hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 11:15:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge branch 'rc/1.22' into master

Browse Source
This commit is contained in:
Tom Hvitved
2019-09-18 16:52:58 +02:00
parent 327ade1f34 0e0f78e448
commit cf4db48eb1
13 changed files with 948 additions and 732 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
csharp/ql/src/semmle/code/csharp/dataflow/internal/DataFlowDispatch.qll
View File

@@ -97,8 +97,8 @@ private module Cached {
TImplicitDelegateCall(ControlFlow::Nodes::ElementNode cfn, DelegateArgumentToLibraryCallable arg) {
cfn.getElement() = arg
} or
TTransitiveCapturedCall(ControlFlow::Nodes::ElementNode cfn) {
transitiveCapturedCallTarget(cfn, _)
TTransitiveCapturedCall(ControlFlow::Nodes::ElementNode cfn, Callable target) {
transitiveCapturedCallTarget(cfn, target)
} or
TCilCall(CIL::Call call) {
// No need to include calls that are compiled from source
@@ -416,10 +416,11 @@ class ImplicitDelegateDataFlowCall extends DelegateDataFlowCall, TImplicitDelega
*/
class TransitiveCapturedDataFlowCall extends DataFlowCall, TTransitiveCapturedCall {
private ControlFlow::Nodes::ElementNode cfn;
private Callable target;
TransitiveCapturedDataFlowCall() { this = TTransitiveCapturedCall(cfn) }
TransitiveCapturedDataFlowCall() { this = TTransitiveCapturedCall(cfn, target) }
override Callable getARuntimeTarget() { transitiveCapturedCallTarget(cfn, result) }
override Callable getARuntimeTarget() { result = target }
override ControlFlow::Nodes::ElementNode getControlFlowNode() { result = cfn }

2
csharp/ql/src/semmle/code/csharp/dataflow/internal/DataFlowPrivate.qll
View File

@@ -991,7 +991,7 @@ private module OutNodes {
additionalCalls = false and
call.(ImplicitDelegateDataFlowCall).isArgumentOf(csharpCall(_, cfn), _)
or
additionalCalls = true and call = TTransitiveCapturedCall(cfn)
additionalCalls = true and call = TTransitiveCapturedCall(cfn, n.getEnclosingCallable())
)
}

29
csharp/ql/test/library-tests/dataflow/global/Capture.cs
View File

@@ -47,6 +47,18 @@ class Capture
};
};
CaptureIn2NotCalled();
void CaptureTest(string nonSink0, string sink39)
{
RunAction(() => // Check each lambda captures the correct arguments
{
Check(nonSink0);
RunAction(() =>
{
Check(sink39);
});
});
}
CaptureTest("not tainted", tainted);
}
void Out()
@@ -96,6 +108,18 @@ class Capture
};
CaptureOut2NotCalled();
Check(nonSink0);
string sink40 = "";
void CaptureOutMultipleLambdas()
{
RunAction(() => {
sink40 = "taint source";
});
RunAction(() => {
nonSink0 = "not tainted";
});
};
CaptureOutMultipleLambdas();
Check(sink40); Check(nonSink0);
}
void Through(string tainted)
@@ -174,4 +198,9 @@ class Capture
}
static void Check<T>(T x) { }
static void RunAction(Action a)
{
a.Invoke();
}
}

20
csharp/ql/test/library-tests/dataflow/global/DataFlow.expected
View File

@@ -1,15 +1,17 @@
| Capture.cs:12:19:12:24 | access to local variable sink27 |
| Capture.cs:21:23:21:28 | access to local variable sink28 |
| Capture.cs:30:19:30:24 | access to local variable sink29 |
| Capture.cs:60:15:60:20 | access to local variable sink30 |
| Capture.cs:72:15:72:20 | access to local variable sink31 |
| Capture.cs:81:15:81:20 | access to local variable sink32 |
| Capture.cs:109:15:109:20 | access to local variable sink33 |
| Capture.cs:121:15:121:20 | access to local variable sink34 |
| Capture.cs:130:15:130:20 | access to local variable sink35 |
| Capture.cs:137:15:137:20 | access to local variable sink36 |
| Capture.cs:145:15:145:20 | access to local variable sink37 |
| Capture.cs:171:15:171:20 | access to local variable sink38 |
| Capture.cs:57:27:57:32 | access to parameter sink39 |
| Capture.cs:72:15:72:20 | access to local variable sink30 |
| Capture.cs:84:15:84:20 | access to local variable sink31 |
| Capture.cs:93:15:93:20 | access to local variable sink32 |
| Capture.cs:122:15:122:20 | access to local variable sink40 |
| Capture.cs:133:15:133:20 | access to local variable sink33 |
| Capture.cs:145:15:145:20 | access to local variable sink34 |
| Capture.cs:154:15:154:20 | access to local variable sink35 |
| Capture.cs:161:15:161:20 | access to local variable sink36 |
| Capture.cs:169:15:169:20 | access to local variable sink37 |
| Capture.cs:195:15:195:20 | access to local variable sink38 |
| GlobalDataFlow.cs:18:15:18:29 | access to field SinkField0 |
| GlobalDataFlow.cs:26:15:26:32 | access to property SinkProperty0 |
| GlobalDataFlow.cs:44:50:44:59 | access to parameter sinkParam2 |

534
csharp/ql/test/library-tests/dataflow/global/DataFlowEdges.expected
View File

