codeql/swift/ql/test/library-tests/dataflow/taint/libraries/ui.swift

// --- stubs ---

struct URL {}

class NSUserActivity: Hashable {
    static func == (lhs: NSUserActivity, rhs: NSUserActivity) -> Bool {
        return true;
    }

    func hash(into hasher: inout Hasher) {}
}

class UIApplicationShortcutItem {}

class UIOpenURLContext: Hashable {
    var url: URL = URL()
    var options: UIScene.OpenURLOptions = UIScene.OpenURLOptions()

    static func == (lhs: UIOpenURLContext, rhs: UIOpenURLContext) -> Bool {
        return true;
    }

    func hash(into hasher: inout Hasher) {}
}

struct CKShareMetadata {}

class UNNotificationResponse {}

class UIScene {
    class ConnectionOptions {
        var userActivities: Set<NSUserActivity> = []
        var shortcutItem: UIApplicationShortcutItem? = nil
        var urlContexts: Set<UIOpenURLContext> = []
        var handoffUserActivityType: String? = nil
        var cloudKitShareMetadata: CKShareMetadata? = nil
        var notificationResponse: UNNotificationResponse? = nil
        var sourceApplication: String? = nil
    }

    class OpenURLOptions {}
}

struct CGFloat { }

class Data {
    init<S>(_ elements: S) {}
}

class UIImage {
    init?(data: Data) { }
    init?(data: Data, scale: CGFloat) { }
}

// --- tests ---

func source(_ label: String) -> Any { return "" }
func sink(_: Any) {}

func testUIOpenURLContext() {
    let safe = UIOpenURLContext()
    let tainted = source("OpenURLContext") as! UIOpenURLContext

    sink(safe.url)
    sink(safe.options)
    sink(tainted.url) // $ tainted=OpenURLContext
    sink(tainted.options)
}

func testConnectionOptions() {
    let safe = UIScene.ConnectionOptions()
    let tainted = source("ConnectionOptions") as! UIScene.ConnectionOptions

    sink(safe.userActivities)
    sink(tainted.userActivities) // $ tainted=ConnectionOptions
    sink(safe.shortcutItem)
    sink(tainted.shortcutItem)
    sink(safe.urlContexts)
    sink(tainted.urlContexts) // $ tainted=ConnectionOptions
    sink(safe.handoffUserActivityType)
    sink(tainted.handoffUserActivityType)
    sink(safe.cloudKitShareMetadata)
    sink(tainted.cloudKitShareMetadata)
    sink(safe.notificationResponse)
    sink(tainted.notificationResponse)
    sink(safe.sourceApplication)
    sink(tainted.sourceApplication)
}

func testUIImage(scale: CGFloat) {
    let taintedData = source("UIImage") as! Data

    sink(UIImage(data: Data(0))!)
    sink(UIImage(data: Data(taintedData))!) // $ tainted=UIImage
    sink(UIImage(data: Data(0), scale: scale)!)
    sink(UIImage(data: Data(taintedData), scale: scale)!) // $ tainted=UIImage
}