hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-17 01:03:14 +01:00
Code Issues Packages Projects Releases Wiki Activity

C++: Split off stringstream.cpp.

Browse Source
This commit is contained in:
Geoffrey White
2020-08-13 18:17:02 +01:00
parent 49d2f66ddb
commit a839f1fae5
6 changed files with 328 additions and 320 deletions
Download Patch File Download Diff File Expand all files Collapse all files

448
cpp/ql/test/library-tests/dataflow/taint-tests/localTaint.expected
View File

@@ -308,230 +308,230 @@
| movableclass.cpp:65:13:65:18 | call to source | movableclass.cpp:65:13:65:20 | call to MyMovableClass | TAINT |
| movableclass.cpp:65:13:65:20 | call to MyMovableClass | movableclass.cpp:65:8:65:9 | ref arg s3 | TAINT |
| movableclass.cpp:65:13:65:20 | call to MyMovableClass | movableclass.cpp:65:11:65:11 | call to operator= | TAINT |
| string.cpp:25:12:25:17 | call to source | string.cpp:29:7:29:7 | a | |
| string.cpp:26:16:26:20 | 123 | string.cpp:26:16:26:21 | call to basic_string | TAINT |
| string.cpp:26:16:26:21 | call to basic_string | string.cpp:30:7:30:7 | b | |
| string.cpp:26:16:26:21 | call to basic_string | string.cpp:32:7:32:7 | b | |
| string.cpp:27:16:27:21 | call to source | string.cpp:27:16:27:24 | call to basic_string | TAINT |
| string.cpp:27:16:27:24 | call to basic_string | string.cpp:31:7:31:7 | c | |
| string.cpp:27:16:27:24 | call to basic_string | string.cpp:33:7:33:7 | c | |
| string.cpp:32:7:32:7 | b | string.cpp:32:9:32:13 | call to c_str | TAINT |
| string.cpp:33:7:33:7 | c | string.cpp:33:9:33:13 | call to c_str | TAINT |
| string.cpp:38:20:38:22 | call to basic_stringstream | string.cpp:41:2:41:4 | ss1 | |
| string.cpp:38:20:38:22 | call to basic_stringstream | string.cpp:47:7:47:9 | ss1 | |
| string.cpp:38:20:38:22 | call to basic_stringstream | string.cpp:52:7:52:9 | ss1 | |
| string.cpp:38:25:38:27 | call to basic_stringstream | string.cpp:42:2:42:4 | ss2 | |
| string.cpp:38:25:38:27 | call to basic_stringstream | string.cpp:48:7:48:9 | ss2 | |
| string.cpp:38:25:38:27 | call to basic_stringstream | string.cpp:53:7:53:9 | ss2 | |
| string.cpp:38:30:38:32 | call to basic_stringstream | string.cpp:43:2:43:4 | ss3 | |
| string.cpp:38:30:38:32 | call to basic_stringstream | string.cpp:49:7:49:9 | ss3 | |
| string.cpp:38:30:38:32 | call to basic_stringstream | string.cpp:54:7:54:9 | ss3 | |
| string.cpp:38:35:38:37 | call to basic_stringstream | string.cpp:44:2:44:4 | ss4 | |
| string.cpp:38:35:38:37 | call to basic_stringstream | string.cpp:50:7:50:9 | ss4 | |
| string.cpp:38:35:38:37 | call to basic_stringstream | string.cpp:55:7:55:9 | ss4 | |
| string.cpp:38:40:38:42 | call to basic_stringstream | string.cpp:45:2:45:4 | ss5 | |
| string.cpp:38:40:38:42 | call to basic_stringstream | string.cpp:51:7:51:9 | ss5 | |
| string.cpp:38:40:38:42 | call to basic_stringstream | string.cpp:56:7:56:9 | ss5 | |
| string.cpp:39:16:39:21 | call to source | string.cpp:39:16:39:24 | call to basic_string | TAINT |
| string.cpp:39:16:39:24 | call to basic_string | string.cpp:45:9:45:9 | t | |
| string.cpp:41:2:41:4 | ref arg ss1 | string.cpp:47:7:47:9 | ss1 | |
| string.cpp:41:2:41:4 | ref arg ss1 | string.cpp:52:7:52:9 | ss1 | |
| string.cpp:42:2:42:4 | ref arg ss2 | string.cpp:48:7:48:9 | ss2 | |
| string.cpp:42:2:42:4 | ref arg ss2 | string.cpp:53:7:53:9 | ss2 | |
| string.cpp:43:2:43:4 | ref arg ss3 | string.cpp:49:7:49:9 | ss3 | |
| string.cpp:43:2:43:4 | ref arg ss3 | string.cpp:54:7:54:9 | ss3 | |
| string.cpp:44:2:44:4 | ref arg ss4 | string.cpp:50:7:50:9 | ss4 | |
| string.cpp:44:2:44:4 | ref arg ss4 | string.cpp:55:7:55:9 | ss4 | |
| string.cpp:45:2:45:4 | ref arg ss5 | string.cpp:51:7:51:9 | ss5 | |
| string.cpp:45:2:45:4 | ref arg ss5 | string.cpp:56:7:56:9 | ss5 | |
| string.cpp:59:32:59:37 | source | string.cpp:64:9:64:14 | source | |
| string.cpp:61:20:61:22 | call to basic_stringstream | string.cpp:63:2:63:4 | ss1 | |
| string.cpp:61:20:61:22 | call to basic_stringstream | string.cpp:66:7:66:9 | ss1 | |
| string.cpp:61:20:61:22 | call to basic_stringstream | string.cpp:68:7:68:9 | ss1 | |
| string.cpp:61:25:61:27 | call to basic_stringstream | string.cpp:64:2:64:4 | ss2 | |
| string.cpp:61:25:61:27 | call to basic_stringstream | string.cpp:67:7:67:9 | ss2 | |
| string.cpp:61:25:61:27 | call to basic_stringstream | string.cpp:69:7:69:9 | ss2 | |
| string.cpp:63:2:63:4 | ref arg ss1 | string.cpp:66:7:66:9 | ss1 | |
| string.cpp:63:2:63:4 | ref arg ss1 | string.cpp:68:7:68:9 | ss1 | |
| string.cpp:64:2:64:4 | ref arg ss2 | string.cpp:67:7:67:9 | ss2 | |
| string.cpp:64:2:64:4 | ref arg ss2 | string.cpp:69:7:69:9 | ss2 | |
| string.cpp:74:16:74:28 | call to basic_string | string.cpp:75:7:75:11 | path1 | |
| string.cpp:74:17:74:26 | call to user_input | string.cpp:74:16:74:28 | call to basic_string | TAINT |
| string.cpp:75:7:75:11 | path1 | string.cpp:75:13:75:17 | call to c_str | TAINT |
| string.cpp:78:10:78:19 | call to user_input | string.cpp:78:10:78:21 | call to basic_string | TAINT |
| string.cpp:78:10:78:21 | call to basic_string | string.cpp:78:2:78:21 | ... = ... | |
| string.cpp:78:10:78:21 | call to basic_string | string.cpp:79:7:79:11 | path2 | |
| string.cpp:79:7:79:11 | path2 | string.cpp:79:13:79:17 | call to c_str | TAINT |
| string.cpp:81:15:81:24 | call to user_input | string.cpp:81:15:81:27 | call to basic_string | TAINT |
| string.cpp:81:15:81:27 | call to basic_string | string.cpp:82:7:82:11 | path3 | |
| string.cpp:82:7:82:11 | path3 | string.cpp:82:13:82:17 | call to c_str | TAINT |
| string.cpp:87:19:87:24 | call to source | string.cpp:90:17:90:18 | cs | |
| string.cpp:87:19:87:24 | call to source | string.cpp:92:7:92:8 | cs | |
| string.cpp:90:17:90:18 | cs | string.cpp:90:17:90:19 | call to basic_string | TAINT |
| string.cpp:90:17:90:19 | call to basic_string | string.cpp:93:7:93:8 | ss | |
| string.cpp:98:19:98:24 | call to source | string.cpp:101:17:101:18 | cs | |
| string.cpp:101:17:101:18 | cs | string.cpp:101:17:101:19 | call to basic_string | TAINT |
| string.cpp:101:17:101:19 | call to basic_string | string.cpp:104:7:104:8 | ss | |
| string.cpp:101:17:101:19 | call to basic_string | string.cpp:107:7:107:8 | ss | |
| string.cpp:104:7:104:8 | ss | string.cpp:104:10:104:14 | call to c_str | TAINT |
| string.cpp:104:10:104:14 | call to c_str | string.cpp:104:2:104:16 | ... = ... | |
