mirror of
https://github.com/github/codeql.git
synced 2026-08-03 17:03:02 +02:00
cf28c32fd8
The shared CFG library overrides ControlFlowNode.toString() as 'final' (shared/controlflow/codeql/controlflow/Cfg.qll:1217), so the legacy 'ControlFlowNode for X' prefix is gone — the new toString returns just 'X' for normal nodes and 'After X' for after-nodes. This produces a large cosmetic diff in test expected files with no semantic change. Mass-rebless 78 .expected files whose actual output differs from the checked-in expected only by this rename. Each file was verified to be identical after normalising 'ControlFlowNode for ' and 'After ' away from both sides. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
31 lines
3.5 KiB
Plaintext
31 lines
3.5 KiB
Plaintext
edges
|
|
| unsafe_deserialization.py:8:26:8:32 | After ImportMember | unsafe_deserialization.py:8:26:8:32 | request | provenance | |
|
|
| unsafe_deserialization.py:8:26:8:32 | request | unsafe_deserialization.py:14:15:14:21 | request | provenance | |
|
|
| unsafe_deserialization.py:14:5:14:11 | payload | unsafe_deserialization.py:15:18:15:24 | payload | provenance | |
|
|
| unsafe_deserialization.py:14:5:14:11 | payload | unsafe_deserialization.py:16:15:16:21 | payload | provenance | |
|
|
| unsafe_deserialization.py:14:5:14:11 | payload | unsafe_deserialization.py:18:19:18:25 | payload | provenance | |
|
|
| unsafe_deserialization.py:14:5:14:11 | payload | unsafe_deserialization.py:21:16:21:22 | payload | provenance | |
|
|
| unsafe_deserialization.py:14:5:14:11 | payload | unsafe_deserialization.py:24:24:24:30 | payload | provenance | |
|
|
| unsafe_deserialization.py:14:15:14:21 | request | unsafe_deserialization.py:14:15:14:26 | After Attribute | provenance | AdditionalTaintStep |
|
|
| unsafe_deserialization.py:14:15:14:26 | After Attribute | unsafe_deserialization.py:14:15:14:41 | After Attribute() | provenance | dict.get |
|
|
| unsafe_deserialization.py:14:15:14:41 | After Attribute() | unsafe_deserialization.py:14:5:14:11 | payload | provenance | |
|
|
nodes
|
|
| unsafe_deserialization.py:8:26:8:32 | After ImportMember | semmle.label | After ImportMember |
|
|
| unsafe_deserialization.py:8:26:8:32 | request | semmle.label | request |
|
|
| unsafe_deserialization.py:14:5:14:11 | payload | semmle.label | payload |
|
|
| unsafe_deserialization.py:14:15:14:21 | request | semmle.label | request |
|
|
| unsafe_deserialization.py:14:15:14:26 | After Attribute | semmle.label | After Attribute |
|
|
| unsafe_deserialization.py:14:15:14:41 | After Attribute() | semmle.label | After Attribute() |
|
|
| unsafe_deserialization.py:15:18:15:24 | payload | semmle.label | payload |
|
|
| unsafe_deserialization.py:16:15:16:21 | payload | semmle.label | payload |
|
|
| unsafe_deserialization.py:18:19:18:25 | payload | semmle.label | payload |
|
|
| unsafe_deserialization.py:21:16:21:22 | payload | semmle.label | payload |
|
|
| unsafe_deserialization.py:24:24:24:30 | payload | semmle.label | payload |
|
|
subpaths
|
|
#select
|
|
| unsafe_deserialization.py:15:18:15:24 | payload | unsafe_deserialization.py:8:26:8:32 | After ImportMember | unsafe_deserialization.py:15:18:15:24 | payload | Unsafe deserialization depends on a $@. | unsafe_deserialization.py:8:26:8:32 | After ImportMember | user-provided value |
|
|
| unsafe_deserialization.py:16:15:16:21 | payload | unsafe_deserialization.py:8:26:8:32 | After ImportMember | unsafe_deserialization.py:16:15:16:21 | payload | Unsafe deserialization depends on a $@. | unsafe_deserialization.py:8:26:8:32 | After ImportMember | user-provided value |
|
|
| unsafe_deserialization.py:18:19:18:25 | payload | unsafe_deserialization.py:8:26:8:32 | After ImportMember | unsafe_deserialization.py:18:19:18:25 | payload | Unsafe deserialization depends on a $@. | unsafe_deserialization.py:8:26:8:32 | After ImportMember | user-provided value |
|
|
| unsafe_deserialization.py:21:16:21:22 | payload | unsafe_deserialization.py:8:26:8:32 | After ImportMember | unsafe_deserialization.py:21:16:21:22 | payload | Unsafe deserialization depends on a $@. | unsafe_deserialization.py:8:26:8:32 | After ImportMember | user-provided value |
|
|
| unsafe_deserialization.py:24:24:24:30 | payload | unsafe_deserialization.py:8:26:8:32 | After ImportMember | unsafe_deserialization.py:24:24:24:30 | payload | Unsafe deserialization depends on a $@. | unsafe_deserialization.py:8:26:8:32 | After ImportMember | user-provided value |
|