mirror of
https://github.com/github/codeql.git
synced 2026-01-27 13:23:00 +01:00
9d6df78d44
Enhance points-to and taint-tracking to add operational step sequence to next(iter(seq)) in for statement.
247 lines
14 KiB
Plaintext
247 lines
14 KiB
Plaintext
| Attribute 'attr' taint explicit.carrier | carrier.py:5 | self | carrier.py:33 |
|
|
| Attribute 'attr' taint explicit.carrier | carrier.py:33 | ImplicitCarrier() | |
|
|
| Attribute 'attr' taint explicit.carrier | carrier.py:34 | c | |
|
|
| Attribute 'attr' taint simple.test | carrier.py:5 | self | carrier.py:17 |
|
|
| Attribute 'attr' taint simple.test | carrier.py:5 | self | carrier.py:25 |
|
|
| Attribute 'attr' taint simple.test | carrier.py:13 | arg | carrier.py:25 |
|
|
| Attribute 'attr' taint simple.test | carrier.py:14 | arg | carrier.py:25 |
|
|
| Attribute 'attr' taint simple.test | carrier.py:17 | ImplicitCarrier() | |
|
|
| Attribute 'attr' taint simple.test | carrier.py:18 | c | |
|
|
| Attribute 'attr' taint simple.test | carrier.py:25 | ImplicitCarrier() | |
|
|
| Attribute 'attr' taint simple.test | carrier.py:25 | hub() | |
|
|
| Attribute 'attr' taint simple.test | carrier.py:26 | c | |
|
|
| Attribute 'dangerous' taint simple.test | test.py:85 | ImportExpr | |
|
|
| Attribute 'dangerous' taint simple.test | test.py:88 | module | |
|
|
| Attribute 'dangerous' taint simple.test | test.py:92 | module | |
|
|
| Attribute 'dangerous' taint simple.test | test.py:96 | module | |
|
|
| Attribute 'dangerous' taint simple.test | test.py:100 | module | |
|
|
| Attribute 'dangerous' taint simple.test | test.py:110 | module | |
|
|
| Attribute 'dangerous' taint simple.test | test.py:115 | module | |
|
|
| Attribute 'dangerous' taint simple.test | test.py:155 | ImportExpr | |
|
|
| Attribute 'x' taint simple.test | test.py:72 | arg | test.py:116 |
|
|
| Attribute 'x' taint simple.test | test.py:73 | arg | test.py:116 |
|
|
| Attribute 'x' taint simple.test | test.py:105 | arg | test.py:117 |
|
|
| Attribute 'x' taint simple.test | test.py:106 | arg | test.py:117 |
|
|
| Attribute 'x' taint simple.test | test.py:110 | t | |
|
|
| Attribute 'x' taint simple.test | test.py:111 | t | |
|
|
| Attribute 'x' taint simple.test | test.py:115 | t | |
|
|
| Attribute 'x' taint simple.test | test.py:116 | hub() | |
|
|
| Attribute 'x' taint simple.test | test.py:116 | t | |
|
|
| Attribute 'x' taint simple.test | test.py:117 | t | |
|
|
| Taint Command injection | sanitizer.py:3 | arg | sanitizer.py:10 |
|
|
| Taint Command injection | sanitizer.py:5 | arg | sanitizer.py:17 |
|
|
| Taint Command injection | sanitizer.py:9 | user_input() | |
|
|
| Taint Command injection | sanitizer.py:10 | x | |
|
|
| Taint Command injection | sanitizer.py:11 | x | |
|
|
| Taint Command injection | sanitizer.py:13 | x | |
|
|
| Taint Command injection | sanitizer.py:16 | user_input() | |
|
|
| Taint Command injection | sanitizer.py:17 | x | |
|
|
| Taint Command injection | sanitizer.py:20 | x | |
|
|