| string.cpp:104:10:104:14 | call to c_str | string.cpp:106:7:106:8 | cs | |
| string.cpp:113:18:113:24 | hello | string.cpp:113:18:113:25 | call to basic_string | TAINT |
| string.cpp:113:18:113:25 | call to basic_string | string.cpp:118:8:118:9 | s1 | |
| string.cpp:114:19:114:26 | call to basic_string | string.cpp:119:8:119:9 | s2 | |
| string.cpp:114:20:114:26 | hello | string.cpp:114:19:114:26 | call to basic_string | TAINT |
| string.cpp:116:8:116:14 | call to basic_string | string.cpp:116:3:116:14 | ... = ... | |
| string.cpp:116:8:116:14 | call to basic_string | string.cpp:120:8:120:9 | s3 | |
| string.cpp:116:8:116:14 | hello | string.cpp:116:8:116:14 | call to basic_string | TAINT |
| string.cpp:124:18:124:23 | call to source | string.cpp:124:18:124:26 | call to basic_string | TAINT |
| string.cpp:124:18:124:26 | call to basic_string | string.cpp:129:8:129:9 | s1 | |
| string.cpp:125:19:125:27 | call to basic_string | string.cpp:130:8:130:9 | s2 | |
| string.cpp:125:20:125:25 | call to source | string.cpp:125:19:125:27 | call to basic_string | TAINT |
| string.cpp:127:8:127:13 | call to source | string.cpp:127:8:127:15 | call to basic_string | TAINT |
| string.cpp:127:8:127:15 | call to basic_string | string.cpp:127:3:127:15 | ... = ... | |
| string.cpp:127:8:127:15 | call to basic_string | string.cpp:131:8:131:9 | s3 | |
| string.cpp:135:15:135:16 | call to basic_string | string.cpp:136:20:136:21 | s1 | |
| string.cpp:135:15:135:16 | call to basic_string | string.cpp:138:8:138:9 | s1 | |
| string.cpp:135:15:135:16 | call to basic_string | string.cpp:140:8:140:9 | s1 | |
| string.cpp:136:20:136:21 | s1 | string.cpp:141:8:141:9 | s2 | |
| string.cpp:138:8:138:9 | s1 | string.cpp:138:3:138:9 | ... = ... | |
| string.cpp:138:8:138:9 | s1 | string.cpp:142:8:142:9 | s3 | |
| string.cpp:146:19:146:40 | call to basic_string | string.cpp:150:8:150:9 | s1 | |
| string.cpp:146:32:146:37 | call to source | string.cpp:146:19:146:40 | call to basic_string | TAINT |
| string.cpp:148:8:148:28 | call to basic_string | string.cpp:148:3:148:28 | ... = ... | |
| string.cpp:148:8:148:28 | call to basic_string | string.cpp:151:8:151:9 | s2 | |
| string.cpp:148:20:148:25 | call to source | string.cpp:148:8:148:28 | call to basic_string | TAINT |
| string.cpp:156:16:156:21 | call to source | string.cpp:156:16:156:24 | call to basic_string | TAINT |
| string.cpp:156:16:156:24 | call to basic_string | string.cpp:157:15:157:15 | s | |
| string.cpp:156:16:156:24 | call to basic_string | string.cpp:161:33:161:33 | s | |
| string.cpp:156:16:156:24 | call to basic_string | string.cpp:161:50:161:50 | s | |
| string.cpp:156:16:156:24 | call to basic_string | string.cpp:165:16:165:16 | s | |
| string.cpp:157:15:157:15 | call to begin | string.cpp:157:15:157:15 | (__begin) | |
| string.cpp:157:15:157:15 | call to begin | string.cpp:157:15:157:15 | (__begin) | |
| string.cpp:157:15:157:15 | call to begin | string.cpp:157:15:157:15 | (__begin) | |
| string.cpp:157:15:157:15 | call to end | string.cpp:157:15:157:15 | (__end) | |
| string.cpp:157:15:157:15 | call to operator* | string.cpp:158:8:158:8 | c | |
| string.cpp:157:15:157:15 | ref arg (__begin) | string.cpp:157:15:157:15 | (__begin) | |
| string.cpp:157:15:157:15 | ref arg (__begin) | string.cpp:157:15:157:15 | (__begin) | |
| string.cpp:157:15:157:15 | ref arg (__begin) | string.cpp:157:15:157:15 | (__begin) | |
| string.cpp:157:15:157:15 | ref arg (__range) | string.cpp:157:15:157:15 | (__range) | |
| string.cpp:157:15:157:15 | s | string.cpp:157:15:157:15 | (__range) | |
| string.cpp:157:15:157:15 | s | string.cpp:157:15:157:15 | (__range) | |
| string.cpp:157:15:157:15 | s | string.cpp:157:15:157:15 | call to operator* | TAINT |
| string.cpp:161:33:161:33 | ref arg s | string.cpp:161:50:161:50 | s | |
| string.cpp:161:33:161:33 | ref arg s | string.cpp:165:16:165:16 | s | |
| string.cpp:161:35:161:39 | call to begin | string.cpp:161:44:161:45 | it | |
| string.cpp:161:35:161:39 | call to begin | string.cpp:161:61:161:62 | it | |
| string.cpp:161:35:161:39 | call to begin | string.cpp:162:9:162:10 | it | |
| string.cpp:161:50:161:50 | ref arg s | string.cpp:161:50:161:50 | s | |
| string.cpp:161:50:161:50 | ref arg s | string.cpp:165:16:165:16 | s | |
| string.cpp:161:61:161:62 | ref arg it | string.cpp:161:44:161:45 | it | |
| string.cpp:161:61:161:62 | ref arg it | string.cpp:161:61:161:62 | it | |
| string.cpp:161:61:161:62 | ref arg it | string.cpp:162:9:162:10 | it | |
| string.cpp:165:16:165:16 | call to begin | string.cpp:165:16:165:16 | (__begin) | |
| string.cpp:165:16:165:16 | call to begin | string.cpp:165:16:165:16 | (__begin) | |
| string.cpp:165:16:165:16 | call to begin | string.cpp:165:16:165:16 | (__begin) | |
| string.cpp:165:16:165:16 | call to end | string.cpp:165:16:165:16 | (__end) | |
| string.cpp:165:16:165:16 | call to operator* | string.cpp:166:8:166:8 | c | |
| string.cpp:165:16:165:16 | ref arg (__begin) | string.cpp:165:16:165:16 | (__begin) | |
| string.cpp:165:16:165:16 | ref arg (__begin) | string.cpp:165:16:165:16 | (__begin) | |
| string.cpp:165:16:165:16 | ref arg (__begin) | string.cpp:165:16:165:16 | (__begin) | |
| string.cpp:165:16:165:16 | ref arg (__range) | string.cpp:165:16:165:16 | (__range) | |
| string.cpp:165:16:165:16 | s | string.cpp:165:16:165:16 | (__range) | |
| string.cpp:165:16:165:16 | s | string.cpp:165:16:165:16 | (__range) | |
| string.cpp:165:16:165:16 | s | string.cpp:165:16:165:16 | call to operator* | TAINT |
| string.cpp:169:28:169:33 | call to source | string.cpp:169:28:169:36 | call to basic_string | TAINT |
| string.cpp:169:28:169:36 | call to basic_string | string.cpp:170:22:170:28 | const_s | |
| string.cpp:170:22:170:22 | call to begin | string.cpp:170:22:170:22 | (__begin) | |
| string.cpp:170:22:170:22 | call to begin | string.cpp:170:22:170:22 | (__begin) | |
| string.cpp:170:22:170:22 | call to begin | string.cpp:170:22:170:22 | (__begin) | |
| string.cpp:170:22:170:22 | call to end | string.cpp:170:22:170:22 | (__end) | |
| string.cpp:170:22:170:22 | call to operator* | string.cpp:171:8:171:8 | c | |
| string.cpp:170:22:170:22 | ref arg (__begin) | string.cpp:170:22:170:22 | (__begin) | |
| string.cpp:170:22:170:22 | ref arg (__begin) | string.cpp:170:22:170:22 | (__begin) | |
| string.cpp:170:22:170:22 | ref arg (__begin) | string.cpp:170:22:170:22 | (__begin) | |