@@ -4,6 +4,8 @@
| Capture.cs:7:20:7:26 | tainted | Capture.cs:25:9:25:20 | [implicit argument] tainted |
| Capture.cs:7:20:7:26 | tainted | Capture.cs:33:9:33:40 | [implicit argument] tainted |
| Capture.cs:7:20:7:26 | tainted | Capture.cs:33:9:33:40 | [implicit argument] tainted |
| Capture.cs:7:20:7:26 | tainted | Capture.cs:61:36:61:42 | access to parameter tainted |
| Capture.cs:7:20:7:26 | tainted | Capture.cs:61:36:61:42 | access to parameter tainted |
| Capture.cs:9:9:13:9 | SSA capture def(tainted) | Capture.cs:11:17:11:32 | SSA def(sink27) |
| Capture.cs:9:9:13:9 | SSA capture def(tainted) | Capture.cs:11:17:11:32 | SSA def(sink27) |
| Capture.cs:9:9:13:9 | SSA capture def(tainted) | Capture.cs:11:17:11:32 | SSA def(sink27) |
@@ -118,242 +120,302 @@
| Capture.cs:45:32:45:38 | access to parameter tainted | Capture.cs:45:21:45:38 | SSA def(nonSink0) |
| Capture.cs:45:32:45:38 | access to parameter tainted | Capture.cs:46:23:46:30 | access to local variable nonSink0 |
| Capture.cs:45:32:45:38 | access to parameter tainted | Capture.cs:46:23:46:30 | access to local variable nonSink0 |
| Capture.cs:54:25:54:26 | "" | Capture.cs:54:16:54:26 | SSA def(sink30) |
| Capture.cs:54:25:54:26 | "" | Capture.cs:54:16:54:26 | SSA def(sink30) |
| Capture.cs:57:13:57:35 | SSA def(sink30) | Capture.cs:59:9:59:21 | SSA call def(sink30) |
| Capture.cs:57:13:57:35 | SSA def(sink30) | Capture.cs:59:9:59:21 | SSA call def(sink30) |
| Capture.cs:57:22:57:35 | "taint source" | Capture.cs:57:13:57:35 | SSA def(sink30) |
| Capture.cs:57:22:57:35 | "taint source" | Capture.cs:57:13:57:35 | SSA def(sink30) |
| Capture.cs:59:9:59:21 | SSA call def(sink30) | Capture.cs:60:15:60:20 | access to local variable sink30 |
| Capture.cs:59:9:59:21 | SSA call def(sink30) | Capture.cs:60:15:60:20 | access to local variable sink30 |
| Capture.cs:62:25:62:26 | "" | Capture.cs:62:16:62:26 | SSA def(sink31) |
| Capture.cs:62:25:62:26 | "" | Capture.cs:62:16:62:26 | SSA def(sink31) |
| Capture.cs:67:17:67:39 | SSA def(sink31) | Capture.cs:71:9:71:21 | SSA call def(sink31) |
| Capture.cs:67:17:67:39 | SSA def(sink31) | Capture.cs:71:9:71:21 | SSA call def(sink31) |
| Capture.cs:67:26:67:39 | "taint source" | Capture.cs:67:17:67:39 | SSA def(sink31) |
| Capture.cs:67:26:67:39 | "taint source" | Capture.cs:67:17:67:39 | SSA def(sink31) |
| Capture.cs:71:9:71:21 | SSA call def(sink31) | Capture.cs:72:15:72:20 | access to local variable sink31 |
| Capture.cs:71:9:71:21 | SSA call def(sink31) | Capture.cs:72:15:72:20 | access to local variable sink31 |
| Capture.cs:74:25:74:26 | "" | Capture.cs:74:16:74:26 | SSA def(sink32) |
| Capture.cs:74:25:74:26 | "" | Capture.cs:74:16:74:26 | SSA def(sink32) |
| Capture.cs:75:30:79:9 | SSA def(captureOut3) | Capture.cs:80:30:80:40 | access to local variable captureOut3 |
| Capture.cs:75:30:79:9 | SSA def(captureOut3) | Capture.cs:80:30:80:40 | access to local variable captureOut3 |
| Capture.cs:75:44:75:46 | arg | Capture.cs:78:20:78:22 | access to parameter arg |
| Capture.cs:75:44:75:46 | arg | Capture.cs:78:20:78:22 | access to parameter arg |
| Capture.cs:75:44:79:9 | (...) => ... | Capture.cs:75:30:79:9 | SSA def(captureOut3) |
| Capture.cs:75:44:79:9 | (...) => ... | Capture.cs:75:30:79:9 | SSA def(captureOut3) |
| Capture.cs:75:44:79:9 | (...) => ... | Capture.cs:80:30:80:40 | access to local variable captureOut3 |
| Capture.cs:75:44:79:9 | (...) => ... | Capture.cs:80:30:80:40 | access to local variable captureOut3 |
| Capture.cs:77:13:77:35 | SSA def(sink32) | Capture.cs:80:9:80:41 | SSA call def(sink32) |
| Capture.cs:77:13:77:35 | SSA def(sink32) | Capture.cs:80:9:80:41 | SSA call def(sink32) |
| Capture.cs:77:22:77:35 | "taint source" | Capture.cs:77:13:77:35 | SSA def(sink32) |
| Capture.cs:77:22:77:35 | "taint source" | Capture.cs:77:13:77:35 | SSA def(sink32) |
| Capture.cs:78:20:78:22 | access to parameter arg | Capture.cs:80:30:80:40 | [output] access to local variable captureOut3 |
| Capture.cs:78:20:78:22 | access to parameter arg | Capture.cs:80:30:80:40 | [output] access to local variable captureOut3 |
| Capture.cs:80:9:80:21 | array creation of type String[] | Capture.cs:75:44:75:46 | arg |
| Capture.cs:80:9:80:21 | array creation of type String[] | Capture.cs:75:44:75:46 | arg |
| Capture.cs:80:9:80:41 | SSA call def(sink32) | Capture.cs:81:15:81:20 | access to local variable sink32 |
| Capture.cs:80:9:80:41 | SSA call def(sink32) | Capture.cs:81:15:81:20 | access to local variable sink32 |
| Capture.cs:83:16:83:28 | SSA def(nonSink0) | Capture.cs:88:15:88:22 | access to local variable nonSink0 |
| Capture.cs:83:16:83:28 | SSA def(nonSink0) | Capture.cs:88:15:88:22 | access to local variable nonSink0 |
| Capture.cs:83:16:83:28 | SSA def(nonSink0) | Capture.cs:98:15:98:22 | access to local variable nonSink0 |
| Capture.cs:83:16:83:28 | SSA def(nonSink0) | Capture.cs:98:15:98:22 | access to local variable nonSink0 |
| Capture.cs:83:27:83:28 | "" | Capture.cs:83:16:83:28 | SSA def(nonSink0) |
| Capture.cs:83:27:83:28 | "" | Capture.cs:83:16:83:28 | SSA def(nonSink0) |
| Capture.cs:83:27:83:28 | "" | Capture.cs:88:15:88:22 | access to local variable nonSink0 |
| Capture.cs:83:27:83:28 | "" | Capture.cs:88:15:88:22 | access to local variable nonSink0 |
| Capture.cs:83:27:83:28 | "" | Capture.cs:98:15:98:22 | access to local variable nonSink0 |
| Capture.cs:83:27:83:28 | "" | Capture.cs:98:15:98:22 | access to local variable nonSink0 |
| Capture.cs:88:15:88:22 | access to local variable nonSink0 | Capture.cs:98:15:98:22 | access to local variable nonSink0 |
| Capture.cs:88:15:88:22 | access to local variable nonSink0 | Capture.cs:98:15:98:22 | access to local variable nonSink0 |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:108:9:108:25 | [implicit argument] tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:108:9:108:25 | [implicit argument] tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:120:9:120:25 | [implicit argument] tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:120:9:120:25 | [implicit argument] tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:129:9:129:45 | [implicit argument] tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:129:9:129:45 | [implicit argument] tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:136:22:136:38 | [implicit argument] tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:136:22:136:38 | [implicit argument] tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:144:25:144:31 | access to parameter tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:144:25:144:31 | access to parameter tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:170:25:170:31 | access to parameter tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:170:25:170:31 | access to parameter tainted |
| Capture.cs:103:25:103:26 | "" | Capture.cs:103:16:103:26 | SSA def(sink33) |
| Capture.cs:103:25:103:26 | "" | Capture.cs:103:16:103:26 | SSA def(sink33) |
| Capture.cs:104:9:107:9 | SSA capture def(tainted) | Capture.cs:106:13:106:28 | SSA def(sink33) |
| Capture.cs:104:9:107:9 | SSA capture def(tainted) | Capture.cs:106:13:106:28 | SSA def(sink33) |
| Capture.cs:104:9:107:9 | SSA capture def(tainted) | Capture.cs:106:13:106:28 | SSA def(sink33) |
| Capture.cs:104:9:107:9 | SSA capture def(tainted) | Capture.cs:106:13:106:28 | SSA def(sink33) |
| Capture.cs:104:9:107:9 | SSA capture def(tainted) | Capture.cs:106:22:106:28 | access to parameter tainted |
| Capture.cs:104:9:107:9 | SSA capture def(tainted) | Capture.cs:106:22:106:28 | access to parameter tainted |
| Capture.cs:104:9:107:9 | SSA capture def(tainted) | Capture.cs:106:22:106:28 | access to parameter tainted |
| Capture.cs:104:9:107:9 | SSA capture def(tainted) | Capture.cs:106:22:106:28 | access to parameter tainted |
| Capture.cs:106:13:106:28 | SSA def(sink33) | Capture.cs:108:9:108:25 | SSA call def(sink33) |
| Capture.cs:106:13:106:28 | SSA def(sink33) | Capture.cs:108:9:108:25 | SSA call def(sink33) |
| Capture.cs:106:22:106:28 | access to parameter tainted | Capture.cs:106:13:106:28 | SSA def(sink33) |
| Capture.cs:106:22:106:28 | access to parameter tainted | Capture.cs:106:13:106:28 | SSA def(sink33) |
| Capture.cs:106:22:106:28 | access to parameter tainted | Capture.cs:106:13:106:28 | SSA def(sink33) |
| Capture.cs:106:22:106:28 | access to parameter tainted | Capture.cs:106:13:106:28 | SSA def(sink33) |
| Capture.cs:108:9:108:25 | SSA call def(sink33) | Capture.cs:109:15:109:20 | access to local variable sink33 |
| Capture.cs:108:9:108:25 | SSA call def(sink33) | Capture.cs:109:15:109:20 | access to local variable sink33 |
| Capture.cs:108:9:108:25 | [implicit argument] tainted | Capture.cs:104:9:107:9 | SSA capture def(tainted) |
| Capture.cs:108:9:108:25 | [implicit argument] tainted | Capture.cs:104:9:107:9 | SSA capture def(tainted) |
| Capture.cs:108:9:108:25 | [implicit argument] tainted | Capture.cs:108:9:108:25 | SSA call def(sink33) |
| Capture.cs:108:9:108:25 | [implicit argument] tainted | Capture.cs:108:9:108:25 | SSA call def(sink33) |
| Capture.cs:111:25:111:26 | "" | Capture.cs:111:16:111:26 | SSA def(sink34) |
| Capture.cs:111:25:111:26 | "" | Capture.cs:111:16:111:26 | SSA def(sink34) |
| Capture.cs:114:13:117:13 | SSA capture def(tainted) | Capture.cs:116:17:116:32 | SSA def(sink34) |
| Capture.cs:114:13:117:13 | SSA capture def(tainted) | Capture.cs:116:17:116:32 | SSA def(sink34) |
| Capture.cs:114:13:117:13 | SSA capture def(tainted) | Capture.cs:116:17:116:32 | SSA def(sink34) |
| Capture.cs:114:13:117:13 | SSA capture def(tainted) | Capture.cs:116:17:116:32 | SSA def(sink34) |
| Capture.cs:114:13:117:13 | SSA capture def(tainted) | Capture.cs:116:26:116:32 | access to parameter tainted |
| Capture.cs:114:13:117:13 | SSA capture def(tainted) | Capture.cs:116:26:116:32 | access to parameter tainted |
| Capture.cs:114:13:117:13 | SSA capture def(tainted) | Capture.cs:116:26:116:32 | access to parameter tainted |
| Capture.cs:114:13:117:13 | SSA capture def(tainted) | Capture.cs:116:26:116:32 | access to parameter tainted |
| Capture.cs:116:17:116:32 | SSA def(sink34) | Capture.cs:120:9:120:25 | SSA call def(sink34) |
| Capture.cs:116:17:116:32 | SSA def(sink34) | Capture.cs:120:9:120:25 | SSA call def(sink34) |
| Capture.cs:116:26:116:32 | access to parameter tainted | Capture.cs:116:17:116:32 | SSA def(sink34) |
| Capture.cs:116:26:116:32 | access to parameter tainted | Capture.cs:116:17:116:32 | SSA def(sink34) |
| Capture.cs:116:26:116:32 | access to parameter tainted | Capture.cs:116:17:116:32 | SSA def(sink34) |
| Capture.cs:116:26:116:32 | access to parameter tainted | Capture.cs:116:17:116:32 | SSA def(sink34) |
| Capture.cs:120:9:120:25 | SSA call def(sink34) | Capture.cs:121:15:121:20 | access to local variable sink34 |
| Capture.cs:120:9:120:25 | SSA call def(sink34) | Capture.cs:121:15:121:20 | access to local variable sink34 |
| Capture.cs:120:9:120:25 | [implicit argument] tainted | Capture.cs:114:13:117:13 | SSA capture def(tainted) |
| Capture.cs:120:9:120:25 | [implicit argument] tainted | Capture.cs:114:13:117:13 | SSA capture def(tainted) |
| Capture.cs:120:9:120:25 | [implicit argument] tainted | Capture.cs:120:9:120:25 | SSA call def(sink34) |
| Capture.cs:120:9:120:25 | [implicit argument] tainted | Capture.cs:120:9:120:25 | SSA call def(sink34) |
| Capture.cs:123:25:123:26 | "" | Capture.cs:123:16:123:26 | SSA def(sink35) |
| Capture.cs:123:25:123:26 | "" | Capture.cs:123:16:123:26 | SSA def(sink35) |
| Capture.cs:124:30:128:9 | SSA def(captureThrough3) | Capture.cs:129:30:129:44 | access to local variable captureThrough3 |
| Capture.cs:124:30:128:9 | SSA def(captureThrough3) | Capture.cs:129:30:129:44 | access to local variable captureThrough3 |
| Capture.cs:124:48:124:50 | arg | Capture.cs:127:20:127:22 | access to parameter arg |
| Capture.cs:124:48:124:50 | arg | Capture.cs:127:20:127:22 | access to parameter arg |
| Capture.cs:124:48:128:9 | (...) => ... | Capture.cs:124:30:128:9 | SSA def(captureThrough3) |
| Capture.cs:124:48:128:9 | (...) => ... | Capture.cs:124:30:128:9 | SSA def(captureThrough3) |
| Capture.cs:124:48:128:9 | (...) => ... | Capture.cs:129:30:129:44 | access to local variable captureThrough3 |
| Capture.cs:124:48:128:9 | (...) => ... | Capture.cs:129:30:129:44 | access to local variable captureThrough3 |
| Capture.cs:124:48:128:9 | SSA capture def(tainted) | Capture.cs:126:13:126:28 | SSA def(sink35) |
| Capture.cs:124:48:128:9 | SSA capture def(tainted) | Capture.cs:126:13:126:28 | SSA def(sink35) |
| Capture.cs:124:48:128:9 | SSA capture def(tainted) | Capture.cs:126:13:126:28 | SSA def(sink35) |
| Capture.cs:124:48:128:9 | SSA capture def(tainted) | Capture.cs:126:13:126:28 | SSA def(sink35) |
| Capture.cs:124:48:128:9 | SSA capture def(tainted) | Capture.cs:126:22:126:28 | access to parameter tainted |
| Capture.cs:124:48:128:9 | SSA capture def(tainted) | Capture.cs:126:22:126:28 | access to parameter tainted |
| Capture.cs:124:48:128:9 | SSA capture def(tainted) | Capture.cs:126:22:126:28 | access to parameter tainted |
| Capture.cs:124:48:128:9 | SSA capture def(tainted) | Capture.cs:126:22:126:28 | access to parameter tainted |
| Capture.cs:126:13:126:28 | SSA def(sink35) | Capture.cs:129:9:129:45 | SSA call def(sink35) |
| Capture.cs:126:13:126:28 | SSA def(sink35) | Capture.cs:129:9:129:45 | SSA call def(sink35) |
| Capture.cs:126:22:126:28 | access to parameter tainted | Capture.cs:126:13:126:28 | SSA def(sink35) |
| Capture.cs:126:22:126:28 | access to parameter tainted | Capture.cs:126:13:126:28 | SSA def(sink35) |
| Capture.cs:126:22:126:28 | access to parameter tainted | Capture.cs:126:13:126:28 | SSA def(sink35) |
| Capture.cs:126:22:126:28 | access to parameter tainted | Capture.cs:126:13:126:28 | SSA def(sink35) |
| Capture.cs:127:20:127:22 | access to parameter arg | Capture.cs:129:30:129:44 | [output] access to local variable captureThrough3 |
| Capture.cs:127:20:127:22 | access to parameter arg | Capture.cs:129:30:129:44 | [output] access to local variable captureThrough3 |
| Capture.cs:129:9:129:21 | array creation of type String[] | Capture.cs:124:48:124:50 | arg |
| Capture.cs:129:9:129:21 | array creation of type String[] | Capture.cs:124:48:124:50 | arg |
| Capture.cs:129:9:129:45 | SSA call def(sink35) | Capture.cs:130:15:130:20 | access to local variable sink35 |
| Capture.cs:129:9:129:45 | SSA call def(sink35) | Capture.cs:130:15:130:20 | access to local variable sink35 |
| Capture.cs:129:9:129:45 | [implicit argument] tainted | Capture.cs:124:48:128:9 | SSA capture def(tainted) |
| Capture.cs:129:9:129:45 | [implicit argument] tainted | Capture.cs:124:48:128:9 | SSA capture def(tainted) |
| Capture.cs:129:9:129:45 | [implicit argument] tainted | Capture.cs:129:9:129:45 | SSA call def(sink35) |
| Capture.cs:129:9:129:45 | [implicit argument] tainted | Capture.cs:129:9:129:45 | SSA call def(sink35) |
| Capture.cs:132:9:135:9 | SSA capture def(tainted) | Capture.cs:134:20:134:26 | access to parameter tainted |
| Capture.cs:132:9:135:9 | SSA capture def(tainted) | Capture.cs:134:20:134:26 | access to parameter tainted |
| Capture.cs:132:9:135:9 | SSA capture def(tainted) | Capture.cs:134:20:134:26 | access to parameter tainted |
| Capture.cs:132:9:135:9 | SSA capture def(tainted) | Capture.cs:134:20:134:26 | access to parameter tainted |
| Capture.cs:134:20:134:26 | access to parameter tainted | Capture.cs:136:22:136:38 | call to local function CaptureThrough4 |
| Capture.cs:134:20:134:26 | access to parameter tainted | Capture.cs:136:22:136:38 | call to local function CaptureThrough4 |
| Capture.cs:136:13:136:38 | SSA def(sink36) | Capture.cs:137:15:137:20 | access to local variable sink36 |
| Capture.cs:136:13:136:38 | SSA def(sink36) | Capture.cs:137:15:137:20 | access to local variable sink36 |
| Capture.cs:136:22:136:38 | [implicit argument] tainted | Capture.cs:132:9:135:9 | SSA capture def(tainted) |
| Capture.cs:136:22:136:38 | [implicit argument] tainted | Capture.cs:132:9:135:9 | SSA capture def(tainted) |
| Capture.cs:136:22:136:38 | [implicit argument] tainted | Capture.cs:136:22:136:38 | call to local function CaptureThrough4 |
| Capture.cs:136:22:136:38 | [implicit argument] tainted | Capture.cs:136:22:136:38 | call to local function CaptureThrough4 |
| Capture.cs:136:22:136:38 | call to local function CaptureThrough4 | Capture.cs:136:13:136:38 | SSA def(sink36) |
| Capture.cs:136:22:136:38 | call to local function CaptureThrough4 | Capture.cs:136:13:136:38 | SSA def(sink36) |
| Capture.cs:136:22:136:38 | call to local function CaptureThrough4 | Capture.cs:137:15:137:20 | access to local variable sink36 |
| Capture.cs:136:22:136:38 | call to local function CaptureThrough4 | Capture.cs:137:15:137:20 | access to local variable sink36 |
| Capture.cs:139:22:139:23 | "" | Capture.cs:139:13:139:23 | SSA def(sink37) |
| Capture.cs:139:22:139:23 | "" | Capture.cs:139:13:139:23 | SSA def(sink37) |
| Capture.cs:140:37:140:37 | p | Capture.cs:142:13:142:22 | SSA def(sink37) |
| Capture.cs:140:37:140:37 | p | Capture.cs:142:13:142:22 | SSA def(sink37) |
| Capture.cs:140:37:140:37 | p | Capture.cs:142:13:142:22 | SSA def(sink37) |
| Capture.cs:140:37:140:37 | p | Capture.cs:142:13:142:22 | SSA def(sink37) |
| Capture.cs:140:37:140:37 | p | Capture.cs:142:22:142:22 | access to parameter p |
| Capture.cs:140:37:140:37 | p | Capture.cs:142:22:142:22 | access to parameter p |
| Capture.cs:140:37:140:37 | p | Capture.cs:142:22:142:22 | access to parameter p |
| Capture.cs:140:37:140:37 | p | Capture.cs:142:22:142:22 | access to parameter p |
| Capture.cs:142:13:142:22 | SSA def(sink37) | Capture.cs:144:9:144:32 | SSA call def(sink37) |
| Capture.cs:142:13:142:22 | SSA def(sink37) | Capture.cs:144:9:144:32 | SSA call def(sink37) |
| Capture.cs:142:22:142:22 | access to parameter p | Capture.cs:142:13:142:22 | SSA def(sink37) |
| Capture.cs:142:22:142:22 | access to parameter p | Capture.cs:142:13:142:22 | SSA def(sink37) |
| Capture.cs:142:22:142:22 | access to parameter p | Capture.cs:142:13:142:22 | SSA def(sink37) |
| Capture.cs:142:22:142:22 | access to parameter p | Capture.cs:142:13:142:22 | SSA def(sink37) |
| Capture.cs:144:9:144:32 | SSA call def(sink37) | Capture.cs:145:15:145:20 | access to local variable sink37 |
| Capture.cs:144:9:144:32 | SSA call def(sink37) | Capture.cs:145:15:145:20 | access to local variable sink37 |
| Capture.cs:144:25:144:31 | access to parameter tainted | Capture.cs:140:37:140:37 | p |
| Capture.cs:144:25:144:31 | access to parameter tainted | Capture.cs:140:37:140:37 | p |
| Capture.cs:144:25:144:31 | access to parameter tainted | Capture.cs:144:9:144:32 | SSA call def(sink37) |
| Capture.cs:144:25:144:31 | access to parameter tainted | Capture.cs:144:9:144:32 | SSA call def(sink37) |
| Capture.cs:144:25:144:31 | access to parameter tainted | Capture.cs:170:25:170:31 | access to parameter tainted |
| Capture.cs:144:25:144:31 | access to parameter tainted | Capture.cs:170:25:170:31 | access to parameter tainted |
| Capture.cs:147:16:147:28 | SSA def(nonSink0) | Capture.cs:152:15:152:22 | access to local variable nonSink0 |
| Capture.cs:147:16:147:28 | SSA def(nonSink0) | Capture.cs:152:15:152:22 | access to local variable nonSink0 |
| Capture.cs:147:16:147:28 | SSA def(nonSink0) | Capture.cs:162:15:162:22 | access to local variable nonSink0 |
| Capture.cs:147:16:147:28 | SSA def(nonSink0) | Capture.cs:162:15:162:22 | access to local variable nonSink0 |
| Capture.cs:147:27:147:28 | "" | Capture.cs:147:16:147:28 | SSA def(nonSink0) |
| Capture.cs:147:27:147:28 | "" | Capture.cs:147:16:147:28 | SSA def(nonSink0) |
| Capture.cs:147:27:147:28 | "" | Capture.cs:152:15:152:22 | access to local variable nonSink0 |
| Capture.cs:147:27:147:28 | "" | Capture.cs:152:15:152:22 | access to local variable nonSink0 |
| Capture.cs:147:27:147:28 | "" | Capture.cs:162:15:162:22 | access to local variable nonSink0 |
| Capture.cs:147:27:147:28 | "" | Capture.cs:162:15:162:22 | access to local variable nonSink0 |
| Capture.cs:148:9:151:9 | SSA capture def(tainted) | Capture.cs:150:24:150:30 | access to parameter tainted |
| Capture.cs:148:9:151:9 | SSA capture def(tainted) | Capture.cs:150:24:150:30 | access to parameter tainted |
| Capture.cs:152:15:152:22 | access to local variable nonSink0 | Capture.cs:162:15:162:22 | access to local variable nonSink0 |
| Capture.cs:152:15:152:22 | access to local variable nonSink0 | Capture.cs:162:15:162:22 | access to local variable nonSink0 |
| Capture.cs:156:13:159:13 | SSA capture def(tainted) | Capture.cs:158:28:158:34 | access to parameter tainted |
| Capture.cs:156:13:159:13 | SSA capture def(tainted) | Capture.cs:158:28:158:34 | access to parameter tainted |
| Capture.cs:164:26:164:26 | s | Capture.cs:167:20:167:22 | [implicit argument] s |
| Capture.cs:164:26:164:26 | s | Capture.cs:167:20:167:22 | [implicit argument] s |
| Capture.cs:164:26:164:26 | s | Capture.cs:167:20:167:22 | [implicit argument] s |
| Capture.cs:164:26:164:26 | s | Capture.cs:167:20:167:22 | [implicit argument] s |
| Capture.cs:166:13:166:28 | SSA capture def(s) | Capture.cs:166:27:166:27 | access to parameter s |
| Capture.cs:166:13:166:28 | SSA capture def(s) | Capture.cs:166:27:166:27 | access to parameter s |
| Capture.cs:166:13:166:28 | SSA capture def(s) | Capture.cs:166:27:166:27 | access to parameter s |
| Capture.cs:166:13:166:28 | SSA capture def(s) | Capture.cs:166:27:166:27 | access to parameter s |
| Capture.cs:166:27:166:27 | access to parameter s | Capture.cs:167:20:167:22 | call to local function M |
| Capture.cs:166:27:166:27 | access to parameter s | Capture.cs:167:20:167:22 | call to local function M |
| Capture.cs:167:20:167:22 | [implicit argument] s | Capture.cs:166:13:166:28 | SSA capture def(s) |
| Capture.cs:167:20:167:22 | [implicit argument] s | Capture.cs:166:13:166:28 | SSA capture def(s) |
| Capture.cs:167:20:167:22 | [implicit argument] s | Capture.cs:166:13:166:28 | SSA capture def(s) |
| Capture.cs:167:20:167:22 | [implicit argument] s | Capture.cs:166:13:166:28 | SSA capture def(s) |
| Capture.cs:167:20:167:22 | [implicit argument] s | Capture.cs:167:20:167:22 | call to local function M |
| Capture.cs:167:20:167:22 | [implicit argument] s | Capture.cs:167:20:167:22 | call to local function M |
| Capture.cs:167:20:167:22 | [implicit argument] s | Capture.cs:167:20:167:22 | call to local function M |
| Capture.cs:167:20:167:22 | [implicit argument] s | Capture.cs:167:20:167:22 | call to local function M |
| Capture.cs:167:20:167:22 | call to local function M | Capture.cs:170:22:170:32 | call to local function Id |
| Capture.cs:167:20:167:22 | call to local function M | Capture.cs:170:22:170:32 | call to local function Id |
| Capture.cs:167:20:167:22 | call to local function M | Capture.cs:172:20:172:25 | call to local function Id |
| Capture.cs:167:20:167:22 | call to local function M | Capture.cs:172:20:172:25 | call to local function Id |
| Capture.cs:170:13:170:32 | SSA def(sink38) | Capture.cs:171:15:171:20 | access to local variable sink38 |
| Capture.cs:170:13:170:32 | SSA def(sink38) | Capture.cs:171:15:171:20 | access to local variable sink38 |
| Capture.cs:170:22:170:32 | call to local function Id | Capture.cs:170:13:170:32 | SSA def(sink38) |
| Capture.cs:170:22:170:32 | call to local function Id | Capture.cs:170:13:170:32 | SSA def(sink38) |
| Capture.cs:170:22:170:32 | call to local function Id | Capture.cs:171:15:171:20 | access to local variable sink38 |
| Capture.cs:170:22:170:32 | call to local function Id | Capture.cs:171:15:171:20 | access to local variable sink38 |
| Capture.cs:170:25:170:31 | access to parameter tainted | Capture.cs:164:26:164:26 | s |
| Capture.cs:170:25:170:31 | access to parameter tainted | Capture.cs:164:26:164:26 | s |
| Capture.cs:170:25:170:31 | access to parameter tainted | Capture.cs:170:22:170:32 | call to local function Id |
| Capture.cs:170:25:170:31 | access to parameter tainted | Capture.cs:170:22:170:32 | call to local function Id |
| Capture.cs:172:9:172:25 | SSA def(nonSink0) | Capture.cs:173:15:173:22 | access to local variable nonSink0 |
| Capture.cs:172:9:172:25 | SSA def(nonSink0) | Capture.cs:173:15:173:22 | access to local variable nonSink0 |
| Capture.cs:172:20:172:25 | call to local function Id | Capture.cs:172:9:172:25 | SSA def(nonSink0) |
| Capture.cs:172:20:172:25 | call to local function Id | Capture.cs:172:9:172:25 | SSA def(nonSink0) |
| Capture.cs:172:20:172:25 | call to local function Id | Capture.cs:173:15:173:22 | access to local variable nonSink0 |
| Capture.cs:172:20:172:25 | call to local function Id | Capture.cs:173:15:173:22 | access to local variable nonSink0 |
| Capture.cs:172:23:172:24 | "" | Capture.cs:164:26:164:26 | s |
| Capture.cs:172:23:172:24 | "" | Capture.cs:164:26:164:26 | s |
| Capture.cs:172:23:172:24 | "" | Capture.cs:172:20:172:25 | call to local function Id |
| Capture.cs:172:23:172:24 | "" | Capture.cs:172:20:172:25 | call to local function Id |
| Capture.cs:50:33:50:40 | nonSink0 | Capture.cs:52:13:59:14 | [implicit argument] nonSink0 |
| Capture.cs:50:33:50:40 | nonSink0 | Capture.cs:52:13:59:14 | [implicit argument] nonSink0 |
| Capture.cs:50:33:50:40 | nonSink0 | Capture.cs:52:13:59:14 | [implicit argument] nonSink0 |
| Capture.cs:50:33:50:40 | nonSink0 | Capture.cs:52:13:59:14 | [implicit argument] nonSink0 |
| Capture.cs:50:50:50:55 | sink39 | Capture.cs:52:13:59:14 | [implicit argument] sink39 |
| Capture.cs:50:50:50:55 | sink39 | Capture.cs:52:13:59:14 | [implicit argument] sink39 |
| Capture.cs:50:50:50:55 | sink39 | Capture.cs:52:13:59:14 | [implicit argument] sink39 |
| Capture.cs:50:50:50:55 | sink39 | Capture.cs:52:13:59:14 | [implicit argument] sink39 |
| Capture.cs:52:13:59:14 | [implicit argument] nonSink0 | Capture.cs:52:23:59:13 | SSA capture def(nonSink0) |
| Capture.cs:52:13:59:14 | [implicit argument] nonSink0 | Capture.cs:52:23:59:13 | SSA capture def(nonSink0) |
| Capture.cs:52:13:59:14 | [implicit argument] nonSink0 | Capture.cs:52:23:59:13 | SSA capture def(nonSink0) |
| Capture.cs:52:13:59:14 | [implicit argument] nonSink0 | Capture.cs:52:23:59:13 | SSA capture def(nonSink0) |
| Capture.cs:52:13:59:14 | [implicit argument] sink39 | Capture.cs:55:27:58:17 | SSA capture def(sink39) |
| Capture.cs:52:13:59:14 | [implicit argument] sink39 | Capture.cs:55:27:58:17 | SSA capture def(sink39) |
| Capture.cs:52:13:59:14 | [implicit argument] sink39 | Capture.cs:55:27:58:17 | SSA capture def(sink39) |
| Capture.cs:52:13:59:14 | [implicit argument] sink39 | Capture.cs:55:27:58:17 | SSA capture def(sink39) |
| Capture.cs:52:23:59:13 | (...) => ... | Capture.cs:202:34:202:34 | a |
| Capture.cs:52:23:59:13 | (...) => ... | Capture.cs:202:34:202:34 | a |
| Capture.cs:52:23:59:13 | SSA capture def(nonSink0) | Capture.cs:54:23:54:30 | access to parameter nonSink0 |
| Capture.cs:52:23:59:13 | SSA capture def(nonSink0) | Capture.cs:54:23:54:30 | access to parameter nonSink0 |
| Capture.cs:52:23:59:13 | SSA capture def(nonSink0) | Capture.cs:54:23:54:30 | access to parameter nonSink0 |
| Capture.cs:52:23:59:13 | SSA capture def(nonSink0) | Capture.cs:54:23:54:30 | access to parameter nonSink0 |
| Capture.cs:55:27:58:17 | (...) => ... | Capture.cs:202:34:202:34 | a |
| Capture.cs:55:27:58:17 | (...) => ... | Capture.cs:202:34:202:34 | a |
| Capture.cs:55:27:58:17 | SSA capture def(sink39) | Capture.cs:57:27:57:32 | access to parameter sink39 |
