hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-22 23:35:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

Update tests

Browse Source
This commit is contained in:
Owen Mansel-Chan
2023-11-15 15:08:48 +00:00
parent aaa8f9c41f
commit e0879969c9
2 changed files with 10 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
go/ql/test/library-tests/semmle/go/dataflow/ArrayConversion/main.go
View File

@@ -16,8 +16,8 @@ func main() {
var a [4]string
a[0] = source()
alias := [2]string(a[:])
sink(alias[0]) // $ hasTaintFlow="index expression"
sink(alias[1]) // $ SPURIOUS: hasTaintFlow="index expression" // we don't distinguish different elements of arrays or slices
sink(alias[0]) // $ hasValueFlow="index expression"
sink(alias[1]) // $ SPURIOUS: hasValueFlow="index expression" // we don't distinguish different elements of arrays or slices
sink(alias) // $ hasTaintFlow="alias"
// Compare with the standard dataflow support for arrays

16
go/ql/test/library-tests/semmle/go/dataflow/SliceExpressions/main.go
View File

@@ -15,31 +15,31 @@ func main() {
func arrayBase(base [4]string) {
base[1] = source()
slice := base[1:4]
sink(slice[0]) // $ hasTaintFlow="index expression"
sink(slice[1]) // $ SPURIOUS: hasTaintFlow="index expression" // we don't distinguish different elements of arrays or slices
sink(slice[0]) // $ hasValueFlow="index expression"
sink(slice[1]) // $ SPURIOUS: hasValueFlow="index expression" // we don't distinguish different elements of arrays or slices
sink(slice) // $ hasTaintFlow="slice"
}
func arrayPointerBase(base *[4]string) {
base[1] = source()
slice := base[1:4]
sink(slice[0]) // $ hasTaintFlow="index expression"
sink(slice[1]) // $ SPURIOUS: hasTaintFlow="index expression" // we don't distinguish different elements of arrays or slices
sink(slice[0]) // $ hasValueFlow="index expression"
sink(slice[1]) // $ SPURIOUS: hasValueFlow="index expression" // we don't distinguish different elements of arrays or slices
sink(slice) // $ hasTaintFlow="slice"
}
func sliceBase(base []string) {
base[1] = source()
slice := base[1:4]
sink(slice[0]) // $ hasTaintFlow="index expression"
sink(slice[1]) // $ SPURIOUS: hasTaintFlow="index expression" // we don't distinguish different elements of arrays or slices
sink(slice[0]) // $ hasValueFlow="index expression"
sink(slice[1]) // $ SPURIOUS: hasValueFlow="index expression" // we don't distinguish different elements of arrays or slices
sink(slice) // $ hasTaintFlow="slice"
}
func slicePointerBase(base *[]string) {
(*base)[1] = source()
slice := (*base)[1:4]
sink(slice[0]) // $ hasTaintFlow="index expression"
sink(slice[1]) // $ SPURIOUS: hasTaintFlow="index expression" // we don't distinguish different elements of arrays or slices
sink(slice[0]) // $ hasValueFlow="index expression"
sink(slice[1]) // $ SPURIOUS: hasValueFlow="index expression" // we don't distinguish different elements of arrays or slices
sink(slice) // $ hasTaintFlow="slice"
}