Skip to content

Commit 9d8a8c8

Browse files
michaelnebelmichaelnebel
committed
Python: Update test expected output.
1 parent 887df47 commit 9d8a8c8

File tree

7 files changed

+61
-58
lines changed

7 files changed

+61
-58
lines changed

‎python/test/audit/CWE-079/XssFlaskAudit.expected

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -1,12 +1,12 @@
11
edges
2-
| app.py:1:26:1:32 | ControlFlowNode for ImportMember | app.py:1:26:1:32 | GSSA Variable request |
3-
| app.py:1:26:1:32 | GSSA Variable request | app.py:12:16:12:22 | ControlFlowNode for request |
4-
| app.py:12:5:12:12 | SSA variable username | app.py:14:51:14:58 | ControlFlowNode for username |
5-
| app.py:12:16:12:22 | ControlFlowNode for request | app.py:12:5:12:12 | SSA variable username |
2+
| app.py:1:26:1:32 | ControlFlowNode for ImportMember | app.py:1:26:1:32 | ControlFlowNode for request | provenance | |
3+
| app.py:1:26:1:32 | ControlFlowNode for request | app.py:12:16:12:22 | ControlFlowNode for request | provenance | |
4+
| app.py:12:5:12:12 | ControlFlowNode for username | app.py:14:51:14:58 | ControlFlowNode for username | provenance | |
5+
| app.py:12:16:12:22 | ControlFlowNode for request | app.py:12:5:12:12 | ControlFlowNode for username | provenance | AdditionalTaintStep |
66
nodes
77
| app.py:1:26:1:32 | ControlFlowNode for ImportMember | semmle.label | ControlFlowNode for ImportMember |
8-
| app.py:1:26:1:32 | GSSA Variable request | semmle.label | GSSA Variable request |
9-
| app.py:12:5:12:12 | SSA variable username | semmle.label | SSA variable username |
8+
| app.py:1:26:1:32 | ControlFlowNode for request | semmle.label | ControlFlowNode for request |
9+
| app.py:12:5:12:12 | ControlFlowNode for username | semmle.label | ControlFlowNode for username |
1010
| app.py:12:16:12:22 | ControlFlowNode for request | semmle.label | ControlFlowNode for request |
1111
| app.py:14:51:14:58 | ControlFlowNode for username | semmle.label | ControlFlowNode for username |
1212
subpaths