| string.cpp:170:22:170:28 | const_s | string.cpp:170:22:170:22 | (__range) | |
| string.cpp:170:22:170:28 | const_s | string.cpp:170:22:170:22 | (__range) | |
| string.cpp:170:22:170:28 | const_s | string.cpp:170:22:170:22 | call to operator* | TAINT |
| string.cpp:177:18:177:24 | hello | string.cpp:177:18:177:25 | call to basic_string | TAINT |
| string.cpp:177:18:177:25 | call to basic_string | string.cpp:180:8:180:9 | s1 | |
| string.cpp:177:18:177:25 | call to basic_string | string.cpp:180:13:180:14 | s1 | |
| string.cpp:177:18:177:25 | call to basic_string | string.cpp:181:8:181:9 | s1 | |
| string.cpp:177:18:177:25 | call to basic_string | string.cpp:182:13:182:14 | s1 | |
| string.cpp:177:18:177:25 | call to basic_string | string.cpp:185:8:185:9 | s1 | |
| string.cpp:177:18:177:25 | call to basic_string | string.cpp:186:8:186:9 | s1 | |
| string.cpp:178:18:178:23 | call to source | string.cpp:178:18:178:26 | call to basic_string | TAINT |
| string.cpp:178:18:178:26 | call to basic_string | string.cpp:181:13:181:14 | s2 | |
| string.cpp:178:18:178:26 | call to basic_string | string.cpp:182:8:182:9 | s2 | |
| string.cpp:178:18:178:26 | call to basic_string | string.cpp:183:8:183:9 | s2 | |
| string.cpp:178:18:178:26 | call to basic_string | string.cpp:183:13:183:14 | s2 | |
| string.cpp:180:8:180:9 | s1 | string.cpp:180:11:180:11 | call to operator+ | TAINT |
| string.cpp:180:13:180:14 | s1 | string.cpp:180:11:180:11 | call to operator+ | TAINT |
| string.cpp:181:8:181:9 | s1 | string.cpp:181:11:181:11 | call to operator+ | TAINT |
| string.cpp:181:13:181:14 | s2 | string.cpp:181:11:181:11 | call to operator+ | TAINT |
| string.cpp:182:8:182:9 | s2 | string.cpp:182:11:182:11 | call to operator+ | TAINT |
| string.cpp:182:13:182:14 | s1 | string.cpp:182:11:182:11 | call to operator+ | TAINT |
| string.cpp:183:8:183:9 | s2 | string.cpp:183:11:183:11 | call to operator+ | TAINT |
| string.cpp:183:13:183:14 | s2 | string.cpp:183:11:183:11 | call to operator+ | TAINT |
| string.cpp:185:8:185:9 | s1 | string.cpp:185:11:185:11 | call to operator+ | TAINT |
| string.cpp:185:13:185:20 | world | string.cpp:185:11:185:11 | call to operator+ | TAINT |
| string.cpp:186:8:186:9 | s1 | string.cpp:186:11:186:11 | call to operator+ | TAINT |
| string.cpp:186:13:186:18 | call to source | string.cpp:186:11:186:11 | call to operator+ | TAINT |
| string.cpp:190:18:190:22 | abc | string.cpp:190:18:190:23 | call to basic_string | TAINT |
| string.cpp:190:18:190:23 | call to basic_string | string.cpp:194:8:194:9 | s3 | |
| string.cpp:190:18:190:23 | call to basic_string | string.cpp:197:8:197:9 | s3 | |
| string.cpp:190:18:190:23 | call to basic_string | string.cpp:201:8:201:9 | s3 | |
| string.cpp:190:18:190:23 | call to basic_string | string.cpp:206:8:206:9 | s3 | |
| string.cpp:190:18:190:23 | call to basic_string | string.cpp:210:8:210:9 | s3 | |
| string.cpp:191:18:191:23 | call to source | string.cpp:191:18:191:26 | call to basic_string | TAINT |
| string.cpp:191:18:191:26 | call to basic_string | string.cpp:194:13:194:14 | s4 | |
| string.cpp:191:18:191:26 | call to basic_string | string.cpp:198:9:198:10 | s4 | |
| string.cpp:191:18:191:26 | call to basic_string | string.cpp:207:13:207:14 | s4 | |
| string.cpp:194:8:194:9 | s3 | string.cpp:194:11:194:11 | call to operator+ | TAINT |
| string.cpp:194:11:194:11 | call to operator+ | string.cpp:194:3:194:14 | ... = ... | |
| string.cpp:194:11:194:11 | call to operator+ | string.cpp:195:8:195:9 | s5 | |
| string.cpp:194:13:194:14 | s4 | string.cpp:194:11:194:11 | call to operator+ | TAINT |
| string.cpp:197:8:197:9 | s3 | string.cpp:197:3:197:9 | ... = ... | |
| string.cpp:197:8:197:9 | s3 | string.cpp:198:3:198:4 | s6 | |
| string.cpp:197:8:197:9 | s3 | string.cpp:199:8:199:9 | s6 | |
| string.cpp:198:3:198:4 | ref arg s6 | string.cpp:199:8:199:9 | s6 | |
| string.cpp:198:9:198:10 | s4 | string.cpp:198:3:198:4 | ref arg s6 | TAINT |
| string.cpp:198:9:198:10 | s4 | string.cpp:198:6:198:6 | call to operator+= | TAINT |
| string.cpp:201:8:201:9 | s3 | string.cpp:201:3:201:9 | ... = ... | |
| string.cpp:201:8:201:9 | s3 | string.cpp:202:3:202:4 | s7 | |
| string.cpp:201:8:201:9 | s3 | string.cpp:203:3:203:4 | s7 | |
| string.cpp:201:8:201:9 | s3 | string.cpp:204:8:204:9 | s7 | |
| string.cpp:202:3:202:4 | ref arg s7 | string.cpp:203:3:203:4 | s7 | |
| string.cpp:202:3:202:4 | ref arg s7 | string.cpp:204:8:204:9 | s7 | |
| string.cpp:202:9:202:14 | call to source | string.cpp:202:3:202:4 | ref arg s7 | TAINT |
| string.cpp:202:9:202:14 | call to source | string.cpp:202:6:202:6 | call to operator+= | TAINT |
| string.cpp:203:3:203:4 | ref arg s7 | string.cpp:204:8:204:9 | s7 | |
| string.cpp:203:9:203:11 | | string.cpp:203:3:203:4 | ref arg s7 | TAINT |
| string.cpp:203:9:203:11 | | string.cpp:203:6:203:6 | call to operator+= | TAINT |
| string.cpp:206:8:206:9 | s3 | string.cpp:206:3:206:9 | ... = ... | |
| string.cpp:206:8:206:9 | s3 | string.cpp:207:3:207:4 | s8 | |
| string.cpp:206:8:206:9 | s3 | string.cpp:208:8:208:9 | s8 | |
| string.cpp:207:3:207:4 | ref arg s8 | string.cpp:208:8:208:9 | s8 | |
| string.cpp:207:13:207:14 | s4 | string.cpp:207:3:207:4 | ref arg s8 | TAINT |
| string.cpp:207:13:207:14 | s4 | string.cpp:207:6:207:11 | call to append | TAINT |
| string.cpp:210:8:210:9 | s3 | string.cpp:210:3:210:9 | ... = ... | |
| string.cpp:210:8:210:9 | s3 | string.cpp:211:3:211:4 | s9 | |
| string.cpp:210:8:210:9 | s3 | string.cpp:212:3:212:4 | s9 | |
| string.cpp:210:8:210:9 | s3 | string.cpp:213:8:213:9 | s9 | |
| string.cpp:211:3:211:4 | ref arg s9 | string.cpp:212:3:212:4 | s9 | |
| string.cpp:211:3:211:4 | ref arg s9 | string.cpp:213:8:213:9 | s9 | |
| string.cpp:211:13:211:18 | call to source | string.cpp:211:3:211:4 | ref arg s9 | TAINT |
| string.cpp:211:13:211:18 | call to source | string.cpp:211:6:211:11 | call to append | TAINT |
| string.cpp:212:3:212:4 | ref arg s9 | string.cpp:213:8:213:9 | s9 | |
| string.cpp:212:13:212:15 | | string.cpp:212:3:212:4 | ref arg s9 | TAINT |
| string.cpp:212:13:212:15 | | string.cpp:212:6:212:11 | call to append | TAINT |
| string.cpp:217:19:217:23 | abc | string.cpp:217:19:217:24 | call to basic_string | TAINT |
| string.cpp:217:19:217:24 | call to basic_string | string.cpp:220:3:220:5 | s10 | |
| string.cpp:217:19:217:24 | call to basic_string | string.cpp:221:8:221:10 | s10 | |
| string.cpp:218:12:218:26 | call to source | string.cpp:220:17:220:17 | c | |
