hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 03:05:15 +02:00
Code Issues Packages Projects Releases Wiki Activity

Python: Extend fieldflow tests with bound method call

Browse Source
This commit is contained in:
Rasmus Wriedt Larsen
2022-06-22 15:06:21 +02:00
parent 0f34752f8f
commit c1b2561598
1 changed files with 34 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

34
python/ql/test/experimental/dataflow/fieldflow/test.py
View File

@@ -160,6 +160,40 @@ def test_nested_obj_method():
a.getObj().foo = x
SINK(a.obj.foo) # $ flow="SOURCE, l:-3 -> a.obj.foo"
# ------------------------------------------------------------------------------
# Bound Method calls
# ------------------------------------------------------------------------------
class Foo:
def __init__(self, x):
self.x = x
def update_x(self, x):
self.x = x
@expects(7) # $ unresolved_call=expects(..) unresolved_call=expects(..)(..)
def test_bound_method_call():
# direct assignment
foo = Foo(None)
SINK_F(foo.x)
foo.x = SOURCE
SINK(foo.x) # $ flow="SOURCE, l:-1 -> foo.x"
foo.x = None
SINK_F(foo.x)
# assignment through function
foo = Foo(SOURCE)
SINK(foo.x) # $ flow="SOURCE, l:-1 -> foo.x"
foo.update_x(None)
SINK_F(foo.x) # $ flow="SOURCE, l:-3 -> foo.x"
# assignment through bound-method calls
foo = Foo(SOURCE)
ux = foo.update_x
SINK(foo.x) # $ flow="SOURCE, l:-2 -> foo.x"
ux(None)
SINK_F(foo.x) # $ SPURIOUS: flow="SOURCE, l:-4 -> foo.x"
# ------------------------------------------------------------------------------
# Global scope
# ------------------------------------------------------------------------------