hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 11:15:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

update expected test output

Browse Source
This commit is contained in:
Erik Krogh Kristensen
2020-01-20 09:56:40 +01:00
parent b3b132c66d
commit ffbd0f6632
7 changed files with 79 additions and 29 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
javascript/ql/test/library-tests/InterProceduralFlow/DataFlow.expected
View File

@@ -22,12 +22,8 @@
| partial.js:5:15:5:24 | "tainted1" | partial.js:15:15:15:15 | x |
| partial.js:5:15:5:24 | "tainted1" | partial.js:21:15:21:15 | x |
| partial.js:5:15:5:24 | "tainted1" | partial.js:27:15:27:15 | x |
| promises.js:2:16:2:24 | "tainted" | promises.js:7:16:7:18 | val |
| promises.js:2:16:2:24 | "tainted" | promises.js:38:32:38:32 | v |
| promises.js:11:22:11:31 | "resolved" | promises.js:19:20:19:20 | v |
| promises.js:12:22:12:31 | "rejected" | promises.js:21:20:21:20 | v |
| promises.js:12:22:12:31 | "rejected" | promises.js:24:20:24:20 | v |
| promises.js:32:24:32:37 | "also tainted" | promises.js:38:32:38:32 | v |
| properties2.js:7:14:7:21 | "source" | properties2.js:8:12:8:24 | foo(source).p |
| properties2.js:7:14:7:21 | "source" | properties2.js:33:13:33:20 | getP(o3) |
| properties.js:2:16:2:24 | "tainted" | properties.js:5:14:5:23 | a.someProp |

4
javascript/ql/test/library-tests/InterProceduralFlow/GermanFlow.expected
View File

@@ -23,12 +23,8 @@
| partial.js:5:15:5:24 | "tainted1" | partial.js:15:15:15:15 | x |
| partial.js:5:15:5:24 | "tainted1" | partial.js:21:15:21:15 | x |
| partial.js:5:15:5:24 | "tainted1" | partial.js:27:15:27:15 | x |
| promises.js:2:16:2:24 | "tainted" | promises.js:7:16:7:18 | val |
| promises.js:2:16:2:24 | "tainted" | promises.js:38:32:38:32 | v |
| promises.js:11:22:11:31 | "resolved" | promises.js:19:20:19:20 | v |
| promises.js:12:22:12:31 | "rejected" | promises.js:21:20:21:20 | v |
| promises.js:12:22:12:31 | "rejected" | promises.js:24:20:24:20 | v |
| promises.js:32:24:32:37 | "also tainted" | promises.js:38:32:38:32 | v |
| properties2.js:7:14:7:21 | "source" | properties2.js:8:12:8:24 | foo(source).p |
| properties2.js:7:14:7:21 | "source" | properties2.js:33:13:33:20 | getP(o3) |
| properties.js:2:16:2:24 | "tainted" | properties.js:5:14:5:23 | a.someProp |

20
javascript/ql/test/library-tests/InterProceduralFlow/TrackedNodes.expected
View File

