hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-17 01:03:14 +01:00
Code Issues Packages Projects Releases Wiki Activity

Rust: Add test cases for transactions as well.

Browse Source
This commit is contained in:
Geoffrey White
2025-10-10 15:38:25 +01:00
parent 883e00558a
commit f15a34f361
1 changed files with 10 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
rust/ql/test/query-tests/security/CWE-089/mysql.rs
View File

@@ -45,6 +45,11 @@ mod sync_test
let _ = conn.exec_map(&stmt, (remote_string.as_str(),), |_: i64| -> () {})?;
let _ = conn.exec_map_opt(&stmt, (remote_string.as_str(),), |_: Result<i64, FromRowError>| -> () {})?;
// transactions
let mut trans = conn.start_transaction(TxOpts::default())?;
trans.query_drop(unsafe_query.as_str()); // $ MISSING: sql-sink Alert[rust/sql-injection]=remote11
trans.commit()?;
Ok(())
}
}
@@ -88,6 +93,11 @@ mod async_test
let _ = conn.exec_stream::<i64, &Statement, (&str,)>(&stmt, (remote_string.as_str(),)).await?;
let _ = conn.exec_map(&stmt, (remote_string.as_str(),), |_: i64| -> () {}).await?;
// transactions
let mut trans = conn.start_transaction(TxOpts::default()).await?;
trans.query_drop(unsafe_query.as_str()); // $ MISSING: sql-sink Alert[rust/sql-injection]=remote11
trans.commit().await?;
Ok(())
}
}