Files
codeql/python/ql/test/library-tests/taint/general/TestVar.expected
Mark Shannon 9d6df78d44 Python: Dataflow: Remove IterationDefinition ESSA definition and add iteration assignment to ESSA assignment definition.
Enhance points-to and taint-tracking to add operational step sequence to next(iter(seq)) in for statement.
2019-06-21 15:55:27 +01:00

194 lines
14 KiB
Plaintext

| carrier.py:4 | arg_0 | carrier.py:4 | Taint explicit.carrier | arg |
| carrier.py:4 | arg_0 | carrier.py:4 | Taint simple.test | arg |
| carrier.py:5 | self_1 | carrier.py:5 | Attribute 'attr' taint explicit.carrier | self |
| carrier.py:5 | self_1 | carrier.py:5 | Attribute 'attr' taint simple.test | self |
| carrier.py:13 | arg_0 | carrier.py:13 | Attribute 'attr' taint simple.test | arg |
| carrier.py:13 | arg_0 | carrier.py:13 | Taint explicit.carrier | arg |
| carrier.py:17 | c_0 | carrier.py:17 | Attribute 'attr' taint simple.test | ImplicitCarrier() |
| carrier.py:21 | c_0 | carrier.py:21 | Taint explicit.carrier | TAINT_CARRIER_SOURCE |
| carrier.py:22 | c_1 | carrier.py:21 | Taint explicit.carrier | TAINT_CARRIER_SOURCE |
| carrier.py:25 | c_0 | carrier.py:25 | Attribute 'attr' taint simple.test | hub() |
| carrier.py:29 | c_0 | carrier.py:29 | Taint explicit.carrier | hub() |
| carrier.py:30 | c_1 | carrier.py:29 | Taint explicit.carrier | hub() |
| carrier.py:33 | c_0 | carrier.py:33 | Attribute 'attr' taint explicit.carrier | ImplicitCarrier() |
| carrier.py:34 | x_0 | carrier.py:34 | Taint explicit.carrier | Attribute |
| carrier.py:35 | x_1 | carrier.py:34 | Taint explicit.carrier | Attribute |
| deep.py:2 | arg_0 | deep.py:2 | Taint simple.test | arg |
| deep.py:5 | arg_0 | deep.py:5 | Taint simple.test | arg |
| deep.py:6 | arg_1 | deep.py:5 | Taint simple.test | arg |
| deep.py:8 | arg_0 | deep.py:8 | Taint simple.test | arg |
| deep.py:9 | arg_1 | deep.py:8 | Taint simple.test | arg |
| deep.py:11 | arg_0 | deep.py:11 | Taint simple.test | arg |
| deep.py:12 | arg_1 | deep.py:11 | Taint simple.test | arg |
| deep.py:14 | arg_0 | deep.py:14 | Taint simple.test | arg |
| deep.py:15 | arg_1 | deep.py:14 | Taint simple.test | arg |
| deep.py:17 | arg_0 | deep.py:17 | Taint simple.test | arg |
| deep.py:18 | arg_1 | deep.py:17 | Taint simple.test | arg |
| deep.py:20 | x_1 | deep.py:20 | Taint simple.test | f6() |
| module.py:3 | dangerous_0 | module.py:3 | Taint simple.test | SOURCE |
| rockpaperscissors.py:3 | arg_0 | rockpaperscissors.py:3 | Taint scissors | arg |
| rockpaperscissors.py:6 | arg_0 | rockpaperscissors.py:6 | Taint paper | arg |
| rockpaperscissors.py:6 | arg_0 | rockpaperscissors.py:6 | Taint rock | arg |
| rockpaperscissors.py:6 | arg_0 | rockpaperscissors.py:6 | Taint scissors | arg |
| rockpaperscissors.py:9 | arg_0 | rockpaperscissors.py:9 | Taint paper | arg |
| rockpaperscissors.py:9 | arg_0 | rockpaperscissors.py:9 | Taint scissors | arg |
