Skip to content

Commit 0da78f2

Browse files
RasmusWLRasmusWL
committed
Python: Show that e, f, g = tainted_list doesn't work
1 parent a55c13e commit 0da78f2

4 files changed

Lines changed: 90 additions & 87 deletions

File tree

‎python/ql/test/library-tests/taint/strings/DistinctStringKinds.expected‎

Lines changed: 16 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -1,16 +1,16 @@
1-
| Taint exception.info | test.py:59 | test.py:59:22:59:26 | taint | p1 = exception.info |
2-
| Taint exception.info | test.py:60 | test.py:60:12:60:22 | func() | p1 = exception.info |
3-
| Taint exception.info | test.py:60 | test.py:60:17:60:21 | taint | p1 = exception.info |
4-
| Taint exception.info | test.py:63 | test.py:63:12:63:33 | TAINTED_EXCEPTION_INFO | |
5-
| Taint exception.info | test.py:64 | test.py:64:11:64:41 | cross_over() | |
6-
| Taint exception.info | test.py:64 | test.py:64:37:64:40 | info | |
7-
| Taint exception.info | test.py:66 | test.py:66:19:66:21 | arg | p0 = exception.info |
8-
| Taint exception.info | test.py:67 | test.py:67:12:67:14 | arg | p0 = exception.info |
9-
| Taint externally controlled string | test.py:59 | test.py:59:22:59:26 | taint | p1 = externally controlled string |
10-
| Taint externally controlled string | test.py:60 | test.py:60:12:60:22 | func() | p1 = externally controlled string |
11-
| Taint externally controlled string | test.py:60 | test.py:60:17:60:21 | taint | p1 = externally controlled string |
12-
| Taint externally controlled string | test.py:66 | test.py:66:19:66:21 | arg | p0 = externally controlled string |
13-
| Taint externally controlled string | test.py:67 | test.py:67:12:67:14 | arg | p0 = externally controlled string |
14-
| Taint externally controlled string | test.py:70 | test.py:70:11:70:33 | TAINTED_EXTERNAL_STRING | |
15-
| Taint externally controlled string | test.py:71 | test.py:71:11:71:41 | cross_over() | |
16-
| Taint externally controlled string | test.py:71 | test.py:71:38:71:40 | ext | |
1+
| Taint exception.info | test.py:60 | test.py:60:22:60:26 | taint | p1 = exception.info |
2+
| Taint exception.info | test.py:61 | test.py:61:12:61:22 | func() | p1 = exception.info |
3+
| Taint exception.info | test.py:61 | test.py:61:17:61:21 | taint | p1 = exception.info |
4+
| Taint exception.info | test.py:64 | test.py:64:12:64:33 | TAINTED_EXCEPTION_INFO | |
5+
| Taint exception.info | test.py:65 | test.py:65:11:65:41 | cross_over() | |
6+
| Taint exception.info | test.py:65 | test.py:65:37:65:40 | info | |
7+
| Taint exception.info | test.py:67 | test.py:67:19:67:21 | arg | p0 = exception.info |
8+
| Taint exception.info | test.py:68 | test.py:68:12:68:14 | arg | p0 = exception.info |
9+
| Taint externally controlled string | test.py:60 | test.py:60:22:60:26 | taint | p1 = externally controlled string |
10+
| Taint externally controlled string | test.py:61 | test.py:61:12:61:22 | func() | p1 = externally controlled string |
11+
| Taint externally controlled string | test.py:61 | test.py:61:17:61:21 | taint | p1 = externally controlled string |
12+
| Taint externally controlled string | test.py:67 | test.py:67:19:67:21 | arg | p0 = externally controlled string |
13+
| Taint externally controlled string | test.py:68 | test.py:68:12:68:14 | arg | p0 = externally controlled string |
14+
| Taint externally controlled string | test.py:71 | test.py:71:11:71:33 | TAINTED_EXTERNAL_STRING | |
15+
| Taint externally controlled string | test.py:72 | test.py:72:11:72:41 | cross_over() | |
16+
| Taint externally controlled string | test.py:72 | test.py:72:38:72:40 | ext | |