| Capture.cs:55:27:58:17 | SSA capture def(sink39) | Capture.cs:57:27:57:32 | access to parameter sink39 |
| Capture.cs:55:27:58:17 | SSA capture def(sink39) | Capture.cs:57:27:57:32 | access to parameter sink39 |
| Capture.cs:55:27:58:17 | SSA capture def(sink39) | Capture.cs:57:27:57:32 | access to parameter sink39 |
| Capture.cs:61:21:61:33 | "not tainted" | Capture.cs:50:33:50:40 | nonSink0 |
| Capture.cs:61:21:61:33 | "not tainted" | Capture.cs:50:33:50:40 | nonSink0 |
| Capture.cs:61:36:61:42 | access to parameter tainted | Capture.cs:50:50:50:55 | sink39 |
| Capture.cs:61:36:61:42 | access to parameter tainted | Capture.cs:50:50:50:55 | sink39 |
| Capture.cs:66:25:66:26 | "" | Capture.cs:66:16:66:26 | SSA def(sink30) |
| Capture.cs:66:25:66:26 | "" | Capture.cs:66:16:66:26 | SSA def(sink30) |
| Capture.cs:69:13:69:35 | SSA def(sink30) | Capture.cs:71:9:71:21 | SSA call def(sink30) |
| Capture.cs:69:13:69:35 | SSA def(sink30) | Capture.cs:71:9:71:21 | SSA call def(sink30) |
| Capture.cs:69:22:69:35 | "taint source" | Capture.cs:69:13:69:35 | SSA def(sink30) |
| Capture.cs:69:22:69:35 | "taint source" | Capture.cs:69:13:69:35 | SSA def(sink30) |
| Capture.cs:71:9:71:21 | SSA call def(sink30) | Capture.cs:72:15:72:20 | access to local variable sink30 |
| Capture.cs:71:9:71:21 | SSA call def(sink30) | Capture.cs:72:15:72:20 | access to local variable sink30 |
| Capture.cs:74:25:74:26 | "" | Capture.cs:74:16:74:26 | SSA def(sink31) |
| Capture.cs:74:25:74:26 | "" | Capture.cs:74:16:74:26 | SSA def(sink31) |
| Capture.cs:79:17:79:39 | SSA def(sink31) | Capture.cs:83:9:83:21 | SSA call def(sink31) |
| Capture.cs:79:17:79:39 | SSA def(sink31) | Capture.cs:83:9:83:21 | SSA call def(sink31) |
| Capture.cs:79:26:79:39 | "taint source" | Capture.cs:79:17:79:39 | SSA def(sink31) |
| Capture.cs:79:26:79:39 | "taint source" | Capture.cs:79:17:79:39 | SSA def(sink31) |
| Capture.cs:83:9:83:21 | SSA call def(sink31) | Capture.cs:84:15:84:20 | access to local variable sink31 |
| Capture.cs:83:9:83:21 | SSA call def(sink31) | Capture.cs:84:15:84:20 | access to local variable sink31 |
| Capture.cs:86:25:86:26 | "" | Capture.cs:86:16:86:26 | SSA def(sink32) |
| Capture.cs:86:25:86:26 | "" | Capture.cs:86:16:86:26 | SSA def(sink32) |
| Capture.cs:87:30:91:9 | SSA def(captureOut3) | Capture.cs:92:30:92:40 | access to local variable captureOut3 |
| Capture.cs:87:30:91:9 | SSA def(captureOut3) | Capture.cs:92:30:92:40 | access to local variable captureOut3 |
| Capture.cs:87:44:87:46 | arg | Capture.cs:90:20:90:22 | access to parameter arg |
| Capture.cs:87:44:87:46 | arg | Capture.cs:90:20:90:22 | access to parameter arg |
| Capture.cs:87:44:91:9 | (...) => ... | Capture.cs:87:30:91:9 | SSA def(captureOut3) |
| Capture.cs:87:44:91:9 | (...) => ... | Capture.cs:87:30:91:9 | SSA def(captureOut3) |
| Capture.cs:87:44:91:9 | (...) => ... | Capture.cs:92:30:92:40 | access to local variable captureOut3 |
| Capture.cs:87:44:91:9 | (...) => ... | Capture.cs:92:30:92:40 | access to local variable captureOut3 |
| Capture.cs:89:13:89:35 | SSA def(sink32) | Capture.cs:92:9:92:41 | SSA call def(sink32) |
| Capture.cs:89:13:89:35 | SSA def(sink32) | Capture.cs:92:9:92:41 | SSA call def(sink32) |
| Capture.cs:89:22:89:35 | "taint source" | Capture.cs:89:13:89:35 | SSA def(sink32) |
| Capture.cs:89:22:89:35 | "taint source" | Capture.cs:89:13:89:35 | SSA def(sink32) |
| Capture.cs:90:20:90:22 | access to parameter arg | Capture.cs:92:30:92:40 | [output] access to local variable captureOut3 |
| Capture.cs:90:20:90:22 | access to parameter arg | Capture.cs:92:30:92:40 | [output] access to local variable captureOut3 |
| Capture.cs:92:9:92:21 | array creation of type String[] | Capture.cs:87:44:87:46 | arg |
| Capture.cs:92:9:92:21 | array creation of type String[] | Capture.cs:87:44:87:46 | arg |
| Capture.cs:92:9:92:41 | SSA call def(sink32) | Capture.cs:93:15:93:20 | access to local variable sink32 |
| Capture.cs:92:9:92:41 | SSA call def(sink32) | Capture.cs:93:15:93:20 | access to local variable sink32 |
| Capture.cs:95:16:95:28 | SSA def(nonSink0) | Capture.cs:100:15:100:22 | access to local variable nonSink0 |
| Capture.cs:95:16:95:28 | SSA def(nonSink0) | Capture.cs:100:15:100:22 | access to local variable nonSink0 |
| Capture.cs:95:16:95:28 | SSA def(nonSink0) | Capture.cs:110:15:110:22 | access to local variable nonSink0 |
| Capture.cs:95:16:95:28 | SSA def(nonSink0) | Capture.cs:110:15:110:22 | access to local variable nonSink0 |
| Capture.cs:95:27:95:28 | "" | Capture.cs:95:16:95:28 | SSA def(nonSink0) |
| Capture.cs:95:27:95:28 | "" | Capture.cs:95:16:95:28 | SSA def(nonSink0) |
| Capture.cs:95:27:95:28 | "" | Capture.cs:100:15:100:22 | access to local variable nonSink0 |
| Capture.cs:95:27:95:28 | "" | Capture.cs:100:15:100:22 | access to local variable nonSink0 |
| Capture.cs:95:27:95:28 | "" | Capture.cs:110:15:110:22 | access to local variable nonSink0 |
| Capture.cs:95:27:95:28 | "" | Capture.cs:110:15:110:22 | access to local variable nonSink0 |
| Capture.cs:100:15:100:22 | access to local variable nonSink0 | Capture.cs:110:15:110:22 | access to local variable nonSink0 |
| Capture.cs:100:15:100:22 | access to local variable nonSink0 | Capture.cs:110:15:110:22 | access to local variable nonSink0 |
| Capture.cs:111:25:111:26 | "" | Capture.cs:111:16:111:26 | SSA def(sink40) |
| Capture.cs:111:25:111:26 | "" | Capture.cs:111:16:111:26 | SSA def(sink40) |
| Capture.cs:114:23:116:13 | (...) => ... | Capture.cs:202:34:202:34 | a |
| Capture.cs:114:23:116:13 | (...) => ... | Capture.cs:202:34:202:34 | a |
| Capture.cs:115:17:115:39 | SSA def(sink40) | Capture.cs:121:9:121:35 | SSA call def(sink40) |
| Capture.cs:115:17:115:39 | SSA def(sink40) | Capture.cs:121:9:121:35 | SSA call def(sink40) |
| Capture.cs:115:26:115:39 | "taint source" | Capture.cs:115:17:115:39 | SSA def(sink40) |
| Capture.cs:115:26:115:39 | "taint source" | Capture.cs:115:17:115:39 | SSA def(sink40) |
| Capture.cs:117:23:119:13 | (...) => ... | Capture.cs:202:34:202:34 | a |
| Capture.cs:117:23:119:13 | (...) => ... | Capture.cs:202:34:202:34 | a |
| Capture.cs:118:17:118:40 | SSA def(nonSink0) | Capture.cs:121:9:121:35 | SSA call def(nonSink0) |
| Capture.cs:118:17:118:40 | SSA def(nonSink0) | Capture.cs:121:9:121:35 | SSA call def(nonSink0) |
| Capture.cs:118:28:118:40 | "not tainted" | Capture.cs:118:17:118:40 | SSA def(nonSink0) |
| Capture.cs:118:28:118:40 | "not tainted" | Capture.cs:118:17:118:40 | SSA def(nonSink0) |
| Capture.cs:121:9:121:35 | SSA call def(nonSink0) | Capture.cs:122:30:122:37 | access to local variable nonSink0 |
| Capture.cs:121:9:121:35 | SSA call def(nonSink0) | Capture.cs:122:30:122:37 | access to local variable nonSink0 |
| Capture.cs:121:9:121:35 | SSA call def(sink40) | Capture.cs:122:15:122:20 | access to local variable sink40 |
| Capture.cs:121:9:121:35 | SSA call def(sink40) | Capture.cs:122:15:122:20 | access to local variable sink40 |
| Capture.cs:125:25:125:31 | tainted | Capture.cs:132:9:132:25 | [implicit argument] tainted |
| Capture.cs:125:25:125:31 | tainted | Capture.cs:132:9:132:25 | [implicit argument] tainted |
| Capture.cs:125:25:125:31 | tainted | Capture.cs:144:9:144:25 | [implicit argument] tainted |
| Capture.cs:125:25:125:31 | tainted | Capture.cs:144:9:144:25 | [implicit argument] tainted |
| Capture.cs:125:25:125:31 | tainted | Capture.cs:153:9:153:45 | [implicit argument] tainted |
| Capture.cs:125:25:125:31 | tainted | Capture.cs:153:9:153:45 | [implicit argument] tainted |
| Capture.cs:125:25:125:31 | tainted | Capture.cs:160:22:160:38 | [implicit argument] tainted |
| Capture.cs:125:25:125:31 | tainted | Capture.cs:160:22:160:38 | [implicit argument] tainted |
| Capture.cs:125:25:125:31 | tainted | Capture.cs:168:25:168:31 | access to parameter tainted |
| Capture.cs:125:25:125:31 | tainted | Capture.cs:168:25:168:31 | access to parameter tainted |
| Capture.cs:125:25:125:31 | tainted | Capture.cs:194:25:194:31 | access to parameter tainted |
| Capture.cs:125:25:125:31 | tainted | Capture.cs:194:25:194:31 | access to parameter tainted |
| Capture.cs:127:25:127:26 | "" | Capture.cs:127:16:127:26 | SSA def(sink33) |
| Capture.cs:127:25:127:26 | "" | Capture.cs:127:16:127:26 | SSA def(sink33) |
| Capture.cs:128:9:131:9 | SSA capture def(tainted) | Capture.cs:130:13:130:28 | SSA def(sink33) |
| Capture.cs:128:9:131:9 | SSA capture def(tainted) | Capture.cs:130:13:130:28 | SSA def(sink33) |
| Capture.cs:128:9:131:9 | SSA capture def(tainted) | Capture.cs:130:13:130:28 | SSA def(sink33) |
| Capture.cs:128:9:131:9 | SSA capture def(tainted) | Capture.cs:130:13:130:28 | SSA def(sink33) |
| Capture.cs:128:9:131:9 | SSA capture def(tainted) | Capture.cs:130:22:130:28 | access to parameter tainted |
| Capture.cs:128:9:131:9 | SSA capture def(tainted) | Capture.cs:130:22:130:28 | access to parameter tainted |
| Capture.cs:128:9:131:9 | SSA capture def(tainted) | Capture.cs:130:22:130:28 | access to parameter tainted |
| Capture.cs:128:9:131:9 | SSA capture def(tainted) | Capture.cs:130:22:130:28 | access to parameter tainted |
| Capture.cs:130:13:130:28 | SSA def(sink33) | Capture.cs:132:9:132:25 | SSA call def(sink33) |
| Capture.cs:130:13:130:28 | SSA def(sink33) | Capture.cs:132:9:132:25 | SSA call def(sink33) |
| Capture.cs:130:22:130:28 | access to parameter tainted | Capture.cs:130:13:130:28 | SSA def(sink33) |
| Capture.cs:130:22:130:28 | access to parameter tainted | Capture.cs:130:13:130:28 | SSA def(sink33) |
| Capture.cs:130:22:130:28 | access to parameter tainted | Capture.cs:130:13:130:28 | SSA def(sink33) |
| Capture.cs:130:22:130:28 | access to parameter tainted | Capture.cs:130:13:130:28 | SSA def(sink33) |
| Capture.cs:132:9:132:25 | SSA call def(sink33) | Capture.cs:133:15:133:20 | access to local variable sink33 |
| Capture.cs:132:9:132:25 | SSA call def(sink33) | Capture.cs:133:15:133:20 | access to local variable sink33 |
| Capture.cs:132:9:132:25 | [implicit argument] tainted | Capture.cs:128:9:131:9 | SSA capture def(tainted) |
| Capture.cs:132:9:132:25 | [implicit argument] tainted | Capture.cs:128:9:131:9 | SSA capture def(tainted) |
| Capture.cs:132:9:132:25 | [implicit argument] tainted | Capture.cs:132:9:132:25 | SSA call def(sink33) |
| Capture.cs:132:9:132:25 | [implicit argument] tainted | Capture.cs:132:9:132:25 | SSA call def(sink33) |
| Capture.cs:135:25:135:26 | "" | Capture.cs:135:16:135:26 | SSA def(sink34) |
| Capture.cs:135:25:135:26 | "" | Capture.cs:135:16:135:26 | SSA def(sink34) |
| Capture.cs:138:13:141:13 | SSA capture def(tainted) | Capture.cs:140:17:140:32 | SSA def(sink34) |
| Capture.cs:138:13:141:13 | SSA capture def(tainted) | Capture.cs:140:17:140:32 | SSA def(sink34) |
| Capture.cs:138:13:141:13 | SSA capture def(tainted) | Capture.cs:140:17:140:32 | SSA def(sink34) |
| Capture.cs:138:13:141:13 | SSA capture def(tainted) | Capture.cs:140:17:140:32 | SSA def(sink34) |
| Capture.cs:138:13:141:13 | SSA capture def(tainted) | Capture.cs:140:26:140:32 | access to parameter tainted |
| Capture.cs:138:13:141:13 | SSA capture def(tainted) | Capture.cs:140:26:140:32 | access to parameter tainted |
| Capture.cs:138:13:141:13 | SSA capture def(tainted) | Capture.cs:140:26:140:32 | access to parameter tainted |
| Capture.cs:138:13:141:13 | SSA capture def(tainted) | Capture.cs:140:26:140:32 | access to parameter tainted |
| Capture.cs:140:17:140:32 | SSA def(sink34) | Capture.cs:144:9:144:25 | SSA call def(sink34) |
| Capture.cs:140:17:140:32 | SSA def(sink34) | Capture.cs:144:9:144:25 | SSA call def(sink34) |
| Capture.cs:140:26:140:32 | access to parameter tainted | Capture.cs:140:17:140:32 | SSA def(sink34) |
| Capture.cs:140:26:140:32 | access to parameter tainted | Capture.cs:140:17:140:32 | SSA def(sink34) |
| Capture.cs:140:26:140:32 | access to parameter tainted | Capture.cs:140:17:140:32 | SSA def(sink34) |
| Capture.cs:140:26:140:32 | access to parameter tainted | Capture.cs:140:17:140:32 | SSA def(sink34) |
| Capture.cs:144:9:144:25 | SSA call def(sink34) | Capture.cs:145:15:145:20 | access to local variable sink34 |
| Capture.cs:144:9:144:25 | SSA call def(sink34) | Capture.cs:145:15:145:20 | access to local variable sink34 |
| Capture.cs:144:9:144:25 | [implicit argument] tainted | Capture.cs:138:13:141:13 | SSA capture def(tainted) |
| Capture.cs:144:9:144:25 | [implicit argument] tainted | Capture.cs:138:13:141:13 | SSA capture def(tainted) |
| Capture.cs:144:9:144:25 | [implicit argument] tainted | Capture.cs:144:9:144:25 | SSA call def(sink34) |
| Capture.cs:144:9:144:25 | [implicit argument] tainted | Capture.cs:144:9:144:25 | SSA call def(sink34) |
| Capture.cs:147:25:147:26 | "" | Capture.cs:147:16:147:26 | SSA def(sink35) |
| Capture.cs:147:25:147:26 | "" | Capture.cs:147:16:147:26 | SSA def(sink35) |
| Capture.cs:148:30:152:9 | SSA def(captureThrough3) | Capture.cs:153:30:153:44 | access to local variable captureThrough3 |
| Capture.cs:148:30:152:9 | SSA def(captureThrough3) | Capture.cs:153:30:153:44 | access to local variable captureThrough3 |
| Capture.cs:148:48:148:50 | arg | Capture.cs:151:20:151:22 | access to parameter arg |
| Capture.cs:148:48:148:50 | arg | Capture.cs:151:20:151:22 | access to parameter arg |
| Capture.cs:148:48:152:9 | (...) => ... | Capture.cs:148:30:152:9 | SSA def(captureThrough3) |
| Capture.cs:148:48:152:9 | (...) => ... | Capture.cs:148:30:152:9 | SSA def(captureThrough3) |
| Capture.cs:148:48:152:9 | (...) => ... | Capture.cs:153:30:153:44 | access to local variable captureThrough3 |
| Capture.cs:148:48:152:9 | (...) => ... | Capture.cs:153:30:153:44 | access to local variable captureThrough3 |
| Capture.cs:148:48:152:9 | SSA capture def(tainted) | Capture.cs:150:13:150:28 | SSA def(sink35) |
| Capture.cs:148:48:152:9 | SSA capture def(tainted) | Capture.cs:150:13:150:28 | SSA def(sink35) |
| Capture.cs:148:48:152:9 | SSA capture def(tainted) | Capture.cs:150:13:150:28 | SSA def(sink35) |
| Capture.cs:148:48:152:9 | SSA capture def(tainted) | Capture.cs:150:13:150:28 | SSA def(sink35) |
| Capture.cs:148:48:152:9 | SSA capture def(tainted) | Capture.cs:150:22:150:28 | access to parameter tainted |
| Capture.cs:148:48:152:9 | SSA capture def(tainted) | Capture.cs:150:22:150:28 | access to parameter tainted |
| Capture.cs:148:48:152:9 | SSA capture def(tainted) | Capture.cs:150:22:150:28 | access to parameter tainted |
| Capture.cs:148:48:152:9 | SSA capture def(tainted) | Capture.cs:150:22:150:28 | access to parameter tainted |
| Capture.cs:150:13:150:28 | SSA def(sink35) | Capture.cs:153:9:153:45 | SSA call def(sink35) |
| Capture.cs:150:13:150:28 | SSA def(sink35) | Capture.cs:153:9:153:45 | SSA call def(sink35) |
| Capture.cs:150:22:150:28 | access to parameter tainted | Capture.cs:150:13:150:28 | SSA def(sink35) |
| Capture.cs:150:22:150:28 | access to parameter tainted | Capture.cs:150:13:150:28 | SSA def(sink35) |
| Capture.cs:150:22:150:28 | access to parameter tainted | Capture.cs:150:13:150:28 | SSA def(sink35) |
| Capture.cs:150:22:150:28 | access to parameter tainted | Capture.cs:150:13:150:28 | SSA def(sink35) |
| Capture.cs:151:20:151:22 | access to parameter arg | Capture.cs:153:30:153:44 | [output] access to local variable captureThrough3 |
| Capture.cs:151:20:151:22 | access to parameter arg | Capture.cs:153:30:153:44 | [output] access to local variable captureThrough3 |
| Capture.cs:153:9:153:21 | array creation of type String[] | Capture.cs:148:48:148:50 | arg |
| Capture.cs:153:9:153:21 | array creation of type String[] | Capture.cs:148:48:148:50 | arg |
| Capture.cs:153:9:153:45 | SSA call def(sink35) | Capture.cs:154:15:154:20 | access to local variable sink35 |
| Capture.cs:153:9:153:45 | SSA call def(sink35) | Capture.cs:154:15:154:20 | access to local variable sink35 |
| Capture.cs:153:9:153:45 | [implicit argument] tainted | Capture.cs:148:48:152:9 | SSA capture def(tainted) |
| Capture.cs:153:9:153:45 | [implicit argument] tainted | Capture.cs:148:48:152:9 | SSA capture def(tainted) |
| Capture.cs:153:9:153:45 | [implicit argument] tainted | Capture.cs:153:9:153:45 | SSA call def(sink35) |
| Capture.cs:153:9:153:45 | [implicit argument] tainted | Capture.cs:153:9:153:45 | SSA call def(sink35) |
| Capture.cs:156:9:159:9 | SSA capture def(tainted) | Capture.cs:158:20:158:26 | access to parameter tainted |
| Capture.cs:156:9:159:9 | SSA capture def(tainted) | Capture.cs:158:20:158:26 | access to parameter tainted |
| Capture.cs:156:9:159:9 | SSA capture def(tainted) | Capture.cs:158:20:158:26 | access to parameter tainted |
| Capture.cs:156:9:159:9 | SSA capture def(tainted) | Capture.cs:158:20:158:26 | access to parameter tainted |
| Capture.cs:158:20:158:26 | access to parameter tainted | Capture.cs:160:22:160:38 | call to local function CaptureThrough4 |
| Capture.cs:158:20:158:26 | access to parameter tainted | Capture.cs:160:22:160:38 | call to local function CaptureThrough4 |
| Capture.cs:160:13:160:38 | SSA def(sink36) | Capture.cs:161:15:161:20 | access to local variable sink36 |
| Capture.cs:160:13:160:38 | SSA def(sink36) | Capture.cs:161:15:161:20 | access to local variable sink36 |
| Capture.cs:160:22:160:38 | [implicit argument] tainted | Capture.cs:156:9:159:9 | SSA capture def(tainted) |
| Capture.cs:160:22:160:38 | [implicit argument] tainted | Capture.cs:156:9:159:9 | SSA capture def(tainted) |
| Capture.cs:160:22:160:38 | [implicit argument] tainted | Capture.cs:160:22:160:38 | call to local function CaptureThrough4 |
| Capture.cs:160:22:160:38 | [implicit argument] tainted | Capture.cs:160:22:160:38 | call to local function CaptureThrough4 |
| Capture.cs:160:22:160:38 | call to local function CaptureThrough4 | Capture.cs:160:13:160:38 | SSA def(sink36) |
| Capture.cs:160:22:160:38 | call to local function CaptureThrough4 | Capture.cs:160:13:160:38 | SSA def(sink36) |
| Capture.cs:160:22:160:38 | call to local function CaptureThrough4 | Capture.cs:161:15:161:20 | access to local variable sink36 |
| Capture.cs:160:22:160:38 | call to local function CaptureThrough4 | Capture.cs:161:15:161:20 | access to local variable sink36 |
| Capture.cs:163:22:163:23 | "" | Capture.cs:163:13:163:23 | SSA def(sink37) |
| Capture.cs:163:22:163:23 | "" | Capture.cs:163:13:163:23 | SSA def(sink37) |
| Capture.cs:164:37:164:37 | p | Capture.cs:166:13:166:22 | SSA def(sink37) |
| Capture.cs:164:37:164:37 | p | Capture.cs:166:13:166:22 | SSA def(sink37) |
| Capture.cs:164:37:164:37 | p | Capture.cs:166:13:166:22 | SSA def(sink37) |
| Capture.cs:164:37:164:37 | p | Capture.cs:166:13:166:22 | SSA def(sink37) |
| Capture.cs:164:37:164:37 | p | Capture.cs:166:22:166:22 | access to parameter p |
| Capture.cs:164:37:164:37 | p | Capture.cs:166:22:166:22 | access to parameter p |
| Capture.cs:164:37:164:37 | p | Capture.cs:166:22:166:22 | access to parameter p |
| Capture.cs:164:37:164:37 | p | Capture.cs:166:22:166:22 | access to parameter p |
| Capture.cs:166:13:166:22 | SSA def(sink37) | Capture.cs:168:9:168:32 | SSA call def(sink37) |
| Capture.cs:166:13:166:22 | SSA def(sink37) | Capture.cs:168:9:168:32 | SSA call def(sink37) |
| Capture.cs:166:22:166:22 | access to parameter p | Capture.cs:166:13:166:22 | SSA def(sink37) |
| Capture.cs:166:22:166:22 | access to parameter p | Capture.cs:166:13:166:22 | SSA def(sink37) |
| Capture.cs:166:22:166:22 | access to parameter p | Capture.cs:166:13:166:22 | SSA def(sink37) |
| Capture.cs:166:22:166:22 | access to parameter p | Capture.cs:166:13:166:22 | SSA def(sink37) |
| Capture.cs:168:9:168:32 | SSA call def(sink37) | Capture.cs:169:15:169:20 | access to local variable sink37 |
| Capture.cs:168:9:168:32 | SSA call def(sink37) | Capture.cs:169:15:169:20 | access to local variable sink37 |
| Capture.cs:168:25:168:31 | access to parameter tainted | Capture.cs:164:37:164:37 | p |
| Capture.cs:168:25:168:31 | access to parameter tainted | Capture.cs:164:37:164:37 | p |
| Capture.cs:168:25:168:31 | access to parameter tainted | Capture.cs:168:9:168:32 | SSA call def(sink37) |
| Capture.cs:168:25:168:31 | access to parameter tainted | Capture.cs:168:9:168:32 | SSA call def(sink37) |
| Capture.cs:168:25:168:31 | access to parameter tainted | Capture.cs:194:25:194:31 | access to parameter tainted |
| Capture.cs:168:25:168:31 | access to parameter tainted | Capture.cs:194:25:194:31 | access to parameter tainted |
| Capture.cs:171:16:171:28 | SSA def(nonSink0) | Capture.cs:176:15:176:22 | access to local variable nonSink0 |
| Capture.cs:171:16:171:28 | SSA def(nonSink0) | Capture.cs:176:15:176:22 | access to local variable nonSink0 |
| Capture.cs:171:16:171:28 | SSA def(nonSink0) | Capture.cs:186:15:186:22 | access to local variable nonSink0 |
| Capture.cs:171:16:171:28 | SSA def(nonSink0) | Capture.cs:186:15:186:22 | access to local variable nonSink0 |
| Capture.cs:171:27:171:28 | "" | Capture.cs:171:16:171:28 | SSA def(nonSink0) |
| Capture.cs:171:27:171:28 | "" | Capture.cs:171:16:171:28 | SSA def(nonSink0) |
| Capture.cs:171:27:171:28 | "" | Capture.cs:176:15:176:22 | access to local variable nonSink0 |
| Capture.cs:171:27:171:28 | "" | Capture.cs:176:15:176:22 | access to local variable nonSink0 |
| Capture.cs:171:27:171:28 | "" | Capture.cs:186:15:186:22 | access to local variable nonSink0 |
| Capture.cs:171:27:171:28 | "" | Capture.cs:186:15:186:22 | access to local variable nonSink0 |
| Capture.cs:172:9:175:9 | SSA capture def(tainted) | Capture.cs:174:24:174:30 | access to parameter tainted |
| Capture.cs:172:9:175:9 | SSA capture def(tainted) | Capture.cs:174:24:174:30 | access to parameter tainted |
| Capture.cs:176:15:176:22 | access to local variable nonSink0 | Capture.cs:186:15:186:22 | access to local variable nonSink0 |
| Capture.cs:176:15:176:22 | access to local variable nonSink0 | Capture.cs:186:15:186:22 | access to local variable nonSink0 |
| Capture.cs:180:13:183:13 | SSA capture def(tainted) | Capture.cs:182:28:182:34 | access to parameter tainted |
| Capture.cs:180:13:183:13 | SSA capture def(tainted) | Capture.cs:182:28:182:34 | access to parameter tainted |
| Capture.cs:188:26:188:26 | s | Capture.cs:191:20:191:22 | [implicit argument] s |
| Capture.cs:188:26:188:26 | s | Capture.cs:191:20:191:22 | [implicit argument] s |
| Capture.cs:188:26:188:26 | s | Capture.cs:191:20:191:22 | [implicit argument] s |
| Capture.cs:188:26:188:26 | s | Capture.cs:191:20:191:22 | [implicit argument] s |
| Capture.cs:190:13:190:28 | SSA capture def(s) | Capture.cs:190:27:190:27 | access to parameter s |
| Capture.cs:190:13:190:28 | SSA capture def(s) | Capture.cs:190:27:190:27 | access to parameter s |
| Capture.cs:190:13:190:28 | SSA capture def(s) | Capture.cs:190:27:190:27 | access to parameter s |
| Capture.cs:190:13:190:28 | SSA capture def(s) | Capture.cs:190:27:190:27 | access to parameter s |
| Capture.cs:190:27:190:27 | access to parameter s | Capture.cs:191:20:191:22 | call to local function M |
| Capture.cs:190:27:190:27 | access to parameter s | Capture.cs:191:20:191:22 | call to local function M |
| Capture.cs:191:20:191:22 | [implicit argument] s | Capture.cs:190:13:190:28 | SSA capture def(s) |
| Capture.cs:191:20:191:22 | [implicit argument] s | Capture.cs:190:13:190:28 | SSA capture def(s) |
| Capture.cs:191:20:191:22 | [implicit argument] s | Capture.cs:190:13:190:28 | SSA capture def(s) |
| Capture.cs:191:20:191:22 | [implicit argument] s | Capture.cs:190:13:190:28 | SSA capture def(s) |
| Capture.cs:191:20:191:22 | [implicit argument] s | Capture.cs:191:20:191:22 | call to local function M |
| Capture.cs:191:20:191:22 | [implicit argument] s | Capture.cs:191:20:191:22 | call to local function M |
| Capture.cs:191:20:191:22 | [implicit argument] s | Capture.cs:191:20:191:22 | call to local function M |
| Capture.cs:191:20:191:22 | [implicit argument] s | Capture.cs:191:20:191:22 | call to local function M |
| Capture.cs:191:20:191:22 | call to local function M | Capture.cs:194:22:194:32 | call to local function Id |
| Capture.cs:191:20:191:22 | call to local function M | Capture.cs:194:22:194:32 | call to local function Id |
| Capture.cs:191:20:191:22 | call to local function M | Capture.cs:196:20:196:25 | call to local function Id |
| Capture.cs:191:20:191:22 | call to local function M | Capture.cs:196:20:196:25 | call to local function Id |
| Capture.cs:194:13:194:32 | SSA def(sink38) | Capture.cs:195:15:195:20 | access to local variable sink38 |
| Capture.cs:194:13:194:32 | SSA def(sink38) | Capture.cs:195:15:195:20 | access to local variable sink38 |
| Capture.cs:194:22:194:32 | call to local function Id | Capture.cs:194:13:194:32 | SSA def(sink38) |
| Capture.cs:194:22:194:32 | call to local function Id | Capture.cs:194:13:194:32 | SSA def(sink38) |
| Capture.cs:194:22:194:32 | call to local function Id | Capture.cs:195:15:195:20 | access to local variable sink38 |
| Capture.cs:194:22:194:32 | call to local function Id | Capture.cs:195:15:195:20 | access to local variable sink38 |
| Capture.cs:194:25:194:31 | access to parameter tainted | Capture.cs:188:26:188:26 | s |
| Capture.cs:194:25:194:31 | access to parameter tainted | Capture.cs:188:26:188:26 | s |
| Capture.cs:194:25:194:31 | access to parameter tainted | Capture.cs:194:22:194:32 | call to local function Id |
| Capture.cs:194:25:194:31 | access to parameter tainted | Capture.cs:194:22:194:32 | call to local function Id |
| Capture.cs:196:9:196:25 | SSA def(nonSink0) | Capture.cs:197:15:197:22 | access to local variable nonSink0 |
| Capture.cs:196:9:196:25 | SSA def(nonSink0) | Capture.cs:197:15:197:22 | access to local variable nonSink0 |
| Capture.cs:196:20:196:25 | call to local function Id | Capture.cs:196:9:196:25 | SSA def(nonSink0) |
| Capture.cs:196:20:196:25 | call to local function Id | Capture.cs:196:9:196:25 | SSA def(nonSink0) |
| Capture.cs:196:20:196:25 | call to local function Id | Capture.cs:197:15:197:22 | access to local variable nonSink0 |
| Capture.cs:196:20:196:25 | call to local function Id | Capture.cs:197:15:197:22 | access to local variable nonSink0 |
| Capture.cs:196:23:196:24 | "" | Capture.cs:188:26:188:26 | s |
| Capture.cs:196:23:196:24 | "" | Capture.cs:188:26:188:26 | s |
| Capture.cs:196:23:196:24 | "" | Capture.cs:196:20:196:25 | call to local function Id |
| Capture.cs:196:23:196:24 | "" | Capture.cs:196:20:196:25 | call to local function Id |
| Capture.cs:202:34:202:34 | a | Capture.cs:204:9:204:9 | access to parameter a |
| Capture.cs:202:34:202:34 | a | Capture.cs:204:9:204:9 | access to parameter a |
| Capture.cs:202:34:202:34 | a | Capture.cs:204:9:204:9 | access to parameter a |
| Capture.cs:202:34:202:34 | a | Capture.cs:204:9:204:9 | access to parameter a |
| Capture.cs:202:34:202:34 | a | Capture.cs:204:9:204:9 | access to parameter a |
| Capture.cs:202:34:202:34 | a | Capture.cs:204:9:204:9 | access to parameter a |
| Capture.cs:202:34:202:34 | a | Capture.cs:204:9:204:9 | access to parameter a |
| Capture.cs:202:34:202:34 | a | Capture.cs:204:9:204:9 | access to parameter a |
| Capture.cs:202:34:202:34 | a | Capture.cs:204:9:204:9 | access to parameter a |
| Capture.cs:202:34:202:34 | a | Capture.cs:204:9:204:9 | access to parameter a |
| GlobalDataFlow.cs:14:17:14:17 | this | GlobalDataFlow.cs:64:9:64:18 | this access |
| GlobalDataFlow.cs:14:17:14:17 | this | GlobalDataFlow.cs:64:9:64:18 | this access |
| GlobalDataFlow.cs:14:17:14:17 | this | GlobalDataFlow.cs:67:9:67:21 | this access |