‎python/test/audit/CWE-089/SqlInjectionAudit.expected

Lines changed: 12 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -1,23 +1,23 @@
11
edges
2-
| sqli.py:17:1:17:5 | GSSA Variable query | sqli.py:18:16:18:20 | ControlFlowNode for query |
3-
| sqli.py:17:9:17:60 | ControlFlowNode for Fstring | sqli.py:17:1:17:5 | GSSA Variable query |
4-
| sqli.py:21:1:21:5 | GSSA Variable query | sqli.py:22:16:22:20 | ControlFlowNode for query |
5-
| sqli.py:21:9:21:68 | ControlFlowNode for Attribute() | sqli.py:21:1:21:5 | GSSA Variable query |
6-
| sqli.py:25:1:25:5 | GSSA Variable query | sqli.py:26:16:26:20 | ControlFlowNode for query |
7-
| sqli.py:25:9:25:60 | ControlFlowNode for BinaryExpr | sqli.py:25:1:25:5 | GSSA Variable query |
8-
| sqli.py:30:1:30:5 | GSSA Variable query | sqli.py:31:16:31:20 | ControlFlowNode for query |
9-
| sqli.py:30:9:30:58 | ControlFlowNode for BinaryExpr | sqli.py:30:1:30:5 | GSSA Variable query |
2+
| sqli.py:17:1:17:5 | ControlFlowNode for query | sqli.py:18:16:18:20 | ControlFlowNode for query | provenance | |
3+
| sqli.py:17:9:17:60 | ControlFlowNode for Fstring | sqli.py:17:1:17:5 | ControlFlowNode for query | provenance | |
4+
| sqli.py:21:1:21:5 | ControlFlowNode for query | sqli.py:22:16:22:20 | ControlFlowNode for query | provenance | |
5+
| sqli.py:21:9:21:68 | ControlFlowNode for Attribute() | sqli.py:21:1:21:5 | ControlFlowNode for query | provenance | |
6+
| sqli.py:25:1:25:5 | ControlFlowNode for query | sqli.py:26:16:26:20 | ControlFlowNode for query | provenance | |
7+
| sqli.py:25:9:25:60 | ControlFlowNode for BinaryExpr | sqli.py:25:1:25:5 | ControlFlowNode for query | provenance | |
8+
| sqli.py:30:1:30:5 | ControlFlowNode for query | sqli.py:31:16:31:20 | ControlFlowNode for query | provenance | |
9+
| sqli.py:30:9:30:58 | ControlFlowNode for BinaryExpr | sqli.py:30:1:30:5 | ControlFlowNode for query | provenance | |
1010
nodes
11-
| sqli.py:17:1:17:5 | GSSA Variable query | semmle.label | GSSA Variable query |
11+
| sqli.py:17:1:17:5 | ControlFlowNode for query | semmle.label | ControlFlowNode for query |
1212
| sqli.py:17:9:17:60 | ControlFlowNode for Fstring | semmle.label | ControlFlowNode for Fstring |
1313
| sqli.py:18:16:18:20 | ControlFlowNode for query | semmle.label | ControlFlowNode for query |
14-
| sqli.py:21:1:21:5 | GSSA Variable query | semmle.label | GSSA Variable query |
14+
| sqli.py:21:1:21:5 | ControlFlowNode for query | semmle.label | ControlFlowNode for query |
1515
| sqli.py:21:9:21:68 | ControlFlowNode for Attribute() | semmle.label | ControlFlowNode for Attribute() |
1616
| sqli.py:22:16:22:20 | ControlFlowNode for query | semmle.label | ControlFlowNode for query |
17-
| sqli.py:25:1:25:5 | GSSA Variable query | semmle.label | GSSA Variable query |
17+
| sqli.py:25:1:25:5 | ControlFlowNode for query | semmle.label | ControlFlowNode for query |
1818
| sqli.py:25:9:25:60 | ControlFlowNode for BinaryExpr | semmle.label | ControlFlowNode for BinaryExpr |
1919
| sqli.py:26:16:26:20 | ControlFlowNode for query | semmle.label | ControlFlowNode for query |
20-
| sqli.py:30:1:30:5 | GSSA Variable query | semmle.label | GSSA Variable query |
20+
| sqli.py:30:1:30:5 | ControlFlowNode for query | semmle.label | ControlFlowNode for query |
2121
| sqli.py:30:9:30:58 | ControlFlowNode for BinaryExpr | semmle.label | ControlFlowNode for BinaryExpr |
2222
| sqli.py:31:16:31:20 | ControlFlowNode for query | semmle.label | ControlFlowNode for query |
2323
subpaths