‎python/ql/test/library-tests/taint/strings/TestNode.expected‎

Lines changed: 36 additions & 35 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,8 @@
55
| Taint [externally controlled string] | test.py:15 | test.py:15:9:15:25 | Subscript | |
66
| Taint [externally controlled string] | test.py:16 | test.py:16:9:16:20 | tainted_list | |
77
| Taint [externally controlled string] | test.py:16 | test.py:16:9:16:27 | Attribute() | |
8-
| Taint [externally controlled string] | test.py:23 | test.py:23:14:23:34 | Attribute() | |
8+
| Taint [externally controlled string] | test.py:17 | test.py:17:15:17:26 | tainted_list | |
9+
| Taint [externally controlled string] | test.py:24 | test.py:24:14:24:34 | Attribute() | |
910
| Taint externally controlled string | test.py:5 | test.py:5:22:5:28 | TAINTED | |
1011
| Taint externally controlled string | test.py:6 | test.py:6:31:6:44 | tainted_string | |
1112
| Taint externally controlled string | test.py:7 | test.py:7:9:7:25 | Subscript | |
@@ -15,50 +16,50 @@
1516
| Taint externally controlled string | test.py:9 | test.py:9:9:9:14 | Subscript | |
1617
| Taint externally controlled string | test.py:13 | test.py:13:9:13:23 | Subscript | |
1718
| Taint externally controlled string | test.py:14 | test.py:14:9:14:23 | Subscript | |
18-
| Taint externally controlled string | test.py:20 | test.py:20:9:20:28 | Subscript | |
19-
| Taint externally controlled string | test.py:21 | test.py:21:9:21:23 | Subscript | |
20-
| Taint externally controlled string | test.py:23 | test.py:23:5:23:35 | For | |
21-
| Taint externally controlled string | test.py:24 | test.py:24:9:24:9 | d | |
22-
| Taint externally controlled string | test.py:30 | test.py:30:22:30:28 | TAINTED | |
23-
| Taint externally controlled string | test.py:31 | test.py:31:9:31:22 | tainted_string | |
24-
| Taint externally controlled string | test.py:31 | test.py:31:9:31:31 | Attribute() | |
19+
| Taint externally controlled string | test.py:21 | test.py:21:9:21:28 | Subscript | |
20+
| Taint externally controlled string | test.py:22 | test.py:22:9:22:23 | Subscript | |
21+
| Taint externally controlled string | test.py:24 | test.py:24:5:24:35 | For | |
22+
| Taint externally controlled string | test.py:25 | test.py:25:9:25:9 | d | |
23+
| Taint externally controlled string | test.py:31 | test.py:31:22:31:28 | TAINTED | |
2524
| Taint externally controlled string | test.py:32 | test.py:32:9:32:22 | tainted_string | |
26-
| Taint externally controlled string | test.py:32 | test.py:32:9:32:29 | Attribute() | |
25+
| Taint externally controlled string | test.py:32 | test.py:32:9:32:31 | Attribute() | |
2726
| Taint externally controlled string | test.py:33 | test.py:33:9:33:22 | tainted_string | |
28-
| Taint externally controlled string | test.py:33 | test.py:33:9:33:25 | Subscript | |
27+
| Taint externally controlled string | test.py:33 | test.py:33:9:33:29 | Attribute() | |
2928
| Taint externally controlled string | test.py:34 | test.py:34:9:34:22 | tainted_string | |
30-
| Taint externally controlled string | test.py:34 | test.py:34:9:34:27 | Subscript | |
31-
| Taint externally controlled string | test.py:35 | test.py:35:9:35:32 | reversed() | |
32-
| Taint externally controlled string | test.py:35 | test.py:35:18:35:31 | tainted_string | |
33-
| Taint externally controlled string | test.py:36 | test.py:36:9:36:28 | copy() | |
34-
| Taint externally controlled string | test.py:36 | test.py:36:14:36:27 | tainted_string | |
35-
| Taint externally controlled string | test.py:37 | test.py:37:9:37:22 | tainted_string | |
36-
| Taint externally controlled string | test.py:37 | test.py:37:9:37:30 | Attribute() | |
37-
| Taint externally controlled string | test.py:40 | test.py:40:22:40:28 | TAINTED | |
38-
| Taint externally controlled string | test.py:41 | test.py:41:8:41:21 | tainted_string | |
39-
| Taint externally controlled string | test.py:44 | test.py:44:23:44:36 | tainted_string | |
40-
| Taint externally controlled string | test.py:47 | test.py:47:22:47:28 | TAINTED | |
41-
| Taint externally controlled string | test.py:48 | test.py:48:8:48:21 | tainted_string | |
42-
| Taint externally controlled string | test.py:48 | test.py:48:34:48:47 | tainted_string | |
43-
| Taint externally controlled string | test.py:51 | test.py:51:23:51:36 | tainted_string | |
44-
| Taint externally controlled string | test.py:54 | test.py:54:22:54:28 | TAINTED | |
45-
