hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-30 19:11:23 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
cf28c32fd8df545f5ccfd40b71502193a8eb3c6a
codeql/python/ql/test/query-tests/Security/CWE-078-CommandInjection/CommandInjection.expected
yoff cf28c32fd8 Python: rebless toString churn from shared-CFG migration 
The shared CFG library overrides ControlFlowNode.toString() as 'final'
(shared/controlflow/codeql/controlflow/Cfg.qll:1217), so the legacy
'ControlFlowNode for X' prefix is gone — the new toString returns just
'X' for normal nodes and 'After X' for after-nodes. This produces a
large cosmetic diff in test expected files with no semantic change.

Mass-rebless 78 .expected files whose actual output differs from the
checked-in expected only by this rename. Each file was verified to be
identical after normalising 'ControlFlowNode for ' and 'After ' away
from both sides.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-05-28 21:09:49 +00:00

111 lines
12 KiB
Plaintext
Raw Blame History

edges
| command_injection.py:5:26:5:32 | After ImportMember | command_injection.py:5:26:5:32 | request | provenance | |
| command_injection.py:5:26:5:32 | request | command_injection.py:11:13:11:19 | request | provenance | |
| command_injection.py:5:26:5:32 | request | command_injection.py:18:13:18:19 | request | provenance | |
| command_injection.py:5:26:5:32 | request | command_injection.py:25:11:25:17 | request | provenance | |
| command_injection.py:5:26:5:32 | request | command_injection.py:31:13:31:19 | request | provenance | |
| command_injection.py:5:26:5:32 | request | command_injection.py:38:15:38:21 | request | provenance | |
| command_injection.py:5:26:5:32 | request | command_injection.py:54:15:54:21 | request | provenance | |
| command_injection.py:5:26:5:32 | request | command_injection.py:71:12:71:18 | request | provenance | |
| command_injection.py:5:26:5:32 | request | command_injection.py:78:12:78:18 | request | provenance | |
| command_injection.py:11:5:11:9 | files | command_injection.py:13:15:13:27 | After BinaryExpr | provenance | |
| command_injection.py:11:13:11:19 | request | command_injection.py:11:13:11:24 | After Attribute | provenance | AdditionalTaintStep |
| command_injection.py:11:13:11:24 | After Attribute | command_injection.py:11:13:11:41 | After Attribute() | provenance | dict.get |
| command_injection.py:11:13:11:41 | After Attribute() | command_injection.py:11:5:11:9 | files | provenance | |
| command_injection.py:18:5:18:9 | files | command_injection.py:20:22:20:34 | After BinaryExpr | provenance | |
| command_injection.py:18:13:18:19 | request | command_injection.py:18:13:18:24 | After Attribute | provenance | AdditionalTaintStep |
| command_injection.py:18:13:18:24 | After Attribute | command_injection.py:18:13:18:41 | After Attribute() | provenance | dict.get |
| command_injection.py:18:13:18:41 | After Attribute() | command_injection.py:18:5:18:9 | files | provenance | |
| command_injection.py:25:5:25:7 | cmd | command_injection.py:26:23:26:25 | cmd | provenance | |
| command_injection.py:25:11:25:17 | request | command_injection.py:25:11:25:22 | After Attribute | provenance | AdditionalTaintStep |
| command_injection.py:25:11:25:22 | After Attribute | command_injection.py:25:11:25:37 | After Attribute() | provenance | dict.get |
| command_injection.py:25:11:25:37 | After Attribute() | command_injection.py:25:5:25:7 | cmd | provenance | |
| command_injection.py:31:5:31:9 | files | command_injection.py:33:14:33:26 | After BinaryExpr | provenance | |
| command_injection.py:31:13:31:19 | request | command_injection.py:31:13:31:24 | After Attribute | provenance | AdditionalTaintStep |
| command_injection.py:31:13:31:24 | After Attribute | command_injection.py:31:13:31:41 | After Attribute() | provenance | dict.get |
| command_injection.py:31:13:31:41 | After Attribute() | command_injection.py:31:5:31:9 | files | provenance | |
| command_injection.py:38:5:38:11 | command | command_injection.py:41:15:41:21 | command | provenance | |
| command_injection.py:38:5:38:11 | command | command_injection.py:42:15:42:21 | command | provenance | |
| command_injection.py:38:15:38:21 | request | command_injection.py:38:15:38:26 | After Attribute | provenance | AdditionalTaintStep |
| command_injection.py:38:15:38:26 | After Attribute | command_injection.py:38:15:38:45 | After Attribute() | provenance | dict.get |
| command_injection.py:38:15:38:45 | After Attribute() | command_injection.py:38:5:38:11 | command | provenance | |
