Owen Mansel-Chan
4a7afb7aeb
Add data flow consistency test output
2026-06-30 09:35:19 +01:00
Owen Mansel-Chan
0a737c97f3
Expand log.slog models and add more tests
2026-06-30 08:01:06 +01:00
Owen Mansel-Chan
ac618e1cb2
Expand FileNameSource for stored xss
2026-06-25 22:50:21 +01:00
Owen Mansel-Chan
587f9c24ed
Fix inline test expectations comments
2026-06-25 18:11:03 +01:00
Owen Mansel-Chan
07cf89568f
Test CFG for function epilogue (read-result nodes and calls to defered functions)
2026-06-20 22:04:45 +01:00
Owen Mansel-Chan
42ebe56023
Make all lines in logging tests reachable
2026-06-20 22:04:43 +01:00
Owen Mansel-Chan
fc06aa1a32
Update expected data flow consistency results
2026-06-18 14:54:19 +01:00
Owen Mansel-Chan
2d34b0be1b
Merge branch 'main' into copilot/make-go-use-ssa-library
2026-06-18 14:09:20 +01:00
sauyon
b7ef551b52
Address review: exercise variadic args/attrs in slog Log/LogAttrs tests
...
Copilot review on #22004 : the Log/LogAttrs test cases didn't pass any
variadic args/attrs, so the Argument[..3] portion of the sink range was
untested. Pass an ...any arg to slog.Log/Logger.Log and a slog.Attr to
slog.LogAttrs/Logger.LogAttrs, with inline expectations asserting they're
captured as logged components.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-17 20:27:00 -07:00
sauyon
00427d204c
Go: Model log/slog as a logging sink
...
The standard-library structured logger `log/slog` (Go 1.21+) was not
modeled, so `go/log-injection` and `go/clear-text-logging` were blind to
any code that logs through it.
Model its logging functions and `*slog.Logger` methods — `Debug`, `Info`,
`Warn`, `Error`, their `Context` variants, and `Log`/`LogAttrs` — as
`log-injection` sinks (the kind that feeds `LoggerCall`, powering both
queries). Adds `log/slog` cases to the `LoggerCall` library test.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-17 20:02:29 -07:00
Owen Mansel-Chan
1154db4f86
Merge pull request #21957 from owen-mc/go/fix-result-node
...
Go: fix `DataFlow::ResultNode` and some related things
2026-06-17 12:20:27 +01:00
Owen Mansel-Chan
6161922ba4
Merge pull request #21940 from owen-mc/go/unhandled-writable-file-close
...
Go: Improve precision of `go/unhandled-writable-file-close`
2026-06-17 10:58:08 +01:00
Owen Mansel-Chan
0dc95deca4
Test changes to investigate
2026-06-12 22:21:05 +01:00
Owen Mansel-Chan
7a5219f06e
Improve SSA tests for variables in closures
2026-06-12 22:21:00 +01:00
Owen Mansel-Chan
0b493c30cc
Preemptively change toString() for SSA classes
2026-06-12 22:20:51 +01:00
Owen Mansel-Chan
b4a9689341
Convert .qlref test to inline expectations
2026-06-11 07:15:54 +02:00
Owen Mansel-Chan
6a8e20a0c8
Fix pre-existing whitespace issues in go test files
2026-06-11 07:15:09 +02:00
Owen Mansel-Chan
4c411bbcb5
Convert hand-rolled inline expectations test
2026-06-11 07:13:48 +02:00
Owen Mansel-Chan
f4f17b01c1
Fix result node and remove SPURIOUS test result
2026-06-09 12:19:56 +02:00
Owen Mansel-Chan
1c47084479
Add result node test with SPURIOUS result
2026-06-09 12:19:51 +02:00
Owen Mansel-Chan
c241049384
Add control flow test for result read steps
2026-06-09 12:19:49 +02:00
Owen Mansel-Chan
c170002fb1
Update test output
2026-06-04 13:52:05 +01:00
Owen Mansel-Chan
05e21adc53
Accept test changes
2026-06-04 13:09:07 +01:00
Owen Mansel-Chan
59908124c1
Add test showing limits of DeferStmt in CFG
...
