codeql/java/ql/test/query-tests/security/CWE-023/semmle/tests/PartialPathTraversalTest.java

import java.io.IOException;
import java.io.File;
import java.io.InputStream;
import java.io.BufferedReader;
import java.io.InputStreamReader;
import static java.io.File.separatorChar;
import java.nio.file.Files;
import java.net.Socket;


public class PartialPathTraversalTest {
    public void esapiExample(File parent) throws IOException {
        if (!dir().getCanonicalPath().startsWith(parent.getCanonicalPath())) { // $ Alert
            throw new IOException("Invalid directory: " + dir().getCanonicalPath());
        }
    }

    @SuppressWarnings("ResultOfMethodCallIgnored")
    void foo1(File parent) throws IOException {
        (dir().getCanonicalPath()).startsWith((parent.getCanonicalPath())); // $ Alert
    }

    void foo2(File parent) throws IOException {
        dir().getCanonicalPath();
        if ("potato".startsWith(parent.getCanonicalPath())) {
            System.out.println("Hello!");
        }
    }

    void foo3(File parent) throws IOException {
        String parentPath = parent.getCanonicalPath();
        if (!dir().getCanonicalPath().startsWith(parentPath)) { // $ Alert
            throw new IOException("Invalid directory: " + dir().getCanonicalPath());
        }
    }

    void foo4() throws IOException {
        if (!dir().getCanonicalPath().startsWith("/usr" + "/dir")) { // $ Alert
            throw new IOException("Invalid directory: " + dir().getCanonicalPath());
        }
    }

    void foo5(File parent) throws IOException {
        String canonicalPath = dir().getCanonicalPath();
        if (!canonicalPath.startsWith(parent.getCanonicalPath())) { // $ Alert
            throw new IOException("Invalid directory: " + dir().getCanonicalPath());
        }
    }

    void foo6(File parent) throws IOException {
        String canonicalPath = dir().getCanonicalPath();
        if (!canonicalPath.startsWith(parent.getCanonicalPath())) { // $ Alert
            throw new IOException("Invalid directory: " + dir().getCanonicalPath());
        }
        String canonicalPath2 = dir().getCanonicalPath();
        if (!canonicalPath2.startsWith(parent.getCanonicalPath())) { // $ Alert
            throw new IOException("Invalid directory: " + dir().getCanonicalPath());
        }
    }

    void foo7(File dir, File parent) throws IOException {
        String canonicalPath = dir().getCanonicalPath();
        String canonicalPath2 = dir().getCanonicalPath();
        if (!canonicalPath.startsWith(parent.getCanonicalPath())) { // $ Alert
            throw new IOException("Invalid directory: " + dir().getCanonicalPath());
        }
        if (!canonicalPath2.startsWith(parent.getCanonicalPath())) { // $ Alert
            throw new IOException("Invalid directory: " + dir().getCanonicalPath());
        }
    }

    File getChild() {
        return null;
    }

    void foo8(File parent) throws IOException {
        String canonicalPath = getChild().getCanonicalPath();
        if (!canonicalPath.startsWith(parent.getCanonicalPath())) {
            throw new IOException("Invalid directory: " + getChild().getCanonicalPath());
        }
    }

    void foo9(File parent) throws IOException {
        if (!dir().getCanonicalPath().startsWith(parent.getCanonicalPath() + File.separator)) {
            throw new IOException("Invalid directory: " + dir().getCanonicalPath());
        }
    }

    void foo10(File parent) throws IOException {
        if (!dir().getCanonicalPath().startsWith(parent.getCanonicalPath() + File.separatorChar)) {
            throw new IOException("Invalid directory: " + dir().getCanonicalPath());
        }
    }

    void foo11(File parent) throws IOException {
        String parentCanonical = parent.getCanonicalPath();
        if (!dir().getCanonicalPath().startsWith(parentCanonical)) { // $ Alert
            throw new IOException("Invalid directory: " + dir().getCanonicalPath());
        }
    }

    void foo12(File parent) throws IOException {
        String parentCanonical = parent.getCanonicalPath();
        String parentCanonical2 = parent.getCanonicalPath();
        if (!dir().getCanonicalPath().startsWith(parentCanonical)) { // $ Alert
            throw new IOException("Invalid directory: " + dir().getCanonicalPath());
        }
        if (!dir().getCanonicalPath().startsWith(parentCanonical2)) { // $ Alert
            throw new IOException("Invalid directory: " + dir().getCanonicalPath());
        }
    }

    void foo13(File parent) throws IOException {
        String parentCanonical = parent.getCanonicalPath() + File.separatorChar;
        if (!dir().getCanonicalPath().startsWith(parentCanonical)) {
            throw new IOException("Invalid directory: " + dir().getCanonicalPath());
        }
    }

    void foo14(File parent) throws IOException {
        String parentCanonical = parent.getCanonicalPath() + separatorChar;
        if (!dir().getCanonicalPath().startsWith(parentCanonical)) {
            throw new IOException("Invalid directory: " + dir().getCanonicalPath());
        }
    }

    void foo15(File dir, File parent) throws IOException {
        String parentCanonical = parent.getCanonicalPath() + File.separatorChar;
        String parentCanonical2 = parent.getCanonicalPath() + File.separatorChar;
        if (!dir().getCanonicalPath().startsWith(parentCanonical)) {
            throw new IOException("Invalid directory: " + dir().getCanonicalPath());
        }
        if (!dir().getCanonicalPath().startsWith(parentCanonical2)) {
            throw new IOException("Invalid directory: " + dir().getCanonicalPath());
        }
    }

    void foo16(File parent) throws IOException {
        String parentCanonical = parent.getCanonicalPath() + File.separator;
        if (!dir().getCanonicalPath().startsWith(parentCanonical)) {
            throw new IOException("Invalid directory: " + dir().getCanonicalPath());
        }
    }

