5 Commits

Author	SHA1	Message	Date
Rasmus Wriedt Larsen	3af5c720cc	Python: Add test of more indirect command injection sinks	2020-09-28 11:16:52 +02:00
Rasmus Wriedt Larsen	f7f6564189	Python: Model subprocess.Popen (and helpers)	2020-09-28 11:13:04 +02:00
Rasmus Wriedt Larsen	62dc0dd263	Python: Model os.exec* os.spawn* and os.posix_spawn* ... I also had to exclude the inline expectation tests from files outside the test repo.	2020-09-28 11:05:33 +02:00
Rasmus Wriedt Larsen	c440fd0c09	Python: Adjust expectations for system command executions ... I mostly did this to show my reviewers that the tests actually run and do something ;)	2020-09-28 11:05:33 +02:00
Rasmus Wriedt Larsen	060720aae7	Python: Add tests for all SystemCommandExecution from stdlib ... Overall idea is that `test/experimental/meta/ConceptsTest.qll` will set up inline expectation tests for all the classes defined in `Concepts.qll`, so any time you model a new instance of Concepts, you simply just import that file. That makes the tests a little verbose, but allows us to share test-setup between all the different frameworks we model. Note that since the definitions of SystemCommandExecution subclasses are scattered across multieple framework modeling qll files, it think it makes the most sense to have the tests for each framework in one location. I'm not 100% convinced about if this is the right choice or not (especially when we want to write tests for sanitizers), but for now I'm going to try it out at least.	2020-09-28 11:05:32 +02:00