mirror of
https://github.com/github/codeql.git
synced 2026-03-22 23:49:43 +01:00
3e7dc12246
The meat of this PR is described in the new python/ql/test/experimental/meta/InlineTaintTest.qll file: > Defines a InlineExpectationsTest for checking whether any arguments in > `ensure_tainted` and `ensure_not_tainted` calls are tainted. > > Also defines query predicates to ensure that: > - if any arguments to `ensure_not_tainted` are tainted, their annotation is marked with `SPURIOUS`. > - if any arguments to `ensure_tainted` are not tainted, their annotation is marked with `MISSING`. > > The functionality of this module is tested in `ql/test/experimental/meta/inline-taint-test-demo`.
61 lines
1.7 KiB
Python
61 lines
1.7 KiB
Python
# Add taintlib to PATH so it can be imported during runtime without any hassle
|
|
import sys; import os; sys.path.append(os.path.dirname(os.path.dirname((__file__))))
|
|
from taintlib import *
|
|
|
|
# This has no runtime impact, but allows autocomplete to work
|
|
from typing import Iterable, TYPE_CHECKING
|
|
if TYPE_CHECKING:
|
|
from ..taintlib import *
|
|
|
|
# Actual tests
|
|
|
|
import pathlib
|
|
# pathlib was added in 3.4
|
|
|
|
def test_basic():
|
|
print("\n# test_basic")
|
|
ts = TAINTED_STRING
|
|
|
|
tainted_path = pathlib.Path(ts)
|
|
|
|
tainted_pure_path = pathlib.PurePath(ts)
|
|
tainted_pure_posix_path = pathlib.PurePosixPath(ts)
|
|
tainted_pure_windows_path = pathlib.PureWindowsPath(ts)
|
|
|
|
ensure_tainted(
|
|
tainted_path, # $ MISSING: tainted
|
|
|
|
tainted_pure_path, # $ MISSING: tainted
|
|
tainted_pure_posix_path, # $ MISSING: tainted
|
|
tainted_pure_windows_path, # $ MISSING: tainted
|
|
|
|
pathlib.Path("foo") / ts, # $ MISSING: tainted
|
|
ts / pathlib.Path("foo"), # $ MISSING: tainted
|
|
|
|
tainted_path.joinpath("foo", "bar"), # $ MISSING: tainted
|
|
pathlib.Path("foo").joinpath(tainted_path, "bar"), # $ MISSING: tainted
|
|
pathlib.Path("foo").joinpath("bar", tainted_path), # $ MISSING: tainted
|
|
|
|
str(tainted_path), # $ MISSING: tainted
|
|
|
|
# TODO: Tainted methods and attributes
|
|
# https://docs.python.org/3.8/library/pathlib.html#methods-and-properties
|
|
)
|
|
|
|
if os.name == "posix":
|
|
tainted_posix_path = pathlib.PosixPath(ts)
|
|
|
|
ensure_tainted(
|
|
tainted_posix_path, # $ MISSING: tainted
|
|
)
|
|
|
|
if os.name == "nt":
|
|
tainted_windows_path = pathlib.WindowsPath(ts)
|
|
ensure_tainted(
|
|
tainted_windows_path, # $ MISSING: tainted
|
|
)
|
|
|
|
# Make tests runable
|
|
|
|
test_basic()
|