| string.cpp:220:3:220:5 | ref arg s10 | string.cpp:221:8:221:10 | s10 | |
| string.cpp:220:17:220:17 | c | string.cpp:220:3:220:5 | ref arg s10 | TAINT |
| string.cpp:220:17:220:17 | c | string.cpp:220:7:220:12 | call to append | TAINT |
| string.cpp:24:12:24:17 | call to source | string.cpp:28:7:28:7 | a | |
| string.cpp:25:16:25:20 | 123 | string.cpp:25:16:25:21 | call to basic_string | TAINT |
| string.cpp:25:16:25:21 | call to basic_string | string.cpp:29:7:29:7 | b | |
| string.cpp:25:16:25:21 | call to basic_string | string.cpp:31:7:31:7 | b | |
| string.cpp:26:16:26:21 | call to source | string.cpp:26:16:26:24 | call to basic_string | TAINT |
| string.cpp:26:16:26:24 | call to basic_string | string.cpp:30:7:30:7 | c | |
| string.cpp:26:16:26:24 | call to basic_string | string.cpp:32:7:32:7 | c | |
| string.cpp:31:7:31:7 | b | string.cpp:31:9:31:13 | call to c_str | TAINT |
| string.cpp:32:7:32:7 | c | string.cpp:32:9:32:13 | call to c_str | TAINT |
| string.cpp:37:16:37:28 | call to basic_string | string.cpp:38:7:38:11 | path1 | |
| string.cpp:37:17:37:26 | call to user_input | string.cpp:37:16:37:28 | call to basic_string | TAINT |
| string.cpp:38:7:38:11 | path1 | string.cpp:38:13:38:17 | call to c_str | TAINT |
| string.cpp:41:10:41:19 | call to user_input | string.cpp:41:10:41:21 | call to basic_string | TAINT |
| string.cpp:41:10:41:21 | call to basic_string | string.cpp:41:2:41:21 | ... = ... | |
| string.cpp:41:10:41:21 | call to basic_string | string.cpp:42:7:42:11 | path2 | |
| string.cpp:42:7:42:11 | path2 | string.cpp:42:13:42:17 | call to c_str | TAINT |
| string.cpp:44:15:44:24 | call to user_input | string.cpp:44:15:44:27 | call to basic_string | TAINT |
| string.cpp:44:15:44:27 | call to basic_string | string.cpp:45:7:45:11 | path3 | |
| string.cpp:45:7:45:11 | path3 | string.cpp:45:13:45:17 | call to c_str | TAINT |
| string.cpp:50:19:50:24 | call to source | string.cpp:53:17:53:18 | cs | |
| string.cpp:50:19:50:24 | call to source | string.cpp:55:7:55:8 | cs | |
| string.cpp:53:17:53:18 | cs | string.cpp:53:17:53:19 | call to basic_string | TAINT |
| string.cpp:53:17:53:19 | call to basic_string | string.cpp:56:7:56:8 | ss | |
| string.cpp:61:19:61:24 | call to source | string.cpp:64:17:64:18 | cs | |
| string.cpp:64:17:64:18 | cs | string.cpp:64:17:64:19 | call to basic_string | TAINT |
| string.cpp:64:17:64:19 | call to basic_string | string.cpp:67:7:67:8 | ss | |
| string.cpp:64:17:64:19 | call to basic_string | string.cpp:70:7:70:8 | ss | |
| string.cpp:67:7:67:8 | ss | string.cpp:67:10:67:14 | call to c_str | TAINT |
| string.cpp:67:10:67:14 | call to c_str | string.cpp:67:2:67:16 | ... = ... | |
| string.cpp:67:10:67:14 | call to c_str | string.cpp:69:7:69:8 | cs | |
| string.cpp:76:18:76:24 | hello | string.cpp:76:18:76:25 | call to basic_string | TAINT |
| string.cpp:76:18:76:25 | call to basic_string | string.cpp:81:8:81:9 | s1 | |
| string.cpp:77:19:77:26 | call to basic_string | string.cpp:82:8:82:9 | s2 | |
| string.cpp:77:20:77:26 | hello | string.cpp:77:19:77:26 | call to basic_string | TAINT |
| string.cpp:79:8:79:14 | call to basic_string | string.cpp:79:3:79:14 | ... = ... | |
| string.cpp:79:8:79:14 | call to basic_string | string.cpp:83:8:83:9 | s3 | |
| string.cpp:79:8:79:14 | hello | string.cpp:79:8:79:14 | call to basic_string | TAINT |
| string.cpp:87:18:87:23 | call to source | string.cpp:87:18:87:26 | call to basic_string | TAINT |
| string.cpp:87:18:87:26 | call to basic_string | string.cpp:92:8:92:9 | s1 | |
| string.cpp:88:19:88:27 | call to basic_string | string.cpp:93:8:93:9 | s2 | |
| string.cpp:88:20:88:25 | call to source | string.cpp:88:19:88:27 | call to basic_string | TAINT |
| string.cpp:90:8:90:13 | call to source | string.cpp:90:8:90:15 | call to basic_string | TAINT |
| string.cpp:90:8:90:15 | call to basic_string | string.cpp:90:3:90:15 | ... = ... | |
| string.cpp:90:8:90:15 | call to basic_string | string.cpp:94:8:94:9 | s3 | |
| string.cpp:98:15:98:16 | call to basic_string | string.cpp:99:20:99:21 | s1 | |
| string.cpp:98:15:98:16 | call to basic_string | string.cpp:101:8:101:9 | s1 | |
| string.cpp:98:15:98:16 | call to basic_string | string.cpp:103:8:103:9 | s1 | |
| string.cpp:99:20:99:21 | s1 | string.cpp:104:8:104:9 | s2 | |
| string.cpp:101:8:101:9 | s1 | string.cpp:101:3:101:9 | ... = ... | |
| string.cpp:101:8:101:9 | s1 | string.cpp:105:8:105:9 | s3 | |
| string.cpp:109:19:109:40 | call to basic_string | string.cpp:113:8:113:9 | s1 | |
| string.cpp:109:32:109:37 | call to source | string.cpp:109:19:109:40 | call to basic_string | TAINT |
| string.cpp:111:8:111:28 | call to basic_string | string.cpp:111:3:111:28 | ... = ... | |
| string.cpp:111:8:111:28 | call to basic_string | string.cpp:114:8:114:9 | s2 | |
| string.cpp:111:20:111:25 | call to source | string.cpp:111:8:111:28 | call to basic_string | TAINT |
| string.cpp:119:16:119:21 | call to source | string.cpp:119:16:119:24 | call to basic_string | TAINT |
| string.cpp:119:16:119:24 | call to basic_string | string.cpp:120:15:120:15 | s | |
| string.cpp:119:16:119:24 | call to basic_string | string.cpp:124:33:124:33 | s | |
| string.cpp:119:16:119:24 | call to basic_string | string.cpp:124:50:124:50 | s | |
| string.cpp:119:16:119:24 | call to basic_string | string.cpp:128:16:128:16 | s | |
| string.cpp:120:15:120:15 | call to begin | string.cpp:120:15:120:15 | (__begin) | |
| string.cpp:120:15:120:15 | call to begin | string.cpp:120:15:120:15 | (__begin) | |
| string.cpp:120:15:120:15 | call to begin | string.cpp:120:15:120:15 | (__begin) | |
| string.cpp:120:15:120:15 | call to end | string.cpp:120:15:120:15 | (__end) | |
| string.cpp:120:15:120:15 | call to operator* | string.cpp:121:8:121:8 | c | |
| string.cpp:120:15:120:15 | ref arg (__begin) | string.cpp:120:15:120:15 | (__begin) | |
| string.cpp:120:15:120:15 | ref arg (__begin) | string.cpp:120:15:120:15 | (__begin) | |
| string.cpp:120:15:120:15 | ref arg (__begin) | string.cpp:120:15:120:15 | (__begin) | |
| string.cpp:120:15:120:15 | ref arg (__range) | string.cpp:120:15:120:15 | (__range) | |
| string.cpp:120:15:120:15 | s | string.cpp:120:15:120:15 | (__range) | |
| string.cpp:120:15:120:15 | s | string.cpp:120:15:120:15 | (__range) | |
| string.cpp:120:15:120:15 | s | string.cpp:120:15:120:15 | call to operator* | TAINT |
| string.cpp:124:33:124:33 | ref arg s | string.cpp:124:50:124:50 | s | |