| Taint Command injection | sanitizer.py:24 | user_input() | |
|
|
| Taint Command injection | sanitizer.py:25 | x | |
|
|
| Taint Command injection | sanitizer.py:26 | x | |
|
|
| Taint Command injection | sanitizer.py:28 | x | |
|
|
| Taint Command injection | sanitizer.py:31 | user_input() | |
|
|
| Taint Command injection | sanitizer.py:32 | x | |
|
|
| Taint Command injection | sanitizer.py:33 | x | |
|
|
| Taint Command injection | sanitizer.py:35 | x | |
|
|
| Taint SQL injection | sanitizer.py:3 | arg | sanitizer.py:10 |
|
|
| Taint SQL injection | sanitizer.py:5 | arg | sanitizer.py:17 |
|
|
| Taint SQL injection | sanitizer.py:9 | user_input() | |
|
|
| Taint SQL injection | sanitizer.py:10 | x | |
|
|
| Taint SQL injection | sanitizer.py:13 | x | |
|
|
| Taint SQL injection | sanitizer.py:16 | user_input() | |
|
|
| Taint SQL injection | sanitizer.py:17 | x | |
|
|
| Taint SQL injection | sanitizer.py:18 | x | |
|
|
| Taint SQL injection | sanitizer.py:20 | x | |
|
|
| Taint SQL injection | sanitizer.py:24 | user_input() | |
|
|
| Taint SQL injection | sanitizer.py:25 | x | |
|
|
| Taint SQL injection | sanitizer.py:26 | x | |
|
|
| Taint SQL injection | sanitizer.py:28 | x | |
|
|
| Taint SQL injection | sanitizer.py:31 | user_input() | |
|
|
| Taint SQL injection | sanitizer.py:32 | x | |
|
|
| Taint SQL injection | sanitizer.py:33 | x | |
|
|
| Taint SQL injection | sanitizer.py:35 | x | |
|
|
| Taint [simple.test] | test.py:168 | List | |
|
|
| Taint [simple.test] | test.py:170 | l | |
|
|
| Taint [simple.test] | test.py:172 | x | |
|
|
| Taint [simple.test] | test.py:174 | l | |
|
|
| Taint [simple.test] | test.py:174 | list() | |
|
|
| Taint [simple.test] | test.py:208 | List | |
|
|
| Taint [simple.test] | test.py:209 | seq | |
|
|
| Taint [simple.test] | test.py:213 | flow_in_generator() | |
|
|
| Taint basic.custom | test.py:72 | arg | test.py:121 |
|
|
| Taint basic.custom | test.py:73 | arg | test.py:121 |
|
|
| Taint basic.custom | test.py:120 | CUSTOM_SOURCE | |
|
|
| Taint basic.custom | test.py:121 | TAINT_FROM_ARG() | |
|
|
| Taint basic.custom | test.py:121 | hub() | |
|
|
| Taint basic.custom | test.py:121 | t | |
|
|
| Taint basic.custom | test.py:122 | t | |
|
|
| Taint basic.custom | test.py:126 | CUSTOM_SOURCE | |
|
|
| Taint basic.custom | test.py:130 | t | |
|
|
| Taint basic.custom | test.py:136 | CUSTOM_SOURCE | |
|
|
| Taint basic.custom | test.py:142 | t | |
|
|
| Taint basic.custom | test.py:146 | CUSTOM_SOURCE | |
|
|
| Taint basic.custom | test.py:149 | TAINT_FROM_ARG() | |
|
|
| Taint basic.custom | test.py:149 | t | |
|
|
| Taint basic.custom | test.py:151 | t | |
|
|
| Taint explicit.carrier | carrier.py:4 | arg | carrier.py:33 |
|
|
| Taint explicit.carrier | carrier.py:5 | arg | carrier.py:33 |
|
|
| Taint explicit.carrier | carrier.py:13 | arg | carrier.py:29 |
|
|
| Taint explicit.carrier | carrier.py:14 | arg | carrier.py:29 |
|
|
| Taint explicit.carrier | carrier.py:21 | TAINT_CARRIER_SOURCE | |
|
|
| Taint explicit.carrier | carrier.py:22 | c | |
