Files
codeql/go/ql/test/query-tests/Security/CWE-209/StackTraceExposure.expected
Owen Mansel-Chan 3906f2560d Adjust Stack Exposure test so it passes
A minor bug in our CFG means that we evaluate the base of a
SliceExpr before the bounds. Since the bounds may have side
effects, as in this case, it would be better to evaluate them first.
But in the short term I am just adjusting the test to make it work.
2025-10-01 16:12:59 +01:00

9 lines
480 B
Plaintext

edges
| test.go:15:28:15:30 | buf [postupdate] | test.go:18:10:18:12 | buf | provenance | |
nodes
| test.go:15:28:15:30 | buf [postupdate] | semmle.label | buf [postupdate] |
| test.go:18:10:18:12 | buf | semmle.label | buf |
subpaths
#select
| test.go:18:10:18:12 | buf | test.go:15:28:15:30 | buf [postupdate] | test.go:18:10:18:12 | buf | HTTP response depends on $@ and may be exposed to an external user. | test.go:15:28:15:30 | buf [postupdate] | stack trace information |