‎python/test/security/CWE-078/CommandInjectionLocal.expected

Lines changed: 10 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -1,20 +1,20 @@
11
edges
2-
| cmdi.py:4:1:4:1 | GSSA Variable i | cmdi.py:7:17:7:17 | ControlFlowNode for i |
3-
| cmdi.py:4:1:4:1 | GSSA Variable i | cmdi.py:9:17:9:30 | ControlFlowNode for Fstring |
4-
| cmdi.py:4:5:4:28 | ControlFlowNode for input() | cmdi.py:4:1:4:1 | GSSA Variable i |
5-
| cmdi.py:14:1:14:2 | GSSA Variable e1 | cmdi.py:15:17:15:43 | ControlFlowNode for BinaryExpr |
6-
| cmdi.py:14:6:14:29 | ControlFlowNode for Subscript | cmdi.py:14:1:14:2 | GSSA Variable e1 |
7-
| cmdi.py:17:1:17:2 | GSSA Variable e2 | cmdi.py:18:17:18:43 | ControlFlowNode for BinaryExpr |
8-
| cmdi.py:17:6:17:33 | ControlFlowNode for Attribute() | cmdi.py:17:1:17:2 | GSSA Variable e2 |
2+
| cmdi.py:4:1:4:1 | ControlFlowNode for i | cmdi.py:7:17:7:17 | ControlFlowNode for i | provenance | |
3+
| cmdi.py:4:1:4:1 | ControlFlowNode for i | cmdi.py:9:17:9:30 | ControlFlowNode for Fstring | provenance | |
4+
| cmdi.py:4:5:4:28 | ControlFlowNode for input() | cmdi.py:4:1:4:1 | ControlFlowNode for i | provenance | Src:MaD:20 |
5+
| cmdi.py:14:1:14:2 | ControlFlowNode for e1 | cmdi.py:15:17:15:43 | ControlFlowNode for BinaryExpr | provenance | |
6+
| cmdi.py:14:6:14:29 | ControlFlowNode for Subscript | cmdi.py:14:1:14:2 | ControlFlowNode for e1 | provenance | |
7+
| cmdi.py:17:1:17:2 | ControlFlowNode for e2 | cmdi.py:18:17:18:43 | ControlFlowNode for BinaryExpr | provenance | |
8+
| cmdi.py:17:6:17:33 | ControlFlowNode for Attribute() | cmdi.py:17:1:17:2 | ControlFlowNode for e2 | provenance | |
99
nodes
10-
| cmdi.py:4:1:4:1 | GSSA Variable i | semmle.label | GSSA Variable i |
10+
| cmdi.py:4:1:4:1 | ControlFlowNode for i | semmle.label | ControlFlowNode for i |
1111
| cmdi.py:4:5:4:28 | ControlFlowNode for input() | semmle.label | ControlFlowNode for input() |
1212
| cmdi.py:7:17:7:17 | ControlFlowNode for i | semmle.label | ControlFlowNode for i |
1313
| cmdi.py:9:17:9:30 | ControlFlowNode for Fstring | semmle.label | ControlFlowNode for Fstring |
14-
| cmdi.py:14:1:14:2 | GSSA Variable e1 | semmle.label | GSSA Variable e1 |
14+
| cmdi.py:14:1:14:2 | ControlFlowNode for e1 | semmle.label | ControlFlowNode for e1 |
1515
| cmdi.py:14:6:14:29 | ControlFlowNode for Subscript | semmle.label | ControlFlowNode for Subscript |
1616
| cmdi.py:15:17:15:43 | ControlFlowNode for BinaryExpr | semmle.label | ControlFlowNode for BinaryExpr |
17-
| cmdi.py:17:1:17:2 | GSSA Variable e2 | semmle.label | GSSA Variable e2 |
17+
| cmdi.py:17:1:17:2 | ControlFlowNode for e2 | semmle.label | ControlFlowNode for e2 |
1818
| cmdi.py:17:6:17:33 | ControlFlowNode for Attribute() | semmle.label | ControlFlowNode for Attribute() |
1919
| cmdi.py:18:17:18:43 | ControlFlowNode for BinaryExpr | semmle.label | ControlFlowNode for BinaryExpr |
2020
subpaths