| rockpaperscissors.py:19 | x_0 | rockpaperscissors.py:19 | Taint rock | ROCK |
| rockpaperscissors.py:20 | x_1 | rockpaperscissors.py:19 | Taint rock | ROCK |
| rockpaperscissors.py:20 | y_0 | rockpaperscissors.py:20 | Taint scissors | Attribute() |
| rockpaperscissors.py:21 | y_1 | rockpaperscissors.py:20 | Taint scissors | Attribute() |
| rockpaperscissors.py:24 | x_0 | rockpaperscissors.py:24 | Taint rock | ROCK |
| rockpaperscissors.py:25 | x_1 | rockpaperscissors.py:24 | Taint rock | ROCK |
| rockpaperscissors.py:25 | y_0 | rockpaperscissors.py:25 | Taint paper | Attribute() |
| rockpaperscissors.py:26 | y_1 | rockpaperscissors.py:25 | Taint paper | Attribute() |
| rockpaperscissors.py:29 | x_0 | rockpaperscissors.py:29 | Taint scissors | SCISSORS |
| rockpaperscissors.py:30 | x_1 | rockpaperscissors.py:29 | Taint scissors | SCISSORS |
| rockpaperscissors.py:30 | y_0 | rockpaperscissors.py:30 | Taint paper | Attribute() |
| rockpaperscissors.py:31 | x_2 | rockpaperscissors.py:29 | Taint scissors | SCISSORS |
| rockpaperscissors.py:32 | y_1 | rockpaperscissors.py:30 | Taint paper | Attribute() |
| sanitizer.py:3 | arg_0 | sanitizer.py:3 | Taint Command injection | arg |
| sanitizer.py:3 | arg_0 | sanitizer.py:3 | Taint SQL injection | arg |
| sanitizer.py:5 | arg_0 | sanitizer.py:5 | Taint Command injection | arg |
| sanitizer.py:5 | arg_0 | sanitizer.py:5 | Taint SQL injection | arg |
| sanitizer.py:8 | x_5 | sanitizer.py:9 | Taint Command injection | user_input() |
| sanitizer.py:8 | x_5 | sanitizer.py:9 | Taint SQL injection | user_input() |
| sanitizer.py:9 | x_0 | sanitizer.py:9 | Taint Command injection | user_input() |
| sanitizer.py:9 | x_0 | sanitizer.py:9 | Taint SQL injection | user_input() |
| sanitizer.py:11 | x_1 | sanitizer.py:9 | Taint Command injection | user_input() |
| sanitizer.py:11 | x_2 | sanitizer.py:9 | Taint Command injection | user_input() |
| sanitizer.py:13 | x_3 | sanitizer.py:9 | Taint Command injection | user_input() |
| sanitizer.py:13 | x_3 | sanitizer.py:9 | Taint SQL injection | user_input() |
| sanitizer.py:13 | x_4 | sanitizer.py:9 | Taint Command injection | user_input() |
| sanitizer.py:13 | x_4 | sanitizer.py:9 | Taint SQL injection | user_input() |
| sanitizer.py:15 | x_5 | sanitizer.py:16 | Taint Command injection | user_input() |
| sanitizer.py:15 | x_5 | sanitizer.py:16 | Taint SQL injection | user_input() |
| sanitizer.py:16 | x_0 | sanitizer.py:16 | Taint Command injection | user_input() |
| sanitizer.py:16 | x_0 | sanitizer.py:16 | Taint SQL injection | user_input() |
| sanitizer.py:18 | x_1 | sanitizer.py:16 | Taint SQL injection | user_input() |
| sanitizer.py:18 | x_2 | sanitizer.py:16 | Taint SQL injection | user_input() |
| sanitizer.py:20 | x_3 | sanitizer.py:16 | Taint Command injection | user_input() |
| sanitizer.py:20 | x_3 | sanitizer.py:16 | Taint SQL injection | user_input() |
| sanitizer.py:20 | x_4 | sanitizer.py:16 | Taint Command injection | user_input() |