|
|
| Taint explicit.carrier | carrier.py:29 | TAINT_CARRIER_SOURCE | |
|
|
| Taint explicit.carrier | carrier.py:29 | hub() | |
|
|
| Taint explicit.carrier | carrier.py:30 | c | |
|
|
| Taint explicit.carrier | carrier.py:33 | TAINT_CARRIER_SOURCE | |
|
|
| Taint explicit.carrier | carrier.py:34 | Attribute | |
|
|
| Taint explicit.carrier | carrier.py:35 | x | |
|
|
| Taint falsey | test.py:189 | FALSEY | |
|
|
| Taint falsey | test.py:190 | t | |
|
|
| Taint iterable.simple | test.py:202 | ITERABLE_SOURCE | |
|
|
| Taint iterable.simple | test.py:203 | t | |
|
|
| Taint paper | rockpaperscissors.py:6 | arg | rockpaperscissors.py:32 |
|
|
| Taint paper | rockpaperscissors.py:9 | arg | rockpaperscissors.py:26 |
|
|
| Taint paper | rockpaperscissors.py:25 | Attribute() | |
|
|
| Taint paper | rockpaperscissors.py:26 | y | |
|
|
| Taint paper | rockpaperscissors.py:30 | Attribute() | |
|
|
| Taint paper | rockpaperscissors.py:32 | y | |
|
|
| Taint rock | rockpaperscissors.py:6 | arg | rockpaperscissors.py:16 |
|
|
| Taint rock | rockpaperscissors.py:16 | ROCK | |
|
|
| Taint rock | rockpaperscissors.py:19 | ROCK | |
|
|
| Taint rock | rockpaperscissors.py:20 | x | |
|
|
| Taint rock | rockpaperscissors.py:24 | ROCK | |
|
|
| Taint rock | rockpaperscissors.py:25 | x | |
|
|
| Taint scissors | rockpaperscissors.py:3 | arg | rockpaperscissors.py:13 |
|
|
| Taint scissors | rockpaperscissors.py:6 | arg | rockpaperscissors.py:31 |
|
|
| Taint scissors | rockpaperscissors.py:9 | arg | rockpaperscissors.py:21 |
|
|
| Taint scissors | rockpaperscissors.py:13 | SCISSORS | |
|
|
| Taint scissors | rockpaperscissors.py:20 | Attribute() | |
|
|
| Taint scissors | rockpaperscissors.py:21 | y | |
|
|
| Taint scissors | rockpaperscissors.py:25 | Attribute() | |
|
|
| Taint scissors | rockpaperscissors.py:29 | SCISSORS | |
|
|
| Taint scissors | rockpaperscissors.py:30 | x | |
|
|
| Taint scissors | rockpaperscissors.py:31 | x | |
|
|
| Taint simple.test | carrier.py:4 | arg | carrier.py:17 |
|
|
| Taint simple.test | carrier.py:4 | arg | carrier.py:25 |
|
|
| Taint simple.test | carrier.py:5 | arg | carrier.py:17 |
|
|
| Taint simple.test | carrier.py:5 | arg | carrier.py:25 |
|
|
| Taint simple.test | carrier.py:17 | SOURCE | |
|
|
| Taint simple.test | carrier.py:18 | Attribute | |
|
|
| Taint simple.test | carrier.py:22 | Attribute() | |
|
|
| Taint simple.test | carrier.py:25 | SOURCE | |
|
|
| Taint simple.test | carrier.py:30 | Attribute() | |
|
|
| Taint simple.test | carrier.py:35 | Attribute() | |
|
|
| Taint simple.test | deep.py:2 | arg | deep.py:6 from deep.py:9 from deep.py:12 from deep.py:15 from deep.py:18 from deep.py:20 |
|
|
| Taint simple.test | deep.py:3 | arg | deep.py:6 from deep.py:9 from deep.py:12 from deep.py:15 from deep.py:18 from deep.py:20 |
|
|
| Taint simple.test | deep.py:5 | arg | deep.py:9 from deep.py:12 from deep.py:15 from deep.py:18 from deep.py:20 |
|
|
| Taint simple.test | deep.py:6 | arg | deep.py:9 from deep.py:12 from deep.py:15 from deep.py:18 from deep.py:20 |