‎python/test/security/CWE-094/CodeInjectionLocal.expected

Lines changed: 9 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -1,18 +1,18 @@
11
edges
2-
| codei.py:3:1:3:1 | GSSA Variable i | codei.py:6:6:6:6 | ControlFlowNode for i |
3-
| codei.py:3:5:3:28 | ControlFlowNode for input() | codei.py:3:1:3:1 | GSSA Variable i |
4-
| codei.py:9:1:9:2 | GSSA Variable e1 | codei.py:10:6:10:7 | ControlFlowNode for e1 |
5-
| codei.py:9:6:9:29 | ControlFlowNode for Subscript | codei.py:9:1:9:2 | GSSA Variable e1 |
6-
| codei.py:12:1:12:2 | GSSA Variable e2 | codei.py:13:6:13:7 | ControlFlowNode for e2 |
7-
| codei.py:12:6:12:33 | ControlFlowNode for Attribute() | codei.py:12:1:12:2 | GSSA Variable e2 |
2+
| codei.py:3:1:3:1 | ControlFlowNode for i | codei.py:6:6:6:6 | ControlFlowNode for i | provenance | |
3+
| codei.py:3:5:3:28 | ControlFlowNode for input() | codei.py:3:1:3:1 | ControlFlowNode for i | provenance | Src:MaD:20 |
4+
| codei.py:9:1:9:2 | ControlFlowNode for e1 | codei.py:10:6:10:7 | ControlFlowNode for e1 | provenance | |
5+
| codei.py:9:6:9:29 | ControlFlowNode for Subscript | codei.py:9:1:9:2 | ControlFlowNode for e1 | provenance | |
6+
| codei.py:12:1:12:2 | ControlFlowNode for e2 | codei.py:13:6:13:7 | ControlFlowNode for e2 | provenance | |
7+
| codei.py:12:6:12:33 | ControlFlowNode for Attribute() | codei.py:12:1:12:2 | ControlFlowNode for e2 | provenance | |
88
nodes
9-
| codei.py:3:1:3:1 | GSSA Variable i | semmle.label | GSSA Variable i |
9+
| codei.py:3:1:3:1 | ControlFlowNode for i | semmle.label | ControlFlowNode for i |
1010
| codei.py:3:5:3:28 | ControlFlowNode for input() | semmle.label | ControlFlowNode for input() |
1111
| codei.py:6:6:6:6 | ControlFlowNode for i | semmle.label | ControlFlowNode for i |
12-
| codei.py:9:1:9:2 | GSSA Variable e1 | semmle.label | GSSA Variable e1 |
12+
| codei.py:9:1:9:2 | ControlFlowNode for e1 | semmle.label | ControlFlowNode for e1 |
1313
| codei.py:9:6:9:29 | ControlFlowNode for Subscript | semmle.label | ControlFlowNode for Subscript |
1414
| codei.py:10:6:10:7 | ControlFlowNode for e1 | semmle.label | ControlFlowNode for e1 |
15-
| codei.py:12:1:12:2 | GSSA Variable e2 | semmle.label | GSSA Variable e2 |
15+
| codei.py:12:1:12:2 | ControlFlowNode for e2 | semmle.label | ControlFlowNode for e2 |
1616
| codei.py:12:6:12:33 | ControlFlowNode for Attribute() | semmle.label | ControlFlowNode for Attribute() |
1717
| codei.py:13:6:13:7 | ControlFlowNode for e2 | semmle.label | ControlFlowNode for e2 |
1818
subpaths

‎python/test/security/CWE-502/UnsafeDeserializationLocal.expected

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,13 @@
11
edges
2-
| unsafe.py:5:1:5:1 | GSSA Variable i | unsafe.py:7:14:7:14 | ControlFlowNode for i |
3-
| unsafe.py:5:5:5:11 | ControlFlowNode for input() | unsafe.py:5:1:5:1 | GSSA Variable i |
4-
| unsafe.py:10:1:10:1 | GSSA Variable e | unsafe.py:12:14:12:14 | ControlFlowNode for e |
5-
| unsafe.py:10:5:10:32 | ControlFlowNode for Attribute() | unsafe.py:10:1:10:1 | GSSA Variable e |
2+
| unsafe.py:5:1:5:1 | ControlFlowNode for i | unsafe.py:7:14:7:14 | ControlFlowNode for i | provenance | |
3+
| unsafe.py:5:5:5:11 | ControlFlowNode for input() | unsafe.py:5:1:5:1 | ControlFlowNode for i | provenance | Src:MaD:20 |
4+
| unsafe.py:10:1:10:1 | ControlFlowNode for e | unsafe.py:12:14:12:14 | ControlFlowNode for e | provenance | |
5+
| unsafe.py:10:5:10:32 | ControlFlowNode for Attribute() | unsafe.py:10:1:10:1 | ControlFlowNode for e | provenance | |
66
nodes
7-
| unsafe.py:5:1:5:1 | GSSA Variable i | semmle.label | GSSA Variable i |
7+
| unsafe.py:5:1:5:1 | ControlFlowNode for i | semmle.label | ControlFlowNode for i |
88
| unsafe.py:5:5:5:11 | ControlFlowNode for input() | semmle.label | ControlFlowNode for input() |
99
| unsafe.py:7:14:7:14 | ControlFlowNode for i | semmle.label | ControlFlowNode for i |
10-
| unsafe.py:10:1:10:1 | GSSA Variable e | semmle.label | GSSA Variable e |
10+
| unsafe.py:10:1:10:1 | ControlFlowNode for e | semmle.label | ControlFlowNode for e |
1111
| unsafe.py:10:5:10:32 | ControlFlowNode for Attribute() | semmle.label | ControlFlowNode for Attribute() |
1212
| unsafe.py:12:14:12:14 | ControlFlowNode for e | semmle.label | ControlFlowNode for e |
1313
| unsafe.py:17:22:17:29 | ControlFlowNode for Attribute() | semmle.label | ControlFlowNode for Attribute() |

