Files
codeql/python/ql/test/experimental/dataflow/tainttracking/defaultAdditionalTaintStep/TestTaint.expected
2020-08-26 19:39:36 +02:00

142 lines
7.6 KiB
Plaintext

| collections.py:24 | ok | test_construction | tainted_string |
| collections.py:25 | fail | test_construction | tainted_list |
| collections.py:26 | fail | test_construction | tainted_tuple |
| collections.py:27 | fail | test_construction | tainted_set |
| collections.py:28 | fail | test_construction | tainted_dict |
| collections.py:32 | fail | test_construction | list(..) |
| collections.py:33 | fail | test_construction | list(..) |
| collections.py:34 | fail | test_construction | list(..) |
| collections.py:35 | fail | test_construction | list(..) |
| collections.py:36 | fail | test_construction | list(..) |
| collections.py:38 | fail | test_construction | tuple(..) |
| collections.py:39 | fail | test_construction | set(..) |
| collections.py:40 | fail | test_construction | frozenset(..) |
| collections.py:48 | ok | test_access | tainted_list[0] |
| collections.py:49 | ok | test_access | tainted_list[x] |
| collections.py:50 | ok | test_access | tainted_list[Slice] |
| collections.py:54 | fail | test_access | a |
| collections.py:54 | fail | test_access | b |
| collections.py:54 | fail | test_access | c |
| collections.py:57 | fail | test_access | h |
| collections.py:59 | fail | test_access | i |
| collections.py:66 | ok | test_dict_access | tainted_dict["name"] |
| collections.py:67 | ok | test_dict_access | tainted_dict[x] |
| collections.py:68 | fail | test_dict_access | tainted_dict.copy() |
| collections.py:72 | fail | test_dict_access | v |
| collections.py:74 | fail | test_dict_access | v |
| collections.py:82 | fail | test_named_tuple | point[0] |
| collections.py:83 | fail | test_named_tuple | point.x |
| collections.py:87 | ok | test_named_tuple | point[1] |
| collections.py:88 | ok | test_named_tuple | point.y |
| collections.py:92 | fail | test_named_tuple | a |
| collections.py:93 | ok | test_named_tuple | b |
| collections.py:101 | fail | test_defaultdict | tainted_default_dict["name"] |
| collections.py:102 | fail | test_defaultdict | tainted_default_dict[x] |
| collections.py:103 | fail | test_defaultdict | tainted_default_dict.copy() |
| collections.py:106 | fail | test_defaultdict | v |
| collections.py:108 | fail | test_defaultdict | v |
| json.py:26 | ok | test | json.dumps(..) |
| json.py:27 | ok | test | json.loads(..) |
| json.py:34 | fail | test | tainted_filelike |
| json.py:35 | fail | test | json.load(..) |
| json.py:48 | fail | non_syntacical | dumps(..) |
| json.py:49 | fail | non_syntacical | dumps_alias(..) |
| json.py:50 | fail | non_syntacical | loads(..) |
| json.py:57 | fail | non_syntacical | tainted_filelike |
| json.py:58 | fail | non_syntacical | load(..) |
| string.py:25 | ok | str_operations | ts |
| string.py:26 | ok | str_operations | BinaryExpr |
| string.py:27 | ok | str_operations | BinaryExpr |
| string.py:28 | ok | str_operations | BinaryExpr |
| string.py:29 | ok | str_operations | ts[Slice] |
| string.py:30 | ok | str_operations | ts[Slice] |
| string.py:31 | ok | str_operations | ts[Slice] |
| string.py:32 | ok | str_operations | ts[0] |
| string.py:33 | ok | str_operations | str(..) |
| string.py:34 | ok | str_operations | bytes(..) |
| string.py:35 | ok | str_operations | unicode(..) |
| string.py:44 | ok | str_methods | ts.capitalize() |
| string.py:45 | ok | str_methods | ts.center(..) |
| string.py:46 | ok | str_methods | ts.expandtabs() |
| string.py:48 | ok | str_methods | ts.format() |
| string.py:49 | ok | str_methods | "{}".format(..) |
| string.py:50 | ok | str_methods | "{unsafe}".format(..) |
| string.py:52 | ok | str_methods | ts.join(..) |
| string.py:53 | fail | str_methods | "".join(..) |
| string.py:55 | ok | str_methods | ts.ljust(..) |
| string.py:56 | ok | str_methods | ts.lstrip() |
