Files
codeql/csharp/ql/test/library-tests/dataflow/global/Splitting.cs

55 lines
1.0 KiB
C#

class Splitting
{
void M1(bool b, string tainted)
{
if (b)
if (tainted == null)
return;
var x = Return(tainted);
Check(x);
if (b)
Check(x);
}
static void Check<T>(T x) { }
static T Return<T>(T x) => x;
string this[string s]
{
get { return Return(s); }
set { Check(Return(value)); }
}
void M2(bool b, string tainted)
{
if (b)
if (tainted == null)
return;
dynamic d = this;
d[""] = tainted;
var x = d[tainted];
Check(x);
if (b)
Check(x);
}
void M3(bool b)
{
var s = b ? "taint source" : "not tainted";
if (b)
Check(s); // flow
else
Check(s); // no flow
}
void M4(bool b)
{
var s = b switch { true => "taint source", false => "not tainted" };
if (b)
Check(s); // flow
else
Check(s); // no flow [FALSE POSITIVE]
}
}