Files
codeql/csharp/ql/test/query-tests/Security Features/CWE-090/LDAPInjection.expected
Tom Hvitved 78ddb37a8c C#: Track type information in data flow
This commit adds type information to data flow paths, by mapping node types onto
the smaller set of GVN types, and implementing `ppReprType()`.

The effect is a mere change in `DataFlow::PathNode::toString()`; no type-based
pruning is done yet.
2019-12-10 15:46:28 +01:00

23 lines
3.2 KiB
Plaintext

edges
| LDAPInjection.cs:13:27:13:49 | access to property QueryString : NameValueCollection | LDAPInjection.cs:16:54:16:78 | ... + ... |
| LDAPInjection.cs:13:27:13:49 | access to property QueryString : NameValueCollection | LDAPInjection.cs:18:21:18:45 | ... + ... |
| LDAPInjection.cs:13:27:13:49 | access to property QueryString : NameValueCollection | LDAPInjection.cs:25:21:25:45 | ... + ... |
| LDAPInjection.cs:13:27:13:49 | access to property QueryString : NameValueCollection | LDAPInjection.cs:26:53:26:77 | ... + ... |
| LDAPInjection.cs:13:27:13:49 | access to property QueryString : NameValueCollection | LDAPInjection.cs:29:48:29:70 | ... + ... |
| LDAPInjection.cs:13:27:13:49 | access to property QueryString : NameValueCollection | LDAPInjection.cs:31:20:31:42 | ... + ... |
nodes
| LDAPInjection.cs:13:27:13:49 | access to property QueryString : NameValueCollection | semmle.label | access to property QueryString : NameValueCollection |
| LDAPInjection.cs:16:54:16:78 | ... + ... | semmle.label | ... + ... |
| LDAPInjection.cs:18:21:18:45 | ... + ... | semmle.label | ... + ... |
| LDAPInjection.cs:25:21:25:45 | ... + ... | semmle.label | ... + ... |
| LDAPInjection.cs:26:53:26:77 | ... + ... | semmle.label | ... + ... |
| LDAPInjection.cs:29:48:29:70 | ... + ... | semmle.label | ... + ... |
| LDAPInjection.cs:31:20:31:42 | ... + ... | semmle.label | ... + ... |
#select
| LDAPInjection.cs:16:54:16:78 | ... + ... | LDAPInjection.cs:13:27:13:49 | access to property QueryString : NameValueCollection | LDAPInjection.cs:16:54:16:78 | ... + ... | $@ flows to here and is used in an LDAP query. | LDAPInjection.cs:13:27:13:49 | access to property QueryString | User-provided value |
| LDAPInjection.cs:18:21:18:45 | ... + ... | LDAPInjection.cs:13:27:13:49 | access to property QueryString : NameValueCollection | LDAPInjection.cs:18:21:18:45 | ... + ... | $@ flows to here and is used in an LDAP query. | LDAPInjection.cs:13:27:13:49 | access to property QueryString | User-provided value |
| LDAPInjection.cs:25:21:25:45 | ... + ... | LDAPInjection.cs:13:27:13:49 | access to property QueryString : NameValueCollection | LDAPInjection.cs:25:21:25:45 | ... + ... | $@ flows to here and is used in an LDAP query. | LDAPInjection.cs:13:27:13:49 | access to property QueryString | User-provided value |
| LDAPInjection.cs:26:53:26:77 | ... + ... | LDAPInjection.cs:13:27:13:49 | access to property QueryString : NameValueCollection | LDAPInjection.cs:26:53:26:77 | ... + ... | $@ flows to here and is used in an LDAP query. | LDAPInjection.cs:13:27:13:49 | access to property QueryString | User-provided value |
| LDAPInjection.cs:29:48:29:70 | ... + ... | LDAPInjection.cs:13:27:13:49 | access to property QueryString : NameValueCollection | LDAPInjection.cs:29:48:29:70 | ... + ... | $@ flows to here and is used in an LDAP query. | LDAPInjection.cs:13:27:13:49 | access to property QueryString | User-provided value |
| LDAPInjection.cs:31:20:31:42 | ... + ... | LDAPInjection.cs:13:27:13:49 | access to property QueryString : NameValueCollection | LDAPInjection.cs:31:20:31:42 | ... + ... | $@ flows to here and is used in an LDAP query. | LDAPInjection.cs:13:27:13:49 | access to property QueryString | User-provided value |