| string.cpp:124:33:124:33 | ref arg s | string.cpp:128:16:128:16 | s | |
| string.cpp:124:35:124:39 | call to begin | string.cpp:124:44:124:45 | it | |
| string.cpp:124:35:124:39 | call to begin | string.cpp:124:61:124:62 | it | |
| string.cpp:124:35:124:39 | call to begin | string.cpp:125:9:125:10 | it | |
| string.cpp:124:50:124:50 | ref arg s | string.cpp:124:50:124:50 | s | |
| string.cpp:124:50:124:50 | ref arg s | string.cpp:128:16:128:16 | s | |
| string.cpp:124:61:124:62 | ref arg it | string.cpp:124:44:124:45 | it | |
| string.cpp:124:61:124:62 | ref arg it | string.cpp:124:61:124:62 | it | |
| string.cpp:124:61:124:62 | ref arg it | string.cpp:125:9:125:10 | it | |
| string.cpp:128:16:128:16 | call to begin | string.cpp:128:16:128:16 | (__begin) | |
| string.cpp:128:16:128:16 | call to begin | string.cpp:128:16:128:16 | (__begin) | |
| string.cpp:128:16:128:16 | call to begin | string.cpp:128:16:128:16 | (__begin) | |
| string.cpp:128:16:128:16 | call to end | string.cpp:128:16:128:16 | (__end) | |
| string.cpp:128:16:128:16 | call to operator* | string.cpp:129:8:129:8 | c | |
| string.cpp:128:16:128:16 | ref arg (__begin) | string.cpp:128:16:128:16 | (__begin) | |
| string.cpp:128:16:128:16 | ref arg (__begin) | string.cpp:128:16:128:16 | (__begin) | |
| string.cpp:128:16:128:16 | ref arg (__begin) | string.cpp:128:16:128:16 | (__begin) | |
| string.cpp:128:16:128:16 | ref arg (__range) | string.cpp:128:16:128:16 | (__range) | |
| string.cpp:128:16:128:16 | s | string.cpp:128:16:128:16 | (__range) | |
| string.cpp:128:16:128:16 | s | string.cpp:128:16:128:16 | (__range) | |
| string.cpp:128:16:128:16 | s | string.cpp:128:16:128:16 | call to operator* | TAINT |
| string.cpp:132:28:132:33 | call to source | string.cpp:132:28:132:36 | call to basic_string | TAINT |
| string.cpp:132:28:132:36 | call to basic_string | string.cpp:133:22:133:28 | const_s | |
| string.cpp:133:22:133:22 | call to begin | string.cpp:133:22:133:22 | (__begin) | |
| string.cpp:133:22:133:22 | call to begin | string.cpp:133:22:133:22 | (__begin) | |
| string.cpp:133:22:133:22 | call to begin | string.cpp:133:22:133:22 | (__begin) | |
| string.cpp:133:22:133:22 | call to end | string.cpp:133:22:133:22 | (__end) | |
| string.cpp:133:22:133:22 | call to operator* | string.cpp:134:8:134:8 | c | |
| string.cpp:133:22:133:22 | ref arg (__begin) | string.cpp:133:22:133:22 | (__begin) | |
| string.cpp:133:22:133:22 | ref arg (__begin) | string.cpp:133:22:133:22 | (__begin) | |
| string.cpp:133:22:133:22 | ref arg (__begin) | string.cpp:133:22:133:22 | (__begin) | |
| string.cpp:133:22:133:28 | const_s | string.cpp:133:22:133:22 | (__range) | |
| string.cpp:133:22:133:28 | const_s | string.cpp:133:22:133:22 | (__range) | |
| string.cpp:133:22:133:28 | const_s | string.cpp:133:22:133:22 | call to operator* | TAINT |
| string.cpp:140:18:140:24 | hello | string.cpp:140:18:140:25 | call to basic_string | TAINT |
| string.cpp:140:18:140:25 | call to basic_string | string.cpp:143:8:143:9 | s1 | |
| string.cpp:140:18:140:25 | call to basic_string | string.cpp:143:13:143:14 | s1 | |
| string.cpp:140:18:140:25 | call to basic_string | string.cpp:144:8:144:9 | s1 | |
| string.cpp:140:18:140:25 | call to basic_string | string.cpp:145:13:145:14 | s1 | |
| string.cpp:140:18:140:25 | call to basic_string | string.cpp:148:8:148:9 | s1 | |
| string.cpp:140:18:140:25 | call to basic_string | string.cpp:149:8:149:9 | s1 | |
| string.cpp:141:18:141:23 | call to source | string.cpp:141:18:141:26 | call to basic_string | TAINT |
| string.cpp:141:18:141:26 | call to basic_string | string.cpp:144:13:144:14 | s2 | |
| string.cpp:141:18:141:26 | call to basic_string | string.cpp:145:8:145:9 | s2 | |
| string.cpp:141:18:141:26 | call to basic_string | string.cpp:146:8:146:9 | s2 | |
| string.cpp:141:18:141:26 | call to basic_string | string.cpp:146:13:146:14 | s2 | |
| string.cpp:143:8:143:9 | s1 | string.cpp:143:11:143:11 | call to operator+ | TAINT |
| string.cpp:143:13:143:14 | s1 | string.cpp:143:11:143:11 | call to operator+ | TAINT |
| string.cpp:144:8:144:9 | s1 | string.cpp:144:11:144:11 | call to operator+ | TAINT |
| string.cpp:144:13:144:14 | s2 | string.cpp:144:11:144:11 | call to operator+ | TAINT |
| string.cpp:145:8:145:9 | s2 | string.cpp:145:11:145:11 | call to operator+ | TAINT |
| string.cpp:145:13:145:14 | s1 | string.cpp:145:11:145:11 | call to operator+ | TAINT |
| string.cpp:146:8:146:9 | s2 | string.cpp:146:11:146:11 | call to operator+ | TAINT |
| string.cpp:146:13:146:14 | s2 | string.cpp:146:11:146:11 | call to operator+ | TAINT |
| string.cpp:148:8:148:9 | s1 | string.cpp:148:11:148:11 | call to operator+ | TAINT |
| string.cpp:148:13:148:20 | world | string.cpp:148:11:148:11 | call to operator+ | TAINT |
| string.cpp:149:8:149:9 | s1 | string.cpp:149:11:149:11 | call to operator+ | TAINT |
| string.cpp:149:13:149:18 | call to source | string.cpp:149:11:149:11 | call to operator+ | TAINT |
| string.cpp:153:18:153:22 | abc | string.cpp:153:18:153:23 | call to basic_string | TAINT |
| string.cpp:153:18:153:23 | call to basic_string | string.cpp:157:8:157:9 | s3 | |
| string.cpp:153:18:153:23 | call to basic_string | string.cpp:160:8:160:9 | s3 | |
| string.cpp:153:18:153:23 | call to basic_string | string.cpp:164:8:164:9 | s3 | |
| string.cpp:153:18:153:23 | call to basic_string | string.cpp:169:8:169:9 | s3 | |
| string.cpp:153:18:153:23 | call to basic_string | string.cpp:173:8:173:9 | s3 | |
| string.cpp:154:18:154:23 | call to source | string.cpp:154:18:154:26 | call to basic_string | TAINT |
| string.cpp:154:18:154:26 | call to basic_string | string.cpp:157:13:157:14 | s4 | |
| string.cpp:154:18:154:26 | call to basic_string | string.cpp:161:9:161:10 | s4 | |
| string.cpp:154:18:154:26 | call to basic_string | string.cpp:170:13:170:14 | s4 | |
| string.cpp:157:8:157:9 | s3 | string.cpp:157:11:157:11 | call to operator+ | TAINT |
| string.cpp:157:11:157:11 | call to operator+ | string.cpp:157:3:157:14 | ... = ... | |
| string.cpp:157:11:157:11 | call to operator+ | string.cpp:158:8:158:9 | s5 | |
| string.cpp:157:13:157:14 | s4 | string.cpp:157:11:157:11 | call to operator+ | TAINT |
| string.cpp:160:8:160:9 | s3 | string.cpp:160:3:160:9 | ... = ... | |
| string.cpp:160:8:160:9 | s3 | string.cpp:161:3:161:4 | s6 | |
| string.cpp:160:8:160:9 | s3 | string.cpp:162:8:162:9 | s6 | |
