writeTo;;;Argument[-1];Argument[0];taint
|
||||
org.springframework.util;FileCopyUtils;false;copy;;;Argument[0];Argument[1];taint
|
||||
org.springframework.util;FileCopyUtils;false;copyToByteArray;;;Argument[0];ReturnValue;taint
|
||||
org.springframework.util;FileCopyUtils;false;copyToString;;;Argument[0];ReturnValue;taint
|
||||
org.springframework.util;FileSystemUtils;false;copyRecursively;(java.io.File,java.io.File);;Argument[0];Argument[1];taint
|
||||
org.springframework.util;LinkedMultiValueMap;false;LinkedMultiValueMap;(java.util.Map);;MapKey of Argument[0];MapKey of Argument[-1];value
|
||||
org.springframework.util;LinkedMultiValueMap;false;LinkedMultiValueMap;(java.util.Map);;Element of MapValue of Argument[0];Element of MapValue of Argument[-1];value
|
||||
org.springframework.util;LinkedMultiValueMap;false;deepCopy;;;MapKey of Argument[-1];MapValue of ReturnValue;value
|
||||
org.springframework.util;LinkedMultiValueMap;false;deepCopy;;;MapValue of Argument[-1];MapValue of ReturnValue;value
|
||||
org.springframework.util;MultiValueMap;true;add;;;Argument[0];MapKey of Argument[-1];value
|
||||
org.springframework.util;MultiValueMap;true;add;;;Argument[1];Element of MapValue of Argument[-1];value
|
||||
org.springframework.util;MultiValueMap;true;addAll;;;Argument[0];MapKey of Argument[-1];value
|
||||
org.springframework.util;MultiValueMap;true;addAll;(java.lang.Object,java.util.List);;Element of Argument[1];Element of MapValue of Argument[-1];value
|
||||
org.springframework.util;MultiValueMap;true;addAll;(org.springframework.util.MultiValueMap);;MapValue of Argument[0];Element of MapValue of Argument[-1];value
|
||||
org.springframework.util;MultiValueMap;true;addIfAbsent;;;Argument[0];MapKey of Argument[-1];value
|
||||
org.springframework.util;MultiValueMap;true;addIfAbsent;;;Argument[1];Element of MapValue of Argument[-1];value
|
||||
org.springframework.util;MultiValueMap;true;getFirst;;;Element of MapValue of Argument[-1];ReturnValue;value
|
||||
org.springframework.util;MultiValueMap;true;set;;;Argument[0];MapKey of Argument[-1];value
|
||||
org.springframework.util;MultiValueMap;true;set;;;Argument[1];Element of MapValue of Argument[-1];value
|
||||
org.springframework.util;MultiValueMap;true;setAll;;;MapKey of Argument[0];MapKey of Argument[-1];value
|
||||
org.springframework.util;MultiValueMap;true;setAll;;;MapValue of Argument[0];Element of MapValue of Argument[-1];value
|
||||
org.springframework.util;MultiValueMap;true;toSingleValueMap;;;MapKey of Argument[-1];MapKey of ReturnValue;value
|
||||
org.springframework.util;MultiValueMap;true;toSingleValueMap;;;Element of MapValue of Argument[-1];MapValue of ReturnValue;value
|
||||
org.springframework.util;MultiValueMapAdapter;false;MultiValueMapAdapter;;;MapKey of Argument[0];MapKey of Argument[-1];value
|
||||
org.springframework.util;MultiValueMapAdapter;false;MultiValueMapAdapter;;;Element of MapValue of Argument[0];Element of MapValue of Argument[-1];value
|
||||
org.springframework.util;ObjectUtils;false;addObjectToArray;;;Argument[1];ArrayElement of ReturnValue;value
|
||||
org.springframework.util;ObjectUtils;false;getDisplayString;;;Argument[0];ReturnValue;taint
|
||||
org.springframework.util;ObjectUtils;false;identityToString;;;Argument[0];ReturnValue;taint
|
||||
org.springframework.util;ObjectUtils;false;nullSafeToString;;;Argument[0];ReturnValue;taint
|
||||
org.springframework.util;ObjectUtils;false;toObjectArray;;;Element of Argument[0];Element of ReturnValue;value