@@ -0,0 +1,20 @@
| missing | promises.js:10:30:17:3 | exceptional return of anonymous function | promises.js:20:7:20:7 | v |
| missing | promises.js:10:30:17:3 | exceptional return of anonymous function | promises.js:21:20:21:20 | v |
| missing | promises.js:10:30:17:3 | exceptional return of anonymous function | promises.js:23:19:23:19 | v |
| missing | promises.js:10:30:17:3 | exceptional return of anonymous function | promises.js:24:20:24:20 | v |
| missing | promises.js:12:22:12:31 | "rejected" | promises.js:20:7:20:7 | v |
| missing | promises.js:12:22:12:31 | "rejected" | promises.js:21:20:21:20 | v |
| missing | promises.js:12:22:12:31 | "rejected" | promises.js:23:19:23:19 | v |
| missing | promises.js:12:22:12:31 | "rejected" | promises.js:24:20:24:20 | v |
| missing | promises.js:13:9:13:21 | exceptional return of Math.random() | promises.js:20:7:20:7 | v |
| missing | promises.js:13:9:13:21 | exceptional return of Math.random() | promises.js:21:20:21:20 | v |
| missing | promises.js:13:9:13:21 | exceptional return of Math.random() | promises.js:23:19:23:19 | v |
| missing | promises.js:13:9:13:21 | exceptional return of Math.random() | promises.js:24:20:24:20 | v |
| missing | promises.js:14:7:14:21 | exceptional return of res(res_source) | promises.js:20:7:20:7 | v |
| missing | promises.js:14:7:14:21 | exceptional return of res(res_source) | promises.js:21:20:21:20 | v |
| missing | promises.js:14:7:14:21 | exceptional return of res(res_source) | promises.js:23:19:23:19 | v |
| missing | promises.js:14:7:14:21 | exceptional return of res(res_source) | promises.js:24:20:24:20 | v |
| missing | promises.js:16:7:16:21 | exceptional return of rej(rej_source) | promises.js:20:7:20:7 | v |
| missing | promises.js:16:7:16:21 | exceptional return of rej(rej_source) | promises.js:21:20:21:20 | v |
| missing | promises.js:16:7:16:21 | exceptional return of rej(rej_source) | promises.js:23:19:23:19 | v |
| missing | promises.js:16:7:16:21 | exceptional return of rej(rej_source) | promises.js:24:20:24:20 | v |

57
javascript/ql/test/library-tests/Promises/AdditionalPromises.expected
View File

@@ -1,19 +1,46 @@
| additional-promises.js:2:13:2:57 | new Pin ... ct) {}) |
| flowsteps.js:5:3:5:21 | new Promise(throws) |
| flowsteps.js:8:3:8:21 | new Promise(throws) |
| flowsteps.js:12:11:12:29 | new Promise(throws) |
| flowsteps.js:17:3:17:45 | new Pro ... ect(3)) |
| flowsteps.js:21:11:21:53 | new Pro ... ect(4)) |
| flowsteps.js:26:3:26:21 | new Promise(throws) |
| flowsteps.js:26:3:27:19 | new Pro ... => {}) |
| flowsteps.js:31:3:31:21 | new Promise(throws) |
| flowsteps.js:31:3:32:19 | new Pro ... => {}) |
| flowsteps.js:31:3:33:35 | new Pro ... og(e6)) |
| flowsteps.js:36:19:36:62 | new Pro ... lve(8)) |
| flowsteps.js:38:19:38:62 | new Pro ... lve(9)) |
| flowsteps.js:40:11:40:28 | Promise.resolve(3) |
| flowsteps.js:43:12:49:4 | new Pro ... }\\n }) |
| flowsteps.js:50:19:50:41 | p2.then ... al * 4) |
| flow.js:7:11:7:59 | new Pro ... ource)) |
| flow.js:10:11:10:58 | new Pro ... ource)) |
| flow.js:13:11:13:58 | new Pro ... ource)) |
| flow.js:20:2:20:24 | Promise ... source) |
| flow.js:22:2:22:24 | Promise ... source) |
| flow.js:24:2:24:49 | new Pro ... ource)) |
| flow.js:26:2:26:49 | new Pro ... ource)) |
| flow.js:28:2:28:23 | Promise ... ("foo") |
| flow.js:28:2:28:41 | Promise ... source) |
| flow.js:30:2:30:24 | Promise ... source) |
| flow.js:30:2:30:41 | Promise ... "foo") |
| flow.js:32:2:32:49 | new Pro ... ource)) |
| flow.js:34:2:34:24 | Promise ... source) |
| flow.js:34:2:34:41 | Promise ... => { }) |
| flow.js:36:11:36:33 | Promise ... source) |
| flow.js:37:11:37:29 | p5.catch(() => { }) |
| flow.js:40:2:40:49 | new Pro ... ource)) |
| flow.js:40:2:40:65 | new Pro ... => { }) |
| flow.js:42:2:42:49 | new Pro ... ource)) |
| flow.js:42:2:42:76 | new Pro ... => { }) |
| flow.js:44:2:44:24 | Promise ... source) |
| flow.js:44:2:44:41 | Promise ... => { }) |
| flow.js:44:2:44:58 | Promise ... => { }) |
| flow.js:44:2:44:75 | Promise ... => { }) |
| flow.js:46:2:46:24 | Promise ... source) |
| flow.js:46:2:46:43 | Promise ... => { }) |
| flow.js:48:2:48:36 | new Pro ... urce }) |
| flow.js:53:2:53:22 | createP ... source) |
| flow.js:55:11:55:58 | new Pro ... ource)) |
| flow.js:56:11:56:27 | p8.then(() => {}) |
| flow.js:57:12:57:31 | p9.finally(() => {}) |
| flow.js:60:12:60:59 | new Pro ... ource)) |
| flow.js:61:12:61:29 | p11.then(() => {}) |
| flow.js:65:9:65:56 | new Pro ... ource)) |
| flow.js:74:10:74:57 | new Pro ... ource)) |
| flow.js:76:2:76:17 | chainedPromise() |
| flow.js:76:2:76:32 | chained ... => {}) |
| flow.js:86:23:86:70 | new Pro ... ource)) |
| interflow.js:6:3:6:25 | loadScr ... urce()) |
| interflow.js:6:3:7:26 | loadScr ... () { }) |
| interflow.js:6:3:8:26 | loadScr ... () { }) |
| interflow.js:11:12:15:6 | new Pro ... \\n }) |
| promises.js:3:17:5:4 | new Pro ... );\\n }) |
| promises.js:10:18:17:4 | new Pro ... );\\n }) |
| promises.js:33:19:35:6 | new Pro ... \\n }) |