153
csharp/ql/test/library-tests/dataflow/global/DataFlowPath.expected
View File

@@ -2,39 +2,47 @@ edges
| Capture.cs:7:20:7:26 | tainted | Capture.cs:14:9:14:20 | [implicit argument] tainted |
| Capture.cs:7:20:7:26 | tainted | Capture.cs:25:9:25:20 | [implicit argument] tainted |
| Capture.cs:7:20:7:26 | tainted | Capture.cs:33:9:33:40 | [implicit argument] tainted |
| Capture.cs:7:20:7:26 | tainted | Capture.cs:61:36:61:42 | access to parameter tainted |
| Capture.cs:9:9:13:9 | SSA capture def(tainted) | Capture.cs:12:19:12:24 | access to local variable sink27 |
| Capture.cs:14:9:14:20 | [implicit argument] tainted | Capture.cs:9:9:13:9 | SSA capture def(tainted) |
| Capture.cs:18:13:22:13 | SSA capture def(tainted) | Capture.cs:21:23:21:28 | access to local variable sink28 |
| Capture.cs:25:9:25:20 | [implicit argument] tainted | Capture.cs:18:13:22:13 | SSA capture def(tainted) |
| Capture.cs:27:43:32:9 | SSA capture def(tainted) | Capture.cs:30:19:30:24 | access to local variable sink29 |
| Capture.cs:33:9:33:40 | [implicit argument] tainted | Capture.cs:27:43:32:9 | SSA capture def(tainted) |
| Capture.cs:57:13:57:35 | SSA def(sink30) | Capture.cs:59:9:59:21 | SSA call def(sink30) |
| Capture.cs:57:22:57:35 | "taint source" | Capture.cs:57:13:57:35 | SSA def(sink30) |
| Capture.cs:59:9:59:21 | SSA call def(sink30) | Capture.cs:60:15:60:20 | access to local variable sink30 |
| Capture.cs:67:17:67:39 | SSA def(sink31) | Capture.cs:71:9:71:21 | SSA call def(sink31) |
| Capture.cs:67:26:67:39 | "taint source" | Capture.cs:67:17:67:39 | SSA def(sink31) |
| Capture.cs:71:9:71:21 | SSA call def(sink31) | Capture.cs:72:15:72:20 | access to local variable sink31 |
| Capture.cs:77:13:77:35 | SSA def(sink32) | Capture.cs:80:9:80:41 | SSA call def(sink32) |
| Capture.cs:77:22:77:35 | "taint source" | Capture.cs:77:13:77:35 | SSA def(sink32) |
| Capture.cs:80:9:80:41 | SSA call def(sink32) | Capture.cs:81:15:81:20 | access to local variable sink32 |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:108:9:108:25 | [implicit argument] tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:120:9:120:25 | [implicit argument] tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:129:9:129:45 | [implicit argument] tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:136:22:136:38 | [implicit argument] tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:144:25:144:31 | access to parameter tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:170:25:170:31 | access to parameter tainted |
| Capture.cs:108:9:108:25 | SSA call def(sink33) | Capture.cs:109:15:109:20 | access to local variable sink33 |
| Capture.cs:108:9:108:25 | [implicit argument] tainted | Capture.cs:108:9:108:25 | SSA call def(sink33) |
| Capture.cs:120:9:120:25 | SSA call def(sink34) | Capture.cs:121:15:121:20 | access to local variable sink34 |
| Capture.cs:120:9:120:25 | [implicit argument] tainted | Capture.cs:120:9:120:25 | SSA call def(sink34) |
| Capture.cs:129:9:129:45 | SSA call def(sink35) | Capture.cs:130:15:130:20 | access to local variable sink35 |
| Capture.cs:129:9:129:45 | [implicit argument] tainted | Capture.cs:129:9:129:45 | SSA call def(sink35) |
| Capture.cs:136:22:136:38 | [implicit argument] tainted | Capture.cs:136:22:136:38 | call to local function CaptureThrough4 |
| Capture.cs:136:22:136:38 | call to local function CaptureThrough4 | Capture.cs:137:15:137:20 | access to local variable sink36 |
| Capture.cs:144:9:144:32 | SSA call def(sink37) | Capture.cs:145:15:145:20 | access to local variable sink37 |
| Capture.cs:144:25:144:31 | access to parameter tainted | Capture.cs:144:9:144:32 | SSA call def(sink37) |
| Capture.cs:170:22:170:32 | call to local function Id | Capture.cs:171:15:171:20 | access to local variable sink38 |
| Capture.cs:170:25:170:31 | access to parameter tainted | Capture.cs:170:22:170:32 | call to local function Id |
| Capture.cs:50:50:50:55 | sink39 | Capture.cs:52:13:59:14 | [implicit argument] sink39 |
| Capture.cs:52:13:59:14 | [implicit argument] sink39 | Capture.cs:55:27:58:17 | SSA capture def(sink39) |
| Capture.cs:55:27:58:17 | SSA capture def(sink39) | Capture.cs:57:27:57:32 | access to parameter sink39 |
| Capture.cs:61:36:61:42 | access to parameter tainted | Capture.cs:50:50:50:55 | sink39 |
| Capture.cs:69:13:69:35 | SSA def(sink30) | Capture.cs:71:9:71:21 | SSA call def(sink30) |
| Capture.cs:69:22:69:35 | "taint source" | Capture.cs:69:13:69:35 | SSA def(sink30) |
| Capture.cs:71:9:71:21 | SSA call def(sink30) | Capture.cs:72:15:72:20 | access to local variable sink30 |
| Capture.cs:79:17:79:39 | SSA def(sink31) | Capture.cs:83:9:83:21 | SSA call def(sink31) |
| Capture.cs:79:26:79:39 | "taint source" | Capture.cs:79:17:79:39 | SSA def(sink31) |
| Capture.cs:83:9:83:21 | SSA call def(sink31) | Capture.cs:84:15:84:20 | access to local variable sink31 |
| Capture.cs:89:13:89:35 | SSA def(sink32) | Capture.cs:92:9:92:41 | SSA call def(sink32) |
| Capture.cs:89:22:89:35 | "taint source" | Capture.cs:89:13:89:35 | SSA def(sink32) |
| Capture.cs:92:9:92:41 | SSA call def(sink32) | Capture.cs:93:15:93:20 | access to local variable sink32 |
| Capture.cs:115:17:115:39 | SSA def(sink40) | Capture.cs:121:9:121:35 | SSA call def(sink40) |
| Capture.cs:115:26:115:39 | "taint source" | Capture.cs:115:17:115:39 | SSA def(sink40) |
| Capture.cs:121:9:121:35 | SSA call def(sink40) | Capture.cs:122:15:122:20 | access to local variable sink40 |
| Capture.cs:125:25:125:31 | tainted | Capture.cs:132:9:132:25 | [implicit argument] tainted |
| Capture.cs:125:25:125:31 | tainted | Capture.cs:144:9:144:25 | [implicit argument] tainted |
| Capture.cs:125:25:125:31 | tainted | Capture.cs:153:9:153:45 | [implicit argument] tainted |
| Capture.cs:125:25:125:31 | tainted | Capture.cs:160:22:160:38 | [implicit argument] tainted |
| Capture.cs:125:25:125:31 | tainted | Capture.cs:168:25:168:31 | access to parameter tainted |
| Capture.cs:125:25:125:31 | tainted | Capture.cs:194:25:194:31 | access to parameter tainted |
| Capture.cs:132:9:132:25 | SSA call def(sink33) | Capture.cs:133:15:133:20 | access to local variable sink33 |
| Capture.cs:132:9:132:25 | [implicit argument] tainted | Capture.cs:132:9:132:25 | SSA call def(sink33) |
| Capture.cs:144:9:144:25 | SSA call def(sink34) | Capture.cs:145:15:145:20 | access to local variable sink34 |
| Capture.cs:144:9:144:25 | [implicit argument] tainted | Capture.cs:144:9:144:25 | SSA call def(sink34) |
| Capture.cs:153:9:153:45 | SSA call def(sink35) | Capture.cs:154:15:154:20 | access to local variable sink35 |
| Capture.cs:153:9:153:45 | [implicit argument] tainted | Capture.cs:153:9:153:45 | SSA call def(sink35) |
| Capture.cs:160:22:160:38 | [implicit argument] tainted | Capture.cs:160:22:160:38 | call to local function CaptureThrough4 |
| Capture.cs:160:22:160:38 | call to local function CaptureThrough4 | Capture.cs:161:15:161:20 | access to local variable sink36 |
| Capture.cs:168:9:168:32 | SSA call def(sink37) | Capture.cs:169:15:169:20 | access to local variable sink37 |
| Capture.cs:168:25:168:31 | access to parameter tainted | Capture.cs:168:9:168:32 | SSA call def(sink37) |
| Capture.cs:194:22:194:32 | call to local function Id | Capture.cs:195:15:195:20 | access to local variable sink38 |
| Capture.cs:194:25:194:31 | access to parameter tainted | Capture.cs:194:22:194:32 | call to local function Id |
| GlobalDataFlow.cs:17:27:17:40 | "taint source" | GlobalDataFlow.cs:18:15:18:29 | access to field SinkField0 |
| GlobalDataFlow.cs:17:27:17:40 | "taint source" | GlobalDataFlow.cs:26:15:26:32 | access to property SinkProperty0 |
| GlobalDataFlow.cs:17:27:17:40 | "taint source" | GlobalDataFlow.cs:26:15:26:32 | access to property SinkProperty0 |
@@ -203,37 +211,46 @@ nodes
| Capture.cs:27:43:32:9 | SSA capture def(tainted) | semmle.label | SSA capture def(tainted) |
| Capture.cs:30:19:30:24 | access to local variable sink29 | semmle.label | access to local variable sink29 |
| Capture.cs:33:9:33:40 | [implicit argument] tainted | semmle.label | [implicit argument] tainted |
| Capture.cs:57:13:57:35 | SSA def(sink30) | semmle.label | SSA def(sink30) |
| Capture.cs:57:22:57:35 | "taint source" | semmle.label | "taint source" |
| Capture.cs:59:9:59:21 | SSA call def(sink30) | semmle.label | SSA call def(sink30) |
| Capture.cs:60:15:60:20 | access to local variable sink30 | semmle.label | access to local variable sink30 |
| Capture.cs:67:17:67:39 | SSA def(sink31) | semmle.label | SSA def(sink31) |
| Capture.cs:67:26:67:39 | "taint source" | semmle.label | "taint source" |
| Capture.cs:71:9:71:21 | SSA call def(sink31) | semmle.label | SSA call def(sink31) |
| Capture.cs:72:15:72:20 | access to local variable sink31 | semmle.label | access to local variable sink31 |
| Capture.cs:77:13:77:35 | SSA def(sink32) | semmle.label | SSA def(sink32) |
| Capture.cs:77:22:77:35 | "taint source" | semmle.label | "taint source" |
| Capture.cs:80:9:80:41 | SSA call def(sink32) | semmle.label | SSA call def(sink32) |
| Capture.cs:81:15:81:20 | access to local variable sink32 | semmle.label | access to local variable sink32 |
| Capture.cs:101:25:101:31 | tainted | semmle.label | tainted |
| Capture.cs:108:9:108:25 | SSA call def(sink33) | semmle.label | SSA call def(sink33) |
| Capture.cs:108:9:108:25 | [implicit argument] tainted | semmle.label | [implicit argument] tainted |
| Capture.cs:109:15:109:20 | access to local variable sink33 | semmle.label | access to local variable sink33 |
| Capture.cs:120:9:120:25 | SSA call def(sink34) | semmle.label | SSA call def(sink34) |
| Capture.cs:120:9:120:25 | [implicit argument] tainted | semmle.label | [implicit argument] tainted |
| Capture.cs:121:15:121:20 | access to local variable sink34 | semmle.label | access to local variable sink34 |
| Capture.cs:129:9:129:45 | SSA call def(sink35) | semmle.label | SSA call def(sink35) |
| Capture.cs:129:9:129:45 | [implicit argument] tainted | semmle.label | [implicit argument] tainted |
| Capture.cs:130:15:130:20 | access to local variable sink35 | semmle.label | access to local variable sink35 |
| Capture.cs:136:22:136:38 | [implicit argument] tainted | semmle.label | [implicit argument] tainted |
| Capture.cs:136:22:136:38 | call to local function CaptureThrough4 | semmle.label | call to local function CaptureThrough4 |
| Capture.cs:137:15:137:20 | access to local variable sink36 | semmle.label | access to local variable sink36 |
| Capture.cs:144:9:144:32 | SSA call def(sink37) | semmle.label | SSA call def(sink37) |
| Capture.cs:144:25:144:31 | access to parameter tainted | semmle.label | access to parameter tainted |
| Capture.cs:145:15:145:20 | access to local variable sink37 | semmle.label | access to local variable sink37 |
| Capture.cs:170:22:170:32 | call to local function Id | semmle.label | call to local function Id |
| Capture.cs:170:25:170:31 | access to parameter tainted | semmle.label | access to parameter tainted |
| Capture.cs:171:15:171:20 | access to local variable sink38 | semmle.label | access to local variable sink38 |
| Capture.cs:50:50:50:55 | sink39 | semmle.label | sink39 |
| Capture.cs:52:13:59:14 | [implicit argument] sink39 | semmle.label | [implicit argument] sink39 |
| Capture.cs:55:27:58:17 | SSA capture def(sink39) | semmle.label | SSA capture def(sink39) |
| Capture.cs:57:27:57:32 | access to parameter sink39 | semmle.label | access to parameter sink39 |
| Capture.cs:61:36:61:42 | access to parameter tainted | semmle.label | access to parameter tainted |
| Capture.cs:69:13:69:35 | SSA def(sink30) | semmle.label | SSA def(sink30) |
| Capture.cs:69:22:69:35 | "taint source" | semmle.label | "taint source" |
| Capture.cs:71:9:71:21 | SSA call def(sink30) | semmle.label | SSA call def(sink30) |
| Capture.cs:72:15:72:20 | access to local variable sink30 | semmle.label | access to local variable sink30 |
| Capture.cs:79:17:79:39 | SSA def(sink31) | semmle.label | SSA def(sink31) |
| Capture.cs:79:26:79:39 | "taint source" | semmle.label | "taint source" |
| Capture.cs:83:9:83:21 | SSA call def(sink31) | semmle.label | SSA call def(sink31) |
| Capture.cs:84:15:84:20 | access to local variable sink31 | semmle.label | access to local variable sink31 |
| Capture.cs:89:13:89:35 | SSA def(sink32) | semmle.label | SSA def(sink32) |
| Capture.cs:89:22:89:35 | "taint source" | semmle.label | "taint source" |
| Capture.cs:92:9:92:41 | SSA call def(sink32) | semmle.label | SSA call def(sink32) |
| Capture.cs:93:15:93:20 | access to local variable sink32 | semmle.label | access to local variable sink32 |
| Capture.cs:115:17:115:39 | SSA def(sink40) | semmle.label | SSA def(sink40) |
| Capture.cs:115:26:115:39 | "taint source" | semmle.label | "taint source" |
| Capture.cs:121:9:121:35 | SSA call def(sink40) | semmle.label | SSA call def(sink40) |
| Capture.cs:122:15:122:20 | access to local variable sink40 | semmle.label | access to local variable sink40 |
| Capture.cs:125:25:125:31 | tainted | semmle.label | tainted |
| Capture.cs:132:9:132:25 | SSA call def(sink33) | semmle.label | SSA call def(sink33) |
| Capture.cs:132:9:132:25 | [implicit argument] tainted | semmle.label | [implicit argument] tainted |
| Capture.cs:133:15:133:20 | access to local variable sink33 | semmle.label | access to local variable sink33 |
| Capture.cs:144:9:144:25 | SSA call def(sink34) | semmle.label | SSA call def(sink34) |
| Capture.cs:144:9:144:25 | [implicit argument] tainted | semmle.label | [implicit argument] tainted |
| Capture.cs:145:15:145:20 | access to local variable sink34 | semmle.label | access to local variable sink34 |
| Capture.cs:153:9:153:45 | SSA call def(sink35) | semmle.label | SSA call def(sink35) |
| Capture.cs:153:9:153:45 | [implicit argument] tainted | semmle.label | [implicit argument] tainted |
| Capture.cs:154:15:154:20 | access to local variable sink35 | semmle.label | access to local variable sink35 |
| Capture.cs:160:22:160:38 | [implicit argument] tainted | semmle.label | [implicit argument] tainted |
| Capture.cs:160:22:160:38 | call to local function CaptureThrough4 | semmle.label | call to local function CaptureThrough4 |
| Capture.cs:161:15:161:20 | access to local variable sink36 | semmle.label | access to local variable sink36 |
| Capture.cs:168:9:168:32 | SSA call def(sink37) | semmle.label | SSA call def(sink37) |
| Capture.cs:168:25:168:31 | access to parameter tainted | semmle.label | access to parameter tainted |
| Capture.cs:169:15:169:20 | access to local variable sink37 | semmle.label | access to local variable sink37 |
| Capture.cs:194:22:194:32 | call to local function Id | semmle.label | call to local function Id |
| Capture.cs:194:25:194:31 | access to parameter tainted | semmle.label | access to parameter tainted |
| Capture.cs:195:15:195:20 | access to local variable sink38 | semmle.label | access to local variable sink38 |
| GlobalDataFlow.cs:17:27:17:40 | "taint source" | semmle.label | "taint source" |
| GlobalDataFlow.cs:18:15:18:29 | access to field SinkField0 | semmle.label | access to field SinkField0 |
| GlobalDataFlow.cs:26:15:26:32 | access to property SinkProperty0 | semmle.label | access to property SinkProperty0 |
@@ -363,16 +380,17 @@ nodes
| Capture.cs:21:23:21:28 | access to local variable sink28 | Capture.cs:7:20:7:26 | tainted | Capture.cs:21:23:21:28 | access to local variable sink28 | access to local variable sink28 |
| Capture.cs:30:19:30:24 | access to local variable sink29 | Capture.cs:7:20:7:26 | tainted | Capture.cs:30:19:30:24 | access to local variable sink29 | access to local variable sink29 |
| GlobalDataFlow.cs:79:15:79:19 | access to local variable sink3 | GlobalDataFlow.cs:17:27:17:40 | "taint source" | GlobalDataFlow.cs:79:15:79:19 | access to local variable sink3 | access to local variable sink3 |
| Capture.cs:60:15:60:20 | access to local variable sink30 | Capture.cs:57:22:57:35 | "taint source" | Capture.cs:60:15:60:20 | access to local variable sink30 | access to local variable sink30 |
| Capture.cs:72:15:72:20 | access to local variable sink31 | Capture.cs:67:26:67:39 | "taint source" | Capture.cs:72:15:72:20 | access to local variable sink31 | access to local variable sink31 |
| Capture.cs:81:15:81:20 | access to local variable sink32 | Capture.cs:77:22:77:35 | "taint source" | Capture.cs:81:15:81:20 | access to local variable sink32 | access to local variable sink32 |
| Capture.cs:109:15:109:20 | access to local variable sink33 | Capture.cs:101:25:101:31 | tainted | Capture.cs:109:15:109:20 | access to local variable sink33 | access to local variable sink33 |
| Capture.cs:121:15:121:20 | access to local variable sink34 | Capture.cs:101:25:101:31 | tainted | Capture.cs:121:15:121:20 | access to local variable sink34 | access to local variable sink34 |
| Capture.cs:130:15:130:20 | access to local variable sink35 | Capture.cs:101:25:101:31 | tainted | Capture.cs:130:15:130:20 | access to local variable sink35 | access to local variable sink35 |
| Capture.cs:137:15:137:20 | access to local variable sink36 | Capture.cs:101:25:101:31 | tainted | Capture.cs:137:15:137:20 | access to local variable sink36 | access to local variable sink36 |
| Capture.cs:145:15:145:20 | access to local variable sink37 | Capture.cs:101:25:101:31 | tainted | Capture.cs:145:15:145:20 | access to local variable sink37 | access to local variable sink37 |
| Capture.cs:171:15:171:20 | access to local variable sink38 | Capture.cs:101:25:101:31 | tainted | Capture.cs:171:15:171:20 | access to local variable sink38 | access to local variable sink38 |
| Capture.cs:72:15:72:20 | access to local variable sink30 | Capture.cs:69:22:69:35 | "taint source" | Capture.cs:72:15:72:20 | access to local variable sink30 | access to local variable sink30 |
| Capture.cs:84:15:84:20 | access to local variable sink31 | Capture.cs:79:26:79:39 | "taint source" | Capture.cs:84:15:84:20 | access to local variable sink31 | access to local variable sink31 |
| Capture.cs:93:15:93:20 | access to local variable sink32 | Capture.cs:89:22:89:35 | "taint source" | Capture.cs:93:15:93:20 | access to local variable sink32 | access to local variable sink32 |
| Capture.cs:133:15:133:20 | access to local variable sink33 | Capture.cs:125:25:125:31 | tainted | Capture.cs:133:15:133:20 | access to local variable sink33 | access to local variable sink33 |
| Capture.cs:145:15:145:20 | access to local variable sink34 | Capture.cs:125:25:125:31 | tainted | Capture.cs:145:15:145:20 | access to local variable sink34 | access to local variable sink34 |
| Capture.cs:154:15:154:20 | access to local variable sink35 | Capture.cs:125:25:125:31 | tainted | Capture.cs:154:15:154:20 | access to local variable sink35 | access to local variable sink35 |
| Capture.cs:161:15:161:20 | access to local variable sink36 | Capture.cs:125:25:125:31 | tainted | Capture.cs:161:15:161:20 | access to local variable sink36 | access to local variable sink36 |
| Capture.cs:169:15:169:20 | access to local variable sink37 | Capture.cs:125:25:125:31 | tainted | Capture.cs:169:15:169:20 | access to local variable sink37 | access to local variable sink37 |
| Capture.cs:195:15:195:20 | access to local variable sink38 | Capture.cs:125:25:125:31 | tainted | Capture.cs:195:15:195:20 | access to local variable sink38 | access to local variable sink38 |
| GlobalDataFlow.cs:136:15:136:19 | access to local variable sink4 | GlobalDataFlow.cs:17:27:17:40 | "taint source" | GlobalDataFlow.cs:136:15:136:19 | access to local variable sink4 | access to local variable sink4 |
| Capture.cs:122:15:122:20 | access to local variable sink40 | Capture.cs:115:26:115:39 | "taint source" | Capture.cs:122:15:122:20 | access to local variable sink40 | access to local variable sink40 |
| GlobalDataFlow.cs:144:15:144:19 | access to local variable sink5 | GlobalDataFlow.cs:17:27:17:40 | "taint source" | GlobalDataFlow.cs:144:15:144:19 | access to local variable sink5 | access to local variable sink5 |
| GlobalDataFlow.cs:154:15:154:19 | access to local variable sink6 | GlobalDataFlow.cs:318:16:318:29 | "taint source" | GlobalDataFlow.cs:154:15:154:19 | access to local variable sink6 | access to local variable sink6 |
| GlobalDataFlow.cs:157:15:157:19 | access to local variable sink7 | GlobalDataFlow.cs:323:13:323:26 | "taint source" | GlobalDataFlow.cs:157:15:157:19 | access to local variable sink7 | access to local variable sink7 |
@@ -380,6 +398,7 @@ nodes
| GlobalDataFlow.cs:181:15:181:19 | access to local variable sink9 | GlobalDataFlow.cs:179:35:179:48 | "taint source" | GlobalDataFlow.cs:181:15:181:19 | access to local variable sink9 | access to local variable sink9 |
| Splitting.cs:11:19:11:19 | access to local variable x | Splitting.cs:3:28:3:34 | tainted | Splitting.cs:11:19:11:19 | access to local variable x | access to local variable x |
| Splitting.cs:34:19:34:19 | access to local variable x | Splitting.cs:24:28:24:34 | tainted | Splitting.cs:34:19:34:19 | access to local variable x | access to local variable x |
| Capture.cs:57:27:57:32 | access to parameter sink39 | Capture.cs:7:20:7:26 | tainted | Capture.cs:57:27:57:32 | access to parameter sink39 | access to parameter sink39 |
| GlobalDataFlow.cs:237:15:237:24 | access to parameter sinkParam0 | GlobalDataFlow.cs:17:27:17:40 | "taint source" | GlobalDataFlow.cs:237:15:237:24 | access to parameter sinkParam0 | access to parameter sinkParam0 |
| GlobalDataFlow.cs:242:15:242:24 | access to parameter sinkParam1 | GlobalDataFlow.cs:17:27:17:40 | "taint source" | GlobalDataFlow.cs:242:15:242:24 | access to parameter sinkParam1 | access to parameter sinkParam1 |
| GlobalDataFlow.cs:44:50:44:59 | access to parameter sinkParam2 | GlobalDataFlow.cs:17:27:17:40 | "taint source" | GlobalDataFlow.cs:44:50:44:59 | access to parameter sinkParam2 | access to parameter sinkParam2 |

52
csharp/ql/test/library-tests/dataflow/global/GetAnOutNode.expected
View File

@@ -2,29 +2,35 @@
| Capture.cs:33:9:33:40 | call to method Select | yield return | Capture.cs:33:9:33:40 | call to method Select |
| Capture.cs:33:9:33:50 | call to method ToArray | return | Capture.cs:33:9:33:50 | call to method ToArray |
| Capture.cs:33:30:33:39 | [implicit call] access to local variable captureIn3 | return | Capture.cs:33:30:33:39 | [output] access to local variable captureIn3 |
| Capture.cs:59:9:59:21 | call to local function CaptureOut1 | captured sink30 | Capture.cs:59:9:59:21 | SSA call def(sink30) |
| Capture.cs:71:9:71:21 | [transitive] call to local function CaptureOut2 | captured sink31 | Capture.cs:71:9:71:21 | SSA call def(sink31) |
| Capture.cs:71:9:71:21 | call to local function CaptureOut2 | captured sink31 | Capture.cs:71:9:71:21 | SSA call def(sink31) |
| Capture.cs:80:9:80:41 | call to method Select | captured sink32 | Capture.cs:80:9:80:41 | SSA call def(sink32) |
| Capture.cs:80:9:80:41 | call to method Select | return | Capture.cs:80:9:80:41 | call to method Select |
| Capture.cs:80:9:80:41 | call to method Select | yield return | Capture.cs:80:9:80:41 | call to method Select |
| Capture.cs:80:9:80:51 | call to method ToArray | return | Capture.cs:80:9:80:51 | call to method ToArray |
| Capture.cs:80:30:80:40 | [implicit call] access to local variable captureOut3 | captured sink32 | Capture.cs:80:9:80:41 | SSA call def(sink32) |
| Capture.cs:80:30:80:40 | [implicit call] access to local variable captureOut3 | return | Capture.cs:80:30:80:40 | [output] access to local variable captureOut3 |
| Capture.cs:108:9:108:25 | call to local function CaptureThrough1 | captured sink33 | Capture.cs:108:9:108:25 | SSA call def(sink33) |
| Capture.cs:120:9:120:25 | [transitive] call to local function CaptureThrough2 | captured sink34 | Capture.cs:120:9:120:25 | SSA call def(sink34) |
| Capture.cs:120:9:120:25 | call to local function CaptureThrough2 | captured sink34 | Capture.cs:120:9:120:25 | SSA call def(sink34) |
| Capture.cs:129:9:129:45 | call to method Select | captured sink35 | Capture.cs:129:9:129:45 | SSA call def(sink35) |
| Capture.cs:129:9:129:45 | call to method Select | return | Capture.cs:129:9:129:45 | call to method Select |
| Capture.cs:129:9:129:45 | call to method Select | yield return | Capture.cs:129:9:129:45 | call to method Select |
| Capture.cs:129:9:129:55 | call to method ToArray | return | Capture.cs:129:9:129:55 | call to method ToArray |
| Capture.cs:129:30:129:44 | [implicit call] access to local variable captureThrough3 | captured sink35 | Capture.cs:129:9:129:45 | SSA call def(sink35) |
| Capture.cs:129:30:129:44 | [implicit call] access to local variable captureThrough3 | return | Capture.cs:129:30:129:44 | [output] access to local variable captureThrough3 |
| Capture.cs:136:22:136:38 | call to local function CaptureThrough4 | return | Capture.cs:136:22:136:38 | call to local function CaptureThrough4 |
| Capture.cs:144:9:144:32 | call to local function CaptureThrough5 | captured sink37 | Capture.cs:144:9:144:32 | SSA call def(sink37) |
| Capture.cs:167:20:167:22 | call to local function M | return | Capture.cs:167:20:167:22 | call to local function M |
| Capture.cs:170:22:170:32 | call to local function Id | return | Capture.cs:170:22:170:32 | call to local function Id |
| Capture.cs:172:20:172:25 | call to local function Id | return | Capture.cs:172:20:172:25 | call to local function Id |
| Capture.cs:71:9:71:21 | call to local function CaptureOut1 | captured sink30 | Capture.cs:71:9:71:21 | SSA call def(sink30) |
| Capture.cs:83:9:83:21 | [transitive] call to local function CaptureOut2 | captured sink31 | Capture.cs:83:9:83:21 | SSA call def(sink31) |
| Capture.cs:83:9:83:21 | call to local function CaptureOut2 | captured sink31 | Capture.cs:83:9:83:21 | SSA call def(sink31) |
| Capture.cs:92:9:92:41 | call to method Select | captured sink32 | Capture.cs:92:9:92:41 | SSA call def(sink32) |
| Capture.cs:92:9:92:41 | call to method Select | return | Capture.cs:92:9:92:41 | call to method Select |
| Capture.cs:92:9:92:41 | call to method Select | yield return | Capture.cs:92:9:92:41 | call to method Select |
| Capture.cs:92:9:92:51 | call to method ToArray | return | Capture.cs:92:9:92:51 | call to method ToArray |
| Capture.cs:92:30:92:40 | [implicit call] access to local variable captureOut3 | captured sink32 | Capture.cs:92:9:92:41 | SSA call def(sink32) |
| Capture.cs:92:30:92:40 | [implicit call] access to local variable captureOut3 | return | Capture.cs:92:30:92:40 | [output] access to local variable captureOut3 |
| Capture.cs:121:9:121:35 | [transitive] call to local function CaptureOutMultipleLambdas | captured nonSink0 | Capture.cs:121:9:121:35 | SSA call def(nonSink0) |
| Capture.cs:121:9:121:35 | [transitive] call to local function CaptureOutMultipleLambdas | captured nonSink0 | Capture.cs:121:9:121:35 | SSA call def(nonSink0) |
| Capture.cs:121:9:121:35 | [transitive] call to local function CaptureOutMultipleLambdas | captured sink40 | Capture.cs:121:9:121:35 | SSA call def(sink40) |
| Capture.cs:121:9:121:35 | [transitive] call to local function CaptureOutMultipleLambdas | captured sink40 | Capture.cs:121:9:121:35 | SSA call def(sink40) |
| Capture.cs:121:9:121:35 | call to local function CaptureOutMultipleLambdas | captured nonSink0 | Capture.cs:121:9:121:35 | SSA call def(nonSink0) |
| Capture.cs:121:9:121:35 | call to local function CaptureOutMultipleLambdas | captured sink40 | Capture.cs:121:9:121:35 | SSA call def(sink40) |
| Capture.cs:132:9:132:25 | call to local function CaptureThrough1 | captured sink33 | Capture.cs:132:9:132:25 | SSA call def(sink33) |
| Capture.cs:144:9:144:25 | [transitive] call to local function CaptureThrough2 | captured sink34 | Capture.cs:144:9:144:25 | SSA call def(sink34) |
| Capture.cs:144:9:144:25 | call to local function CaptureThrough2 | captured sink34 | Capture.cs:144:9:144:25 | SSA call def(sink34) |
| Capture.cs:153:9:153:45 | call to method Select | captured sink35 | Capture.cs:153:9:153:45 | SSA call def(sink35) |
| Capture.cs:153:9:153:45 | call to method Select | return | Capture.cs:153:9:153:45 | call to method Select |
| Capture.cs:153:9:153:45 | call to method Select | yield return | Capture.cs:153:9:153:45 | call to method Select |
| Capture.cs:153:9:153:55 | call to method ToArray | return | Capture.cs:153:9:153:55 | call to method ToArray |
| Capture.cs:153:30:153:44 | [implicit call] access to local variable captureThrough3 | captured sink35 | Capture.cs:153:9:153:45 | SSA call def(sink35) |
| Capture.cs:153:30:153:44 | [implicit call] access to local variable captureThrough3 | return | Capture.cs:153:30:153:44 | [output] access to local variable captureThrough3 |
| Capture.cs:160:22:160:38 | call to local function CaptureThrough4 | return | Capture.cs:160:22:160:38 | call to local function CaptureThrough4 |
| Capture.cs:168:9:168:32 | call to local function CaptureThrough5 | captured sink37 | Capture.cs:168:9:168:32 | SSA call def(sink37) |
| Capture.cs:191:20:191:22 | call to local function M | return | Capture.cs:191:20:191:22 | call to local function M |
| Capture.cs:194:22:194:32 | call to local function Id | return | Capture.cs:194:22:194:32 | call to local function Id |
| Capture.cs:196:20:196:25 | call to local function Id | return | Capture.cs:196:20:196:25 | call to local function Id |
| GlobalDataFlow.cs:25:9:25:26 | access to property SinkProperty0 | return | GlobalDataFlow.cs:25:9:25:26 | access to property SinkProperty0 |
| GlobalDataFlow.cs:26:15:26:32 | access to property SinkProperty0 | return | GlobalDataFlow.cs:26:15:26:32 | access to property SinkProperty0 |
| GlobalDataFlow.cs:29:9:29:29 | access to property NonSinkProperty0 | return | GlobalDataFlow.cs:29:9:29:29 | access to property NonSinkProperty0 |

20
csharp/ql/test/library-tests/dataflow/global/TaintTracking.expected
View File

@@ -1,15 +1,17 @@
| Capture.cs:12:19:12:24 | access to local variable sink27 |
| Capture.cs:21:23:21:28 | access to local variable sink28 |
| Capture.cs:30:19:30:24 | access to local variable sink29 |
| Capture.cs:60:15:60:20 | access to local variable sink30 |
| Capture.cs:72:15:72:20 | access to local variable sink31 |
| Capture.cs:81:15:81:20 | access to local variable sink32 |
| Capture.cs:109:15:109:20 | access to local variable sink33 |
| Capture.cs:121:15:121:20 | access to local variable sink34 |
| Capture.cs:130:15:130:20 | access to local variable sink35 |
| Capture.cs:137:15:137:20 | access to local variable sink36 |
| Capture.cs:145:15:145:20 | access to local variable sink37 |
| Capture.cs:171:15:171:20 | access to local variable sink38 |
| Capture.cs:57:27:57:32 | access to parameter sink39 |
| Capture.cs:72:15:72:20 | access to local variable sink30 |
| Capture.cs:84:15:84:20 | access to local variable sink31 |
| Capture.cs:93:15:93:20 | access to local variable sink32 |
| Capture.cs:122:15:122:20 | access to local variable sink40 |
| Capture.cs:133:15:133:20 | access to local variable sink33 |
| Capture.cs:145:15:145:20 | access to local variable sink34 |
| Capture.cs:154:15:154:20 | access to local variable sink35 |
| Capture.cs:161:15:161:20 | access to local variable sink36 |
| Capture.cs:169:15:169:20 | access to local variable sink37 |
| Capture.cs:195:15:195:20 | access to local variable sink38 |
| GlobalDataFlow.cs:18:15:18:29 | access to field SinkField0 |
| GlobalDataFlow.cs:26:15:26:32 | access to property SinkProperty0 |
| GlobalDataFlow.cs:44:50:44:59 | access to parameter sinkParam2 |

676
csharp/ql/test/library-tests/dataflow/global/TaintTrackingEdges.expected
View File