|
||||
org.springframework.util;ObjectUtils;false;unwrapOptional;;;Element of Argument[0];ReturnValue;value
|
||||
org.springframework.util;PropertiesPersister;true;load;;;Argument[1];Argument[0];taint
|
||||
org.springframework.util;PropertiesPersister;true;loadFromXml;;;Argument[1];Argument[0];taint
|
||||
org.springframework.util;PropertiesPersister;true;store;;;Argument[0];Argument[1];taint
|
||||
org.springframework.util;PropertiesPersister;true;store;;;Argument[2];Argument[1];taint
|
||||
org.springframework.util;PropertiesPersister;true;storeToXml;;;Argument[0];Argument[1];taint
|
||||
org.springframework.util;PropertiesPersister;true;storeToXml;;;Argument[2];Argument[1];taint
|
||||
org.springframework.util;PropertyPlaceholderHelper;false;PropertyPlaceholderHelper;;;Argument[0..1];Argument[-1];taint
|
||||
//org.springframework.util;PropertyPlaceholderHelper;false;parseStringValue;;;Argument[0];ReturnValue;taint
|
||||
org.springframework.util;PropertyPlaceholderHelper;false;replacePlaceholders;;;Argument[0];ReturnValue;taint
|
||||
//org.springframework.util;PropertyPlaceholderHelper;false;replacePlaceholders;(java.lang.String,java.util.Properties);;MapValue of Argument[1];ReturnValue;taint
|
||||
org.springframework.util;ResourceUtils;false;extractArchiveURL;;;Argument[0];ReturnValue;taint
|
||||
org.springframework.util;ResourceUtils;false;extractJarFileURL;;;Argument[0];ReturnValue;taint
|
||||
org.springframework.util;ResourceUtils;false;getFile;;;Argument[0];ReturnValue;taint
|
||||
org.springframework.util;ResourceUtils;false;getURL;;;Argument[0];ReturnValue;taint
|
||||
org.springframework.util;ResourceUtils;false;toURI;;;Argument[0];ReturnValue;taint
|
||||
org.springframework.util;RouteMatcher;true;combine;;;Argument[0..1];ReturnValue;taint
|
||||
org.springframework.util;RouteMatcher;true;matchAndExtract;;;Argument[0];MapKey of ReturnValue;taint
|
||||
org.springframework.util;RouteMatcher;true;matchAndExtract;;;Argument[1];MapValue of ReturnValue;taint
|
||||
org.springframework.util;RouteMatcher;true;parseRoute;;;Argument[0];ReturnValue;taint
|
||||
org.springframework.util;SerializationUtils;false;deserialize;;;Argument[0];ReturnValue;taint
|
||||
org.springframework.util;SerializationUtils;false;serialize;;;Argument[0];ReturnValue;taint
|
||||
org.springframework.util;StreamUtils;false;copy;(byte[],java.io.OutputStream);;Argument[0];Argument[1];taint
|
||||
org.springframework.util;StreamUtils;false;copy;(java.io.InputStream,java.io.OutputStream);;Argument[0];Argument[1];taint
|
||||
org.springframework.util;StreamUtils;false;copy;(java.lang.String,java.nio.charset.Charset,java.io.OutputStream);;Argument[0];Argument[2];taint
|
||||
org.springframework.util;StreamUtils;false;copyRange;;;Argument[0];Argument[1];taint
|
||||
org.springframework.util;StreamUtils;false;copyToByteArray;;;Argument[0];ReturnValue;taint
|
||||
org.springframework.util;StreamUtils;false;copyToString;;;Argument[0];ReturnValue;taint
|
||||
org.springframework.util;StringUtils;false;addStringToArray;;;ArrayElement of Argument[0];ArrayElement of ReturnValue;taint
|
||||
org.springframework.util;StringUtils;false;addStringToArray;;;Argument[1];ArrayElement of ReturnValue;taint
|
||||
org.springframework.util;StringUtils;false;applyRelativePath;;;Argument[0..1];ReturnValue;taint
|
||||
org.springframework.util;StringUtils;false;arrayToCommaDelimitedString;;;Argument[0];ReturnValue;taint
|
||||