| string.py:57 | ok | str_methods | ts.lower() |
| string.py:59 | ok | str_methods | ts.replace(..) |
| string.py:60 | ok | str_methods | "safe".replace(..) |
| string.py:62 | ok | str_methods | ts.rjust(..) |
| string.py:63 | ok | str_methods | ts.rstrip() |
| string.py:64 | ok | str_methods | ts.strip() |
| string.py:65 | ok | str_methods | ts.swapcase() |
| string.py:66 | ok | str_methods | ts.title() |
| string.py:67 | ok | str_methods | ts.upper() |
| string.py:68 | ok | str_methods | ts.zfill(..) |
| string.py:70 | ok | str_methods | ts.encode(..) |
| string.py:71 | ok | str_methods | ts.encode(..).decode(..) |
| string.py:73 | ok | str_methods | tb.decode(..) |
| string.py:74 | ok | str_methods | tb.decode(..).encode(..) |
| string.py:77 | ok | str_methods | ts.partition(..) |
| string.py:78 | ok | str_methods | ts.rpartition(..) |
| string.py:79 | ok | str_methods | ts.rsplit(..) |
| string.py:80 | ok | str_methods | ts.split(..) |
| string.py:81 | ok | str_methods | ts.splitlines() |
| string.py:86 | ok | str_methods | "safe".replace(..) |
| string.py:88 | fail | str_methods | ts.join(..) |
| string.py:89 | fail | str_methods | ts.join(..) |
| string.py:99 | fail | non_syntactic | meth() |
| string.py:100 | fail | non_syntactic | _str(..) |
| string.py:109 | ok | percent_fmt | BinaryExpr |
| string.py:110 | ok | percent_fmt | BinaryExpr |
| string.py:111 | fail | percent_fmt | BinaryExpr |
| string.py:121 | fail | binary_decode_encode | base64.b64encode(..) |
| string.py:122 | fail | binary_decode_encode | base64.b64decode(..) |
| string.py:124 | fail | binary_decode_encode | base64.standard_b64encode(..) |
| string.py:125 | fail | binary_decode_encode | base64.standard_b64decode(..) |
| string.py:127 | fail | binary_decode_encode | base64.urlsafe_b64encode(..) |
| string.py:128 | fail | binary_decode_encode | base64.urlsafe_b64decode(..) |
| string.py:130 | fail | binary_decode_encode | base64.b32encode(..) |
| string.py:131 | fail | binary_decode_encode | base64.b32decode(..) |
| string.py:133 | fail | binary_decode_encode | base64.b16encode(..) |
| string.py:134 | fail | binary_decode_encode | base64.b16decode(..) |
| string.py:149 | fail | binary_decode_encode | base64.encodestring(..) |
| string.py:150 | fail | binary_decode_encode | base64.decodestring(..) |
| string.py:155 | fail | binary_decode_encode | quopri.encodestring(..) |
| string.py:156 | fail | binary_decode_encode | quopri.decodestring(..) |
| unpacking.py:16 | fail | unpacking | a |
| unpacking.py:16 | fail | unpacking | b |
| unpacking.py:16 | fail | unpacking | c |
| unpacking.py:22 | fail | unpacking_to_list | a |
| unpacking.py:22 | fail | unpacking_to_list | b |
| unpacking.py:22 | fail | unpacking_to_list | c |
| unpacking.py:31 | fail | nested | a1 |
| unpacking.py:31 | fail | nested | a2 |
| unpacking.py:31 | fail | nested | a3 |
| unpacking.py:31 | fail | nested | b |
| unpacking.py:31 | fail | nested | c |
| unpacking.py:35 | fail | nested | a1 |
| unpacking.py:35 | fail | nested | a2 |
| unpacking.py:35 | fail | nested | a3 |
| unpacking.py:35 | fail | nested | b |
| unpacking.py:35 | fail | nested | c |
| unpacking.py:39 | fail | nested | a1 |
| unpacking.py:39 | fail | nested | a2 |
| unpacking.py:39 | fail | nested | a3 |
| unpacking.py:39 | fail | nested | b |
| unpacking.py:39 | fail | nested | c |
| unpacking.py:46 | fail | unpack_from_set | a |
| unpacking.py:46 | fail | unpack_from_set | b |
| unpacking.py:46 | fail | unpack_from_set | c |
| unpacking.py:56 | fail | contrived_1 | a |
| unpacking.py:56 | fail | contrived_1 | b |
| unpacking.py:56 | fail | contrived_1 | c |
| unpacking.py:57 | ok | contrived_1 | d |
| unpacking.py:57 | ok | contrived_1 | e |
| unpacking.py:57 | ok | contrived_1 | f |
| unpacking.py:65 | fail | contrived_2 | a |
| unpacking.py:65 | fail | contrived_2 | b |
| unpacking.py:65 | fail | contrived_2 | c |