hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-17 01:03:14 +01:00
Code Issues Packages Projects Releases Wiki Activity

C#: Add PrettyPrintModel post process query and migrate existing test case.

Browse Source
This commit is contained in:
Michael Nebel
2024-08-13 10:49:16 +02:00
parent a782952969
commit ddbca5aee9
3 changed files with 13 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
csharp/ql/test/TestUtilities/PrettyPrintModels.ql Normal file
View File

@@ -0,0 +1,11 @@
/**
* @kind test-postprocess
*/
import semmle.code.csharp.dataflow.internal.ExternalFlow
import codeql.dataflow.test.ProvenancePathGraph
import codeql.dataflow.test.ProvenancePathGraph::TestPostProcessing::TranslateProvenanceResults<interpretModelForTest/2>
from string relation, int row, int column, string data
where results(relation, row, column, data)
select relation, row, column, data

14
csharp/ql/test/query-tests/Security Features/CWE-807/ConditionalBypass.ql
View File

@@ -1,14 +0,0 @@
/**
* @kind path-problem
*/
import csharp
import semmle.code.csharp.security.dataflow.ConditionalBypassQuery
import codeql.dataflow.test.ProvenancePathGraph
import semmle.code.csharp.dataflow.internal.ExternalFlow
import ShowProvenance<interpretModelForTest/2, ConditionalBypass::PathNode, ConditionalBypass::PathGraph>
from ConditionalBypass::PathNode source, ConditionalBypass::PathNode sink
where ConditionalBypass::flowPath(source, sink)
select sink.getNode(), source, sink, "This condition guards a sensitive $@, but a $@ controls it.",
sink.getNode().(Sink).getSensitiveMethodCall(), "action", source.getNode(), "user-provided value"

2
csharp/ql/test/query-tests/Security Features/CWE-807/ConditionalBypass.qlref Normal file
View File

@@ -0,0 +1,2 @@
query: Security Features/CWE-807/ConditionalBypass.ql
postprocess: TestUtilities/PrettyPrintModels.ql