| sanitizer.py:20 | x_4 | sanitizer.py:16 | Taint SQL injection | user_input() |
| sanitizer.py:23 | x_5 | sanitizer.py:24 | Taint Command injection | user_input() |
| sanitizer.py:23 | x_5 | sanitizer.py:24 | Taint SQL injection | user_input() |
| sanitizer.py:24 | x_0 | sanitizer.py:24 | Taint Command injection | user_input() |
| sanitizer.py:24 | x_0 | sanitizer.py:24 | Taint SQL injection | user_input() |
| sanitizer.py:26 | x_1 | sanitizer.py:24 | Taint Command injection | user_input() |
| sanitizer.py:26 | x_1 | sanitizer.py:24 | Taint SQL injection | user_input() |
| sanitizer.py:26 | x_2 | sanitizer.py:24 | Taint Command injection | user_input() |
| sanitizer.py:26 | x_2 | sanitizer.py:24 | Taint SQL injection | user_input() |
| sanitizer.py:28 | x_3 | sanitizer.py:24 | Taint Command injection | user_input() |
| sanitizer.py:28 | x_3 | sanitizer.py:24 | Taint SQL injection | user_input() |
| sanitizer.py:28 | x_4 | sanitizer.py:24 | Taint Command injection | user_input() |
| sanitizer.py:28 | x_4 | sanitizer.py:24 | Taint SQL injection | user_input() |
| sanitizer.py:30 | x_5 | sanitizer.py:31 | Taint Command injection | user_input() |
| sanitizer.py:30 | x_5 | sanitizer.py:31 | Taint SQL injection | user_input() |
| sanitizer.py:31 | x_0 | sanitizer.py:31 | Taint Command injection | user_input() |
| sanitizer.py:31 | x_0 | sanitizer.py:31 | Taint SQL injection | user_input() |
| sanitizer.py:33 | x_1 | sanitizer.py:31 | Taint Command injection | user_input() |
| sanitizer.py:33 | x_1 | sanitizer.py:31 | Taint SQL injection | user_input() |
| sanitizer.py:33 | x_2 | sanitizer.py:31 | Taint Command injection | user_input() |
| sanitizer.py:33 | x_2 | sanitizer.py:31 | Taint SQL injection | user_input() |
| sanitizer.py:35 | x_3 | sanitizer.py:31 | Taint Command injection | user_input() |
| sanitizer.py:35 | x_3 | sanitizer.py:31 | Taint SQL injection | user_input() |
| sanitizer.py:35 | x_4 | sanitizer.py:31 | Taint Command injection | user_input() |
| sanitizer.py:35 | x_4 | sanitizer.py:31 | Taint SQL injection | user_input() |
| test.py:6 | s_0 | test.py:6 | Taint simple.test | SOURCE |
| test.py:7 | s_1 | test.py:6 | Taint simple.test | SOURCE |
| test.py:12 | arg_0 | test.py:12 | Taint simple.test | arg |
| test.py:13 | arg_1 | test.py:12 | Taint simple.test | arg |
| test.py:16 | t_0 | test.py:16 | Taint simple.test | source() |
| test.py:17 | t_1 | test.py:16 | Taint simple.test | source() |
| test.py:20 | t_0 | test.py:20 | Taint simple.test | SOURCE |
| test.py:21 | t_1 | test.py:20 | Taint simple.test | SOURCE |
| test.py:24 | t_0 | test.py:24 | Taint simple.test | source() |
| test.py:25 | t_1 | test.py:24 | Taint simple.test | source() |
| test.py:31 | t_2 | test.py:31 | Taint simple.test | SOURCE |
| test.py:37 | t_0 | test.py:37 | Taint simple.test | SOURCE |
| test.py:41 | t_1 | test.py:37 | Taint simple.test | SOURCE |
