hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-17 01:03:14 +01:00
Code Issues Packages Projects Releases Wiki Activity

Swift: Fix a corrupted model.

Browse Source
This commit is contained in:
Geoffrey White
2024-07-24 18:10:46 +01:00
parent 44e33c7be7
commit ecefa3e383
2 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
swift/ql/lib/codeql/swift/frameworks/StandardLibrary/Url.qll
View File

@@ -119,7 +119,7 @@ private class UrlSummaries extends SummaryModelCsv {
";URL;true;resourceValues(forKeys:);;;Argument[-1];ReturnValue;taint",
";URL;true;setResourceValues(_:);;;Argument[0];Argument[-1];taint",
";URL;true;setTemporaryResourceValue(_:forKey:);;;Argument[-1..0];Argument[-1];taint",
";URL;true;withUnsafeFileSystemRepresentation(_:);;;Argument[-1],Argument[0].Parameter[0];ReturnValue;taint",
";URL;true;withUnsafeFileSystemRepresentation(_:);;;Argument[-1];Argument[0].Parameter[0].OptionalSome.CollectionElement;taint",
";URL;true;withUnsafeFileSystemRepresentation(_:);;;Argument[0].ReturnValue;ReturnValue;taint",
";URL;true;resolvingSymlinksInPath();;;Argument[-1];ReturnValue;taint",
";URL;true;appendPathComponent(_:);;;Argument[-1..0];Argument[-1];taint",

2
swift/ql/test/library-tests/dataflow/taint/libraries/url.swift
View File

@@ -324,7 +324,7 @@ func taintThroughURL() {
})
urlTainted.withUnsafeFileSystemRepresentation({
ptr in
sink(any: ptr!) // $ MISSING: tainted=210
sink(any: ptr!) // $ tainted=210
})
sink(arg: urlTainted.resolvingSymlinksInPath()) // $ tainted=210