| string.cpp:161:3:161:4 | ref arg s6 | string.cpp:162:8:162:9 | s6 | |
| string.cpp:161:9:161:10 | s4 | string.cpp:161:3:161:4 | ref arg s6 | TAINT |
| string.cpp:161:9:161:10 | s4 | string.cpp:161:6:161:6 | call to operator+= | TAINT |
| string.cpp:164:8:164:9 | s3 | string.cpp:164:3:164:9 | ... = ... | |
| string.cpp:164:8:164:9 | s3 | string.cpp:165:3:165:4 | s7 | |
| string.cpp:164:8:164:9 | s3 | string.cpp:166:3:166:4 | s7 | |
| string.cpp:164:8:164:9 | s3 | string.cpp:167:8:167:9 | s7 | |
| string.cpp:165:3:165:4 | ref arg s7 | string.cpp:166:3:166:4 | s7 | |
| string.cpp:165:3:165:4 | ref arg s7 | string.cpp:167:8:167:9 | s7 | |
| string.cpp:165:9:165:14 | call to source | string.cpp:165:3:165:4 | ref arg s7 | TAINT |
| string.cpp:165:9:165:14 | call to source | string.cpp:165:6:165:6 | call to operator+= | TAINT |
| string.cpp:166:3:166:4 | ref arg s7 | string.cpp:167:8:167:9 | s7 | |
| string.cpp:166:9:166:11 | | string.cpp:166:3:166:4 | ref arg s7 | TAINT |
| string.cpp:166:9:166:11 | | string.cpp:166:6:166:6 | call to operator+= | TAINT |
| string.cpp:169:8:169:9 | s3 | string.cpp:169:3:169:9 | ... = ... | |
| string.cpp:169:8:169:9 | s3 | string.cpp:170:3:170:4 | s8 | |
| string.cpp:169:8:169:9 | s3 | string.cpp:171:8:171:9 | s8 | |
| string.cpp:170:3:170:4 | ref arg s8 | string.cpp:171:8:171:9 | s8 | |
| string.cpp:170:13:170:14 | s4 | string.cpp:170:3:170:4 | ref arg s8 | TAINT |
| string.cpp:170:13:170:14 | s4 | string.cpp:170:6:170:11 | call to append | TAINT |
| string.cpp:173:8:173:9 | s3 | string.cpp:173:3:173:9 | ... = ... | |
| string.cpp:173:8:173:9 | s3 | string.cpp:174:3:174:4 | s9 | |
| string.cpp:173:8:173:9 | s3 | string.cpp:175:3:175:4 | s9 | |
| string.cpp:173:8:173:9 | s3 | string.cpp:176:8:176:9 | s9 | |
| string.cpp:174:3:174:4 | ref arg s9 | string.cpp:175:3:175:4 | s9 | |
| string.cpp:174:3:174:4 | ref arg s9 | string.cpp:176:8:176:9 | s9 | |
| string.cpp:174:13:174:18 | call to source | string.cpp:174:3:174:4 | ref arg s9 | TAINT |
| string.cpp:174:13:174:18 | call to source | string.cpp:174:6:174:11 | call to append | TAINT |
| string.cpp:175:3:175:4 | ref arg s9 | string.cpp:176:8:176:9 | s9 | |
| string.cpp:175:13:175:15 | | string.cpp:175:3:175:4 | ref arg s9 | TAINT |
| string.cpp:175:13:175:15 | | string.cpp:175:6:175:11 | call to append | TAINT |
| string.cpp:180:19:180:23 | abc | string.cpp:180:19:180:24 | call to basic_string | TAINT |
| string.cpp:180:19:180:24 | call to basic_string | string.cpp:183:3:183:5 | s10 | |
| string.cpp:180:19:180:24 | call to basic_string | string.cpp:184:8:184:10 | s10 | |
| string.cpp:181:12:181:26 | call to source | string.cpp:183:17:183:17 | c | |
| string.cpp:183:3:183:5 | ref arg s10 | string.cpp:184:8:184:10 | s10 | |
| string.cpp:183:17:183:17 | c | string.cpp:183:3:183:5 | ref arg s10 | TAINT |
| string.cpp:183:17:183:17 | c | string.cpp:183:7:183:12 | call to append | TAINT |
| stringstream.cpp:13:20:13:22 | call to basic_stringstream | stringstream.cpp:16:2:16:4 | ss1 | |
| stringstream.cpp:13:20:13:22 | call to basic_stringstream | stringstream.cpp:22:7:22:9 | ss1 | |
| stringstream.cpp:13:20:13:22 | call to basic_stringstream | stringstream.cpp:27:7:27:9 | ss1 | |
| stringstream.cpp:13:25:13:27 | call to basic_stringstream | stringstream.cpp:17:2:17:4 | ss2 | |
| stringstream.cpp:13:25:13:27 | call to basic_stringstream | stringstream.cpp:23:7:23:9 | ss2 | |
| stringstream.cpp:13:25:13:27 | call to basic_stringstream | stringstream.cpp:28:7:28:9 | ss2 | |
| stringstream.cpp:13:30:13:32 | call to basic_stringstream | stringstream.cpp:18:2:18:4 | ss3 | |
| stringstream.cpp:13:30:13:32 | call to basic_stringstream | stringstream.cpp:24:7:24:9 | ss3 | |
| stringstream.cpp:13:30:13:32 | call to basic_stringstream | stringstream.cpp:29:7:29:9 | ss3 | |
| stringstream.cpp:13:35:13:37 | call to basic_stringstream | stringstream.cpp:19:2:19:4 | ss4 | |
| stringstream.cpp:13:35:13:37 | call to basic_stringstream | stringstream.cpp:25:7:25:9 | ss4 | |
| stringstream.cpp:13:35:13:37 | call to basic_stringstream | stringstream.cpp:30:7:30:9 | ss4 | |
| stringstream.cpp:13:40:13:42 | call to basic_stringstream | stringstream.cpp:20:2:20:4 | ss5 | |
| stringstream.cpp:13:40:13:42 | call to basic_stringstream | stringstream.cpp:26:7:26:9 | ss5 | |
| stringstream.cpp:13:40:13:42 | call to basic_stringstream | stringstream.cpp:31:7:31:9 | ss5 | |
| stringstream.cpp:14:16:14:21 | call to source | stringstream.cpp:14:16:14:24 | call to basic_string | TAINT |
| stringstream.cpp:14:16:14:24 | call to basic_string | stringstream.cpp:20:9:20:9 | t | |
| stringstream.cpp:16:2:16:4 | ref arg ss1 | stringstream.cpp:22:7:22:9 | ss1 | |
| stringstream.cpp:16:2:16:4 | ref arg ss1 | stringstream.cpp:27:7:27:9 | ss1 | |
| stringstream.cpp:17:2:17:4 | ref arg ss2 | stringstream.cpp:23:7:23:9 | ss2 | |
| stringstream.cpp:17:2:17:4 | ref arg ss2 | stringstream.cpp:28:7:28:9 | ss2 | |
| stringstream.cpp:18:2:18:4 | ref arg ss3 | stringstream.cpp:24:7:24:9 | ss3 | |
| stringstream.cpp:18:2:18:4 | ref arg ss3 | stringstream.cpp:29:7:29:9 | ss3 | |
| stringstream.cpp:19:2:19:4 | ref arg ss4 | stringstream.cpp:25:7:25:9 | ss4 | |
| stringstream.cpp:19:2:19:4 | ref arg ss4 | stringstream.cpp:30:7:30:9 | ss4 | |
| stringstream.cpp:20:2:20:4 | ref arg ss5 | stringstream.cpp:26:7:26:9 | ss5 | |
| stringstream.cpp:20:2:20:4 | ref arg ss5 | stringstream.cpp:31:7:31:9 | ss5 | |
| stringstream.cpp:34:32:34:37 | source | stringstream.cpp:39:9:39:14 | source | |
| stringstream.cpp:36:20:36:22 | call to basic_stringstream | stringstream.cpp:38:2:38:4 | ss1 | |
| stringstream.cpp:36:20:36:22 | call to basic_stringstream | stringstream.cpp:41:7:41:9 | ss1 | |
| stringstream.cpp:36:20:36:22 | call to basic_stringstream | stringstream.cpp:43:7:43:9 | ss1 | |
| stringstream.cpp:36:25:36:27 | call to basic_stringstream | stringstream.cpp:39:2:39:4 | ss2 | |
| stringstream.cpp:36:25:36:27 | call to basic_stringstream | stringstream.cpp:42:7:42:9 | ss2 | |
| stringstream.cpp:36:25:36:27 | call to basic_stringstream | stringstream.cpp:44:7:44:9 | ss2 | |
| stringstream.cpp:38:2:38:4 | ref arg ss1 | stringstream.cpp:41:7:41:9 | ss1 | |
| stringstream.cpp:38:2:38:4 | ref arg ss1 | stringstream.cpp:43:7:43:9 | ss1 | |
| stringstream.cpp:39:2:39:4 | ref arg ss2 | stringstream.cpp:42:7:42:9 | ss2 | |
| stringstream.cpp:39:2:39:4 | ref arg ss2 | stringstream.cpp:44:7:44:9 | ss2 | |
