hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-04 05:05:12 +02:00
Code Issues Packages Projects Releases Wiki Activity

Python: Shared taint tracking: Handle string concat + subcript

Browse Source
This commit is contained in:
Rasmus Wriedt Larsen
2020-08-20 17:07:10 +02:00
parent 61f89ca3c3
commit a77f118b62
2 changed files with 42 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
python/ql/test/experimental/dataflow/tainttracking/string/TestTaint.expected
View File

@@ -1,10 +1,10 @@
| test.py:24 | ok | str_operations | ts |
| test.py:25 | fail | str_operations | BinaryExpr |
| test.py:26 | fail | str_operations | BinaryExpr |
| test.py:27 | fail | str_operations | ts[Slice] |
| test.py:28 | fail | str_operations | ts[Slice] |
| test.py:29 | fail | str_operations | ts[Slice] |
| test.py:30 | fail | str_operations | ts[0] |
| test.py:25 | ok | str_operations | BinaryExpr |
| test.py:26 | ok | str_operations | BinaryExpr |
| test.py:27 | ok | str_operations | ts[Slice] |
| test.py:28 | ok | str_operations | ts[Slice] |
| test.py:29 | ok | str_operations | ts[Slice] |
| test.py:30 | ok | str_operations | ts[0] |
| test.py:31 | fail | str_operations | str(..) |
| test.py:40 | fail | str_methods | ts.capitalize() |
| test.py:41 | fail | str_methods | ts.casefold() |