    @SuppressWarnings({
            "IfStatementWithIdenticalBranches",
            "MismatchedStringCase",
            "UnusedAssignment",
            "ResultOfMethodCallIgnored"
    })
    void foo17(File parent, boolean branch) throws IOException {
        String parentCanonical = null;
        "test ".startsWith("somethingElse");
        if (branch) {
            parentCanonical = parent.getCanonicalPath() + File.separatorChar;
        } else {
            parentCanonical = parent.getCanonicalPath() + File.separatorChar;
        }
        if (!dir().getCanonicalPath().startsWith(parentCanonical)) {
            throw new IOException("Invalid directory: " + dir().getCanonicalPath());
        }
    }

    void foo18(File dir, File parent, boolean branch) throws IOException {
        String parentCanonical = parent.getCanonicalPath();
        if (branch) {
            parentCanonical = parent.getCanonicalPath() + File.separatorChar;
        }
        if (!dir().getCanonicalPath().startsWith(parentCanonical)) {
            throw new IOException("Invalid directory: " + dir().getCanonicalPath());
        }
    }

    void foo19(File parent) throws IOException {
        String parentCanonical = parent.getCanonicalPath() + "/potato";
        if (!dir().getCanonicalPath().startsWith(parentCanonical)) { // $ Alert
            throw new IOException("Invalid directory: " + dir().getCanonicalPath());
        }
    }

    private File cacheDir;

    InputStream foo20() {
        StringBuilder sb = new StringBuilder();
        sb.append(cacheDir.getAbsolutePath());
        for (String p : path()) {
            sb.append(File.separatorChar);
            sb.append(p);
        }
        sb.append(".gz");
        String filePath = sb.toString();
        File encodedFile = new File(filePath);
        try {
            if (!encodedFile.getCanonicalPath().startsWith(cacheDir.getCanonicalPath())) { // $ Alert
                return null;
            }
            return Files.newInputStream(encodedFile.toPath());
        } catch (Exception e) {
            return null;
        }
    }

    void foo21(File parent) throws IOException {
        String parentCanonical = parent.getCanonicalPath();
        if (!dir().getCanonicalPath().startsWith(parentCanonical + File.separator)) {
            throw new IOException("Invalid directory: " + dir().getCanonicalPath());
        }
    }

    void foo22(File dir2, File parent, boolean conditional) throws IOException {
        String canonicalPath = conditional ? dir().getCanonicalPath() : dir2.getCanonicalPath();
        if (!canonicalPath.startsWith(parent.getCanonicalPath())) { // $ Alert
            throw new IOException("Invalid directory: " + dir().getCanonicalPath());
        }
    }

    void foo23(File parent) throws IOException {
        String parentCanonical = parent.getCanonicalPath();
        if (!dir().getCanonicalPath().startsWith(parentCanonical + "/")) {
            throw new IOException("Invalid directory: " + dir().getCanonicalPath());
        }
    }

    void foo24(File parent) throws IOException {
        String parentCanonical = parent.getCanonicalPath();
        if (!dir().getCanonicalPath().startsWith(parentCanonical + '/')) {
            throw new IOException("Invalid directory: " + dir().getCanonicalPath());
        }
    }

    public void doesNotFlagOptimalSafeVersion(File parent) throws IOException {
        if (!dir().toPath().normalize().startsWith(parent.toPath())) { // Safe
            throw new IOException("Path traversal attempt: " + dir().getCanonicalPath());
        }
    }

    public void doesNotFlag() {
        "hello".startsWith("goodbye");
    }

    public void doesNotFlagBackslash(File file) throws IOException {
        // https://github.com/jenkinsci/jenkins/blob/be3cf6bffe7aa2fe2307c424fa418519f3bbd73b/core/src/main/java/hudson/util/jna/Kernel32Utils.java#L77-L77
        if (!file.getCanonicalPath().startsWith("\\\\")) {
            throw new RuntimeException("Boom");
        }
    }

    Socket sock;

    File dir() {
        try {
            BufferedReader filenameReader = new BufferedReader(new InputStreamReader(sock.getInputStream(), "UTF-8")); // $ Source
            String filename = filenameReader.readLine();
            return new File(filename);
        } catch (IOException e) {
            throw new RuntimeException("Failed to read from socket", e);
        }
    }

    String[] path() {
        return dir().getAbsolutePath().split(File.separator);
    }
}