@@ -12,6 +12,10 @@
| Capture.cs:7:20:7:26 | tainted | Capture.cs:33:9:33:40 | [implicit argument] tainted |
| Capture.cs:7:20:7:26 | tainted | Capture.cs:33:9:33:40 | [implicit argument] tainted |
| Capture.cs:7:20:7:26 | tainted | Capture.cs:33:9:33:40 | [implicit argument] tainted |
| Capture.cs:7:20:7:26 | tainted | Capture.cs:61:36:61:42 | access to parameter tainted |
| Capture.cs:7:20:7:26 | tainted | Capture.cs:61:36:61:42 | access to parameter tainted |
| Capture.cs:7:20:7:26 | tainted | Capture.cs:61:36:61:42 | access to parameter tainted |
| Capture.cs:7:20:7:26 | tainted | Capture.cs:61:36:61:42 | access to parameter tainted |
| Capture.cs:9:9:13:9 | SSA capture def(tainted) | Capture.cs:11:17:11:32 | SSA def(sink27) |
| Capture.cs:9:9:13:9 | SSA capture def(tainted) | Capture.cs:11:17:11:32 | SSA def(sink27) |
| Capture.cs:9:9:13:9 | SSA capture def(tainted) | Capture.cs:11:17:11:32 | SSA def(sink27) |
@@ -146,306 +150,378 @@
| Capture.cs:45:32:45:38 | access to parameter tainted | Capture.cs:45:21:45:38 | SSA def(nonSink0) |
| Capture.cs:45:32:45:38 | access to parameter tainted | Capture.cs:46:23:46:30 | access to local variable nonSink0 |
| Capture.cs:45:32:45:38 | access to parameter tainted | Capture.cs:46:23:46:30 | access to local variable nonSink0 |
| Capture.cs:54:25:54:26 | "" | Capture.cs:54:16:54:26 | SSA def(sink30) |
| Capture.cs:54:25:54:26 | "" | Capture.cs:54:16:54:26 | SSA def(sink30) |
| Capture.cs:57:13:57:35 | SSA def(sink30) | Capture.cs:59:9:59:21 | SSA call def(sink30) |
| Capture.cs:57:13:57:35 | SSA def(sink30) | Capture.cs:59:9:59:21 | SSA call def(sink30) |
| Capture.cs:57:22:57:35 | "taint source" | Capture.cs:57:13:57:35 | SSA def(sink30) |
| Capture.cs:57:22:57:35 | "taint source" | Capture.cs:57:13:57:35 | SSA def(sink30) |
| Capture.cs:59:9:59:21 | SSA call def(sink30) | Capture.cs:60:15:60:20 | access to local variable sink30 |
| Capture.cs:59:9:59:21 | SSA call def(sink30) | Capture.cs:60:15:60:20 | access to local variable sink30 |
| Capture.cs:62:25:62:26 | "" | Capture.cs:62:16:62:26 | SSA def(sink31) |
| Capture.cs:62:25:62:26 | "" | Capture.cs:62:16:62:26 | SSA def(sink31) |
| Capture.cs:67:17:67:39 | SSA def(sink31) | Capture.cs:71:9:71:21 | SSA call def(sink31) |
| Capture.cs:67:17:67:39 | SSA def(sink31) | Capture.cs:71:9:71:21 | SSA call def(sink31) |
| Capture.cs:67:26:67:39 | "taint source" | Capture.cs:67:17:67:39 | SSA def(sink31) |
| Capture.cs:67:26:67:39 | "taint source" | Capture.cs:67:17:67:39 | SSA def(sink31) |
| Capture.cs:71:9:71:21 | SSA call def(sink31) | Capture.cs:72:15:72:20 | access to local variable sink31 |
| Capture.cs:71:9:71:21 | SSA call def(sink31) | Capture.cs:72:15:72:20 | access to local variable sink31 |
| Capture.cs:74:25:74:26 | "" | Capture.cs:74:16:74:26 | SSA def(sink32) |
| Capture.cs:74:25:74:26 | "" | Capture.cs:74:16:74:26 | SSA def(sink32) |
| Capture.cs:75:30:79:9 | SSA def(captureOut3) | Capture.cs:80:30:80:40 | access to local variable captureOut3 |
| Capture.cs:75:30:79:9 | SSA def(captureOut3) | Capture.cs:80:30:80:40 | access to local variable captureOut3 |
| Capture.cs:75:44:75:46 | arg | Capture.cs:75:44:75:46 | arg |
| Capture.cs:75:44:75:46 | arg | Capture.cs:75:44:75:46 | arg |
| Capture.cs:75:44:75:46 | arg | Capture.cs:75:44:75:46 | arg |
| Capture.cs:75:44:75:46 | arg | Capture.cs:75:44:75:46 | arg |
| Capture.cs:75:44:75:46 | arg | Capture.cs:78:20:78:22 | access to parameter arg |
| Capture.cs:75:44:75:46 | arg | Capture.cs:78:20:78:22 | access to parameter arg |
| Capture.cs:75:44:75:46 | arg | Capture.cs:78:20:78:22 | access to parameter arg |
| Capture.cs:75:44:75:46 | arg | Capture.cs:78:20:78:22 | access to parameter arg |
| Capture.cs:75:44:75:46 | arg | Capture.cs:78:20:78:22 | access to parameter arg |
| Capture.cs:75:44:75:46 | arg | Capture.cs:78:20:78:22 | access to parameter arg |
| Capture.cs:75:44:75:46 | arg | Capture.cs:78:20:78:22 | access to parameter arg |
| Capture.cs:75:44:75:46 | arg | Capture.cs:78:20:78:22 | access to parameter arg |
| Capture.cs:75:44:79:9 | (...) => ... | Capture.cs:75:30:79:9 | SSA def(captureOut3) |
| Capture.cs:75:44:79:9 | (...) => ... | Capture.cs:75:30:79:9 | SSA def(captureOut3) |
| Capture.cs:75:44:79:9 | (...) => ... | Capture.cs:80:30:80:40 | access to local variable captureOut3 |
| Capture.cs:75:44:79:9 | (...) => ... | Capture.cs:80:30:80:40 | access to local variable captureOut3 |
| Capture.cs:77:13:77:35 | SSA def(sink32) | Capture.cs:80:9:80:41 | SSA call def(sink32) |
| Capture.cs:77:13:77:35 | SSA def(sink32) | Capture.cs:80:9:80:41 | SSA call def(sink32) |
| Capture.cs:77:22:77:35 | "taint source" | Capture.cs:77:13:77:35 | SSA def(sink32) |
| Capture.cs:77:22:77:35 | "taint source" | Capture.cs:77:13:77:35 | SSA def(sink32) |
| Capture.cs:78:20:78:22 | access to parameter arg | Capture.cs:80:30:80:40 | [output] access to local variable captureOut3 |
| Capture.cs:78:20:78:22 | access to parameter arg | Capture.cs:80:30:80:40 | [output] access to local variable captureOut3 |
| Capture.cs:80:9:80:21 | array creation of type String[] | Capture.cs:75:44:75:46 | arg |
| Capture.cs:80:9:80:21 | array creation of type String[] | Capture.cs:75:44:75:46 | arg |
| Capture.cs:80:9:80:21 | array creation of type String[] | Capture.cs:80:30:80:40 | [output] access to local variable captureOut3 |
| Capture.cs:80:9:80:21 | array creation of type String[] | Capture.cs:80:30:80:40 | [output] access to local variable captureOut3 |
| Capture.cs:80:9:80:41 | SSA call def(sink32) | Capture.cs:81:15:81:20 | access to local variable sink32 |
| Capture.cs:80:9:80:41 | SSA call def(sink32) | Capture.cs:81:15:81:20 | access to local variable sink32 |
| Capture.cs:80:9:80:41 | call to method Select | Capture.cs:80:9:80:51 | call to method ToArray |
| Capture.cs:80:9:80:41 | call to method Select | Capture.cs:80:9:80:51 | call to method ToArray |
| Capture.cs:80:17:80:19 | " " | Capture.cs:80:9:80:21 | array creation of type String[] |
| Capture.cs:80:17:80:19 | " " | Capture.cs:80:9:80:21 | array creation of type String[] |
| Capture.cs:80:30:80:40 | [output] access to local variable captureOut3 | Capture.cs:80:9:80:41 | call to method Select |
| Capture.cs:80:30:80:40 | [output] access to local variable captureOut3 | Capture.cs:80:9:80:41 | call to method Select |
| Capture.cs:80:30:80:40 | [output] access to local variable captureOut3 | Capture.cs:80:9:80:51 | call to method ToArray |
| Capture.cs:80:30:80:40 | [output] access to local variable captureOut3 | Capture.cs:80:9:80:51 | call to method ToArray |
| Capture.cs:83:16:83:28 | SSA def(nonSink0) | Capture.cs:88:15:88:22 | access to local variable nonSink0 |
| Capture.cs:83:16:83:28 | SSA def(nonSink0) | Capture.cs:88:15:88:22 | access to local variable nonSink0 |
| Capture.cs:83:16:83:28 | SSA def(nonSink0) | Capture.cs:98:15:98:22 | access to local variable nonSink0 |
| Capture.cs:83:16:83:28 | SSA def(nonSink0) | Capture.cs:98:15:98:22 | access to local variable nonSink0 |
| Capture.cs:83:27:83:28 | "" | Capture.cs:83:16:83:28 | SSA def(nonSink0) |
| Capture.cs:83:27:83:28 | "" | Capture.cs:83:16:83:28 | SSA def(nonSink0) |
| Capture.cs:83:27:83:28 | "" | Capture.cs:88:15:88:22 | access to local variable nonSink0 |
| Capture.cs:83:27:83:28 | "" | Capture.cs:88:15:88:22 | access to local variable nonSink0 |
| Capture.cs:83:27:83:28 | "" | Capture.cs:98:15:98:22 | access to local variable nonSink0 |
| Capture.cs:83:27:83:28 | "" | Capture.cs:98:15:98:22 | access to local variable nonSink0 |
| Capture.cs:88:15:88:22 | access to local variable nonSink0 | Capture.cs:98:15:98:22 | access to local variable nonSink0 |
| Capture.cs:88:15:88:22 | access to local variable nonSink0 | Capture.cs:98:15:98:22 | access to local variable nonSink0 |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:101:25:101:31 | tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:101:25:101:31 | tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:108:9:108:25 | [implicit argument] tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:108:9:108:25 | [implicit argument] tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:108:9:108:25 | [implicit argument] tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:108:9:108:25 | [implicit argument] tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:120:9:120:25 | [implicit argument] tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:120:9:120:25 | [implicit argument] tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:120:9:120:25 | [implicit argument] tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:120:9:120:25 | [implicit argument] tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:129:9:129:45 | [implicit argument] tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:129:9:129:45 | [implicit argument] tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:129:9:129:45 | [implicit argument] tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:129:9:129:45 | [implicit argument] tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:136:22:136:38 | [implicit argument] tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:136:22:136:38 | [implicit argument] tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:136:22:136:38 | [implicit argument] tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:136:22:136:38 | [implicit argument] tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:144:25:144:31 | access to parameter tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:144:25:144:31 | access to parameter tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:144:25:144:31 | access to parameter tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:144:25:144:31 | access to parameter tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:170:25:170:31 | access to parameter tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:170:25:170:31 | access to parameter tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:170:25:170:31 | access to parameter tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:170:25:170:31 | access to parameter tainted |
| Capture.cs:103:25:103:26 | "" | Capture.cs:103:16:103:26 | SSA def(sink33) |
| Capture.cs:103:25:103:26 | "" | Capture.cs:103:16:103:26 | SSA def(sink33) |
| Capture.cs:104:9:107:9 | SSA capture def(tainted) | Capture.cs:106:13:106:28 | SSA def(sink33) |
| Capture.cs:104:9:107:9 | SSA capture def(tainted) | Capture.cs:106:13:106:28 | SSA def(sink33) |
| Capture.cs:104:9:107:9 | SSA capture def(tainted) | Capture.cs:106:13:106:28 | SSA def(sink33) |
| Capture.cs:104:9:107:9 | SSA capture def(tainted) | Capture.cs:106:13:106:28 | SSA def(sink33) |
| Capture.cs:104:9:107:9 | SSA capture def(tainted) | Capture.cs:106:22:106:28 | access to parameter tainted |
| Capture.cs:104:9:107:9 | SSA capture def(tainted) | Capture.cs:106:22:106:28 | access to parameter tainted |
| Capture.cs:104:9:107:9 | SSA capture def(tainted) | Capture.cs:106:22:106:28 | access to parameter tainted |
| Capture.cs:104:9:107:9 | SSA capture def(tainted) | Capture.cs:106:22:106:28 | access to parameter tainted |
| Capture.cs:106:13:106:28 | SSA def(sink33) | Capture.cs:108:9:108:25 | SSA call def(sink33) |
| Capture.cs:106:13:106:28 | SSA def(sink33) | Capture.cs:108:9:108:25 | SSA call def(sink33) |
| Capture.cs:106:22:106:28 | access to parameter tainted | Capture.cs:106:13:106:28 | SSA def(sink33) |
| Capture.cs:106:22:106:28 | access to parameter tainted | Capture.cs:106:13:106:28 | SSA def(sink33) |
| Capture.cs:106:22:106:28 | access to parameter tainted | Capture.cs:106:13:106:28 | SSA def(sink33) |
| Capture.cs:106:22:106:28 | access to parameter tainted | Capture.cs:106:13:106:28 | SSA def(sink33) |
| Capture.cs:108:9:108:25 | SSA call def(sink33) | Capture.cs:109:15:109:20 | access to local variable sink33 |
| Capture.cs:108:9:108:25 | SSA call def(sink33) | Capture.cs:109:15:109:20 | access to local variable sink33 |
| Capture.cs:108:9:108:25 | [implicit argument] tainted | Capture.cs:104:9:107:9 | SSA capture def(tainted) |
| Capture.cs:108:9:108:25 | [implicit argument] tainted | Capture.cs:104:9:107:9 | SSA capture def(tainted) |
| Capture.cs:108:9:108:25 | [implicit argument] tainted | Capture.cs:108:9:108:25 | SSA call def(sink33) |
| Capture.cs:108:9:108:25 | [implicit argument] tainted | Capture.cs:108:9:108:25 | SSA call def(sink33) |
| Capture.cs:111:25:111:26 | "" | Capture.cs:111:16:111:26 | SSA def(sink34) |
| Capture.cs:111:25:111:26 | "" | Capture.cs:111:16:111:26 | SSA def(sink34) |
| Capture.cs:114:13:117:13 | SSA capture def(tainted) | Capture.cs:116:17:116:32 | SSA def(sink34) |
| Capture.cs:114:13:117:13 | SSA capture def(tainted) | Capture.cs:116:17:116:32 | SSA def(sink34) |
| Capture.cs:114:13:117:13 | SSA capture def(tainted) | Capture.cs:116:17:116:32 | SSA def(sink34) |
| Capture.cs:114:13:117:13 | SSA capture def(tainted) | Capture.cs:116:17:116:32 | SSA def(sink34) |
| Capture.cs:114:13:117:13 | SSA capture def(tainted) | Capture.cs:116:26:116:32 | access to parameter tainted |
| Capture.cs:114:13:117:13 | SSA capture def(tainted) | Capture.cs:116:26:116:32 | access to parameter tainted |
| Capture.cs:114:13:117:13 | SSA capture def(tainted) | Capture.cs:116:26:116:32 | access to parameter tainted |
| Capture.cs:114:13:117:13 | SSA capture def(tainted) | Capture.cs:116:26:116:32 | access to parameter tainted |
| Capture.cs:116:17:116:32 | SSA def(sink34) | Capture.cs:120:9:120:25 | SSA call def(sink34) |
| Capture.cs:116:17:116:32 | SSA def(sink34) | Capture.cs:120:9:120:25 | SSA call def(sink34) |
| Capture.cs:116:26:116:32 | access to parameter tainted | Capture.cs:116:17:116:32 | SSA def(sink34) |
| Capture.cs:116:26:116:32 | access to parameter tainted | Capture.cs:116:17:116:32 | SSA def(sink34) |
| Capture.cs:116:26:116:32 | access to parameter tainted | Capture.cs:116:17:116:32 | SSA def(sink34) |
| Capture.cs:116:26:116:32 | access to parameter tainted | Capture.cs:116:17:116:32 | SSA def(sink34) |
| Capture.cs:120:9:120:25 | SSA call def(sink34) | Capture.cs:121:15:121:20 | access to local variable sink34 |
| Capture.cs:120:9:120:25 | SSA call def(sink34) | Capture.cs:121:15:121:20 | access to local variable sink34 |
| Capture.cs:120:9:120:25 | [implicit argument] tainted | Capture.cs:114:13:117:13 | SSA capture def(tainted) |
| Capture.cs:120:9:120:25 | [implicit argument] tainted | Capture.cs:114:13:117:13 | SSA capture def(tainted) |
| Capture.cs:120:9:120:25 | [implicit argument] tainted | Capture.cs:120:9:120:25 | SSA call def(sink34) |
| Capture.cs:120:9:120:25 | [implicit argument] tainted | Capture.cs:120:9:120:25 | SSA call def(sink34) |
| Capture.cs:123:25:123:26 | "" | Capture.cs:123:16:123:26 | SSA def(sink35) |
| Capture.cs:123:25:123:26 | "" | Capture.cs:123:16:123:26 | SSA def(sink35) |
| Capture.cs:124:30:128:9 | SSA def(captureThrough3) | Capture.cs:129:30:129:44 | access to local variable captureThrough3 |
| Capture.cs:124:30:128:9 | SSA def(captureThrough3) | Capture.cs:129:30:129:44 | access to local variable captureThrough3 |
| Capture.cs:124:48:124:50 | arg | Capture.cs:124:48:124:50 | arg |
| Capture.cs:124:48:124:50 | arg | Capture.cs:124:48:124:50 | arg |
| Capture.cs:124:48:124:50 | arg | Capture.cs:124:48:124:50 | arg |
| Capture.cs:124:48:124:50 | arg | Capture.cs:124:48:124:50 | arg |
| Capture.cs:124:48:124:50 | arg | Capture.cs:127:20:127:22 | access to parameter arg |
| Capture.cs:124:48:124:50 | arg | Capture.cs:127:20:127:22 | access to parameter arg |
| Capture.cs:124:48:124:50 | arg | Capture.cs:127:20:127:22 | access to parameter arg |
| Capture.cs:124:48:124:50 | arg | Capture.cs:127:20:127:22 | access to parameter arg |
| Capture.cs:124:48:124:50 | arg | Capture.cs:127:20:127:22 | access to parameter arg |
| Capture.cs:124:48:124:50 | arg | Capture.cs:127:20:127:22 | access to parameter arg |
| Capture.cs:124:48:124:50 | arg | Capture.cs:127:20:127:22 | access to parameter arg |
| Capture.cs:124:48:124:50 | arg | Capture.cs:127:20:127:22 | access to parameter arg |
| Capture.cs:124:48:128:9 | (...) => ... | Capture.cs:124:30:128:9 | SSA def(captureThrough3) |
| Capture.cs:124:48:128:9 | (...) => ... | Capture.cs:124:30:128:9 | SSA def(captureThrough3) |
| Capture.cs:124:48:128:9 | (...) => ... | Capture.cs:129:30:129:44 | access to local variable captureThrough3 |
| Capture.cs:124:48:128:9 | (...) => ... | Capture.cs:129:30:129:44 | access to local variable captureThrough3 |
| Capture.cs:124:48:128:9 | SSA capture def(tainted) | Capture.cs:126:13:126:28 | SSA def(sink35) |
| Capture.cs:124:48:128:9 | SSA capture def(tainted) | Capture.cs:126:13:126:28 | SSA def(sink35) |
| Capture.cs:124:48:128:9 | SSA capture def(tainted) | Capture.cs:126:13:126:28 | SSA def(sink35) |
| Capture.cs:124:48:128:9 | SSA capture def(tainted) | Capture.cs:126:13:126:28 | SSA def(sink35) |
| Capture.cs:124:48:128:9 | SSA capture def(tainted) | Capture.cs:126:22:126:28 | access to parameter tainted |
| Capture.cs:124:48:128:9 | SSA capture def(tainted) | Capture.cs:126:22:126:28 | access to parameter tainted |
| Capture.cs:124:48:128:9 | SSA capture def(tainted) | Capture.cs:126:22:126:28 | access to parameter tainted |
| Capture.cs:124:48:128:9 | SSA capture def(tainted) | Capture.cs:126:22:126:28 | access to parameter tainted |
| Capture.cs:126:13:126:28 | SSA def(sink35) | Capture.cs:129:9:129:45 | SSA call def(sink35) |
| Capture.cs:126:13:126:28 | SSA def(sink35) | Capture.cs:129:9:129:45 | SSA call def(sink35) |
| Capture.cs:126:22:126:28 | access to parameter tainted | Capture.cs:126:13:126:28 | SSA def(sink35) |
| Capture.cs:126:22:126:28 | access to parameter tainted | Capture.cs:126:13:126:28 | SSA def(sink35) |
| Capture.cs:126:22:126:28 | access to parameter tainted | Capture.cs:126:13:126:28 | SSA def(sink35) |
| Capture.cs:126:22:126:28 | access to parameter tainted | Capture.cs:126:13:126:28 | SSA def(sink35) |
| Capture.cs:127:20:127:22 | access to parameter arg | Capture.cs:129:30:129:44 | [output] access to local variable captureThrough3 |
| Capture.cs:127:20:127:22 | access to parameter arg | Capture.cs:129:30:129:44 | [output] access to local variable captureThrough3 |
| Capture.cs:129:9:129:21 | array creation of type String[] | Capture.cs:124:48:124:50 | arg |
| Capture.cs:129:9:129:21 | array creation of type String[] | Capture.cs:124:48:124:50 | arg |
| Capture.cs:129:9:129:21 | array creation of type String[] | Capture.cs:129:30:129:44 | [output] access to local variable captureThrough3 |
| Capture.cs:129:9:129:21 | array creation of type String[] | Capture.cs:129:30:129:44 | [output] access to local variable captureThrough3 |
| Capture.cs:129:9:129:45 | SSA call def(sink35) | Capture.cs:130:15:130:20 | access to local variable sink35 |
| Capture.cs:129:9:129:45 | SSA call def(sink35) | Capture.cs:130:15:130:20 | access to local variable sink35 |
| Capture.cs:129:9:129:45 | [implicit argument] tainted | Capture.cs:124:48:128:9 | SSA capture def(tainted) |
| Capture.cs:129:9:129:45 | [implicit argument] tainted | Capture.cs:124:48:128:9 | SSA capture def(tainted) |
| Capture.cs:129:9:129:45 | [implicit argument] tainted | Capture.cs:129:9:129:45 | SSA call def(sink35) |
| Capture.cs:129:9:129:45 | [implicit argument] tainted | Capture.cs:129:9:129:45 | SSA call def(sink35) |
| Capture.cs:129:9:129:45 | call to method Select | Capture.cs:129:9:129:55 | call to method ToArray |
| Capture.cs:129:9:129:45 | call to method Select | Capture.cs:129:9:129:55 | call to method ToArray |
| Capture.cs:129:17:129:19 | " " | Capture.cs:129:9:129:21 | array creation of type String[] |
| Capture.cs:129:17:129:19 | " " | Capture.cs:129:9:129:21 | array creation of type String[] |
| Capture.cs:129:30:129:44 | [output] access to local variable captureThrough3 | Capture.cs:129:9:129:45 | call to method Select |
| Capture.cs:129:30:129:44 | [output] access to local variable captureThrough3 | Capture.cs:129:9:129:45 | call to method Select |
| Capture.cs:129:30:129:44 | [output] access to local variable captureThrough3 | Capture.cs:129:9:129:55 | call to method ToArray |
| Capture.cs:129:30:129:44 | [output] access to local variable captureThrough3 | Capture.cs:129:9:129:55 | call to method ToArray |
| Capture.cs:132:9:135:9 | SSA capture def(tainted) | Capture.cs:134:20:134:26 | access to parameter tainted |
| Capture.cs:132:9:135:9 | SSA capture def(tainted) | Capture.cs:134:20:134:26 | access to parameter tainted |
| Capture.cs:132:9:135:9 | SSA capture def(tainted) | Capture.cs:134:20:134:26 | access to parameter tainted |
| Capture.cs:132:9:135:9 | SSA capture def(tainted) | Capture.cs:134:20:134:26 | access to parameter tainted |
| Capture.cs:134:20:134:26 | access to parameter tainted | Capture.cs:136:22:136:38 | call to local function CaptureThrough4 |
| Capture.cs:134:20:134:26 | access to parameter tainted | Capture.cs:136:22:136:38 | call to local function CaptureThrough4 |
| Capture.cs:136:13:136:38 | SSA def(sink36) | Capture.cs:137:15:137:20 | access to local variable sink36 |
| Capture.cs:136:13:136:38 | SSA def(sink36) | Capture.cs:137:15:137:20 | access to local variable sink36 |
| Capture.cs:136:22:136:38 | [implicit argument] tainted | Capture.cs:132:9:135:9 | SSA capture def(tainted) |
| Capture.cs:136:22:136:38 | [implicit argument] tainted | Capture.cs:132:9:135:9 | SSA capture def(tainted) |
| Capture.cs:136:22:136:38 | [implicit argument] tainted | Capture.cs:136:22:136:38 | call to local function CaptureThrough4 |
| Capture.cs:136:22:136:38 | [implicit argument] tainted | Capture.cs:136:22:136:38 | call to local function CaptureThrough4 |
| Capture.cs:136:22:136:38 | call to local function CaptureThrough4 | Capture.cs:136:13:136:38 | SSA def(sink36) |
| Capture.cs:136:22:136:38 | call to local function CaptureThrough4 | Capture.cs:136:13:136:38 | SSA def(sink36) |
| Capture.cs:136:22:136:38 | call to local function CaptureThrough4 | Capture.cs:137:15:137:20 | access to local variable sink36 |
| Capture.cs:136:22:136:38 | call to local function CaptureThrough4 | Capture.cs:137:15:137:20 | access to local variable sink36 |
| Capture.cs:139:22:139:23 | "" | Capture.cs:139:13:139:23 | SSA def(sink37) |
| Capture.cs:139:22:139:23 | "" | Capture.cs:139:13:139:23 | SSA def(sink37) |
| Capture.cs:140:37:140:37 | p | Capture.cs:140:37:140:37 | p |
| Capture.cs:140:37:140:37 | p | Capture.cs:140:37:140:37 | p |
| Capture.cs:140:37:140:37 | p | Capture.cs:142:13:142:22 | SSA def(sink37) |
| Capture.cs:140:37:140:37 | p | Capture.cs:142:13:142:22 | SSA def(sink37) |
| Capture.cs:140:37:140:37 | p | Capture.cs:142:13:142:22 | SSA def(sink37) |
| Capture.cs:140:37:140:37 | p | Capture.cs:142:13:142:22 | SSA def(sink37) |
| Capture.cs:140:37:140:37 | p | Capture.cs:142:13:142:22 | SSA def(sink37) |
| Capture.cs:140:37:140:37 | p | Capture.cs:142:13:142:22 | SSA def(sink37) |
| Capture.cs:140:37:140:37 | p | Capture.cs:142:22:142:22 | access to parameter p |
| Capture.cs:140:37:140:37 | p | Capture.cs:142:22:142:22 | access to parameter p |
| Capture.cs:140:37:140:37 | p | Capture.cs:142:22:142:22 | access to parameter p |
| Capture.cs:140:37:140:37 | p | Capture.cs:142:22:142:22 | access to parameter p |
| Capture.cs:140:37:140:37 | p | Capture.cs:142:22:142:22 | access to parameter p |
| Capture.cs:140:37:140:37 | p | Capture.cs:142:22:142:22 | access to parameter p |
| Capture.cs:142:13:142:22 | SSA def(sink37) | Capture.cs:144:9:144:32 | SSA call def(sink37) |
| Capture.cs:142:13:142:22 | SSA def(sink37) | Capture.cs:144:9:144:32 | SSA call def(sink37) |
| Capture.cs:142:22:142:22 | access to parameter p | Capture.cs:142:13:142:22 | SSA def(sink37) |
| Capture.cs:142:22:142:22 | access to parameter p | Capture.cs:142:13:142:22 | SSA def(sink37) |
| Capture.cs:142:22:142:22 | access to parameter p | Capture.cs:142:13:142:22 | SSA def(sink37) |
| Capture.cs:142:22:142:22 | access to parameter p | Capture.cs:142:13:142:22 | SSA def(sink37) |
| Capture.cs:144:9:144:32 | SSA call def(sink37) | Capture.cs:145:15:145:20 | access to local variable sink37 |
| Capture.cs:144:9:144:32 | SSA call def(sink37) | Capture.cs:145:15:145:20 | access to local variable sink37 |
| Capture.cs:144:25:144:31 | access to parameter tainted | Capture.cs:140:37:140:37 | p |
| Capture.cs:144:25:144:31 | access to parameter tainted | Capture.cs:140:37:140:37 | p |
| Capture.cs:144:25:144:31 | access to parameter tainted | Capture.cs:144:9:144:32 | SSA call def(sink37) |
| Capture.cs:144:25:144:31 | access to parameter tainted | Capture.cs:144:9:144:32 | SSA call def(sink37) |
| Capture.cs:144:25:144:31 | access to parameter tainted | Capture.cs:170:25:170:31 | access to parameter tainted |
| Capture.cs:144:25:144:31 | access to parameter tainted | Capture.cs:170:25:170:31 | access to parameter tainted |
| Capture.cs:147:16:147:28 | SSA def(nonSink0) | Capture.cs:152:15:152:22 | access to local variable nonSink0 |
| Capture.cs:147:16:147:28 | SSA def(nonSink0) | Capture.cs:152:15:152:22 | access to local variable nonSink0 |
| Capture.cs:147:16:147:28 | SSA def(nonSink0) | Capture.cs:162:15:162:22 | access to local variable nonSink0 |
| Capture.cs:147:16:147:28 | SSA def(nonSink0) | Capture.cs:162:15:162:22 | access to local variable nonSink0 |
| Capture.cs:147:27:147:28 | "" | Capture.cs:147:16:147:28 | SSA def(nonSink0) |
| Capture.cs:147:27:147:28 | "" | Capture.cs:147:16:147:28 | SSA def(nonSink0) |
| Capture.cs:147:27:147:28 | "" | Capture.cs:152:15:152:22 | access to local variable nonSink0 |
| Capture.cs:147:27:147:28 | "" | Capture.cs:152:15:152:22 | access to local variable nonSink0 |
| Capture.cs:147:27:147:28 | "" | Capture.cs:162:15:162:22 | access to local variable nonSink0 |
| Capture.cs:147:27:147:28 | "" | Capture.cs:162:15:162:22 | access to local variable nonSink0 |
| Capture.cs:148:9:151:9 | SSA capture def(tainted) | Capture.cs:150:24:150:30 | access to parameter tainted |
| Capture.cs:148:9:151:9 | SSA capture def(tainted) | Capture.cs:150:24:150:30 | access to parameter tainted |
| Capture.cs:152:15:152:22 | access to local variable nonSink0 | Capture.cs:162:15:162:22 | access to local variable nonSink0 |
| Capture.cs:152:15:152:22 | access to local variable nonSink0 | Capture.cs:162:15:162:22 | access to local variable nonSink0 |
| Capture.cs:156:13:159:13 | SSA capture def(tainted) | Capture.cs:158:28:158:34 | access to parameter tainted |
| Capture.cs:156:13:159:13 | SSA capture def(tainted) | Capture.cs:158:28:158:34 | access to parameter tainted |
| Capture.cs:164:26:164:26 | s | Capture.cs:164:26:164:26 | s |
| Capture.cs:164:26:164:26 | s | Capture.cs:164:26:164:26 | s |
| Capture.cs:164:26:164:26 | s | Capture.cs:167:20:167:22 | [implicit argument] s |
| Capture.cs:164:26:164:26 | s | Capture.cs:167:20:167:22 | [implicit argument] s |
| Capture.cs:164:26:164:26 | s | Capture.cs:167:20:167:22 | [implicit argument] s |
| Capture.cs:164:26:164:26 | s | Capture.cs:167:20:167:22 | [implicit argument] s |
| Capture.cs:164:26:164:26 | s | Capture.cs:167:20:167:22 | [implicit argument] s |
| Capture.cs:164:26:164:26 | s | Capture.cs:167:20:167:22 | [implicit argument] s |
| Capture.cs:166:13:166:28 | SSA capture def(s) | Capture.cs:166:27:166:27 | access to parameter s |
| Capture.cs:166:13:166:28 | SSA capture def(s) | Capture.cs:166:27:166:27 | access to parameter s |
| Capture.cs:166:13:166:28 | SSA capture def(s) | Capture.cs:166:27:166:27 | access to parameter s |
| Capture.cs:166:13:166:28 | SSA capture def(s) | Capture.cs:166:27:166:27 | access to parameter s |
| Capture.cs:166:27:166:27 | access to parameter s | Capture.cs:167:20:167:22 | call to local function M |
| Capture.cs:166:27:166:27 | access to parameter s | Capture.cs:167:20:167:22 | call to local function M |
| Capture.cs:167:20:167:22 | [implicit argument] s | Capture.cs:166:13:166:28 | SSA capture def(s) |
| Capture.cs:167:20:167:22 | [implicit argument] s | Capture.cs:166:13:166:28 | SSA capture def(s) |
| Capture.cs:167:20:167:22 | [implicit argument] s | Capture.cs:166:13:166:28 | SSA capture def(s) |
| Capture.cs:167:20:167:22 | [implicit argument] s | Capture.cs:166:13:166:28 | SSA capture def(s) |
| Capture.cs:167:20:167:22 | [implicit argument] s | Capture.cs:167:20:167:22 | call to local function M |
| Capture.cs:167:20:167:22 | [implicit argument] s | Capture.cs:167:20:167:22 | call to local function M |
| Capture.cs:167:20:167:22 | [implicit argument] s | Capture.cs:167:20:167:22 | call to local function M |
| Capture.cs:167:20:167:22 | [implicit argument] s | Capture.cs:167:20:167:22 | call to local function M |
| Capture.cs:167:20:167:22 | call to local function M | Capture.cs:170:22:170:32 | call to local function Id |
| Capture.cs:167:20:167:22 | call to local function M | Capture.cs:170:22:170:32 | call to local function Id |
| Capture.cs:167:20:167:22 | call to local function M | Capture.cs:172:20:172:25 | call to local function Id |
| Capture.cs:167:20:167:22 | call to local function M | Capture.cs:172:20:172:25 | call to local function Id |
| Capture.cs:170:13:170:32 | SSA def(sink38) | Capture.cs:171:15:171:20 | access to local variable sink38 |
| Capture.cs:170:13:170:32 | SSA def(sink38) | Capture.cs:171:15:171:20 | access to local variable sink38 |
| Capture.cs:170:22:170:32 | call to local function Id | Capture.cs:170:13:170:32 | SSA def(sink38) |
| Capture.cs:170:22:170:32 | call to local function Id | Capture.cs:170:13:170:32 | SSA def(sink38) |
| Capture.cs:170:22:170:32 | call to local function Id | Capture.cs:171:15:171:20 | access to local variable sink38 |
| Capture.cs:170:22:170:32 | call to local function Id | Capture.cs:171:15:171:20 | access to local variable sink38 |
| Capture.cs:170:25:170:31 | access to parameter tainted | Capture.cs:164:26:164:26 | s |
| Capture.cs:170:25:170:31 | access to parameter tainted | Capture.cs:164:26:164:26 | s |
| Capture.cs:170:25:170:31 | access to parameter tainted | Capture.cs:170:22:170:32 | call to local function Id |
| Capture.cs:170:25:170:31 | access to parameter tainted | Capture.cs:170:22:170:32 | call to local function Id |
| Capture.cs:172:9:172:25 | SSA def(nonSink0) | Capture.cs:173:15:173:22 | access to local variable nonSink0 |
| Capture.cs:172:9:172:25 | SSA def(nonSink0) | Capture.cs:173:15:173:22 | access to local variable nonSink0 |
| Capture.cs:172:20:172:25 | call to local function Id | Capture.cs:172:9:172:25 | SSA def(nonSink0) |
| Capture.cs:172:20:172:25 | call to local function Id | Capture.cs:172:9:172:25 | SSA def(nonSink0) |
| Capture.cs:172:20:172:25 | call to local function Id | Capture.cs:173:15:173:22 | access to local variable nonSink0 |
| Capture.cs:172:20:172:25 | call to local function Id | Capture.cs:173:15:173:22 | access to local variable nonSink0 |
| Capture.cs:172:23:172:24 | "" | Capture.cs:164:26:164:26 | s |
| Capture.cs:172:23:172:24 | "" | Capture.cs:164:26:164:26 | s |
| Capture.cs:172:23:172:24 | "" | Capture.cs:172:20:172:25 | call to local function Id |
| Capture.cs:172:23:172:24 | "" | Capture.cs:172:20:172:25 | call to local function Id |
| Capture.cs:50:33:50:40 | nonSink0 | Capture.cs:50:33:50:40 | nonSink0 |
| Capture.cs:50:33:50:40 | nonSink0 | Capture.cs:50:33:50:40 | nonSink0 |
| Capture.cs:50:33:50:40 | nonSink0 | Capture.cs:52:13:59:14 | [implicit argument] nonSink0 |
| Capture.cs:50:33:50:40 | nonSink0 | Capture.cs:52:13:59:14 | [implicit argument] nonSink0 |
| Capture.cs:50:33:50:40 | nonSink0 | Capture.cs:52:13:59:14 | [implicit argument] nonSink0 |
| Capture.cs:50:33:50:40 | nonSink0 | Capture.cs:52:13:59:14 | [implicit argument] nonSink0 |
| Capture.cs:50:33:50:40 | nonSink0 | Capture.cs:52:13:59:14 | [implicit argument] nonSink0 |
| Capture.cs:50:33:50:40 | nonSink0 | Capture.cs:52:13:59:14 | [implicit argument] nonSink0 |
| Capture.cs:50:50:50:55 | sink39 | Capture.cs:50:50:50:55 | sink39 |
| Capture.cs:50:50:50:55 | sink39 | Capture.cs:50:50:50:55 | sink39 |
| Capture.cs:50:50:50:55 | sink39 | Capture.cs:52:13:59:14 | [implicit argument] sink39 |
| Capture.cs:50:50:50:55 | sink39 | Capture.cs:52:13:59:14 | [implicit argument] sink39 |
| Capture.cs:50:50:50:55 | sink39 | Capture.cs:52:13:59:14 | [implicit argument] sink39 |
| Capture.cs:50:50:50:55 | sink39 | Capture.cs:52:13:59:14 | [implicit argument] sink39 |
| Capture.cs:50:50:50:55 | sink39 | Capture.cs:52:13:59:14 | [implicit argument] sink39 |
| Capture.cs:50:50:50:55 | sink39 | Capture.cs:52:13:59:14 | [implicit argument] sink39 |
| Capture.cs:52:13:59:14 | [implicit argument] nonSink0 | Capture.cs:52:23:59:13 | SSA capture def(nonSink0) |
| Capture.cs:52:13:59:14 | [implicit argument] nonSink0 | Capture.cs:52:23:59:13 | SSA capture def(nonSink0) |
| Capture.cs:52:13:59:14 | [implicit argument] nonSink0 | Capture.cs:52:23:59:13 | SSA capture def(nonSink0) |
| Capture.cs:52:13:59:14 | [implicit argument] nonSink0 | Capture.cs:52:23:59:13 | SSA capture def(nonSink0) |
| Capture.cs:52:13:59:14 | [implicit argument] sink39 | Capture.cs:55:27:58:17 | SSA capture def(sink39) |
| Capture.cs:52:13:59:14 | [implicit argument] sink39 | Capture.cs:55:27:58:17 | SSA capture def(sink39) |
| Capture.cs:52:13:59:14 | [implicit argument] sink39 | Capture.cs:55:27:58:17 | SSA capture def(sink39) |
| Capture.cs:52:13:59:14 | [implicit argument] sink39 | Capture.cs:55:27:58:17 | SSA capture def(sink39) |
| Capture.cs:52:23:59:13 | (...) => ... | Capture.cs:202:34:202:34 | a |
| Capture.cs:52:23:59:13 | (...) => ... | Capture.cs:202:34:202:34 | a |
| Capture.cs:52:23:59:13 | SSA capture def(nonSink0) | Capture.cs:54:23:54:30 | access to parameter nonSink0 |
| Capture.cs:52:23:59:13 | SSA capture def(nonSink0) | Capture.cs:54:23:54:30 | access to parameter nonSink0 |
| Capture.cs:52:23:59:13 | SSA capture def(nonSink0) | Capture.cs:54:23:54:30 | access to parameter nonSink0 |
| Capture.cs:52:23:59:13 | SSA capture def(nonSink0) | Capture.cs:54:23:54:30 | access to parameter nonSink0 |