org.springframework.util;StringUtils;false;arrayToDelimitedString;;;Argument[0..1];ReturnValue;taint
|
||||
org.springframework.util;StringUtils;false;capitalize;;;Argument[0];ReturnValue;taint
|
||||
org.springframework.util;StringUtils;false;cleanPath;;;Argument[0];ReturnValue;taint
|
||||
org.springframework.util;StringUtils;false;collectionToCommaDelimitedString;;;Argument[0];ReturnValue;taint
|
||||
org.springframework.util;StringUtils;false;collectionToDelimitedString;;;Argument[0..1];ReturnValue;taint
|
||||
org.springframework.util;StringUtils;false;collectionToDelimitedString;(java.util.Collection,java.lang.String,java.lang.String,java.lang.String);;Argument[2..3];ReturnValue;taint
|
||||
org.springframework.util;StringUtils;false;commaDelimitedListToSet;;;Argument[0];ReturnValue;taint
|
||||
org.springframework.util;StringUtils;false;commaDelimitedListToStringArray;;;Argument[0];ReturnValue;taint
|
||||
org.springframework.util;StringUtils;false;concatenateStringArrays;;;Argument[0..1];ReturnValue;taint
|
||||
org.springframework.util;StringUtils;false;delete;;;Argument[0];ReturnValue;taint
|
||||
org.springframework.util;StringUtils;false;deleteAny;;;Argument[0];ReturnValue;taint
|
||||
org.springframework.util;StringUtils;false;delimitedListToStringArray;;;Argument[0];ReturnValue;taint
|
||||
org.springframework.util;StringUtils;false;getFilename;;;Argument[0];ReturnValue;taint
|
||||
org.springframework.util;StringUtils;false;getFilenameExtension;;;Argument[0];ReturnValue;taint
|
||||
org.springframework.util;StringUtils;false;mergeStringArrays;;;Argument[0..1];ReturnValue;taint
|
||||
org.springframework.util;StringUtils;false;quote;;;Argument[0];ReturnValue;taint
|
||||
org.springframework.util;StringUtils;false;quoteIfString;;;Argument[0];ReturnValue;taint
|
||||
org.springframework.util;StringUtils;false;removeDuplicateStrings;;;Argument[0];ReturnValue;taint
|
||||
org.springframework.util;StringUtils;false;replace;;;Argument[0];ReturnValue;taint
|
||||
org.springframework.util;StringUtils;false;replace;;;Argument[2];ReturnValue;taint
|
||||
org.springframework.util;StringUtils;false;sortStringArray;;;Argument[0];ReturnValue;taint
|
||||
org.springframework.util;StringUtils;false;split;;;Argument[0];ReturnValue;taint
|
||||
org.springframework.util;StringUtils;false;splitArrayElementsIntoProperties;;;Argument[0];ReturnValue;taint
|
||||
org.springframework.util;StringUtils;false;stripFilenameExtension;;;Argument[0];ReturnValue;taint
|
||||
org.springframework.util;StringUtils;false;tokenizeToStringArray;;;Argument[0];ReturnValue;taint
|
||||
org.springframework.util;StringUtils;false;toStringArray;;;Argument[0];ReturnValue;taint
|
||||
org.springframework.util;StringUtils;false;trimAllWhitespace;;;Argument[0];ReturnValue;taint
|
||||
org.springframework.util;StringUtils;false;trimArrayElements;;;Argument[0];ReturnValue;taint
|
||||
org.springframework.util;StringUtils;false;trimLeadingCharacter;;;Argument[0];ReturnValue;taint
|
||||
org.springframework.util;StringUtils;false;trimLeadingWhitespace;;;Argument[0];ReturnValue;taint
|
||||
org.springframework.util;StringUtils;false;trimTrailingCharacter;;;Argument[0];ReturnValue;taint
|
||||
org.springframework.util;StringUtils;false;trimTrailingWhitespace;;;Argument[0];ReturnValue;taint
|
||||
org.springframework.util;StringUtils;false;trimWhitespace;;;Argument[0];ReturnValue;taint
|
||||
org.springframework.util;StringUtils;false;uncapitalize;;;Argument[0];ReturnValue;taint
|
||||
