hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-23 15:55:18 +02:00
Code Issues Packages Projects Releases Wiki Activity

Ruby: Add data flow tests that illustrate problems with flow into SSA phi nodes

Browse Source
This commit is contained in:
Tom Hvitved
2022-11-01 16:31:08 +01:00
parent 7a8c9e7644
commit a191edfbd5
3 changed files with 65 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

22
ruby/ql/test/library-tests/dataflow/ssa-flow/ssa-flow.expected Normal file
View File

@@ -0,0 +1,22 @@
failures
| ssa_flow.rb:16:16:16:33 | # $ hasValueFlow=1 | Missing result:hasValueFlow=1 |
| ssa_flow.rb:29:10:29:13 | ...[...] | Unexpected result: hasValueFlow=2 |
edges
| ssa_flow.rb:24:9:24:9 | [post] a [element 0] : | ssa_flow.rb:29:10:29:10 | a [element 0] : |
| ssa_flow.rb:24:9:24:9 | [post] a [element 0] : | ssa_flow.rb:29:10:29:10 | a [element 0] : |
| ssa_flow.rb:24:16:24:23 | call to taint : | ssa_flow.rb:24:9:24:9 | [post] a [element 0] : |
| ssa_flow.rb:24:16:24:23 | call to taint : | ssa_flow.rb:24:9:24:9 | [post] a [element 0] : |
| ssa_flow.rb:29:10:29:10 | a [element 0] : | ssa_flow.rb:29:10:29:13 | ...[...] |
| ssa_flow.rb:29:10:29:10 | a [element 0] : | ssa_flow.rb:29:10:29:13 | ...[...] |
nodes
| ssa_flow.rb:24:9:24:9 | [post] a [element 0] : | semmle.label | [post] a [element 0] : |
| ssa_flow.rb:24:9:24:9 | [post] a [element 0] : | semmle.label | [post] a [element 0] : |
| ssa_flow.rb:24:16:24:23 | call to taint : | semmle.label | call to taint : |
| ssa_flow.rb:24:16:24:23 | call to taint : | semmle.label | call to taint : |
| ssa_flow.rb:29:10:29:10 | a [element 0] : | semmle.label | a [element 0] : |
| ssa_flow.rb:29:10:29:10 | a [element 0] : | semmle.label | a [element 0] : |
| ssa_flow.rb:29:10:29:13 | ...[...] | semmle.label | ...[...] |
| ssa_flow.rb:29:10:29:13 | ...[...] | semmle.label | ...[...] |
subpaths
#select
| ssa_flow.rb:29:10:29:13 | ...[...] | ssa_flow.rb:24:16:24:23 | call to taint : | ssa_flow.rb:29:10:29:13 | ...[...] | $@ | ssa_flow.rb:24:16:24:23 | call to taint : | call to taint : |

11
ruby/ql/test/library-tests/dataflow/ssa-flow/ssa-flow.ql Normal file
View File

@@ -0,0 +1,11 @@
/**
* @kind path-problem
*/
import codeql.ruby.AST
import TestUtilities.InlineFlowTest
import PathGraph
from DataFlow::PathNode source, DataFlow::PathNode sink, DefaultValueFlowConf conf
where conf.hasFlowPath(source, sink)
select sink, source, sink, "$@", source, source.toString()

32
ruby/ql/test/library-tests/dataflow/ssa-flow/ssa_flow.rb Normal file
View File

@@ -0,0 +1,32 @@
def taint x
x
end
def sink x
puts "SINK: #{x}"
end
def m1
a = Array.new
if rand() > 0 then
a[0] = taint(1)
else
a = nil
end
sink(a[0]) # $ hasValueFlow=1
end
m1
def m2
a = Array.new
if rand() > 0 then
a[0] = taint(2)
a.clear
else
a = nil
end
sink(a[0])
end
m2