|
|
| Taint simple.test | deep.py:6 | f1() | deep.py:9 from deep.py:12 from deep.py:15 from deep.py:18 from deep.py:20 |
|
|
| Taint simple.test | deep.py:8 | arg | deep.py:12 from deep.py:15 from deep.py:18 from deep.py:20 |
|
|
| Taint simple.test | deep.py:9 | arg | deep.py:12 from deep.py:15 from deep.py:18 from deep.py:20 |
|
|
| Taint simple.test | deep.py:9 | f2() | deep.py:12 from deep.py:15 from deep.py:18 from deep.py:20 |
|
|
| Taint simple.test | deep.py:11 | arg | deep.py:15 from deep.py:18 from deep.py:20 |
|
|
| Taint simple.test | deep.py:12 | arg | deep.py:15 from deep.py:18 from deep.py:20 |
|
|
| Taint simple.test | deep.py:12 | f3() | deep.py:15 from deep.py:18 from deep.py:20 |
|
|
| Taint simple.test | deep.py:14 | arg | deep.py:18 from deep.py:20 |
|
|
| Taint simple.test | deep.py:15 | arg | deep.py:18 from deep.py:20 |
|
|
| Taint simple.test | deep.py:15 | f4() | deep.py:18 from deep.py:20 |
|
|
| Taint simple.test | deep.py:17 | arg | deep.py:20 |
|
|
| Taint simple.test | deep.py:18 | arg | deep.py:20 |
|
|
| Taint simple.test | deep.py:18 | f5() | deep.py:20 |
|
|
| Taint simple.test | deep.py:20 | SOURCE | |
|
|
| Taint simple.test | deep.py:20 | f6() | |
|
|
| Taint simple.test | deep.py:22 | x | |
|
|
| Taint simple.test | module.py:3 | SOURCE | |
|
|
| Taint simple.test | module.py:7 | SOURCE | |
|
|
| Taint simple.test | module.py:10 | SOURCE | |
|
|
| Taint simple.test | test.py:3 | SOURCE | |
|
|
| Taint simple.test | test.py:6 | SOURCE | |
|
|
| Taint simple.test | test.py:7 | s | |
|
|
| Taint simple.test | test.py:10 | SOURCE | |
|
|
| Taint simple.test | test.py:12 | arg | test.py:21 |
|
|
| Taint simple.test | test.py:12 | arg | test.py:25 |
|
|
| Taint simple.test | test.py:12 | arg | test.py:47 from test.py:55 |
|
|
| Taint simple.test | test.py:12 | arg | test.py:51 from test.py:63 |
|
|
| Taint simple.test | test.py:12 | arg | test.py:51 from test.py:70 |
|
|
| Taint simple.test | test.py:13 | arg | test.py:21 |
|
|
| Taint simple.test | test.py:13 | arg | test.py:25 |
|
|
| Taint simple.test | test.py:13 | arg | test.py:47 from test.py:55 |
|
|
| Taint simple.test | test.py:13 | arg | test.py:51 from test.py:63 |
|
|
| Taint simple.test | test.py:13 | arg | test.py:51 from test.py:70 |
|
|
| Taint simple.test | test.py:16 | source() | |
|
|
| Taint simple.test | test.py:17 | t | |
|
|
| Taint simple.test | test.py:20 | SOURCE | |
|
|
| Taint simple.test | test.py:21 | t | |
|
|
| Taint simple.test | test.py:24 | source() | |
|
|
| Taint simple.test | test.py:25 | t | |
|
|
| Taint simple.test | test.py:31 | SOURCE | |
|
|
| Taint simple.test | test.py:37 | SOURCE | |
|
|
| Taint simple.test | test.py:41 | t | |
|
|
| Taint simple.test | test.py:44 | source() | |
|
|
| Taint simple.test | test.py:46 | arg | test.py:55 |
|
|
| Taint simple.test | test.py:47 | arg | test.py:55 |
|
|
| Taint simple.test | test.py:49 | arg | test.py:63 |
|
|
| Taint simple.test | test.py:49 | arg | test.py:70 |
