mirror of
https://github.com/github/codeql.git
synced 2026-08-01 16:02:57 +02:00
1bcaa56b10
Second batch of test reblessings, capturing changes in result content (not just toString labels): - Framework taint/concept tests (fastapi, sqlalchemy, aiohttp, lxml, stdlib, django-orm): mostly gained MISSING-tainted annotations where the new dataflow no longer reaches sinks. Some are real taint regressions; left as documented failures for follow-up. - Exception-handler tests (CWE-209-StackTraceExposure, EmptyExcept, CatchingBaseException, IncorrectExceptOrder, FileNotAlwaysClosed, FindSubclass/Find, Statements/exit/UseOfExit): the no-raise shared CFG abstraction does not emit ExceptionSuccessor abrupt-completion edges from arbitrary expressions, so except-handler bodies (and their exception target Names) are statically dead. Tracked separately under cfg-modelling-exceptions. - Dataflow-path / control-flow node toString polish across the security query suite (PathInjection, CodeInjection, UnsafeUnpacking, UnsafeUsageOfClientSideEncryptionVersion, RequestWithoutValidation, ReflectedXss, CallGraph): simple-leaf nodes now stringify as their AST text instead of 'After X'. - SSA / call-graph improvements (CmpTest, CallGraph/InlineCallGraphTest): fewer SSA mismatches between new and old; two previously-MISSING tt= annotations resolved. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
7 lines
466 B
Plaintext
7 lines
466 B
Plaintext
| test.py:14:5:14:15 | basic_param | Unexpected result: def=basic_param |
|
|
| test.py:18:5:18:16 | basic_assign | Unexpected result: def=basic_assign |
|
|
| test.py:23:5:23:16 | reassignment | Unexpected result: def=reassignment |
|
|
| test.py:29:5:29:15 | if_else_phi | Unexpected result: def=if_else_phi |
|
|
| test.py:37:5:37:14 | use_global | Unexpected result: def=use_global |
|
|
| test.py:38:28:38:49 | Comment # $ use=some_undefined | Missing result: use=some_undefined |
|