hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-02 04:05:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

C++: Make the new SQL abstract classes extend 'Function' instead. This is more in line with how we model RemoteFlowFunction.

Browse Source
This commit is contained in:
Mathias Vorreiter Pedersen
2021-06-23 11:31:28 +02:00
parent 90fe5c5aca
commit 90633b9ce1
9 changed files with 167 additions and 166 deletions
Download Patch File Download Diff File Expand all files Collapse all files

36
cpp/ql/test/query-tests/Security/CWE/CWE-089/SqlTainted/SqlTainted.expected
View File

@@ -5,14 +5,14 @@ edges
| test.c:15:20:15:23 | argv | test.c:21:18:21:23 | query1 |
| test.c:15:20:15:23 | argv | test.c:21:18:21:23 | query1 indirection |
| test.c:15:20:15:23 | argv | test.c:21:18:21:23 | query1 indirection |
| test.cpp:44:27:44:30 | argv | test.cpp:44:27:44:33 | (const char *)... |
| test.cpp:44:27:44:30 | argv | test.cpp:44:27:44:33 | (const char *)... |
| test.cpp:44:27:44:30 | argv | test.cpp:44:27:44:33 | access to array |
| test.cpp:44:27:44:30 | argv | test.cpp:44:27:44:33 | access to array |
| test.cpp:44:27:44:30 | argv | test.cpp:44:27:44:33 | access to array |
| test.cpp:44:27:44:30 | argv | test.cpp:44:27:44:33 | access to array |
| test.cpp:44:27:44:30 | argv | test.cpp:44:27:44:33 | access to array indirection |
| test.cpp:44:27:44:30 | argv | test.cpp:44:27:44:33 | access to array indirection |
| test.cpp:43:27:43:30 | argv | test.cpp:43:27:43:33 | (const char *)... |
| test.cpp:43:27:43:30 | argv | test.cpp:43:27:43:33 | (const char *)... |
| test.cpp:43:27:43:30 | argv | test.cpp:43:27:43:33 | access to array |
| test.cpp:43:27:43:30 | argv | test.cpp:43:27:43:33 | access to array |
| test.cpp:43:27:43:30 | argv | test.cpp:43:27:43:33 | access to array |
| test.cpp:43:27:43:30 | argv | test.cpp:43:27:43:33 | access to array |
| test.cpp:43:27:43:30 | argv | test.cpp:43:27:43:33 | access to array indirection |
| test.cpp:43:27:43:30 | argv | test.cpp:43:27:43:33 | access to array indirection |
nodes
| test.c:15:20:15:23 | argv | semmle.label | argv |
| test.c:15:20:15:23 | argv | semmle.label | argv |
@@ -21,15 +21,15 @@ nodes
| test.c:21:18:21:23 | query1 | semmle.label | query1 |
| test.c:21:18:21:23 | query1 indirection | semmle.label | query1 indirection |
| test.c:21:18:21:23 | query1 indirection | semmle.label | query1 indirection |
| test.cpp:44:27:44:30 | argv | semmle.label | argv |
| test.cpp:44:27:44:30 | argv | semmle.label | argv |
| test.cpp:44:27:44:33 | (const char *)... | semmle.label | (const char *)... |
| test.cpp:44:27:44:33 | (const char *)... | semmle.label | (const char *)... |
| test.cpp:44:27:44:33 | access to array | semmle.label | access to array |
| test.cpp:44:27:44:33 | access to array | semmle.label | access to array |
| test.cpp:44:27:44:33 | access to array | semmle.label | access to array |
| test.cpp:44:27:44:33 | access to array indirection | semmle.label | access to array indirection |
| test.cpp:44:27:44:33 | access to array indirection | semmle.label | access to array indirection |
| test.cpp:43:27:43:30 | argv | semmle.label | argv |
| test.cpp:43:27:43:30 | argv | semmle.label | argv |
| test.cpp:43:27:43:33 | (const char *)... | semmle.label | (const char *)... |
| test.cpp:43:27:43:33 | (const char *)... | semmle.label | (const char *)... |
| test.cpp:43:27:43:33 | access to array | semmle.label | access to array |
| test.cpp:43:27:43:33 | access to array | semmle.label | access to array |
| test.cpp:43:27:43:33 | access to array | semmle.label | access to array |
| test.cpp:43:27:43:33 | access to array indirection | semmle.label | access to array indirection |
| test.cpp:43:27:43:33 | access to array indirection | semmle.label | access to array indirection |
#select
| test.c:21:18:21:23 | query1 | test.c:15:20:15:23 | argv | test.c:21:18:21:23 | query1 | This argument to a SQL query function is derived from $@ and then passed to mysql_query(sqlArg) | test.c:15:20:15:23 | argv | user input (argv) |
| test.cpp:44:27:44:33 | access to array | test.cpp:44:27:44:30 | argv | test.cpp:44:27:44:33 | access to array | This argument to a SQL query function is derived from $@ and then passed to pqxx::work::exec1((unnamed parameter 0)) | test.cpp:44:27:44:30 | argv | user input (argv) |
| test.cpp:43:27:43:33 | access to array | test.cpp:43:27:43:30 | argv | test.cpp:43:27:43:33 | access to array | This argument to a SQL query function is derived from $@ and then passed to pqxx::work::exec1((unnamed parameter 0)) | test.cpp:43:27:43:30 | argv | user input (argv) |