10
javascript/ql/test/library-tests/Promises/flow.js
View File

@@ -74,4 +74,14 @@
return new Promise((resolve, reject) => reject(source)).then(() => {});
}
chainedPromise().then(() => {}).catch(e => sink(e)); // NOT OK!
function leaksResolvedPromise(p) {
p.then(x => sink(x)); // NOT OK!
}
leaksResolvedPromise(Promise.resolve(source));
function leaksRejectedPromise(p) {
p.catch(e => sink(e)); // NOT OK!
}
leaksRejectedPromise(new Promise((resolve, reject) => reject(source)));
})();

7
javascript/ql/test/library-tests/Promises/tests.expected
View File

@@ -9,6 +9,7 @@ test_ResolvedPromiseDefinition
| flow.js:44:2:44:24 | Promise ... source) | flow.js:44:18:44:23 | source |
| flow.js:46:2:46:24 | Promise ... source) | flow.js:46:18:46:23 | source |
| flow.js:51:10:51:29 | Promise.resolve(src) | flow.js:51:26:51:28 | src |
| flow.js:81:23:81:45 | Promise ... source) | flow.js:81:39:81:44 | source |
| promises.js:53:19:53:41 | Promise ... source) | promises.js:53:35:53:40 | source |
| promises.js:62:19:62:41 | Promise ... source) | promises.js:62:35:62:40 | source |
| promises.js:71:5:71:27 | Promise ... source) | promises.js:71:21:71:26 | source |
@@ -34,6 +35,7 @@ test_PromiseDefinition_getExecutor
| flow.js:60:12:60:59 | new Pro ... ource)) | flow.js:60:24:60:58 | (resolv ... source) |
| flow.js:65:9:65:56 | new Pro ... ource)) | flow.js:65:21:65:55 | (resolv ... source) |
| flow.js:74:10:74:57 | new Pro ... ource)) | flow.js:74:22:74:56 | (resolv ... source) |
| flow.js:86:23:86:70 | new Pro ... ource)) | flow.js:86:35:86:69 | (resolv ... source) |
| interflow.js:11:12:15:6 | new Pro ... \\n }) | interflow.js:11:24:15:5 | functio ... ;\\n } |
| promises.js:3:17:5:4 | new Pro ... );\\n }) | promises.js:3:29:5:3 | functio ... e);\\n } |
| promises.js:10:18:17:4 | new Pro ... );\\n }) | promises.js:10:30:17:3 | (res, r ... e);\\n } |
@@ -55,6 +57,7 @@ test_PromiseDefinition
| flow.js:60:12:60:59 | new Pro ... ource)) |
| flow.js:65:9:65:56 | new Pro ... ource)) |
| flow.js:74:10:74:57 | new Pro ... ource)) |
| flow.js:86:23:86:70 | new Pro ... ource)) |
| interflow.js:11:12:15:6 | new Pro ... \\n }) |
| promises.js:3:17:5:4 | new Pro ... );\\n }) |
| promises.js:10:18:17:4 | new Pro ... );\\n }) |
@@ -86,6 +89,7 @@ test_PromiseDefinition_getRejectParameter
| flow.js:60:12:60:59 | new Pro ... ource)) | flow.js:60:34:60:39 | reject |
| flow.js:65:9:65:56 | new Pro ... ource)) | flow.js:65:31:65:36 | reject |
