hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-26 01:05:15 +02:00
Code Issues Packages Projects Releases Wiki Activity

Added test cases

Browse Source
This commit is contained in:
Tony Torralba
2022-01-12 11:06:58 +01:00
parent 715d372572
commit c2105e506b
2 changed files with 26 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

23
java/ql/test/library-tests/dataflow/taint/StringBuilderTests.java
View File

@@ -63,4 +63,27 @@ public class StringBuilderTests {
sb.insert(45, taint());
sink(sb.toString());
}
static void stringBuilderGetCharsBad() {
StringBuilder sb = new StringBuilder();
sb.append("from preferences select locale where user=''");
sb.append(taint());
char[] chars = null;
sb.getChars(0, 0, chars, 0);
sink(new String(chars));
}
static void stringBuilderSubSequenceBad() {
StringBuilder sb = new StringBuilder();
sb.append("from preferences select locale where user=''");
sb.append(taint());
sink(sb.subSequence(0, 0).toString());
}
static void stringBuilderSubstringBad() {
StringBuilder sb = new StringBuilder();
sb.append("from preferences select locale where user=''");
sb.append(taint());
sink(sb.substring(0, 0));
}
}

3
java/ql/test/library-tests/dataflow/taint/test.expected
View File

@@ -56,6 +56,9 @@
| StringBuilderTests.java:48:69:48:75 | taint(...) | StringBuilderTests.java:50:10:50:22 | toString(...) |
| StringBuilderTests.java:56:24:56:30 | taint(...) | StringBuilderTests.java:57:10:57:22 | toString(...) |
| StringBuilderTests.java:63:19:63:25 | taint(...) | StringBuilderTests.java:64:10:64:22 | toString(...) |
| StringBuilderTests.java:70:15:70:21 | taint(...) | StringBuilderTests.java:73:10:73:26 | new String(...) |
| StringBuilderTests.java:79:15:79:21 | taint(...) | StringBuilderTests.java:80:10:80:40 | toString(...) |
| StringBuilderTests.java:86:15:86:21 | taint(...) | StringBuilderTests.java:87:10:87:27 | substring(...) |
| Varargs.java:7:8:7:14 | taint(...) | Varargs.java:14:10:14:10 | s |
| Varargs.java:8:8:8:14 | taint(...) | Varargs.java:19:10:19:10 | s |
| Varargs.java:8:17:8:23 | taint(...) | Varargs.java:19:10:19:10 | s |