mirror of
https://github.com/github/codeql.git
synced 2026-03-28 02:08:17 +01:00
d96ef73033
Which we seem to not handle in the current taint tracking :O f-strings needs to be Python 3 only, so enabled that test setup. I really liked the idea for having the version specific tests right next to the normal tests, so you don't have to look in test/experimental/3/dataflow/i/will/forget/to/look/here.
52 lines
1.0 KiB
Python
52 lines
1.0 KiB
Python
# Python 3 specific taint tracking for string
|
|
|
|
TAINTED_STRING = "TAINTED_STRING"
|
|
TAINTED_BYTES = b"TAINTED_BYTES"
|
|
|
|
|
|
def ensure_tainted(*args):
|
|
print("- ensure_tainted")
|
|
for i, arg in enumerate(args):
|
|
print("arg {}: {!r}".format(i, arg))
|
|
|
|
|
|
def ensure_not_tainted(*args):
|
|
print("- ensure_not_tainted")
|
|
for i, arg in enumerate(args):
|
|
print("arg {}: {!r}".format(i, arg))
|
|
|
|
|
|
# Actual tests
|
|
|
|
def binary_decode_encode():
|
|
print("\n#percent_fmt")
|
|
tb = TAINTED_BYTES
|
|
import base64
|
|
|
|
ensure_tainted(
|
|
# New in Python 3.4
|
|
base64.a85encode(tb),
|
|
base64.a85decode(base64.a85encode(tb)),
|
|
|
|
# New in Python 3.4
|
|
base64.b85encode(tb),
|
|
base64.b85decode(base64.b85encode(tb)),
|
|
|
|
# New in Python 3.1
|
|
base64.encodebytes(tb),
|
|
base64.decodebytes(base64.encodebytes(tb)),
|
|
)
|
|
|
|
|
|
def f_strings():
|
|
print("\n#f_strings")
|
|
ts = TAINTED_STRING
|
|
|
|
ensure_tainted(f"foo {ts} bar")
|
|
|
|
|
|
# Make tests runable
|
|
|
|
binary_decode_encode()
|
|
f_strings()
|