# Here we test the case where a captured variable is being read. # All functions starting with "test_" should run and execute `print("OK")` exactly once. # This can be checked by running validTest.py. import sys import os sys.path.append(os.path.dirname(os.path.dirname((__file__)))) from testlib import * # These are defined so that we can evaluate the test code. NONSOURCE = "not a source" SOURCE = "source" def is_source(x): return x == "source" or x == b"source" or x == 42 or x == 42.0 or x == 42j def SINK(x): if is_source(x): print("OK") else: print("Unexpected flow", x) def SINK_F(x): if is_source(x): print("Unexpected flow", x) else: print("OK") # Capture the parameter of an outer function. def inParam(tainted): def captureIn1(): sinkI1 = tainted SINK(sinkI1) #$ MISSING:captured captureIn1() def captureIn2(): def m(): sinkI2 = tainted SINK(sinkI2) #$ MISSING:captured m() captureIn2() captureIn3 = lambda arg: SINK(tainted) captureIn3("") def captureIn1NotCalled(): nonSink0 = tainted SINK_F(nonSink0) def captureIn2NotCalled(): def m(): nonSink0 = tainted SINK_F(nonSink0) captureIn2NotCalled() @expects(3) def test_inParam(): inParam(SOURCE) # Capture the local variable of an outer function. def inLocal(): tainted = SOURCE def captureIn1(): sinkI1 = tainted SINK(sinkI1) #$ MISSING:captured captureIn1() def captureIn2(): def m(): sinkI2 = tainted SINK(sinkI2) #$ MISSING:captured m() captureIn2() captureIn3 = lambda arg: SINK(tainted) captureIn3("") def captureIn1NotCalled(): nonSink0 = tainted SINK_F(nonSink0) def captureIn2NotCalled(): def m(): nonSink0 = tainted SINK_F(nonSink0) captureIn2NotCalled() @expects(3) def test_inLocal(): inLocal()