| test.py:46 | arg_0 | test.py:46 | Taint simple.test | arg |
| test.py:47 | arg_1 | test.py:46 | Taint simple.test | arg |
| test.py:49 | arg_0 | test.py:49 | Taint simple.test | arg |
| test.py:49 | arg_2 | test.py:49 | Taint simple.test | arg |
| test.py:51 | arg_1 | test.py:49 | Taint simple.test | arg |
| test.py:54 | t_0 | test.py:54 | Taint simple.test | source2() |
| test.py:55 | t_1 | test.py:54 | Taint simple.test | source2() |
| test.py:62 | t_1 | test.py:62 | Taint simple.test | SOURCE |
| test.py:63 | t_2 | test.py:62 | Taint simple.test | SOURCE |
| test.py:67 | t_0 | test.py:67 | Taint simple.test | SOURCE |
| test.py:70 | t_2 | test.py:67 | Taint simple.test | SOURCE |
| test.py:72 | arg_0 | test.py:72 | Attribute 'x' taint simple.test | arg |
| test.py:72 | arg_0 | test.py:72 | Taint basic.custom | arg |
| test.py:72 | arg_0 | test.py:72 | Taint simple.test | arg |
| test.py:76 | t_0 | test.py:76 | Taint simple.test | SOURCE |
| test.py:77 | t_1 | test.py:77 | Taint simple.test | hub() |
| test.py:78 | t_2 | test.py:77 | Taint simple.test | hub() |
| test.py:85 | module_0 | test.py:85 | Attribute 'dangerous' taint simple.test | ImportExpr |
| test.py:87 | module_1 | test.py:85 | Attribute 'dangerous' taint simple.test | ImportExpr |
| test.py:88 | t_0 | test.py:88 | Taint simple.test | Attribute |
| test.py:89 | t_1 | test.py:88 | Taint simple.test | Attribute |
| test.py:91 | module_2 | test.py:85 | Attribute 'dangerous' taint simple.test | ImportExpr |
| test.py:95 | module_3 | test.py:85 | Attribute 'dangerous' taint simple.test | ImportExpr |
| test.py:99 | module_4 | test.py:85 | Attribute 'dangerous' taint simple.test | ImportExpr |
| test.py:100 | t_0 | test.py:100 | Taint simple.test | Attribute() |
| test.py:101 | t_1 | test.py:100 | Taint simple.test | Attribute() |
| test.py:105 | arg_0 | test.py:105 | Attribute 'x' taint simple.test | arg |
| test.py:108 | module_5 | test.py:85 | Attribute 'dangerous' taint simple.test | ImportExpr |
| test.py:110 | t_1 | test.py:110 | Attribute 'x' taint simple.test | t |
| test.py:113 | module_6 | test.py:85 | Attribute 'dangerous' taint simple.test | ImportExpr |
| test.py:115 | t_1 | test.py:115 | Attribute 'x' taint simple.test | t |
| test.py:116 | t_2 | test.py:116 | Attribute 'x' taint simple.test | hub() |
| test.py:117 | t_3 | test.py:116 | Attribute 'x' taint simple.test | hub() |
| test.py:120 | t_0 | test.py:120 | Taint basic.custom | CUSTOM_SOURCE |
| test.py:121 | t_1 | test.py:121 | Taint basic.custom | hub() |
| test.py:122 | t_2 | test.py:121 | Taint basic.custom | hub() |
| test.py:126 | t_0 | test.py:126 | Taint basic.custom | CUSTOM_SOURCE |
| test.py:128 | t_2 | test.py:128 | Taint simple.test | SOURCE |
| test.py:130 | t_1 | test.py:126 | Taint basic.custom | CUSTOM_SOURCE |
| test.py:132 | t_3 | test.py:128 | Taint simple.test | SOURCE |
| test.py:136 | t_0 | test.py:136 | Taint basic.custom | CUSTOM_SOURCE |