|
|
| Taint simple.test | test.py:51 | arg | test.py:63 |
|
|
| Taint simple.test | test.py:51 | arg | test.py:70 |
|
|
| Taint simple.test | test.py:54 | source2() | |
|
|
| Taint simple.test | test.py:55 | t | |
|
|
| Taint simple.test | test.py:62 | SOURCE | |
|
|
| Taint simple.test | test.py:63 | t | |
|
|
| Taint simple.test | test.py:67 | SOURCE | |
|
|
| Taint simple.test | test.py:70 | t | |
|
|
| Taint simple.test | test.py:72 | arg | test.py:77 |
|
|
| Taint simple.test | test.py:73 | arg | test.py:77 |
|
|
| Taint simple.test | test.py:76 | SOURCE | |
|
|
| Taint simple.test | test.py:77 | hub() | |
|
|
| Taint simple.test | test.py:77 | t | |
|
|
| Taint simple.test | test.py:78 | t | |
|
|
| Taint simple.test | test.py:88 | Attribute | |
|
|
| Taint simple.test | test.py:89 | t | |
|
|
| Taint simple.test | test.py:100 | Attribute() | |
|
|
| Taint simple.test | test.py:101 | t | |
|
|
| Taint simple.test | test.py:106 | Attribute | test.py:117 |
|
|
| Taint simple.test | test.py:110 | Attribute | |
|
|
| Taint simple.test | test.py:111 | Attribute | |
|
|
| Taint simple.test | test.py:115 | Attribute | |
|
|
| Taint simple.test | test.py:128 | SOURCE | |
|
|
| Taint simple.test | test.py:132 | t | |
|
|
| Taint simple.test | test.py:138 | SOURCE | |
|
|
| Taint simple.test | test.py:140 | t | |
|
|
| Taint simple.test | test.py:148 | SOURCE | |
|
|
| Taint simple.test | test.py:149 | t | |
|
|
| Taint simple.test | test.py:155 | ImportMember | |
|
|
| Taint simple.test | test.py:156 | unsafe | |
|
|
| Taint simple.test | test.py:159 | SOURCE | |
|
|
| Taint simple.test | test.py:160 | t | |
|
|
| Taint simple.test | test.py:163 | SOURCE | |
|
|
| Taint simple.test | test.py:164 | s | |
|
|
| Taint simple.test | test.py:168 | SOURCE | |
|
|
| Taint simple.test | test.py:169 | SOURCE | |
|
|
| Taint simple.test | test.py:172 | Subscript | |
|
|
| Taint simple.test | test.py:173 | Subscript | |
|
|
| Taint simple.test | test.py:178 | SOURCE | |
|
|
| Taint simple.test | test.py:179 | t | |
|
|
| Taint simple.test | test.py:180 | t | |
|
|
| Taint simple.test | test.py:183 | t | |
|
|
| Taint simple.test | test.py:186 | t | |
|
|
| Taint simple.test | test.py:195 | SOURCE | |
|
|
| Taint simple.test | test.py:196 | t | |
|
|
| Taint simple.test | test.py:197 | t | |
|
|
| Taint simple.test | test.py:199 | t | |
|
|
| Taint simple.test | test.py:203 | For | |
|
|
| Taint simple.test | test.py:204 | i | |
|
|
| Taint simple.test | test.py:205 | i | |
|
|
| Taint simple.test | test.py:208 | SOURCE | |
|
|
| Taint simple.test | test.py:209 | For | |
|
|
| Taint simple.test | test.py:210 | i | |
|
|
| Taint simple.test | test.py:213 | For | |
|
|
| Taint simple.test | test.py:214 | x | |
|
|
| Taint {simple.test} | test.py:169 | Dict | |
|
|
| Taint {simple.test} | test.py:171 | d | |
|
|
| Taint {simple.test} | test.py:173 | y | |
|
|
| Taint {simple.test} | test.py:175 | d | |
|
|
| Taint {simple.test} | test.py:175 | dict() | |
|