| flow.js:74:10:74:57 | new Pro ... ource)) | flow.js:74:32:74:37 | reject |
| flow.js:86:23:86:70 | new Pro ... ource)) | flow.js:86:45:86:50 | reject |
| interflow.js:11:12:15:6 | new Pro ... \\n }) | interflow.js:11:43:11:48 | reject |
| promises.js:3:17:5:4 | new Pro ... );\\n }) | promises.js:3:48:3:53 | reject |
| promises.js:10:18:17:4 | new Pro ... );\\n }) | promises.js:10:36:10:38 | rej |
@@ -104,6 +108,7 @@ test_PromiseDefinition_getResolveParameter
| flow.js:60:12:60:59 | new Pro ... ource)) | flow.js:60:25:60:31 | resolve |
| flow.js:65:9:65:56 | new Pro ... ource)) | flow.js:65:22:65:28 | resolve |
| flow.js:74:10:74:57 | new Pro ... ource)) | flow.js:74:23:74:29 | resolve |
| flow.js:86:23:86:70 | new Pro ... ource)) | flow.js:86:36:86:42 | resolve |
| interflow.js:11:12:15:6 | new Pro ... \\n }) | interflow.js:11:34:11:40 | resolve |
| promises.js:3:17:5:4 | new Pro ... );\\n }) | promises.js:3:39:3:45 | resolve |
| promises.js:10:18:17:4 | new Pro ... );\\n }) | promises.js:10:31:10:33 | res |
@@ -132,4 +137,6 @@ flow
| flow.js:2:15:2:22 | "source" | flow.js:62:22:62:22 | x |
| flow.js:2:15:2:22 | "source" | flow.js:70:8:70:8 | e |
| flow.js:2:15:2:22 | "source" | flow.js:76:50:76:50 | e |
| flow.js:2:15:2:22 | "source" | flow.js:79:20:79:20 | x |
| flow.js:2:15:2:22 | "source" | flow.js:84:21:84:21 | e |
| interflow.js:3:18:3:25 | "source" | interflow.js:18:10:18:14 | error |

6
javascript/ql/test/query-tests/Security/CWE-079/ReflectedXss.expected
View File

@@ -46,8 +46,6 @@ nodes
| promises.js:5:44:5:57 | req.query.data |
| promises.js:5:44:5:57 | req.query.data |
| promises.js:6:11:6:11 | x |
| promises.js:6:11:6:11 | x |
| promises.js:6:25:6:25 | x |
| promises.js:6:25:6:25 | x |
| promises.js:6:25:6:25 | x |
| tst2.js:6:7:6:30 | p |
@@ -108,10 +106,6 @@ edges
| promises.js:5:3:5:59 | new Pro ... .data)) | promises.js:6:11:6:11 | x |
| promises.js:5:44:5:57 | req.query.data | promises.js:5:3:5:59 | new Pro ... .data)) |
| promises.js:5:44:5:57 | req.query.data | promises.js:5:3:5:59 | new Pro ... .data)) |
| promises.js:5:44:5:57 | req.query.data | promises.js:6:11:6:11 | x |
| promises.js:5:44:5:57 | req.query.data | promises.js:6:11:6:11 | x |
| promises.js:6:11:6:11 | x | promises.js:6:25:6:25 | x |
| promises.js:6:11:6:11 | x | promises.js:6:25:6:25 | x |
| promises.js:6:11:6:11 | x | promises.js:6:25:6:25 | x |
| promises.js:6:11:6:11 | x | promises.js:6:25:6:25 | x |
| tst2.js:6:7:6:30 | p | tst2.js:7:12:7:12 | p |