| Capture.cs:55:27:58:17 | (...) => ... | Capture.cs:202:34:202:34 | a |
| Capture.cs:55:27:58:17 | (...) => ... | Capture.cs:202:34:202:34 | a |
| Capture.cs:55:27:58:17 | SSA capture def(sink39) | Capture.cs:57:27:57:32 | access to parameter sink39 |
| Capture.cs:55:27:58:17 | SSA capture def(sink39) | Capture.cs:57:27:57:32 | access to parameter sink39 |
| Capture.cs:55:27:58:17 | SSA capture def(sink39) | Capture.cs:57:27:57:32 | access to parameter sink39 |
| Capture.cs:55:27:58:17 | SSA capture def(sink39) | Capture.cs:57:27:57:32 | access to parameter sink39 |
| Capture.cs:61:21:61:33 | "not tainted" | Capture.cs:50:33:50:40 | nonSink0 |
| Capture.cs:61:21:61:33 | "not tainted" | Capture.cs:50:33:50:40 | nonSink0 |
| Capture.cs:61:36:61:42 | access to parameter tainted | Capture.cs:50:50:50:55 | sink39 |
| Capture.cs:61:36:61:42 | access to parameter tainted | Capture.cs:50:50:50:55 | sink39 |
| Capture.cs:66:25:66:26 | "" | Capture.cs:66:16:66:26 | SSA def(sink30) |
| Capture.cs:66:25:66:26 | "" | Capture.cs:66:16:66:26 | SSA def(sink30) |
| Capture.cs:69:13:69:35 | SSA def(sink30) | Capture.cs:71:9:71:21 | SSA call def(sink30) |
| Capture.cs:69:13:69:35 | SSA def(sink30) | Capture.cs:71:9:71:21 | SSA call def(sink30) |
| Capture.cs:69:22:69:35 | "taint source" | Capture.cs:69:13:69:35 | SSA def(sink30) |
| Capture.cs:69:22:69:35 | "taint source" | Capture.cs:69:13:69:35 | SSA def(sink30) |
| Capture.cs:71:9:71:21 | SSA call def(sink30) | Capture.cs:72:15:72:20 | access to local variable sink30 |
| Capture.cs:71:9:71:21 | SSA call def(sink30) | Capture.cs:72:15:72:20 | access to local variable sink30 |
| Capture.cs:74:25:74:26 | "" | Capture.cs:74:16:74:26 | SSA def(sink31) |
| Capture.cs:74:25:74:26 | "" | Capture.cs:74:16:74:26 | SSA def(sink31) |
| Capture.cs:79:17:79:39 | SSA def(sink31) | Capture.cs:83:9:83:21 | SSA call def(sink31) |
| Capture.cs:79:17:79:39 | SSA def(sink31) | Capture.cs:83:9:83:21 | SSA call def(sink31) |
| Capture.cs:79:26:79:39 | "taint source" | Capture.cs:79:17:79:39 | SSA def(sink31) |
| Capture.cs:79:26:79:39 | "taint source" | Capture.cs:79:17:79:39 | SSA def(sink31) |
| Capture.cs:83:9:83:21 | SSA call def(sink31) | Capture.cs:84:15:84:20 | access to local variable sink31 |
| Capture.cs:83:9:83:21 | SSA call def(sink31) | Capture.cs:84:15:84:20 | access to local variable sink31 |
| Capture.cs:86:25:86:26 | "" | Capture.cs:86:16:86:26 | SSA def(sink32) |
| Capture.cs:86:25:86:26 | "" | Capture.cs:86:16:86:26 | SSA def(sink32) |
| Capture.cs:87:30:91:9 | SSA def(captureOut3) | Capture.cs:92:30:92:40 | access to local variable captureOut3 |
| Capture.cs:87:30:91:9 | SSA def(captureOut3) | Capture.cs:92:30:92:40 | access to local variable captureOut3 |
| Capture.cs:87:44:87:46 | arg | Capture.cs:87:44:87:46 | arg |
| Capture.cs:87:44:87:46 | arg | Capture.cs:87:44:87:46 | arg |
| Capture.cs:87:44:87:46 | arg | Capture.cs:87:44:87:46 | arg |
| Capture.cs:87:44:87:46 | arg | Capture.cs:87:44:87:46 | arg |
| Capture.cs:87:44:87:46 | arg | Capture.cs:90:20:90:22 | access to parameter arg |
| Capture.cs:87:44:87:46 | arg | Capture.cs:90:20:90:22 | access to parameter arg |
| Capture.cs:87:44:87:46 | arg | Capture.cs:90:20:90:22 | access to parameter arg |
| Capture.cs:87:44:87:46 | arg | Capture.cs:90:20:90:22 | access to parameter arg |
| Capture.cs:87:44:87:46 | arg | Capture.cs:90:20:90:22 | access to parameter arg |
| Capture.cs:87:44:87:46 | arg | Capture.cs:90:20:90:22 | access to parameter arg |
| Capture.cs:87:44:87:46 | arg | Capture.cs:90:20:90:22 | access to parameter arg |
| Capture.cs:87:44:87:46 | arg | Capture.cs:90:20:90:22 | access to parameter arg |
| Capture.cs:87:44:91:9 | (...) => ... | Capture.cs:87:30:91:9 | SSA def(captureOut3) |
| Capture.cs:87:44:91:9 | (...) => ... | Capture.cs:87:30:91:9 | SSA def(captureOut3) |
| Capture.cs:87:44:91:9 | (...) => ... | Capture.cs:92:30:92:40 | access to local variable captureOut3 |
| Capture.cs:87:44:91:9 | (...) => ... | Capture.cs:92:30:92:40 | access to local variable captureOut3 |
| Capture.cs:89:13:89:35 | SSA def(sink32) | Capture.cs:92:9:92:41 | SSA call def(sink32) |
| Capture.cs:89:13:89:35 | SSA def(sink32) | Capture.cs:92:9:92:41 | SSA call def(sink32) |
| Capture.cs:89:22:89:35 | "taint source" | Capture.cs:89:13:89:35 | SSA def(sink32) |
| Capture.cs:89:22:89:35 | "taint source" | Capture.cs:89:13:89:35 | SSA def(sink32) |
| Capture.cs:90:20:90:22 | access to parameter arg | Capture.cs:92:30:92:40 | [output] access to local variable captureOut3 |
| Capture.cs:90:20:90:22 | access to parameter arg | Capture.cs:92:30:92:40 | [output] access to local variable captureOut3 |
| Capture.cs:92:9:92:21 | array creation of type String[] | Capture.cs:87:44:87:46 | arg |
| Capture.cs:92:9:92:21 | array creation of type String[] | Capture.cs:87:44:87:46 | arg |
| Capture.cs:92:9:92:21 | array creation of type String[] | Capture.cs:92:30:92:40 | [output] access to local variable captureOut3 |
| Capture.cs:92:9:92:21 | array creation of type String[] | Capture.cs:92:30:92:40 | [output] access to local variable captureOut3 |
| Capture.cs:92:9:92:41 | SSA call def(sink32) | Capture.cs:93:15:93:20 | access to local variable sink32 |
| Capture.cs:92:9:92:41 | SSA call def(sink32) | Capture.cs:93:15:93:20 | access to local variable sink32 |
| Capture.cs:92:9:92:41 | call to method Select | Capture.cs:92:9:92:51 | call to method ToArray |
| Capture.cs:92:9:92:41 | call to method Select | Capture.cs:92:9:92:51 | call to method ToArray |
| Capture.cs:92:17:92:19 | " " | Capture.cs:92:9:92:21 | array creation of type String[] |
| Capture.cs:92:17:92:19 | " " | Capture.cs:92:9:92:21 | array creation of type String[] |
| Capture.cs:92:30:92:40 | [output] access to local variable captureOut3 | Capture.cs:92:9:92:41 | call to method Select |
| Capture.cs:92:30:92:40 | [output] access to local variable captureOut3 | Capture.cs:92:9:92:41 | call to method Select |
| Capture.cs:92:30:92:40 | [output] access to local variable captureOut3 | Capture.cs:92:9:92:51 | call to method ToArray |
| Capture.cs:92:30:92:40 | [output] access to local variable captureOut3 | Capture.cs:92:9:92:51 | call to method ToArray |
| Capture.cs:95:16:95:28 | SSA def(nonSink0) | Capture.cs:100:15:100:22 | access to local variable nonSink0 |
| Capture.cs:95:16:95:28 | SSA def(nonSink0) | Capture.cs:100:15:100:22 | access to local variable nonSink0 |
| Capture.cs:95:16:95:28 | SSA def(nonSink0) | Capture.cs:110:15:110:22 | access to local variable nonSink0 |
| Capture.cs:95:16:95:28 | SSA def(nonSink0) | Capture.cs:110:15:110:22 | access to local variable nonSink0 |
| Capture.cs:95:27:95:28 | "" | Capture.cs:95:16:95:28 | SSA def(nonSink0) |
| Capture.cs:95:27:95:28 | "" | Capture.cs:95:16:95:28 | SSA def(nonSink0) |
| Capture.cs:95:27:95:28 | "" | Capture.cs:100:15:100:22 | access to local variable nonSink0 |
| Capture.cs:95:27:95:28 | "" | Capture.cs:100:15:100:22 | access to local variable nonSink0 |
| Capture.cs:95:27:95:28 | "" | Capture.cs:110:15:110:22 | access to local variable nonSink0 |
| Capture.cs:95:27:95:28 | "" | Capture.cs:110:15:110:22 | access to local variable nonSink0 |
| Capture.cs:100:15:100:22 | access to local variable nonSink0 | Capture.cs:110:15:110:22 | access to local variable nonSink0 |
| Capture.cs:100:15:100:22 | access to local variable nonSink0 | Capture.cs:110:15:110:22 | access to local variable nonSink0 |
| Capture.cs:111:25:111:26 | "" | Capture.cs:111:16:111:26 | SSA def(sink40) |
| Capture.cs:111:25:111:26 | "" | Capture.cs:111:16:111:26 | SSA def(sink40) |
| Capture.cs:114:23:116:13 | (...) => ... | Capture.cs:202:34:202:34 | a |
| Capture.cs:114:23:116:13 | (...) => ... | Capture.cs:202:34:202:34 | a |
| Capture.cs:115:17:115:39 | SSA def(sink40) | Capture.cs:121:9:121:35 | SSA call def(sink40) |
| Capture.cs:115:17:115:39 | SSA def(sink40) | Capture.cs:121:9:121:35 | SSA call def(sink40) |
| Capture.cs:115:26:115:39 | "taint source" | Capture.cs:115:17:115:39 | SSA def(sink40) |
| Capture.cs:115:26:115:39 | "taint source" | Capture.cs:115:17:115:39 | SSA def(sink40) |
| Capture.cs:117:23:119:13 | (...) => ... | Capture.cs:202:34:202:34 | a |
| Capture.cs:117:23:119:13 | (...) => ... | Capture.cs:202:34:202:34 | a |
| Capture.cs:118:17:118:40 | SSA def(nonSink0) | Capture.cs:121:9:121:35 | SSA call def(nonSink0) |
| Capture.cs:118:17:118:40 | SSA def(nonSink0) | Capture.cs:121:9:121:35 | SSA call def(nonSink0) |
| Capture.cs:118:28:118:40 | "not tainted" | Capture.cs:118:17:118:40 | SSA def(nonSink0) |
| Capture.cs:118:28:118:40 | "not tainted" | Capture.cs:118:17:118:40 | SSA def(nonSink0) |
| Capture.cs:121:9:121:35 | SSA call def(nonSink0) | Capture.cs:122:30:122:37 | access to local variable nonSink0 |
| Capture.cs:121:9:121:35 | SSA call def(nonSink0) | Capture.cs:122:30:122:37 | access to local variable nonSink0 |
| Capture.cs:121:9:121:35 | SSA call def(sink40) | Capture.cs:122:15:122:20 | access to local variable sink40 |
| Capture.cs:121:9:121:35 | SSA call def(sink40) | Capture.cs:122:15:122:20 | access to local variable sink40 |
| Capture.cs:125:25:125:31 | tainted | Capture.cs:125:25:125:31 | tainted |
| Capture.cs:125:25:125:31 | tainted | Capture.cs:125:25:125:31 | tainted |
| Capture.cs:125:25:125:31 | tainted | Capture.cs:132:9:132:25 | [implicit argument] tainted |
| Capture.cs:125:25:125:31 | tainted | Capture.cs:132:9:132:25 | [implicit argument] tainted |
| Capture.cs:125:25:125:31 | tainted | Capture.cs:132:9:132:25 | [implicit argument] tainted |
| Capture.cs:125:25:125:31 | tainted | Capture.cs:132:9:132:25 | [implicit argument] tainted |
| Capture.cs:125:25:125:31 | tainted | Capture.cs:144:9:144:25 | [implicit argument] tainted |
| Capture.cs:125:25:125:31 | tainted | Capture.cs:144:9:144:25 | [implicit argument] tainted |
| Capture.cs:125:25:125:31 | tainted | Capture.cs:144:9:144:25 | [implicit argument] tainted |
| Capture.cs:125:25:125:31 | tainted | Capture.cs:144:9:144:25 | [implicit argument] tainted |
| Capture.cs:125:25:125:31 | tainted | Capture.cs:153:9:153:45 | [implicit argument] tainted |
| Capture.cs:125:25:125:31 | tainted | Capture.cs:153:9:153:45 | [implicit argument] tainted |
| Capture.cs:125:25:125:31 | tainted | Capture.cs:153:9:153:45 | [implicit argument] tainted |
| Capture.cs:125:25:125:31 | tainted | Capture.cs:153:9:153:45 | [implicit argument] tainted |
| Capture.cs:125:25:125:31 | tainted | Capture.cs:160:22:160:38 | [implicit argument] tainted |
| Capture.cs:125:25:125:31 | tainted | Capture.cs:160:22:160:38 | [implicit argument] tainted |
| Capture.cs:125:25:125:31 | tainted | Capture.cs:160:22:160:38 | [implicit argument] tainted |
| Capture.cs:125:25:125:31 | tainted | Capture.cs:160:22:160:38 | [implicit argument] tainted |
| Capture.cs:125:25:125:31 | tainted | Capture.cs:168:25:168:31 | access to parameter tainted |
| Capture.cs:125:25:125:31 | tainted | Capture.cs:168:25:168:31 | access to parameter tainted |
| Capture.cs:125:25:125:31 | tainted | Capture.cs:168:25:168:31 | access to parameter tainted |
| Capture.cs:125:25:125:31 | tainted | Capture.cs:168:25:168:31 | access to parameter tainted |
| Capture.cs:125:25:125:31 | tainted | Capture.cs:194:25:194:31 | access to parameter tainted |
| Capture.cs:125:25:125:31 | tainted | Capture.cs:194:25:194:31 | access to parameter tainted |
| Capture.cs:125:25:125:31 | tainted | Capture.cs:194:25:194:31 | access to parameter tainted |
| Capture.cs:125:25:125:31 | tainted | Capture.cs:194:25:194:31 | access to parameter tainted |
| Capture.cs:127:25:127:26 | "" | Capture.cs:127:16:127:26 | SSA def(sink33) |
| Capture.cs:127:25:127:26 | "" | Capture.cs:127:16:127:26 | SSA def(sink33) |
| Capture.cs:128:9:131:9 | SSA capture def(tainted) | Capture.cs:130:13:130:28 | SSA def(sink33) |
| Capture.cs:128:9:131:9 | SSA capture def(tainted) | Capture.cs:130:13:130:28 | SSA def(sink33) |
| Capture.cs:128:9:131:9 | SSA capture def(tainted) | Capture.cs:130:13:130:28 | SSA def(sink33) |
| Capture.cs:128:9:131:9 | SSA capture def(tainted) | Capture.cs:130:13:130:28 | SSA def(sink33) |
| Capture.cs:128:9:131:9 | SSA capture def(tainted) | Capture.cs:130:22:130:28 | access to parameter tainted |
| Capture.cs:128:9:131:9 | SSA capture def(tainted) | Capture.cs:130:22:130:28 | access to parameter tainted |
| Capture.cs:128:9:131:9 | SSA capture def(tainted) | Capture.cs:130:22:130:28 | access to parameter tainted |
| Capture.cs:128:9:131:9 | SSA capture def(tainted) | Capture.cs:130:22:130:28 | access to parameter tainted |
| Capture.cs:130:13:130:28 | SSA def(sink33) | Capture.cs:132:9:132:25 | SSA call def(sink33) |
| Capture.cs:130:13:130:28 | SSA def(sink33) | Capture.cs:132:9:132:25 | SSA call def(sink33) |
| Capture.cs:130:22:130:28 | access to parameter tainted | Capture.cs:130:13:130:28 | SSA def(sink33) |
| Capture.cs:130:22:130:28 | access to parameter tainted | Capture.cs:130:13:130:28 | SSA def(sink33) |
| Capture.cs:130:22:130:28 | access to parameter tainted | Capture.cs:130:13:130:28 | SSA def(sink33) |
| Capture.cs:130:22:130:28 | access to parameter tainted | Capture.cs:130:13:130:28 | SSA def(sink33) |
| Capture.cs:132:9:132:25 | SSA call def(sink33) | Capture.cs:133:15:133:20 | access to local variable sink33 |
| Capture.cs:132:9:132:25 | SSA call def(sink33) | Capture.cs:133:15:133:20 | access to local variable sink33 |
| Capture.cs:132:9:132:25 | [implicit argument] tainted | Capture.cs:128:9:131:9 | SSA capture def(tainted) |
| Capture.cs:132:9:132:25 | [implicit argument] tainted | Capture.cs:128:9:131:9 | SSA capture def(tainted) |
| Capture.cs:132:9:132:25 | [implicit argument] tainted | Capture.cs:132:9:132:25 | SSA call def(sink33) |
| Capture.cs:132:9:132:25 | [implicit argument] tainted | Capture.cs:132:9:132:25 | SSA call def(sink33) |
| Capture.cs:135:25:135:26 | "" | Capture.cs:135:16:135:26 | SSA def(sink34) |
| Capture.cs:135:25:135:26 | "" | Capture.cs:135:16:135:26 | SSA def(sink34) |
| Capture.cs:138:13:141:13 | SSA capture def(tainted) | Capture.cs:140:17:140:32 | SSA def(sink34) |
| Capture.cs:138:13:141:13 | SSA capture def(tainted) | Capture.cs:140:17:140:32 | SSA def(sink34) |
| Capture.cs:138:13:141:13 | SSA capture def(tainted) | Capture.cs:140:17:140:32 | SSA def(sink34) |
| Capture.cs:138:13:141:13 | SSA capture def(tainted) | Capture.cs:140:17:140:32 | SSA def(sink34) |
| Capture.cs:138:13:141:13 | SSA capture def(tainted) | Capture.cs:140:26:140:32 | access to parameter tainted |
| Capture.cs:138:13:141:13 | SSA capture def(tainted) | Capture.cs:140:26:140:32 | access to parameter tainted |
| Capture.cs:138:13:141:13 | SSA capture def(tainted) | Capture.cs:140:26:140:32 | access to parameter tainted |
| Capture.cs:138:13:141:13 | SSA capture def(tainted) | Capture.cs:140:26:140:32 | access to parameter tainted |
| Capture.cs:140:17:140:32 | SSA def(sink34) | Capture.cs:144:9:144:25 | SSA call def(sink34) |
| Capture.cs:140:17:140:32 | SSA def(sink34) | Capture.cs:144:9:144:25 | SSA call def(sink34) |
| Capture.cs:140:26:140:32 | access to parameter tainted | Capture.cs:140:17:140:32 | SSA def(sink34) |
| Capture.cs:140:26:140:32 | access to parameter tainted | Capture.cs:140:17:140:32 | SSA def(sink34) |
| Capture.cs:140:26:140:32 | access to parameter tainted | Capture.cs:140:17:140:32 | SSA def(sink34) |
| Capture.cs:140:26:140:32 | access to parameter tainted | Capture.cs:140:17:140:32 | SSA def(sink34) |
| Capture.cs:144:9:144:25 | SSA call def(sink34) | Capture.cs:145:15:145:20 | access to local variable sink34 |
| Capture.cs:144:9:144:25 | SSA call def(sink34) | Capture.cs:145:15:145:20 | access to local variable sink34 |
| Capture.cs:144:9:144:25 | [implicit argument] tainted | Capture.cs:138:13:141:13 | SSA capture def(tainted) |
| Capture.cs:144:9:144:25 | [implicit argument] tainted | Capture.cs:138:13:141:13 | SSA capture def(tainted) |
| Capture.cs:144:9:144:25 | [implicit argument] tainted | Capture.cs:144:9:144:25 | SSA call def(sink34) |
| Capture.cs:144:9:144:25 | [implicit argument] tainted | Capture.cs:144:9:144:25 | SSA call def(sink34) |
| Capture.cs:147:25:147:26 | "" | Capture.cs:147:16:147:26 | SSA def(sink35) |
| Capture.cs:147:25:147:26 | "" | Capture.cs:147:16:147:26 | SSA def(sink35) |
| Capture.cs:148:30:152:9 | SSA def(captureThrough3) | Capture.cs:153:30:153:44 | access to local variable captureThrough3 |
| Capture.cs:148:30:152:9 | SSA def(captureThrough3) | Capture.cs:153:30:153:44 | access to local variable captureThrough3 |
| Capture.cs:148:48:148:50 | arg | Capture.cs:148:48:148:50 | arg |
| Capture.cs:148:48:148:50 | arg | Capture.cs:148:48:148:50 | arg |
| Capture.cs:148:48:148:50 | arg | Capture.cs:148:48:148:50 | arg |
| Capture.cs:148:48:148:50 | arg | Capture.cs:148:48:148:50 | arg |
| Capture.cs:148:48:148:50 | arg | Capture.cs:151:20:151:22 | access to parameter arg |
| Capture.cs:148:48:148:50 | arg | Capture.cs:151:20:151:22 | access to parameter arg |
| Capture.cs:148:48:148:50 | arg | Capture.cs:151:20:151:22 | access to parameter arg |
| Capture.cs:148:48:148:50 | arg | Capture.cs:151:20:151:22 | access to parameter arg |
| Capture.cs:148:48:148:50 | arg | Capture.cs:151:20:151:22 | access to parameter arg |
| Capture.cs:148:48:148:50 | arg | Capture.cs:151:20:151:22 | access to parameter arg |
| Capture.cs:148:48:148:50 | arg | Capture.cs:151:20:151:22 | access to parameter arg |
| Capture.cs:148:48:148:50 | arg | Capture.cs:151:20:151:22 | access to parameter arg |
| Capture.cs:148:48:152:9 | (...) => ... | Capture.cs:148:30:152:9 | SSA def(captureThrough3) |
| Capture.cs:148:48:152:9 | (...) => ... | Capture.cs:148:30:152:9 | SSA def(captureThrough3) |
| Capture.cs:148:48:152:9 | (...) => ... | Capture.cs:153:30:153:44 | access to local variable captureThrough3 |
| Capture.cs:148:48:152:9 | (...) => ... | Capture.cs:153:30:153:44 | access to local variable captureThrough3 |
| Capture.cs:148:48:152:9 | SSA capture def(tainted) | Capture.cs:150:13:150:28 | SSA def(sink35) |
| Capture.cs:148:48:152:9 | SSA capture def(tainted) | Capture.cs:150:13:150:28 | SSA def(sink35) |
| Capture.cs:148:48:152:9 | SSA capture def(tainted) | Capture.cs:150:13:150:28 | SSA def(sink35) |
| Capture.cs:148:48:152:9 | SSA capture def(tainted) | Capture.cs:150:13:150:28 | SSA def(sink35) |
| Capture.cs:148:48:152:9 | SSA capture def(tainted) | Capture.cs:150:22:150:28 | access to parameter tainted |
| Capture.cs:148:48:152:9 | SSA capture def(tainted) | Capture.cs:150:22:150:28 | access to parameter tainted |
| Capture.cs:148:48:152:9 | SSA capture def(tainted) | Capture.cs:150:22:150:28 | access to parameter tainted |
| Capture.cs:148:48:152:9 | SSA capture def(tainted) | Capture.cs:150:22:150:28 | access to parameter tainted |
| Capture.cs:150:13:150:28 | SSA def(sink35) | Capture.cs:153:9:153:45 | SSA call def(sink35) |
| Capture.cs:150:13:150:28 | SSA def(sink35) | Capture.cs:153:9:153:45 | SSA call def(sink35) |
| Capture.cs:150:22:150:28 | access to parameter tainted | Capture.cs:150:13:150:28 | SSA def(sink35) |
| Capture.cs:150:22:150:28 | access to parameter tainted | Capture.cs:150:13:150:28 | SSA def(sink35) |
| Capture.cs:150:22:150:28 | access to parameter tainted | Capture.cs:150:13:150:28 | SSA def(sink35) |
| Capture.cs:150:22:150:28 | access to parameter tainted | Capture.cs:150:13:150:28 | SSA def(sink35) |
| Capture.cs:151:20:151:22 | access to parameter arg | Capture.cs:153:30:153:44 | [output] access to local variable captureThrough3 |
| Capture.cs:151:20:151:22 | access to parameter arg | Capture.cs:153:30:153:44 | [output] access to local variable captureThrough3 |
| Capture.cs:153:9:153:21 | array creation of type String[] | Capture.cs:148:48:148:50 | arg |
| Capture.cs:153:9:153:21 | array creation of type String[] | Capture.cs:148:48:148:50 | arg |
| Capture.cs:153:9:153:21 | array creation of type String[] | Capture.cs:153:30:153:44 | [output] access to local variable captureThrough3 |
| Capture.cs:153:9:153:21 | array creation of type String[] | Capture.cs:153:30:153:44 | [output] access to local variable captureThrough3 |
| Capture.cs:153:9:153:45 | SSA call def(sink35) | Capture.cs:154:15:154:20 | access to local variable sink35 |
| Capture.cs:153:9:153:45 | SSA call def(sink35) | Capture.cs:154:15:154:20 | access to local variable sink35 |
| Capture.cs:153:9:153:45 | [implicit argument] tainted | Capture.cs:148:48:152:9 | SSA capture def(tainted) |
| Capture.cs:153:9:153:45 | [implicit argument] tainted | Capture.cs:148:48:152:9 | SSA capture def(tainted) |
| Capture.cs:153:9:153:45 | [implicit argument] tainted | Capture.cs:153:9:153:45 | SSA call def(sink35) |
| Capture.cs:153:9:153:45 | [implicit argument] tainted | Capture.cs:153:9:153:45 | SSA call def(sink35) |
| Capture.cs:153:9:153:45 | call to method Select | Capture.cs:153:9:153:55 | call to method ToArray |
| Capture.cs:153:9:153:45 | call to method Select | Capture.cs:153:9:153:55 | call to method ToArray |
| Capture.cs:153:17:153:19 | " " | Capture.cs:153:9:153:21 | array creation of type String[] |
| Capture.cs:153:17:153:19 | " " | Capture.cs:153:9:153:21 | array creation of type String[] |
| Capture.cs:153:30:153:44 | [output] access to local variable captureThrough3 | Capture.cs:153:9:153:45 | call to method Select |
| Capture.cs:153:30:153:44 | [output] access to local variable captureThrough3 | Capture.cs:153:9:153:45 | call to method Select |
| Capture.cs:153:30:153:44 | [output] access to local variable captureThrough3 | Capture.cs:153:9:153:55 | call to method ToArray |
| Capture.cs:153:30:153:44 | [output] access to local variable captureThrough3 | Capture.cs:153:9:153:55 | call to method ToArray |
| Capture.cs:156:9:159:9 | SSA capture def(tainted) | Capture.cs:158:20:158:26 | access to parameter tainted |
| Capture.cs:156:9:159:9 | SSA capture def(tainted) | Capture.cs:158:20:158:26 | access to parameter tainted |
| Capture.cs:156:9:159:9 | SSA capture def(tainted) | Capture.cs:158:20:158:26 | access to parameter tainted |
| Capture.cs:156:9:159:9 | SSA capture def(tainted) | Capture.cs:158:20:158:26 | access to parameter tainted |
| Capture.cs:158:20:158:26 | access to parameter tainted | Capture.cs:160:22:160:38 | call to local function CaptureThrough4 |
| Capture.cs:158:20:158:26 | access to parameter tainted | Capture.cs:160:22:160:38 | call to local function CaptureThrough4 |
| Capture.cs:160:13:160:38 | SSA def(sink36) | Capture.cs:161:15:161:20 | access to local variable sink36 |
| Capture.cs:160:13:160:38 | SSA def(sink36) | Capture.cs:161:15:161:20 | access to local variable sink36 |
| Capture.cs:160:22:160:38 | [implicit argument] tainted | Capture.cs:156:9:159:9 | SSA capture def(tainted) |
| Capture.cs:160:22:160:38 | [implicit argument] tainted | Capture.cs:156:9:159:9 | SSA capture def(tainted) |
| Capture.cs:160:22:160:38 | [implicit argument] tainted | Capture.cs:160:22:160:38 | call to local function CaptureThrough4 |
| Capture.cs:160:22:160:38 | [implicit argument] tainted | Capture.cs:160:22:160:38 | call to local function CaptureThrough4 |
| Capture.cs:160:22:160:38 | call to local function CaptureThrough4 | Capture.cs:160:13:160:38 | SSA def(sink36) |
| Capture.cs:160:22:160:38 | call to local function CaptureThrough4 | Capture.cs:160:13:160:38 | SSA def(sink36) |
| Capture.cs:160:22:160:38 | call to local function CaptureThrough4 | Capture.cs:161:15:161:20 | access to local variable sink36 |
| Capture.cs:160:22:160:38 | call to local function CaptureThrough4 | Capture.cs:161:15:161:20 | access to local variable sink36 |
| Capture.cs:163:22:163:23 | "" | Capture.cs:163:13:163:23 | SSA def(sink37) |
| Capture.cs:163:22:163:23 | "" | Capture.cs:163:13:163:23 | SSA def(sink37) |
| Capture.cs:164:37:164:37 | p | Capture.cs:164:37:164:37 | p |
| Capture.cs:164:37:164:37 | p | Capture.cs:164:37:164:37 | p |
| Capture.cs:164:37:164:37 | p | Capture.cs:166:13:166:22 | SSA def(sink37) |
| Capture.cs:164:37:164:37 | p | Capture.cs:166:13:166:22 | SSA def(sink37) |
| Capture.cs:164:37:164:37 | p | Capture.cs:166:13:166:22 | SSA def(sink37) |
| Capture.cs:164:37:164:37 | p | Capture.cs:166:13:166:22 | SSA def(sink37) |
| Capture.cs:164:37:164:37 | p | Capture.cs:166:13:166:22 | SSA def(sink37) |
| Capture.cs:164:37:164:37 | p | Capture.cs:166:13:166:22 | SSA def(sink37) |
| Capture.cs:164:37:164:37 | p | Capture.cs:166:22:166:22 | access to parameter p |
| Capture.cs:164:37:164:37 | p | Capture.cs:166:22:166:22 | access to parameter p |
| Capture.cs:164:37:164:37 | p | Capture.cs:166:22:166:22 | access to parameter p |
| Capture.cs:164:37:164:37 | p | Capture.cs:166:22:166:22 | access to parameter p |
| Capture.cs:164:37:164:37 | p | Capture.cs:166:22:166:22 | access to parameter p |
| Capture.cs:164:37:164:37 | p | Capture.cs:166:22:166:22 | access to parameter p |
| Capture.cs:166:13:166:22 | SSA def(sink37) | Capture.cs:168:9:168:32 | SSA call def(sink37) |
| Capture.cs:166:13:166:22 | SSA def(sink37) | Capture.cs:168:9:168:32 | SSA call def(sink37) |
| Capture.cs:166:22:166:22 | access to parameter p | Capture.cs:166:13:166:22 | SSA def(sink37) |
| Capture.cs:166:22:166:22 | access to parameter p | Capture.cs:166:13:166:22 | SSA def(sink37) |
| Capture.cs:166:22:166:22 | access to parameter p | Capture.cs:166:13:166:22 | SSA def(sink37) |
| Capture.cs:166:22:166:22 | access to parameter p | Capture.cs:166:13:166:22 | SSA def(sink37) |
| Capture.cs:168:9:168:32 | SSA call def(sink37) | Capture.cs:169:15:169:20 | access to local variable sink37 |
| Capture.cs:168:9:168:32 | SSA call def(sink37) | Capture.cs:169:15:169:20 | access to local variable sink37 |
| Capture.cs:168:25:168:31 | access to parameter tainted | Capture.cs:164:37:164:37 | p |
| Capture.cs:168:25:168:31 | access to parameter tainted | Capture.cs:164:37:164:37 | p |
| Capture.cs:168:25:168:31 | access to parameter tainted | Capture.cs:168:9:168:32 | SSA call def(sink37) |
| Capture.cs:168:25:168:31 | access to parameter tainted | Capture.cs:168:9:168:32 | SSA call def(sink37) |
| Capture.cs:168:25:168:31 | access to parameter tainted | Capture.cs:194:25:194:31 | access to parameter tainted |
| Capture.cs:168:25:168:31 | access to parameter tainted | Capture.cs:194:25:194:31 | access to parameter tainted |
| Capture.cs:171:16:171:28 | SSA def(nonSink0) | Capture.cs:176:15:176:22 | access to local variable nonSink0 |
| Capture.cs:171:16:171:28 | SSA def(nonSink0) | Capture.cs:176:15:176:22 | access to local variable nonSink0 |
| Capture.cs:171:16:171:28 | SSA def(nonSink0) | Capture.cs:186:15:186:22 | access to local variable nonSink0 |
| Capture.cs:171:16:171:28 | SSA def(nonSink0) | Capture.cs:186:15:186:22 | access to local variable nonSink0 |
| Capture.cs:171:27:171:28 | "" | Capture.cs:171:16:171:28 | SSA def(nonSink0) |
| Capture.cs:171:27:171:28 | "" | Capture.cs:171:16:171:28 | SSA def(nonSink0) |
| Capture.cs:171:27:171:28 | "" | Capture.cs:176:15:176:22 | access to local variable nonSink0 |
| Capture.cs:171:27:171:28 | "" | Capture.cs:176:15:176:22 | access to local variable nonSink0 |
| Capture.cs:171:27:171:28 | "" | Capture.cs:186:15:186:22 | access to local variable nonSink0 |
| Capture.cs:171:27:171:28 | "" | Capture.cs:186:15:186:22 | access to local variable nonSink0 |
| Capture.cs:172:9:175:9 | SSA capture def(tainted) | Capture.cs:174:24:174:30 | access to parameter tainted |
| Capture.cs:172:9:175:9 | SSA capture def(tainted) | Capture.cs:174:24:174:30 | access to parameter tainted |
| Capture.cs:176:15:176:22 | access to local variable nonSink0 | Capture.cs:186:15:186:22 | access to local variable nonSink0 |
| Capture.cs:176:15:176:22 | access to local variable nonSink0 | Capture.cs:186:15:186:22 | access to local variable nonSink0 |
| Capture.cs:180:13:183:13 | SSA capture def(tainted) | Capture.cs:182:28:182:34 | access to parameter tainted |
| Capture.cs:180:13:183:13 | SSA capture def(tainted) | Capture.cs:182:28:182:34 | access to parameter tainted |
| Capture.cs:188:26:188:26 | s | Capture.cs:188:26:188:26 | s |
| Capture.cs:188:26:188:26 | s | Capture.cs:188:26:188:26 | s |
| Capture.cs:188:26:188:26 | s | Capture.cs:191:20:191:22 | [implicit argument] s |
| Capture.cs:188:26:188:26 | s | Capture.cs:191:20:191:22 | [implicit argument] s |
| Capture.cs:188:26:188:26 | s | Capture.cs:191:20:191:22 | [implicit argument] s |
| Capture.cs:188:26:188:26 | s | Capture.cs:191:20:191:22 | [implicit argument] s |
| Capture.cs:188:26:188:26 | s | Capture.cs:191:20:191:22 | [implicit argument] s |
| Capture.cs:188:26:188:26 | s | Capture.cs:191:20:191:22 | [implicit argument] s |
| Capture.cs:190:13:190:28 | SSA capture def(s) | Capture.cs:190:27:190:27 | access to parameter s |
| Capture.cs:190:13:190:28 | SSA capture def(s) | Capture.cs:190:27:190:27 | access to parameter s |
| Capture.cs:190:13:190:28 | SSA capture def(s) | Capture.cs:190:27:190:27 | access to parameter s |
| Capture.cs:190:13:190:28 | SSA capture def(s) | Capture.cs:190:27:190:27 | access to parameter s |
| Capture.cs:190:27:190:27 | access to parameter s | Capture.cs:191:20:191:22 | call to local function M |
| Capture.cs:190:27:190:27 | access to parameter s | Capture.cs:191:20:191:22 | call to local function M |
| Capture.cs:191:20:191:22 | [implicit argument] s | Capture.cs:190:13:190:28 | SSA capture def(s) |
| Capture.cs:191:20:191:22 | [implicit argument] s | Capture.cs:190:13:190:28 | SSA capture def(s) |
| Capture.cs:191:20:191:22 | [implicit argument] s | Capture.cs:190:13:190:28 | SSA capture def(s) |
| Capture.cs:191:20:191:22 | [implicit argument] s | Capture.cs:190:13:190:28 | SSA capture def(s) |
| Capture.cs:191:20:191:22 | [implicit argument] s | Capture.cs:191:20:191:22 | call to local function M |
| Capture.cs:191:20:191:22 | [implicit argument] s | Capture.cs:191:20:191:22 | call to local function M |
| Capture.cs:191:20:191:22 | [implicit argument] s | Capture.cs:191:20:191:22 | call to local function M |
| Capture.cs:191:20:191:22 | [implicit argument] s | Capture.cs:191:20:191:22 | call to local function M |
| Capture.cs:191:20:191:22 | call to local function M | Capture.cs:194:22:194:32 | call to local function Id |
| Capture.cs:191:20:191:22 | call to local function M | Capture.cs:194:22:194:32 | call to local function Id |
| Capture.cs:191:20:191:22 | call to local function M | Capture.cs:196:20:196:25 | call to local function Id |
| Capture.cs:191:20:191:22 | call to local function M | Capture.cs:196:20:196:25 | call to local function Id |
| Capture.cs:194:13:194:32 | SSA def(sink38) | Capture.cs:195:15:195:20 | access to local variable sink38 |
| Capture.cs:194:13:194:32 | SSA def(sink38) | Capture.cs:195:15:195:20 | access to local variable sink38 |
| Capture.cs:194:22:194:32 | call to local function Id | Capture.cs:194:13:194:32 | SSA def(sink38) |
| Capture.cs:194:22:194:32 | call to local function Id | Capture.cs:194:13:194:32 | SSA def(sink38) |
| Capture.cs:194:22:194:32 | call to local function Id | Capture.cs:195:15:195:20 | access to local variable sink38 |
| Capture.cs:194:22:194:32 | call to local function Id | Capture.cs:195:15:195:20 | access to local variable sink38 |
| Capture.cs:194:25:194:31 | access to parameter tainted | Capture.cs:188:26:188:26 | s |
| Capture.cs:194:25:194:31 | access to parameter tainted | Capture.cs:188:26:188:26 | s |
| Capture.cs:194:25:194:31 | access to parameter tainted | Capture.cs:194:22:194:32 | call to local function Id |
| Capture.cs:194:25:194:31 | access to parameter tainted | Capture.cs:194:22:194:32 | call to local function Id |
| Capture.cs:196:9:196:25 | SSA def(nonSink0) | Capture.cs:197:15:197:22 | access to local variable nonSink0 |
| Capture.cs:196:9:196:25 | SSA def(nonSink0) | Capture.cs:197:15:197:22 | access to local variable nonSink0 |
| Capture.cs:196:20:196:25 | call to local function Id | Capture.cs:196:9:196:25 | SSA def(nonSink0) |
| Capture.cs:196:20:196:25 | call to local function Id | Capture.cs:196:9:196:25 | SSA def(nonSink0) |
| Capture.cs:196:20:196:25 | call to local function Id | Capture.cs:197:15:197:22 | access to local variable nonSink0 |
| Capture.cs:196:20:196:25 | call to local function Id | Capture.cs:197:15:197:22 | access to local variable nonSink0 |
| Capture.cs:196:23:196:24 | "" | Capture.cs:188:26:188:26 | s |
| Capture.cs:196:23:196:24 | "" | Capture.cs:188:26:188:26 | s |
| Capture.cs:196:23:196:24 | "" | Capture.cs:196:20:196:25 | call to local function Id |
| Capture.cs:196:23:196:24 | "" | Capture.cs:196:20:196:25 | call to local function Id |
| Capture.cs:202:34:202:34 | a | Capture.cs:202:34:202:34 | a |
| Capture.cs:202:34:202:34 | a | Capture.cs:202:34:202:34 | a |
| Capture.cs:202:34:202:34 | a | Capture.cs:204:9:204:9 | access to parameter a |
| Capture.cs:202:34:202:34 | a | Capture.cs:204:9:204:9 | access to parameter a |
| Capture.cs:202:34:202:34 | a | Capture.cs:204:9:204:9 | access to parameter a |
| Capture.cs:202:34:202:34 | a | Capture.cs:204:9:204:9 | access to parameter a |
| Capture.cs:202:34:202:34 | a | Capture.cs:204:9:204:9 | access to parameter a |
| Capture.cs:202:34:202:34 | a | Capture.cs:204:9:204:9 | access to parameter a |
| Capture.cs:202:34:202:34 | a | Capture.cs:204:9:204:9 | access to parameter a |
| Capture.cs:202:34:202:34 | a | Capture.cs:204:9:204:9 | access to parameter a |
| Capture.cs:202:34:202:34 | a | Capture.cs:204:9:204:9 | access to parameter a |
| Capture.cs:202:34:202:34 | a | Capture.cs:204:9:204:9 | access to parameter a |
| Capture.cs:202:34:202:34 | a | Capture.cs:204:9:204:9 | access to parameter a |
| Capture.cs:202:34:202:34 | a | Capture.cs:204:9:204:9 | access to parameter a |
| GlobalDataFlow.cs:14:17:14:17 | this | GlobalDataFlow.cs:64:9:64:18 | this access |
| GlobalDataFlow.cs:14:17:14:17 | this | GlobalDataFlow.cs:64:9:64:18 | this access |
| GlobalDataFlow.cs:14:17:14:17 | this | GlobalDataFlow.cs:67:9:67:21 | this access |