There are paths to the exit of the function which go through the defer
statement and paths which don't, so we add an optional call to the
deferred function. This causes FPs in the query as it stands.
2026-06-04 12:21:38 +01:00
Owen Mansel-Chan
d55ff83568
Merge pull request #21269 from owen-mc/go/improve-tests-for-varargs-flow
...
Go: improve tests for varargs flow
2026-06-03 12:39:46 +01:00
Owen Mansel-Chan
9dbe9adb00
Update tests
2026-06-02 09:34:03 +01:00
Owen Mansel-Chan
e6e8e3d005
Taint doesn't flow through panicking functions
2026-06-02 01:31:44 +01:00
Owen Mansel-Chan
adc9b7714b
Accept changed test output
2026-06-02 00:57:06 +01:00
Owen Mansel-Chan
e706c5f444
Improve test for non-returning fns
2026-06-02 00:56:12 +01:00
Owen Mansel-Chan
45b1253b23
Improve glog and klog tests
2026-06-02 00:16:21 +01:00
Owen Mansel-Chan
f3e3647209
Improve noretFunctions test
2026-06-02 00:16:17 +01:00
Owen Mansel-Chan
f6135b70ea
Remove global function step from local flow
2026-04-16 11:15:01 +01:00
Owen Mansel-Chan
b8b841cfba
Add overlay[loca] in 4 more tests
2026-03-13 16:19:00 +00:00
Owen Mansel-Chan
e9df9147ad
Add overlay annotations in 4 PrintAst tests
2026-03-13 15:03:05 +00:00
Owen Mansel-Chan
d4ba2d68f9
Go: Inline expectation should have space after $
...
This was a regex-find-replace from `// \$(?! )` (using a negative lookahead) to `// $ `.
2026-03-04 12:44:57 +00:00
Owen Mansel-Chan
e1bddd9365
Model newly added functions
2026-02-10 22:32:30 +00:00
Owen Mansel-Chan
22e9c212d6
Add failing tests for newly added functions
2026-02-10 22:32:28 +00:00
Owen Mansel-Chan
26ef33212d
Test builtins like standard library
2026-02-10 22:32:27 +00:00
Owen Mansel-Chan
57ce0b3d51
Accept data flow consistency result
2026-02-05 22:28:54 +00:00
Owen Mansel-Chan
408ba2e139
(Misc) Delete spuriously committed binary file
2026-02-04 13:41:14 +00:00
Owen Mansel-Chan
7632bdba88
(Misc) fix variable names
2026-02-04 13:40:52 +00:00
Owen Mansel-Chan
4b830c1864
Test varargs flow with models-as-data
2026-02-04 13:40:33 +00:00
Owen Mansel-Chan
d6c8767647
Test flow out of varargs parameter in function model
2026-02-04 13:40:01 +00:00
Owen Mansel-Chan
ec815397a2
Test flow out of varargs parameter in source function
2026-02-04 13:38:48 +00:00
Owen Mansel-Chan
b58e88291e
Remove redundant import
2026-01-14 11:50:52 +00:00
Owen Mansel-Chan
93d7c5c7ef
Remove redundant supertypes
2026-01-14 11:50:44 +00:00
Owen Mansel-Chan
1cd0698453
Fix test for reflected xss sanitizer
...
It used to pass even without ErrorSanitizer because `cookie` is already
sanitized.
2026-01-14 11:50:08 +00:00
Owen Mansel-Chan
9d5e5b0c8a
Add post-processing to Beego tests
2026-01-14 11:50:06 +00:00
Owen Mansel-Chan
a20c8cfd52
Add post-update nodes for implicit field read nodes
2025-12-04 12:00:02 +00:00
Owen Mansel-Chan
9bf20702c6
Remove identity steps
2025-12-04 11:59:58 +00:00