| structlikeclass.cpp:5:7:5:7 | Unknown literal | structlikeclass.cpp:5:7:5:7 | constructor init of field v | TAINT |
| structlikeclass.cpp:5:7:5:7 | Unknown literal | structlikeclass.cpp:5:7:5:7 | constructor init of field v | TAINT |
| structlikeclass.cpp:5:7:5:7 | this | structlikeclass.cpp:5:7:5:7 | constructor init of field v [pre-this] | |

37
cpp/ql/test/library-tests/dataflow/taint-tests/string.cpp
View File

@@ -16,7 +16,6 @@ char *user_input() {
void sink(const char *s) {};
void sink(const std::string &s) {};
void sink(const std::stringstream &s) {};
void sink(const char *filename, const char *mode);
void sink(char) {}
@@ -33,42 +32,6 @@ void test_string()
sink(c.c_str()); // tainted
}
void test_stringstream()
{
std::stringstream ss1, ss2, ss3, ss4, ss5;
std::string t(source());
ss1 << "1234";
ss2 << source();
ss3 << "123" << source();
ss4 << source() << "456";
ss5 << t;
sink(ss1);
sink(ss2); // tainted [NOT DETECTED]
sink(ss3); // tainted [NOT DETECTED]
sink(ss4); // tainted [NOT DETECTED]
sink(ss5); // tainted [NOT DETECTED]
sink(ss1.str());
sink(ss2.str()); // tainted [NOT DETECTED]
sink(ss3.str()); // tainted [NOT DETECTED]
sink(ss4.str()); // tainted [NOT DETECTED]
sink(ss5.str()); // tainted [NOT DETECTED]
}
void test_stringstream_int(int source)
{
std::stringstream ss1, ss2;
ss1 << 1234;
ss2 << source;
sink(ss1);
sink(ss2); // tainted [NOT DETECTED]
sink(ss1.str());
sink(ss2.str()); // tainted [NOT DETECTED]
}
void test_strings2()
{
string path1 = user_input();

45
cpp/ql/test/library-tests/dataflow/taint-tests/stringstream.cpp Normal file
View File

@@ -0,0 +1,45 @@
#include "stl.h"
using namespace std;
char *source();
void sink(const std::string &s) {};
void sink(const std::stringstream &s) {};
void test_stringstream()
{
std::stringstream ss1, ss2, ss3, ss4, ss5;
std::string t(source());
ss1 << "1234";
ss2 << source();
ss3 << "123" << source();
ss4 << source() << "456";
ss5 << t;
sink(ss1);
sink(ss2); // tainted [NOT DETECTED]
sink(ss3); // tainted [NOT DETECTED]
sink(ss4); // tainted [NOT DETECTED]
sink(ss5); // tainted [NOT DETECTED]
sink(ss1.str());
sink(ss2.str()); // tainted [NOT DETECTED]
sink(ss3.str()); // tainted [NOT DETECTED]
sink(ss4.str()); // tainted [NOT DETECTED]
sink(ss5.str()); // tainted [NOT DETECTED]
}
void test_stringstream_int(int source)
{
std::stringstream ss1, ss2;
ss1 << 1234;
ss2 << source;
sink(ss1);
sink(ss2); // tainted [NOT DETECTED]
sink(ss1.str());
sink(ss2.str()); // tainted [NOT DETECTED]
}

56
cpp/ql/test/library-tests/dataflow/taint-tests/taint.expected
View File

@@ -32,34 +32,34 @@
| movableclass.cpp:55:8:55:9 | s2 | movableclass.cpp:52:23:52:28 | call to source |
| movableclass.cpp:64:8:64:9 | s2 | movableclass.cpp:23:55:23:60 | call to source |
| movableclass.cpp:65:11:65:11 | call to operator= | movableclass.cpp:65:13:65:18 | call to source |
| string.cpp:29:7:29:7 | a | string.cpp:25:12:25:17 | call to source |
| string.cpp:31:7:31:7 | c | string.cpp:27:16:27:21 | call to source |
| string.cpp:33:9:33:13 | call to c_str | string.cpp:27:16:27:21 | call to source |
| string.cpp:75:13:75:17 | call to c_str | string.cpp:14:10:14:15 | call to source |
| string.cpp:79:13:79:17 | call to c_str | string.cpp:14:10:14:15 | call to source |
| string.cpp:82:13:82:17 | call to c_str | string.cpp:14:10:14:15 | call to source |
| string.cpp:92:7:92:8 | cs | string.cpp:87:19:87:24 | call to source |
| string.cpp:93:7:93:8 | ss | string.cpp:87:19:87:24 | call to source |
| string.cpp:106:7:106:8 | cs | string.cpp:98:19:98:24 | call to source |
| string.cpp:107:7:107:8 | ss | string.cpp:98:19:98:24 | call to source |
| string.cpp:129:8:129:9 | s1 | string.cpp:124:18:124:23 | call to source |
| string.cpp:130:8:130:9 | s2 | string.cpp:125:20:125:25 | call to source |
| string.cpp:131:8:131:9 | s3 | string.cpp:127:8:127:13 | call to source |
| string.cpp:150:8:150:9 | s1 | string.cpp:146:32:146:37 | call to source |
| string.cpp:151:8:151:9 | s2 | string.cpp:148:20:148:25 | call to source |
| string.cpp:158:8:158:8 | c | string.cpp:156:16:156:21 | call to source |
| string.cpp:166:8:166:8 | c | string.cpp:156:16:156:21 | call to source |
| string.cpp:171:8:171:8 | c | string.cpp:169:28:169:33 | call to source |
| string.cpp:181:11:181:11 | call to operator+ | string.cpp:178:18:178:23 | call to source |
| string.cpp:182:11:182:11 | call to operator+ | string.cpp:178:18:178:23 | call to source |
| string.cpp:183:11:183:11 | call to operator+ | string.cpp:178:18:178:23 | call to source |
| string.cpp:186:11:186:11 | call to operator+ | string.cpp:186:13:186:18 | call to source |
| string.cpp:195:8:195:9 | s5 | string.cpp:191:18:191:23 | call to source |
| string.cpp:199:8:199:9 | s6 | string.cpp:191:18:191:23 | call to source |
| string.cpp:204:8:204:9 | s7 | string.cpp:202:9:202:14 | call to source |
| string.cpp:208:8:208:9 | s8 | string.cpp:191:18:191:23 | call to source |
| string.cpp:213:8:213:9 | s9 | string.cpp:211:13:211:18 | call to source |
| string.cpp:221:8:221:10 | s10 | string.cpp:218:12:218:26 | call to source |
| string.cpp:28:7:28:7 | a | string.cpp:24:12:24:17 | call to source |
| string.cpp:30:7:30:7 | c | string.cpp:26:16:26:21 | call to source |
| string.cpp:32:9:32:13 | call to c_str | string.cpp:26:16:26:21 | call to source |
| string.cpp:38:13:38:17 | call to c_str | string.cpp:14:10:14:15 | call to source |
| string.cpp:42:13:42:17 | call to c_str | string.cpp:14:10:14:15 | call to source |
| string.cpp:45:13:45:17 | call to c_str | string.cpp:14:10:14:15 | call to source |
| string.cpp:55:7:55:8 | cs | string.cpp:50:19:50:24 | call to source |
| string.cpp:56:7:56:8 | ss | string.cpp:50:19:50:24 | call to source |
| string.cpp:69:7:69:8 | cs | string.cpp:61:19:61:24 | call to source |
| string.cpp:70:7:70:8 | ss | string.cpp:61:19:61:24 | call to source |
| string.cpp:92:8:92:9 | s1 | string.cpp:87:18:87:23 | call to source |
| string.cpp:93:8:93:9 | s2 | string.cpp:88:20:88:25 | call to source |
| string.cpp:94:8:94:9 | s3 | string.cpp:90:8:90:13 | call to source |
| string.cpp:113:8:113:9 | s1 | string.cpp:109:32:109:37 | call to source |
| string.cpp:114:8:114:9 | s2 | string.cpp:111:20:111:25 | call to source |
| string.cpp:121:8:121:8 | c | string.cpp:119:16:119:21 | call to source |
| string.cpp:129:8:129:8 | c | string.cpp:119:16:119:21 | call to source |