153
csharp/ql/test/library-tests/dataflow/global/TaintTrackingPath.expected
View File

@@ -2,39 +2,47 @@ edges
| Capture.cs:7:20:7:26 | tainted | Capture.cs:14:9:14:20 | [implicit argument] tainted |
| Capture.cs:7:20:7:26 | tainted | Capture.cs:25:9:25:20 | [implicit argument] tainted |
| Capture.cs:7:20:7:26 | tainted | Capture.cs:33:9:33:40 | [implicit argument] tainted |
| Capture.cs:7:20:7:26 | tainted | Capture.cs:61:36:61:42 | access to parameter tainted |
| Capture.cs:9:9:13:9 | SSA capture def(tainted) | Capture.cs:12:19:12:24 | access to local variable sink27 |
| Capture.cs:14:9:14:20 | [implicit argument] tainted | Capture.cs:9:9:13:9 | SSA capture def(tainted) |
| Capture.cs:18:13:22:13 | SSA capture def(tainted) | Capture.cs:21:23:21:28 | access to local variable sink28 |
| Capture.cs:25:9:25:20 | [implicit argument] tainted | Capture.cs:18:13:22:13 | SSA capture def(tainted) |
| Capture.cs:27:43:32:9 | SSA capture def(tainted) | Capture.cs:30:19:30:24 | access to local variable sink29 |
| Capture.cs:33:9:33:40 | [implicit argument] tainted | Capture.cs:27:43:32:9 | SSA capture def(tainted) |
| Capture.cs:57:13:57:35 | SSA def(sink30) | Capture.cs:59:9:59:21 | SSA call def(sink30) |
| Capture.cs:57:22:57:35 | "taint source" | Capture.cs:57:13:57:35 | SSA def(sink30) |
| Capture.cs:59:9:59:21 | SSA call def(sink30) | Capture.cs:60:15:60:20 | access to local variable sink30 |
| Capture.cs:67:17:67:39 | SSA def(sink31) | Capture.cs:71:9:71:21 | SSA call def(sink31) |
| Capture.cs:67:26:67:39 | "taint source" | Capture.cs:67:17:67:39 | SSA def(sink31) |
| Capture.cs:71:9:71:21 | SSA call def(sink31) | Capture.cs:72:15:72:20 | access to local variable sink31 |
| Capture.cs:77:13:77:35 | SSA def(sink32) | Capture.cs:80:9:80:41 | SSA call def(sink32) |
| Capture.cs:77:22:77:35 | "taint source" | Capture.cs:77:13:77:35 | SSA def(sink32) |
| Capture.cs:80:9:80:41 | SSA call def(sink32) | Capture.cs:81:15:81:20 | access to local variable sink32 |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:108:9:108:25 | [implicit argument] tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:120:9:120:25 | [implicit argument] tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:129:9:129:45 | [implicit argument] tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:136:22:136:38 | [implicit argument] tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:144:25:144:31 | access to parameter tainted |
| Capture.cs:101:25:101:31 | tainted | Capture.cs:170:25:170:31 | access to parameter tainted |
| Capture.cs:108:9:108:25 | SSA call def(sink33) | Capture.cs:109:15:109:20 | access to local variable sink33 |
| Capture.cs:108:9:108:25 | [implicit argument] tainted | Capture.cs:108:9:108:25 | SSA call def(sink33) |
| Capture.cs:120:9:120:25 | SSA call def(sink34) | Capture.cs:121:15:121:20 | access to local variable sink34 |
| Capture.cs:120:9:120:25 | [implicit argument] tainted | Capture.cs:120:9:120:25 | SSA call def(sink34) |
| Capture.cs:129:9:129:45 | SSA call def(sink35) | Capture.cs:130:15:130:20 | access to local variable sink35 |
| Capture.cs:129:9:129:45 | [implicit argument] tainted | Capture.cs:129:9:129:45 | SSA call def(sink35) |
| Capture.cs:136:22:136:38 | [implicit argument] tainted | Capture.cs:136:22:136:38 | call to local function CaptureThrough4 |
| Capture.cs:136:22:136:38 | call to local function CaptureThrough4 | Capture.cs:137:15:137:20 | access to local variable sink36 |
| Capture.cs:144:9:144:32 | SSA call def(sink37) | Capture.cs:145:15:145:20 | access to local variable sink37 |
| Capture.cs:144:25:144:31 | access to parameter tainted | Capture.cs:144:9:144:32 | SSA call def(sink37) |
| Capture.cs:170:22:170:32 | call to local function Id | Capture.cs:171:15:171:20 | access to local variable sink38 |
| Capture.cs:170:25:170:31 | access to parameter tainted | Capture.cs:170:22:170:32 | call to local function Id |
| Capture.cs:50:50:50:55 | sink39 | Capture.cs:52:13:59:14 | [implicit argument] sink39 |
| Capture.cs:52:13:59:14 | [implicit argument] sink39 | Capture.cs:55:27:58:17 | SSA capture def(sink39) |
| Capture.cs:55:27:58:17 | SSA capture def(sink39) | Capture.cs:57:27:57:32 | access to parameter sink39 |
| Capture.cs:61:36:61:42 | access to parameter tainted | Capture.cs:50:50:50:55 | sink39 |
| Capture.cs:69:13:69:35 | SSA def(sink30) | Capture.cs:71:9:71:21 | SSA call def(sink30) |
| Capture.cs:69:22:69:35 | "taint source" | Capture.cs:69:13:69:35 | SSA def(sink30) |
| Capture.cs:71:9:71:21 | SSA call def(sink30) | Capture.cs:72:15:72:20 | access to local variable sink30 |
| Capture.cs:79:17:79:39 | SSA def(sink31) | Capture.cs:83:9:83:21 | SSA call def(sink31) |
| Capture.cs:79:26:79:39 | "taint source" | Capture.cs:79:17:79:39 | SSA def(sink31) |
| Capture.cs:83:9:83:21 | SSA call def(sink31) | Capture.cs:84:15:84:20 | access to local variable sink31 |
| Capture.cs:89:13:89:35 | SSA def(sink32) | Capture.cs:92:9:92:41 | SSA call def(sink32) |
| Capture.cs:89:22:89:35 | "taint source" | Capture.cs:89:13:89:35 | SSA def(sink32) |
| Capture.cs:92:9:92:41 | SSA call def(sink32) | Capture.cs:93:15:93:20 | access to local variable sink32 |
| Capture.cs:115:17:115:39 | SSA def(sink40) | Capture.cs:121:9:121:35 | SSA call def(sink40) |
| Capture.cs:115:26:115:39 | "taint source" | Capture.cs:115:17:115:39 | SSA def(sink40) |
| Capture.cs:121:9:121:35 | SSA call def(sink40) | Capture.cs:122:15:122:20 | access to local variable sink40 |
| Capture.cs:125:25:125:31 | tainted | Capture.cs:132:9:132:25 | [implicit argument] tainted |
| Capture.cs:125:25:125:31 | tainted | Capture.cs:144:9:144:25 | [implicit argument] tainted |
| Capture.cs:125:25:125:31 | tainted | Capture.cs:153:9:153:45 | [implicit argument] tainted |
| Capture.cs:125:25:125:31 | tainted | Capture.cs:160:22:160:38 | [implicit argument] tainted |
| Capture.cs:125:25:125:31 | tainted | Capture.cs:168:25:168:31 | access to parameter tainted |
| Capture.cs:125:25:125:31 | tainted | Capture.cs:194:25:194:31 | access to parameter tainted |
| Capture.cs:132:9:132:25 | SSA call def(sink33) | Capture.cs:133:15:133:20 | access to local variable sink33 |
| Capture.cs:132:9:132:25 | [implicit argument] tainted | Capture.cs:132:9:132:25 | SSA call def(sink33) |
| Capture.cs:144:9:144:25 | SSA call def(sink34) | Capture.cs:145:15:145:20 | access to local variable sink34 |
| Capture.cs:144:9:144:25 | [implicit argument] tainted | Capture.cs:144:9:144:25 | SSA call def(sink34) |
| Capture.cs:153:9:153:45 | SSA call def(sink35) | Capture.cs:154:15:154:20 | access to local variable sink35 |
| Capture.cs:153:9:153:45 | [implicit argument] tainted | Capture.cs:153:9:153:45 | SSA call def(sink35) |
| Capture.cs:160:22:160:38 | [implicit argument] tainted | Capture.cs:160:22:160:38 | call to local function CaptureThrough4 |
| Capture.cs:160:22:160:38 | call to local function CaptureThrough4 | Capture.cs:161:15:161:20 | access to local variable sink36 |
| Capture.cs:168:9:168:32 | SSA call def(sink37) | Capture.cs:169:15:169:20 | access to local variable sink37 |
| Capture.cs:168:25:168:31 | access to parameter tainted | Capture.cs:168:9:168:32 | SSA call def(sink37) |
| Capture.cs:194:22:194:32 | call to local function Id | Capture.cs:195:15:195:20 | access to local variable sink38 |
| Capture.cs:194:25:194:31 | access to parameter tainted | Capture.cs:194:22:194:32 | call to local function Id |
| GlobalDataFlow.cs:17:27:17:40 | "taint source" | GlobalDataFlow.cs:18:15:18:29 | access to field SinkField0 |
| GlobalDataFlow.cs:17:27:17:40 | "taint source" | GlobalDataFlow.cs:26:15:26:32 | access to property SinkProperty0 |
| GlobalDataFlow.cs:17:27:17:40 | "taint source" | GlobalDataFlow.cs:26:15:26:32 | access to property SinkProperty0 |
@@ -250,37 +258,46 @@ nodes
| Capture.cs:27:43:32:9 | SSA capture def(tainted) | semmle.label | SSA capture def(tainted) |
| Capture.cs:30:19:30:24 | access to local variable sink29 | semmle.label | access to local variable sink29 |
| Capture.cs:33:9:33:40 | [implicit argument] tainted | semmle.label | [implicit argument] tainted |
| Capture.cs:57:13:57:35 | SSA def(sink30) | semmle.label | SSA def(sink30) |
| Capture.cs:57:22:57:35 | "taint source" | semmle.label | "taint source" |
| Capture.cs:59:9:59:21 | SSA call def(sink30) | semmle.label | SSA call def(sink30) |
| Capture.cs:60:15:60:20 | access to local variable sink30 | semmle.label | access to local variable sink30 |
| Capture.cs:67:17:67:39 | SSA def(sink31) | semmle.label | SSA def(sink31) |
| Capture.cs:67:26:67:39 | "taint source" | semmle.label | "taint source" |
| Capture.cs:71:9:71:21 | SSA call def(sink31) | semmle.label | SSA call def(sink31) |
| Capture.cs:72:15:72:20 | access to local variable sink31 | semmle.label | access to local variable sink31 |
| Capture.cs:77:13:77:35 | SSA def(sink32) | semmle.label | SSA def(sink32) |
| Capture.cs:77:22:77:35 | "taint source" | semmle.label | "taint source" |
| Capture.cs:80:9:80:41 | SSA call def(sink32) | semmle.label | SSA call def(sink32) |
| Capture.cs:81:15:81:20 | access to local variable sink32 | semmle.label | access to local variable sink32 |
| Capture.cs:101:25:101:31 | tainted | semmle.label | tainted |
| Capture.cs:108:9:108:25 | SSA call def(sink33) | semmle.label | SSA call def(sink33) |
| Capture.cs:108:9:108:25 | [implicit argument] tainted | semmle.label | [implicit argument] tainted |
| Capture.cs:109:15:109:20 | access to local variable sink33 | semmle.label | access to local variable sink33 |
| Capture.cs:120:9:120:25 | SSA call def(sink34) | semmle.label | SSA call def(sink34) |
| Capture.cs:120:9:120:25 | [implicit argument] tainted | semmle.label | [implicit argument] tainted |
| Capture.cs:121:15:121:20 | access to local variable sink34 | semmle.label | access to local variable sink34 |
| Capture.cs:129:9:129:45 | SSA call def(sink35) | semmle.label | SSA call def(sink35) |
| Capture.cs:129:9:129:45 | [implicit argument] tainted | semmle.label | [implicit argument] tainted |
| Capture.cs:130:15:130:20 | access to local variable sink35 | semmle.label | access to local variable sink35 |
| Capture.cs:136:22:136:38 | [implicit argument] tainted | semmle.label | [implicit argument] tainted |
| Capture.cs:136:22:136:38 | call to local function CaptureThrough4 | semmle.label | call to local function CaptureThrough4 |
| Capture.cs:137:15:137:20 | access to local variable sink36 | semmle.label | access to local variable sink36 |
| Capture.cs:144:9:144:32 | SSA call def(sink37) | semmle.label | SSA call def(sink37) |
| Capture.cs:144:25:144:31 | access to parameter tainted | semmle.label | access to parameter tainted |
| Capture.cs:145:15:145:20 | access to local variable sink37 | semmle.label | access to local variable sink37 |
| Capture.cs:170:22:170:32 | call to local function Id | semmle.label | call to local function Id |
| Capture.cs:170:25:170:31 | access to parameter tainted | semmle.label | access to parameter tainted |
| Capture.cs:171:15:171:20 | access to local variable sink38 | semmle.label | access to local variable sink38 |
| Capture.cs:50:50:50:55 | sink39 | semmle.label | sink39 |
| Capture.cs:52:13:59:14 | [implicit argument] sink39 | semmle.label | [implicit argument] sink39 |
| Capture.cs:55:27:58:17 | SSA capture def(sink39) | semmle.label | SSA capture def(sink39) |
| Capture.cs:57:27:57:32 | access to parameter sink39 | semmle.label | access to parameter sink39 |
| Capture.cs:61:36:61:42 | access to parameter tainted | semmle.label | access to parameter tainted |
| Capture.cs:69:13:69:35 | SSA def(sink30) | semmle.label | SSA def(sink30) |
| Capture.cs:69:22:69:35 | "taint source" | semmle.label | "taint source" |
| Capture.cs:71:9:71:21 | SSA call def(sink30) | semmle.label | SSA call def(sink30) |
| Capture.cs:72:15:72:20 | access to local variable sink30 | semmle.label | access to local variable sink30 |
| Capture.cs:79:17:79:39 | SSA def(sink31) | semmle.label | SSA def(sink31) |
| Capture.cs:79:26:79:39 | "taint source" | semmle.label | "taint source" |
| Capture.cs:83:9:83:21 | SSA call def(sink31) | semmle.label | SSA call def(sink31) |
| Capture.cs:84:15:84:20 | access to local variable sink31 | semmle.label | access to local variable sink31 |
| Capture.cs:89:13:89:35 | SSA def(sink32) | semmle.label | SSA def(sink32) |
| Capture.cs:89:22:89:35 | "taint source" | semmle.label | "taint source" |
| Capture.cs:92:9:92:41 | SSA call def(sink32) | semmle.label | SSA call def(sink32) |
| Capture.cs:93:15:93:20 | access to local variable sink32 | semmle.label | access to local variable sink32 |
| Capture.cs:115:17:115:39 | SSA def(sink40) | semmle.label | SSA def(sink40) |
| Capture.cs:115:26:115:39 | "taint source" | semmle.label | "taint source" |
| Capture.cs:121:9:121:35 | SSA call def(sink40) | semmle.label | SSA call def(sink40) |
| Capture.cs:122:15:122:20 | access to local variable sink40 | semmle.label | access to local variable sink40 |
| Capture.cs:125:25:125:31 | tainted | semmle.label | tainted |
| Capture.cs:132:9:132:25 | SSA call def(sink33) | semmle.label | SSA call def(sink33) |
| Capture.cs:132:9:132:25 | [implicit argument] tainted | semmle.label | [implicit argument] tainted |
| Capture.cs:133:15:133:20 | access to local variable sink33 | semmle.label | access to local variable sink33 |
| Capture.cs:144:9:144:25 | SSA call def(sink34) | semmle.label | SSA call def(sink34) |
| Capture.cs:144:9:144:25 | [implicit argument] tainted | semmle.label | [implicit argument] tainted |
| Capture.cs:145:15:145:20 | access to local variable sink34 | semmle.label | access to local variable sink34 |
| Capture.cs:153:9:153:45 | SSA call def(sink35) | semmle.label | SSA call def(sink35) |
| Capture.cs:153:9:153:45 | [implicit argument] tainted | semmle.label | [implicit argument] tainted |
| Capture.cs:154:15:154:20 | access to local variable sink35 | semmle.label | access to local variable sink35 |
| Capture.cs:160:22:160:38 | [implicit argument] tainted | semmle.label | [implicit argument] tainted |
| Capture.cs:160:22:160:38 | call to local function CaptureThrough4 | semmle.label | call to local function CaptureThrough4 |
| Capture.cs:161:15:161:20 | access to local variable sink36 | semmle.label | access to local variable sink36 |
| Capture.cs:168:9:168:32 | SSA call def(sink37) | semmle.label | SSA call def(sink37) |
| Capture.cs:168:25:168:31 | access to parameter tainted | semmle.label | access to parameter tainted |
| Capture.cs:169:15:169:20 | access to local variable sink37 | semmle.label | access to local variable sink37 |
| Capture.cs:194:22:194:32 | call to local function Id | semmle.label | call to local function Id |
| Capture.cs:194:25:194:31 | access to parameter tainted | semmle.label | access to parameter tainted |
| Capture.cs:195:15:195:20 | access to local variable sink38 | semmle.label | access to local variable sink38 |
| GlobalDataFlow.cs:17:27:17:40 | "taint source" | semmle.label | "taint source" |
| GlobalDataFlow.cs:18:15:18:29 | access to field SinkField0 | semmle.label | access to field SinkField0 |
| GlobalDataFlow.cs:26:15:26:32 | access to property SinkProperty0 | semmle.label | access to property SinkProperty0 |
@@ -442,15 +459,17 @@ nodes
| Capture.cs:12:19:12:24 | access to local variable sink27 | Capture.cs:7:20:7:26 | tainted | Capture.cs:12:19:12:24 | access to local variable sink27 | access to local variable sink27 |
| Capture.cs:21:23:21:28 | access to local variable sink28 | Capture.cs:7:20:7:26 | tainted | Capture.cs:21:23:21:28 | access to local variable sink28 | access to local variable sink28 |
| Capture.cs:30:19:30:24 | access to local variable sink29 | Capture.cs:7:20:7:26 | tainted | Capture.cs:30:19:30:24 | access to local variable sink29 | access to local variable sink29 |
| Capture.cs:60:15:60:20 | access to local variable sink30 | Capture.cs:57:22:57:35 | "taint source" | Capture.cs:60:15:60:20 | access to local variable sink30 | access to local variable sink30 |
| Capture.cs:72:15:72:20 | access to local variable sink31 | Capture.cs:67:26:67:39 | "taint source" | Capture.cs:72:15:72:20 | access to local variable sink31 | access to local variable sink31 |
| Capture.cs:81:15:81:20 | access to local variable sink32 | Capture.cs:77:22:77:35 | "taint source" | Capture.cs:81:15:81:20 | access to local variable sink32 | access to local variable sink32 |
| Capture.cs:109:15:109:20 | access to local variable sink33 | Capture.cs:101:25:101:31 | tainted | Capture.cs:109:15:109:20 | access to local variable sink33 | access to local variable sink33 |
| Capture.cs:121:15:121:20 | access to local variable sink34 | Capture.cs:101:25:101:31 | tainted | Capture.cs:121:15:121:20 | access to local variable sink34 | access to local variable sink34 |
| Capture.cs:130:15:130:20 | access to local variable sink35 | Capture.cs:101:25:101:31 | tainted | Capture.cs:130:15:130:20 | access to local variable sink35 | access to local variable sink35 |
| Capture.cs:137:15:137:20 | access to local variable sink36 | Capture.cs:101:25:101:31 | tainted | Capture.cs:137:15:137:20 | access to local variable sink36 | access to local variable sink36 |
| Capture.cs:145:15:145:20 | access to local variable sink37 | Capture.cs:101:25:101:31 | tainted | Capture.cs:145:15:145:20 | access to local variable sink37 | access to local variable sink37 |
| Capture.cs:171:15:171:20 | access to local variable sink38 | Capture.cs:101:25:101:31 | tainted | Capture.cs:171:15:171:20 | access to local variable sink38 | access to local variable sink38 |
| Capture.cs:57:27:57:32 | access to parameter sink39 | Capture.cs:7:20:7:26 | tainted | Capture.cs:57:27:57:32 | access to parameter sink39 | access to parameter sink39 |
| Capture.cs:72:15:72:20 | access to local variable sink30 | Capture.cs:69:22:69:35 | "taint source" | Capture.cs:72:15:72:20 | access to local variable sink30 | access to local variable sink30 |
| Capture.cs:84:15:84:20 | access to local variable sink31 | Capture.cs:79:26:79:39 | "taint source" | Capture.cs:84:15:84:20 | access to local variable sink31 | access to local variable sink31 |
| Capture.cs:93:15:93:20 | access to local variable sink32 | Capture.cs:89:22:89:35 | "taint source" | Capture.cs:93:15:93:20 | access to local variable sink32 | access to local variable sink32 |
| Capture.cs:122:15:122:20 | access to local variable sink40 | Capture.cs:115:26:115:39 | "taint source" | Capture.cs:122:15:122:20 | access to local variable sink40 | access to local variable sink40 |
| Capture.cs:133:15:133:20 | access to local variable sink33 | Capture.cs:125:25:125:31 | tainted | Capture.cs:133:15:133:20 | access to local variable sink33 | access to local variable sink33 |
| Capture.cs:145:15:145:20 | access to local variable sink34 | Capture.cs:125:25:125:31 | tainted | Capture.cs:145:15:145:20 | access to local variable sink34 | access to local variable sink34 |
| Capture.cs:154:15:154:20 | access to local variable sink35 | Capture.cs:125:25:125:31 | tainted | Capture.cs:154:15:154:20 | access to local variable sink35 | access to local variable sink35 |
| Capture.cs:161:15:161:20 | access to local variable sink36 | Capture.cs:125:25:125:31 | tainted | Capture.cs:161:15:161:20 | access to local variable sink36 | access to local variable sink36 |
| Capture.cs:169:15:169:20 | access to local variable sink37 | Capture.cs:125:25:125:31 | tainted | Capture.cs:169:15:169:20 | access to local variable sink37 | access to local variable sink37 |
| Capture.cs:195:15:195:20 | access to local variable sink38 | Capture.cs:125:25:125:31 | tainted | Capture.cs:195:15:195:20 | access to local variable sink38 | access to local variable sink38 |
| GlobalDataFlow.cs:18:15:18:29 | access to field SinkField0 | GlobalDataFlow.cs:17:27:17:40 | "taint source" | GlobalDataFlow.cs:18:15:18:29 | access to field SinkField0 | access to field SinkField0 |
| GlobalDataFlow.cs:26:15:26:32 | access to property SinkProperty0 | GlobalDataFlow.cs:17:27:17:40 | "taint source" | GlobalDataFlow.cs:26:15:26:32 | access to property SinkProperty0 | access to property SinkProperty0 |
| GlobalDataFlow.cs:44:50:44:59 | access to parameter sinkParam2 | GlobalDataFlow.cs:17:27:17:40 | "taint source" | GlobalDataFlow.cs:44:50:44:59 | access to parameter sinkParam2 | access to parameter sinkParam2 |