| test.py:138 | t_2 | test.py:138 | Taint simple.test | SOURCE |
| test.py:140 | t_3 | test.py:138 | Taint simple.test | SOURCE |
| test.py:142 | t_1 | test.py:136 | Taint basic.custom | CUSTOM_SOURCE |
| test.py:146 | t_0 | test.py:146 | Taint basic.custom | CUSTOM_SOURCE |
| test.py:148 | t_3 | test.py:148 | Taint simple.test | SOURCE |
| test.py:149 | t_1 | test.py:149 | Taint basic.custom | TAINT_FROM_ARG() |
| test.py:151 | t_2 | test.py:149 | Taint basic.custom | TAINT_FROM_ARG() |
| test.py:155 | unsafe_0 | test.py:155 | Taint simple.test | ImportMember |
| test.py:156 | unsafe_1 | test.py:155 | Taint simple.test | ImportMember |
| test.py:159 | t_0 | test.py:159 | Taint simple.test | SOURCE |
| test.py:160 | t_1 | test.py:159 | Taint simple.test | SOURCE |
| test.py:163 | s_0 | test.py:163 | Taint simple.test | SOURCE |
| test.py:168 | l_0 | test.py:168 | Taint [simple.test] | List |
| test.py:169 | d_0 | test.py:169 | Taint {simple.test} | Dict |
| test.py:170 | l_1 | test.py:168 | Taint [simple.test] | List |
| test.py:170 | x_1 | test.py:170 | Taint [simple.test] | l |
| test.py:171 | d_1 | test.py:169 | Taint {simple.test} | Dict |
| test.py:171 | y_1 | test.py:171 | Taint {simple.test} | d |
| test.py:174 | l2_0 | test.py:174 | Taint [simple.test] | list() |
| test.py:174 | l_2 | test.py:168 | Taint [simple.test] | List |
| test.py:175 | d2_0 | test.py:175 | Taint {simple.test} | dict() |
| test.py:175 | d_2 | test.py:169 | Taint {simple.test} | Dict |
| test.py:178 | t_0 | test.py:178 | Taint simple.test | SOURCE |
| test.py:180 | t_1 | test.py:178 | Taint simple.test | SOURCE |
| test.py:180 | t_2 | test.py:178 | Taint simple.test | SOURCE |
| test.py:183 | t_3 | test.py:178 | Taint simple.test | SOURCE |
| test.py:186 | t_4 | test.py:178 | Taint simple.test | SOURCE |
| test.py:189 | t_0 | test.py:189 | Taint falsey | FALSEY |
| test.py:191 | t_1 | test.py:189 | Taint falsey | FALSEY |
| test.py:194 | t_5 | test.py:195 | Taint simple.test | SOURCE |
| test.py:195 | t_0 | test.py:195 | Taint simple.test | SOURCE |
| test.py:197 | t_1 | test.py:195 | Taint simple.test | SOURCE |
| test.py:197 | t_2 | test.py:195 | Taint simple.test | SOURCE |
| test.py:199 | t_3 | test.py:195 | Taint simple.test | SOURCE |
| test.py:199 | t_4 | test.py:195 | Taint simple.test | SOURCE |
| test.py:202 | t_0 | test.py:202 | Taint iterable.simple | ITERABLE_SOURCE |
| test.py:203 | i_1 | test.py:203 | Taint simple.test | For |
| test.py:203 | i_2 | test.py:203 | Taint simple.test | For |
| test.py:208 | seq_0 | test.py:208 | Taint [simple.test] | List |
| test.py:209 | i_1 | test.py:209 | Taint simple.test | For |
| test.py:209 | i_2 | test.py:209 | Taint simple.test | For |
| test.py:213 | x_0 | test.py:213 | Taint simple.test | For |
| test.py:213 | x_1 | test.py:213 | Taint simple.test | For |
| test.py:214 | x_2 | test.py:213 | Taint simple.test | For |