| string.cpp:134:8:134:8 | c | string.cpp:132:28:132:33 | call to source |
| string.cpp:144:11:144:11 | call to operator+ | string.cpp:141:18:141:23 | call to source |
| string.cpp:145:11:145:11 | call to operator+ | string.cpp:141:18:141:23 | call to source |
| string.cpp:146:11:146:11 | call to operator+ | string.cpp:141:18:141:23 | call to source |
| string.cpp:149:11:149:11 | call to operator+ | string.cpp:149:13:149:18 | call to source |
| string.cpp:158:8:158:9 | s5 | string.cpp:154:18:154:23 | call to source |
| string.cpp:162:8:162:9 | s6 | string.cpp:154:18:154:23 | call to source |
| string.cpp:167:8:167:9 | s7 | string.cpp:165:9:165:14 | call to source |
| string.cpp:171:8:171:9 | s8 | string.cpp:154:18:154:23 | call to source |
| string.cpp:176:8:176:9 | s9 | string.cpp:174:13:174:18 | call to source |
| string.cpp:184:8:184:10 | s10 | string.cpp:181:12:181:26 | call to source |
| structlikeclass.cpp:35:8:35:9 | s1 | structlikeclass.cpp:29:22:29:27 | call to source |
| structlikeclass.cpp:36:8:36:9 | s2 | structlikeclass.cpp:30:24:30:29 | call to source |
| structlikeclass.cpp:37:8:37:9 | s3 | structlikeclass.cpp:29:22:29:27 | call to source |

54
cpp/ql/test/library-tests/dataflow/taint-tests/test_diff.expected
View File

@@ -30,33 +30,33 @@
| movableclass.cpp:55:8:55:9 | movableclass.cpp:52:23:52:28 | AST only |
| movableclass.cpp:64:8:64:9 | movableclass.cpp:23:55:23:60 | AST only |
| movableclass.cpp:65:11:65:11 | movableclass.cpp:65:13:65:18 | AST only |
| string.cpp:31:7:31:7 | string.cpp:27:16:27:21 | AST only |
| string.cpp:33:9:33:13 | string.cpp:27:16:27:21 | AST only |
| string.cpp:75:13:75:17 | string.cpp:14:10:14:15 | AST only |
| string.cpp:79:13:79:17 | string.cpp:14:10:14:15 | AST only |
| string.cpp:82:13:82:17 | string.cpp:14:10:14:15 | AST only |
| string.cpp:92:7:92:8 | string.cpp:87:19:87:26 | IR only |
| string.cpp:93:7:93:8 | string.cpp:87:19:87:24 | AST only |
| string.cpp:106:7:106:8 | string.cpp:98:19:98:24 | AST only |
| string.cpp:107:7:107:8 | string.cpp:98:19:98:24 | AST only |
| string.cpp:129:8:129:9 | string.cpp:124:18:124:23 | AST only |
| string.cpp:130:8:130:9 | string.cpp:125:20:125:25 | AST only |
| string.cpp:131:8:131:9 | string.cpp:127:8:127:13 | AST only |
| string.cpp:150:8:150:9 | string.cpp:146:32:146:37 | AST only |
| string.cpp:151:8:151:9 | string.cpp:148:20:148:25 | AST only |
| string.cpp:158:8:158:8 | string.cpp:156:16:156:21 | AST only |
| string.cpp:166:8:166:8 | string.cpp:156:16:156:21 | AST only |
| string.cpp:171:8:171:8 | string.cpp:169:28:169:33 | AST only |
| string.cpp:181:11:181:11 | string.cpp:178:18:178:23 | AST only |
| string.cpp:182:11:182:11 | string.cpp:178:18:178:23 | AST only |
| string.cpp:183:11:183:11 | string.cpp:178:18:178:23 | AST only |
| string.cpp:186:11:186:11 | string.cpp:186:13:186:18 | AST only |
| string.cpp:195:8:195:9 | string.cpp:191:18:191:23 | AST only |
| string.cpp:199:8:199:9 | string.cpp:191:18:191:23 | AST only |
| string.cpp:204:8:204:9 | string.cpp:202:9:202:14 | AST only |
| string.cpp:208:8:208:9 | string.cpp:191:18:191:23 | AST only |
| string.cpp:213:8:213:9 | string.cpp:211:13:211:18 | AST only |
| string.cpp:221:8:221:10 | string.cpp:218:12:218:26 | AST only |
| string.cpp:30:7:30:7 | string.cpp:26:16:26:21 | AST only |
| string.cpp:32:9:32:13 | string.cpp:26:16:26:21 | AST only |
| string.cpp:38:13:38:17 | string.cpp:14:10:14:15 | AST only |
| string.cpp:42:13:42:17 | string.cpp:14:10:14:15 | AST only |
| string.cpp:45:13:45:17 | string.cpp:14:10:14:15 | AST only |
| string.cpp:55:7:55:8 | string.cpp:50:19:50:26 | IR only |
| string.cpp:56:7:56:8 | string.cpp:50:19:50:24 | AST only |
| string.cpp:69:7:69:8 | string.cpp:61:19:61:24 | AST only |
| string.cpp:70:7:70:8 | string.cpp:61:19:61:24 | AST only |
| string.cpp:92:8:92:9 | string.cpp:87:18:87:23 | AST only |
| string.cpp:93:8:93:9 | string.cpp:88:20:88:25 | AST only |
| string.cpp:94:8:94:9 | string.cpp:90:8:90:13 | AST only |
| string.cpp:113:8:113:9 | string.cpp:109:32:109:37 | AST only |
| string.cpp:114:8:114:9 | string.cpp:111:20:111:25 | AST only |
| string.cpp:121:8:121:8 | string.cpp:119:16:119:21 | AST only |
| string.cpp:129:8:129:8 | string.cpp:119:16:119:21 | AST only |
| string.cpp:134:8:134:8 | string.cpp:132:28:132:33 | AST only |
| string.cpp:144:11:144:11 | string.cpp:141:18:141:23 | AST only |
| string.cpp:145:11:145:11 | string.cpp:141:18:141:23 | AST only |
| string.cpp:146:11:146:11 | string.cpp:141:18:141:23 | AST only |
| string.cpp:149:11:149:11 | string.cpp:149:13:149:18 | AST only |
| string.cpp:158:8:158:9 | string.cpp:154:18:154:23 | AST only |
| string.cpp:162:8:162:9 | string.cpp:154:18:154:23 | AST only |
| string.cpp:167:8:167:9 | string.cpp:165:9:165:14 | AST only |
| string.cpp:171:8:171:9 | string.cpp:154:18:154:23 | AST only |
| string.cpp:176:8:176:9 | string.cpp:174:13:174:18 | AST only |
| string.cpp:184:8:184:10 | string.cpp:181:12:181:26 | AST only |
| structlikeclass.cpp:35:8:35:9 | structlikeclass.cpp:29:22:29:27 | AST only |
| structlikeclass.cpp:36:8:36:9 | structlikeclass.cpp:30:24:30:29 | AST only |
| structlikeclass.cpp:37:8:37:9 | structlikeclass.cpp:29:22:29:27 | AST only |

8
cpp/ql/test/library-tests/dataflow/taint-tests/test_ir.expected
View File

@@ -1,10 +1,10 @@
| format.cpp:157:7:157:22 | (int)... | format.cpp:147:12:147:25 | call to source |
| format.cpp:157:7:157:22 | access to array | format.cpp:147:12:147:25 | call to source |
| format.cpp:158:7:158:27 | ... + ... | format.cpp:148:16:148:30 | call to source |
| string.cpp:29:7:29:7 | (const char *)... | string.cpp:25:12:25:17 | call to source |
| string.cpp:29:7:29:7 | a | string.cpp:25:12:25:17 | call to source |
| string.cpp:92:7:92:8 | cs | string.cpp:87:19:87:24 | call to source |
| string.cpp:92:7:92:8 | cs | string.cpp:87:19:87:26 | (const char *)... |
| string.cpp:28:7:28:7 | (const char *)... | string.cpp:24:12:24:17 | call to source |
| string.cpp:28:7:28:7 | a | string.cpp:24:12:24:17 | call to source |
| string.cpp:55:7:55:8 | cs | string.cpp:50:19:50:24 | call to source |
| string.cpp:55:7:55:8 | cs | string.cpp:50:19:50:26 | (const char *)... |
| structlikeclass.cpp:38:8:38:9 | s4 | structlikeclass.cpp:33:8:33:13 | call to source |
| structlikeclass.cpp:61:8:61:9 | s2 | structlikeclass.cpp:58:24:58:29 | call to source |
| structlikeclass.cpp:62:8:62:20 | ... = ... | structlikeclass.cpp:62:13:62:18 | call to source |