hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-25 00:27:09 +02:00
Code Issues Packages Projects Releases Wiki Activity

PS: Add tests.

Browse Source
This commit is contained in:
Mathias Vorreiter Pedersen
2024-11-08 15:51:13 +00:00
parent 40cf8dd387
commit b3de6a23ea
3 changed files with 20 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
powershell/ql/test/query-tests/security/cwe-078/CommandInjection/CommandInjection.expected Normal file
View File

@@ -0,0 +1,12 @@
edges
| test.ps1:1:8:1:10 | x | test.ps1:3:28:3:48 | Get-Process -Id $x | provenance | |
| test.ps1:5:10:5:21 | Env:MY_VAR | test.ps1:7:3:7:20 | $code --enabled | provenance | |
nodes
| test.ps1:1:8:1:10 | x | semmle.label | x |
| test.ps1:3:28:3:48 | Get-Process -Id $x | semmle.label | Get-Process -Id $x |
| test.ps1:5:10:5:21 | Env:MY_VAR | semmle.label | Env:MY_VAR |
| test.ps1:7:3:7:20 | $code --enabled | semmle.label | $code --enabled |
subpaths
#select
| test.ps1:3:28:3:48 | Get-Process -Id $x | test.ps1:1:8:1:10 | x | test.ps1:3:28:3:48 | Get-Process -Id $x | This command depends on a $@. | test.ps1:1:8:1:10 | x | user-provided value |
| test.ps1:7:3:7:20 | $code --enabled | test.ps1:5:10:5:21 | Env:MY_VAR | test.ps1:7:3:7:20 | $code --enabled | This command depends on a $@. | test.ps1:5:10:5:21 | Env:MY_VAR | user-provided value |

1
powershell/ql/test/query-tests/security/cwe-078/CommandInjection/CommandInjection.qlref Normal file
View File

@@ -0,0 +1 @@
queries/security/cwe-078/CommandInjection.ql

7
powershell/ql/test/query-tests/security/cwe-078/CommandInjection/test.ps1 Normal file
View File

@@ -0,0 +1,7 @@
param ($x)
Invoke-Expression -Command "Get-Process -Id $x" # BAD
$code = "$Env:MY_VAR"
& "$code --enabled" # BAD