28
docs/language/learn-ql/javascript/introduce-libraries-js.rst
View File

@@ -682,28 +682,28 @@ You can add custom type inference rules by defining new subclasses of ``DataFlow
Call graph
~~~~~~~~~~
The library ``semmle.javascript.dataflow.CallGraph`` implements a simple `call graph <http://en.wikipedia.org/wiki/Call_graph>`__ construction algorithm to statically approximate the possible call targets of function calls and ``new`` expressions. Due to the dynamically typed nature of JavaScript and its support for higher-order functions and reflective language features, building static call graphs is quite difficult. Simple call graph algorithms tend to be incomplete, that is, they often fail to resolve all possible call targets. More sophisticated algorithms can suffer from the opposite problem of imprecision, that is, they may infer many spurious call targets.
The JavaScript library implements a simple `call graph <http://en.wikipedia.org/wiki/Call_graph>`__ construction algorithm to statically approximate the possible call targets of function calls and ``new`` expressions. Due to the dynamically typed nature of JavaScript and its support for higher-order functions and reflective language features, building static call graphs is quite difficult. Simple call graph algorithms tend to be incomplete, that is, they often fail to resolve all possible call targets. More sophisticated algorithms can suffer from the opposite problem of imprecision, that is, they may infer many spurious call targets.
The library provides a QL class `CallSite <https://help.semmle.com/qldoc/javascript/semmle/javascript/dataflow/CallGraph.qll/type.CallGraph$CallSite.html>`__, which extends `InvokeExpr <https://help.semmle.com/qldoc/javascript/semmle/javascript/Expr.qll/type.Expr$InvokeExpr.html>`__ with a member predicate ``getACallee()`` that computes possible callees of the given call site, that is, functions that may at runtime be invoked by this expression.
The call graph is represented by the member predicate ``getACallee()`` of class `DataFlow::InvokeNode <https://help.semmle.com/qldoc/javascript/semmle/javascript/dataflow/Nodes.qll/type.Nodes$InvokeNode.html>`__, which computes possible callees of the given invocation, that is, functions that may at runtime be invoked by this expression.
Furthermore, there are three member predicates that indicate the quality of the callee information for this call site:
Furthermore, there are three member predicates that indicate the quality of the callee information for this invocation:
- ``CallSite.isImprecise()``: holds for call sites where the call graph builder might infer spurious call targets.
- ``CallSite.isIncomplete()``: holds for call sites where the call graph builder might fail to infer possible call targets.
- ``CallSite.isUncertain()``: holds if either ``isImprecise()`` or ``isUncertain()`` holds.
- ``DataFlow::InvokeNode.isImprecise()``: holds for invocations where the call graph builder might infer spurious call targets.
- ``DataFlow::InvokeNode.isIncomplete()``: holds for invocations where the call graph builder might fail to infer possible call targets.
- ``DataFlow::InvokeNode.isUncertain()``: holds if either ``isImprecise()`` or ``isUncertain()`` holds.
As an example of a call-graph-based query, here is a query to find call sites for which the call graph builder could not find any callees, despite the analysis being complete for this call site:
As an example of a call-graph-based query, here is a query to find invocations for which the call graph builder could not find any callees, despite the analysis being complete for this invocation:
.. code-block:: ql
import javascript
from CallSite cs
where not cs.isIncomplete() and
not exists(cs.getACallee())
select cs, "Unable to find a callee for this call site."
from DataFlow::InvokeNode invk
where not invk.isIncomplete() and
not exists(invk.getACallee())
select invk, "Unable to find a callee for this invocation."
➤ `See this in the query console <https://lgtm.com/query/1506065666123/>`__
➤ `See this in the query console <https://lgtm.com/query/3260345690335671362/>`__
Inter-procedural data flow
~~~~~~~~~~~~~~~~~~~~~~~~~~
@@ -808,7 +808,7 @@ HTTP framework libraries
The library ``semmle.javacript.frameworks.HTTP`` provides classes modeling common concepts from various HTTP frameworks.
Currently supported frameworks are `Express <https://expressjs.com/>`__, the standard Node.js ``http`` and ``https`` modules, `Connect <https://github.com/senchalabs/connect>`__, `Koa <https://koajs.com>`__, `Hapi <https://hapijs.com/>`__ and `Restify <https://restify.com/>`__.
Currently supported frameworks are `Express <https://expressjs.com/>`__, the standard Node.js ``http`` and ``https`` modules, `Connect <https://github.com/senchalabs/connect>`__, `Koa <https://koajs.com>`__, `Hapi <https://hapijs.com/>`__ and `Restify <http://restify.com/>`__.
The most important classes include (all in module ``HTTP``):
@@ -1031,4 +1031,4 @@ What next?
- Learn about the QL standard libraries used to write queries for TypeScript in :doc:`Introducing the TypeScript libraries <introduce-libraries-ts>`.
- Find out more about QL in the `QL language handbook <https://help.semmle.com/QL/ql-handbook/index.html>`__ and `QL language specification <https://help.semmle.com/QL/ql-spec/language.html>`__.
- Learn more about the query console in `Using the query console <https://lgtm.com/help/lgtm/using-query-console>`__.
- Learn more about the query console in `Using the query console <https://lgtm.com/help/lgtm/using-query-console>`__.

2
docs/language/ql-training/java/apache-struts-java.rst
View File

@@ -62,7 +62,7 @@ RCE in Apache Struts
- Disclosed as `CVE-2017-9805 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9805>`__
- Blog post: https://lgtm.com/blog/apache_struts_CVE-2017-9805
- Blog post: https://blog.semmle.com/apache-struts-vulnerability-cve-2017-9805/
Finding the RCE yourself
========================

2
docs/language/ql-training/java/global-data-flow-java.rst
View File

@@ -57,7 +57,7 @@ Code injection in Apache struts
.. note::
More details on the CVE can be found here: https://lgtm.com/blog/apache_struts_CVE-2018-11776 and
More details on the CVE can be found here: https://blog.semmle.com/apache-struts-CVE-2018-11776/ and
https://github.com/Semmle/demos/tree/master/ql_demos/java/Apache_Struts_CVE-2018-11776
More details on OGNL can be found here: https://commons.apache.org/proper/commons-ognl/