| Taint externally controlled string | test.py:55 | test.py:55:9:55:27 | str() | |
46-
| Taint externally controlled string | test.py:55 | test.py:55:13:55:26 | tainted_string | |
47-
| Taint externally controlled string | test.py:56 | test.py:56:9:56:29 | bytes() | |
48-
| Taint externally controlled string | test.py:56 | test.py:56:15:56:28 | tainted_string | |
49-
| Taint externally controlled string | test.py:57 | test.py:57:9:57:46 | bytes() | |
29+
| Taint externally controlled string | test.py:34 | test.py:34:9:34:25 | Subscript | |
30+
| Taint externally controlled string | test.py:35 | test.py:35:9:35:22 | tainted_string | |
31+
| Taint externally controlled string | test.py:35 | test.py:35:9:35:27 | Subscript | |
32+
| Taint externally controlled string | test.py:36 | test.py:36:9:36:32 | reversed() | |
33+
| Taint externally controlled string | test.py:36 | test.py:36:18:36:31 | tainted_string | |
34+
| Taint externally controlled string | test.py:37 | test.py:37:9:37:28 | copy() | |
35+
| Taint externally controlled string | test.py:37 | test.py:37:14:37:27 | tainted_string | |
36+
| Taint externally controlled string | test.py:38 | test.py:38:9:38:22 | tainted_string | |
37+
| Taint externally controlled string | test.py:38 | test.py:38:9:38:30 | Attribute() | |
38+
| Taint externally controlled string | test.py:41 | test.py:41:22:41:28 | TAINTED | |
39+
| Taint externally controlled string | test.py:42 | test.py:42:8:42:21 | tainted_string | |
40+
| Taint externally controlled string | test.py:45 | test.py:45:23:45:36 | tainted_string | |
41+
| Taint externally controlled string | test.py:48 | test.py:48:22:48:28 | TAINTED | |
42+
| Taint externally controlled string | test.py:49 | test.py:49:8:49:21 | tainted_string | |
43+
| Taint externally controlled string | test.py:49 | test.py:49:34:49:47 | tainted_string | |
44+
| Taint externally controlled string | test.py:52 | test.py:52:23:52:36 | tainted_string | |
45+
| Taint externally controlled string | test.py:55 | test.py:55:22:55:28 | TAINTED | |
46+
| Taint externally controlled string | test.py:56 | test.py:56:9:56:27 | str() | |
47+
| Taint externally controlled string | test.py:56 | test.py:56:13:56:26 | tainted_string | |
48+
| Taint externally controlled string | test.py:57 | test.py:57:9:57:29 | bytes() | |
5049
| Taint externally controlled string | test.py:57 | test.py:57:15:57:28 | tainted_string | |
50+
| Taint externally controlled string | test.py:58 | test.py:58:9:58:46 | bytes() | |
51+
| Taint externally controlled string | test.py:58 | test.py:58:15:58:28 | tainted_string | |
5152
| Taint json[externally controlled string] | test.py:6 | test.py:6:20:6:45 | Attribute() | |
5253
| Taint json[externally controlled string] | test.py:7 | test.py:7:9:7:20 | tainted_json | |
5354
| Taint json[externally controlled string] | test.py:7 | test.py:7:9:7:25 | Subscript | |
5455
| Taint json[externally controlled string] | test.py:8 | test.py:8:9:8:9 | a | |
5556
| Taint json[externally controlled string] | test.py:8 | test.py:8:9:8:18 | Attribute() | |
5657
| Taint json[externally controlled string] | test.py:9 | test.py:9:9:9:9 | b | |
5758
| Taint json[externally controlled string] | test.py:9 | test.py:9:9:9:14 | Subscript | |
58-
| Taint {externally controlled string} | test.py:19 | test.py:19:20:19:31 | TAINTED_DICT | |
59-
| Taint {externally controlled string} | test.py:20 | test.py:20:9:20:20 | tainted_dict | |
59+
| Taint {externally controlled string} | test.py:20 | test.py:20:20:20:31 | TAINTED_DICT | |
6060
| Taint {externally controlled string} | test.py:21 | test.py:21:9:21:20 | tainted_dict | |
6161
| Taint {externally controlled string} | test.py:22 | test.py:22:9:22:20 | tainted_dict | |
62-
| Taint {externally controlled string} | test.py:22 | test.py:22:9:22:27 | Attribute() | |
63-
| Taint {externally controlled string} | test.py:23 | test.py:23:14:23:25 | tainted_dict | |
64-
| Taint {externally controlled string} | test.py:26 | test.py:26:17:26:28 | tainted_dict | |
62+
| Taint {externally controlled string} | test.py:23 | test.py:23:9:23:20 | tainted_dict | |
63+
| Taint {externally controlled string} | test.py:23 | test.py:23:9:23:27 | Attribute() | |
64+
| Taint {externally controlled string} | test.py:24 | test.py:24:14:24:25 | tainted_dict | |
65+
| Taint {externally controlled string} | test.py:27 | test.py:27:17:27:28 | tainted_dict | |

0 commit comments

Comments
 (0)