| command_injection.py:54:5:54:11 | command | command_injection.py:55:15:55:21 | command | provenance | |
| command_injection.py:54:5:54:11 | command | command_injection.py:56:14:56:20 | command | provenance | |
| command_injection.py:54:5:54:11 | command | command_injection.py:57:21:57:27 | command | provenance | |
| command_injection.py:54:5:54:11 | command | command_injection.py:58:27:58:33 | command | provenance | |
| command_injection.py:54:5:54:11 | command | command_injection.py:59:20:59:26 | command | provenance | |
| command_injection.py:54:15:54:21 | request | command_injection.py:54:15:54:26 | After Attribute | provenance | AdditionalTaintStep |
| command_injection.py:54:15:54:26 | After Attribute | command_injection.py:54:15:54:45 | After Attribute() | provenance | dict.get |
| command_injection.py:54:15:54:45 | After Attribute() | command_injection.py:54:5:54:11 | command | provenance | |
| command_injection.py:71:5:71:8 | path | command_injection.py:73:19:73:30 | After BinaryExpr | provenance | |
| command_injection.py:71:12:71:18 | request | command_injection.py:71:12:71:23 | After Attribute | provenance | AdditionalTaintStep |
| command_injection.py:71:12:71:23 | After Attribute | command_injection.py:71:12:71:39 | After Attribute() | provenance | dict.get |
| command_injection.py:71:12:71:39 | After Attribute() | command_injection.py:71:5:71:8 | path | provenance | |
| command_injection.py:78:5:78:8 | path | command_injection.py:80:19:80:30 | After BinaryExpr | provenance | |
| command_injection.py:78:12:78:18 | request | command_injection.py:78:12:78:23 | After Attribute | provenance | AdditionalTaintStep |
| command_injection.py:78:12:78:23 | After Attribute | command_injection.py:78:12:78:39 | After Attribute() | provenance | dict.get |
| command_injection.py:78:12:78:39 | After Attribute() | command_injection.py:78:5:78:8 | path | provenance | |
nodes
| command_injection.py:5:26:5:32 | After ImportMember | semmle.label | After ImportMember |
| command_injection.py:5:26:5:32 | request | semmle.label | request |
| command_injection.py:11:5:11:9 | files | semmle.label | files |
| command_injection.py:11:13:11:19 | request | semmle.label | request |
| command_injection.py:11:13:11:24 | After Attribute | semmle.label | After Attribute |
| command_injection.py:11:13:11:41 | After Attribute() | semmle.label | After Attribute() |
| command_injection.py:13:15:13:27 | After BinaryExpr | semmle.label | After BinaryExpr |
| command_injection.py:18:5:18:9 | files | semmle.label | files |
| command_injection.py:18:13:18:19 | request | semmle.label | request |
| command_injection.py:18:13:18:24 | After Attribute | semmle.label | After Attribute |
| command_injection.py:18:13:18:41 | After Attribute() | semmle.label | After Attribute() |
| command_injection.py:20:22:20:34 | After BinaryExpr | semmle.label | After BinaryExpr |
| command_injection.py:25:5:25:7 | cmd | semmle.label | cmd |
| command_injection.py:25:11:25:17 | request | semmle.label | request |
| command_injection.py:25:11:25:22 | After Attribute | semmle.label | After Attribute |
| command_injection.py:25:11:25:37 | After Attribute() | semmle.label | After Attribute() |
| command_injection.py:26:23:26:25 | cmd | semmle.label | cmd |
| command_injection.py:31:5:31:9 | files | semmle.label | files |
| command_injection.py:31:13:31:19 | request | semmle.label | request |
| command_injection.py:31:13:31:24 | After Attribute | semmle.label | After Attribute |
| command_injection.py:31:13:31:41 | After Attribute() | semmle.label | After Attribute() |
| command_injection.py:33:14:33:26 | After BinaryExpr | semmle.label | After BinaryExpr |
| command_injection.py:38:5:38:11 | command | semmle.label | command |
| command_injection.py:38:15:38:21 | request | semmle.label | request |
| command_injection.py:38:15:38:26 | After Attribute | semmle.label | After Attribute |
| command_injection.py:38:15:38:45 | After Attribute() | semmle.label | After Attribute() |
| command_injection.py:41:15:41:21 | command | semmle.label | command |
| command_injection.py:42:15:42:21 | command | semmle.label | command |
| command_injection.py:54:5:54:11 | command | semmle.label | command |
| command_injection.py:54:15:54:21 | request | semmle.label | request |
| command_injection.py:54:15:54:26 | After Attribute | semmle.label | After Attribute |
| command_injection.py:54:15:54:45 | After Attribute() | semmle.label | After Attribute() |
| command_injection.py:55:15:55:21 | command | semmle.label | command |
| command_injection.py:56:14:56:20 | command | semmle.label | command |