org.springframework.util;StringUtils;false;unqualify;;;Argument[0];ReturnValue;taint
|
||||
org.springframework.util;StringUtils;false;uriDecode;;;Argument[0];ReturnValue;taint
|
||||
org.springframework.util;StringValueResolver;false;resolveStringValue;;;Argument[0];ReturnValue;taint
|
||||
org.springframework.util;SystemPropertyUtils;false;resolvePlaceholders;;;Argument[0];ReturnValue;taint
|
||||
70
java/ql/test/library-tests/frameworks/spring/util/test.ql
Normal file
70
java/ql/test/library-tests/frameworks/spring/util/test.ql
Normal file
@@ -0,0 +1,70 @@
|
||||
import java
|
||||
import semmle.code.java.dataflow.DataFlow
|
||||
import semmle.code.java.dataflow.ExternalFlow
|
||||
import semmle.code.java.dataflow.TaintTracking
|
||||
import TestUtilities.InlineExpectationsTest
|
||||
|
||||
class SummaryModelTest extends SummaryModelCsv {
|
||||
override predicate row(string row) {
|
||||
row =
|
||||
[
|
||||
//"package;type;overrides;name;signature;ext;inputspec;outputspec;kind",
|
||||
"generatedtest;Test;false;newWithArrayElement;;;Argument[0];ArrayElement of ReturnValue;value",
|
||||
"generatedtest;Test;false;getArrayElement;;;ArrayElement of Argument[0];ReturnValue;value",
|
||||
"generatedtest;Test;false;getElement;;;Element of Argument[0];ReturnValue;value",
|
||||
"generatedtest;Test;false;newWithElement;;;Argument[0];Element of ReturnValue;value",
|
||||
"generatedtest;Test;false;getMapKey;;;MapKey of Argument[0];ReturnValue;value",
|
||||
"generatedtest;Test;false;newWithMapKey;;;Argument[0];MapKey of ReturnValue;value",
|
||||
"generatedtest;Test;false;newWithMapValue;;;Argument[0];MapValue of ReturnValue;value",
|
||||
"generatedtest;Test;false;getMapValue;;;MapValue of Argument[0];ReturnValue;value"
|
||||
]
|
||||
}
|
||||
}
|
||||
|
||||
class ValueFlowConf extends DataFlow::Configuration {
|
||||
ValueFlowConf() { this = "qltest:valueFlowConf" }
|
||||
|
||||
override predicate isSource(DataFlow::Node n) {
|
||||
n.asExpr().(MethodAccess).getMethod().hasName("source")
|
||||
}
|
||||
|
||||
override predicate isSink(DataFlow::Node n) {
|
||||
n.asExpr().(Argument).getCall().getCallee().hasName("sink")
|
||||
}
|
||||
}
|
||||
|
||||
class TaintFlowConf extends TaintTracking::Configuration {
|
||||
TaintFlowConf() { this = "qltest:taintFlowConf" }
|
||||
|
||||
override predicate isSource(DataFlow::Node n) {
|
||||
n.asExpr().(MethodAccess).getMethod().hasName("source")
|
||||
}
|
||||
|
||||
override predicate isSink(DataFlow::Node n) {
|
||||
n.asExpr().(Argument).getCall().getCallee().hasName("sink")
|
||||
}
|
||||
}
|
||||
|
||||
class HasFlowTest extends InlineExpectationsTest {
|
||||
HasFlowTest() { this = "HasFlowTest" }
|
||||
|
||||
override string getARelevantTag() { result = ["hasValueFlow", "hasTaintFlow"] }
|
||||
|
||||
override predicate hasActualResult(Location location, string element, string tag, string value) {
|
||||
tag = "hasValueFlow" and
|
||||
exists(DataFlow::Node src, DataFlow::Node sink, ValueFlowConf conf | conf.hasFlow(src, sink) |
|
||||
sink.getLocation() = location and
|
||||
element = sink.toString() and
|
||||
value = ""
|
||||
)
|
||||
or
|
||||
tag = "hasTaintFlow" and
|
||||
exists(DataFlow::Node src, DataFlow::Node sink, TaintFlowConf conf |
|
||||
conf.hasFlow(src, sink) and not any(ValueFlowConf c).hasFlow(src, sink)
|
||||
|
|
||||
sink.getLocation() = location and
|
||||
element = sink.toString() and
|
||||
value = ""
|
||||
)
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user