| command_injection.py:57:21:57:27 | command | semmle.label | command |
| command_injection.py:58:27:58:33 | command | semmle.label | command |
| command_injection.py:59:20:59:26 | command | semmle.label | command |
| command_injection.py:71:5:71:8 | path | semmle.label | path |
| command_injection.py:71:12:71:18 | request | semmle.label | request |
| command_injection.py:71:12:71:23 | After Attribute | semmle.label | After Attribute |
| command_injection.py:71:12:71:39 | After Attribute() | semmle.label | After Attribute() |
| command_injection.py:73:19:73:30 | After BinaryExpr | semmle.label | After BinaryExpr |
| command_injection.py:78:5:78:8 | path | semmle.label | path |
| command_injection.py:78:12:78:18 | request | semmle.label | request |
| command_injection.py:78:12:78:23 | After Attribute | semmle.label | After Attribute |
| command_injection.py:78:12:78:39 | After Attribute() | semmle.label | After Attribute() |
| command_injection.py:80:19:80:30 | After BinaryExpr | semmle.label | After BinaryExpr |
subpaths
#select
| command_injection.py:13:15:13:27 | After BinaryExpr | command_injection.py:5:26:5:32 | After ImportMember | command_injection.py:13:15:13:27 | After BinaryExpr | This command line depends on a $@. | command_injection.py:5:26:5:32 | After ImportMember | user-provided value |
| command_injection.py:20:22:20:34 | After BinaryExpr | command_injection.py:5:26:5:32 | After ImportMember | command_injection.py:20:22:20:34 | After BinaryExpr | This command line depends on a $@. | command_injection.py:5:26:5:32 | After ImportMember | user-provided value |
| command_injection.py:26:23:26:25 | cmd | command_injection.py:5:26:5:32 | After ImportMember | command_injection.py:26:23:26:25 | cmd | This command line depends on a $@. | command_injection.py:5:26:5:32 | After ImportMember | user-provided value |
| command_injection.py:33:14:33:26 | After BinaryExpr | command_injection.py:5:26:5:32 | After ImportMember | command_injection.py:33:14:33:26 | After BinaryExpr | This command line depends on a $@. | command_injection.py:5:26:5:32 | After ImportMember | user-provided value |
| command_injection.py:41:15:41:21 | command | command_injection.py:5:26:5:32 | After ImportMember | command_injection.py:41:15:41:21 | command | This command line depends on a $@. | command_injection.py:5:26:5:32 | After ImportMember | user-provided value |
| command_injection.py:42:15:42:21 | command | command_injection.py:5:26:5:32 | After ImportMember | command_injection.py:42:15:42:21 | command | This command line depends on a $@. | command_injection.py:5:26:5:32 | After ImportMember | user-provided value |
| command_injection.py:55:15:55:21 | command | command_injection.py:5:26:5:32 | After ImportMember | command_injection.py:55:15:55:21 | command | This command line depends on a $@. | command_injection.py:5:26:5:32 | After ImportMember | user-provided value |
| command_injection.py:56:14:56:20 | command | command_injection.py:5:26:5:32 | After ImportMember | command_injection.py:56:14:56:20 | command | This command line depends on a $@. | command_injection.py:5:26:5:32 | After ImportMember | user-provided value |
| command_injection.py:57:21:57:27 | command | command_injection.py:5:26:5:32 | After ImportMember | command_injection.py:57:21:57:27 | command | This command line depends on a $@. | command_injection.py:5:26:5:32 | After ImportMember | user-provided value |
| command_injection.py:58:27:58:33 | command | command_injection.py:5:26:5:32 | After ImportMember | command_injection.py:58:27:58:33 | command | This command line depends on a $@. | command_injection.py:5:26:5:32 | After ImportMember | user-provided value |
| command_injection.py:59:20:59:26 | command | command_injection.py:5:26:5:32 | After ImportMember | command_injection.py:59:20:59:26 | command | This command line depends on a $@. | command_injection.py:5:26:5:32 | After ImportMember | user-provided value |
| command_injection.py:73:19:73:30 | After BinaryExpr | command_injection.py:5:26:5:32 | After ImportMember | command_injection.py:73:19:73:30 | After BinaryExpr | This command line depends on a $@. | command_injection.py:5:26:5:32 | After ImportMember | user-provided value |
| command_injection.py:80:19:80:30 | After BinaryExpr | command_injection.py:5:26:5:32 | After ImportMember | command_injection.py:80:19:80:30 | After BinaryExpr | This command line depends on a $@. | command_injection.py:5:26:5:32 | After ImportMember | user-provided value |
Reference in New Issue View Git Blame Copy Permalink