‎python/test/security/CWE-798/HardcodedFrameworkSecrets.expected

Lines changed: 15 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -1,21 +1,21 @@
1-
| hardcoded_secrets.py:10:18:10:29 | ControlFlowNode for Str | sinks |
2-
| hardcoded_secrets.py:11:28:11:39 | ControlFlowNode for Str | sinks |
3-
| hardcoded_secrets.py:12:30:12:41 | ControlFlowNode for Str | sinks |
4-
| hardcoded_secrets.py:22:30:22:47 | ControlFlowNode for Str | sinks |
5-
| hardcoded_secrets.py:28:38:28:55 | ControlFlowNode for Str | sinks |
6-
| hardcoded_secrets.py:34:53:34:69 | ControlFlowNode for Str | sinks |
7-
| hardcoded_secrets.py:35:50:35:66 | ControlFlowNode for Str | sinks |
8-
| hardcoded_secrets.py:40:47:40:59 | ControlFlowNode for Str | sinks |
9-
| hardcoded_secrets.py:41:38:41:50 | ControlFlowNode for Str | sinks |
10-
| hardcoded_secrets.py:47:72:47:85 | ControlFlowNode for Str | sinks |
1+
| hardcoded_secrets.py:10:18:10:29 | ControlFlowNode for StringLiteral | sinks |
2+
| hardcoded_secrets.py:11:28:11:39 | ControlFlowNode for StringLiteral | sinks |
3+
| hardcoded_secrets.py:12:30:12:41 | ControlFlowNode for StringLiteral | sinks |
4+
| hardcoded_secrets.py:22:30:22:47 | ControlFlowNode for StringLiteral | sinks |
5+
| hardcoded_secrets.py:28:38:28:55 | ControlFlowNode for StringLiteral | sinks |
6+
| hardcoded_secrets.py:34:53:34:69 | ControlFlowNode for StringLiteral | sinks |
7+
| hardcoded_secrets.py:35:50:35:66 | ControlFlowNode for StringLiteral | sinks |
8+
| hardcoded_secrets.py:40:47:40:59 | ControlFlowNode for StringLiteral | sinks |
9+
| hardcoded_secrets.py:41:38:41:50 | ControlFlowNode for StringLiteral | sinks |
10+
| hardcoded_secrets.py:47:72:47:85 | ControlFlowNode for StringLiteral | sinks |
1111
| hardcoded_secrets.py:50:72:50:72 | ControlFlowNode for w | sinks |
12-
| hardcoded_secrets.py:56:19:56:36 | ControlFlowNode for Str | sinks |
12+
| hardcoded_secrets.py:56:19:56:36 | ControlFlowNode for StringLiteral | sinks |
1313
| hardcoded_secrets.py:59:20:59:20 | ControlFlowNode for p | sinks |
1414
| hardcoded_secrets.py:62:20:62:20 | ControlFlowNode for p | sinks |
15-
| hardcoded_secrets.py:70:23:70:40 | ControlFlowNode for Str | sinks |
16-
| hardcoded_secrets.py:71:27:71:48 | ControlFlowNode for Str | sinks |
17-
| hardcoded_secrets.py:72:23:72:42 | ControlFlowNode for Str | sinks |
18-
| settings.py:5:14:5:29 | ControlFlowNode for Str | sinks |
15+
| hardcoded_secrets.py:70:23:70:40 | ControlFlowNode for StringLiteral | sinks |
16+
| hardcoded_secrets.py:71:27:71:48 | ControlFlowNode for StringLiteral | sinks |
17+
| hardcoded_secrets.py:72:23:72:42 | ControlFlowNode for StringLiteral | sinks |
18+
| settings.py:5:14:5:29 | ControlFlowNode for StringLiteral | sinks |
1919
| settings.py:7:14:7:51 | ControlFlowNode for Attribute() | sinks |
2020
| settings.py:9:14:9:41 | ControlFlowNode for Attribute() | sinks |
2121
| settings.py:13:14:13:26 | ControlFlowNode for RANDOM_STRING | sinks |

‎python/test/security/CWE-915/local/MassAssignmentLocal.expected

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,6 @@
1+
| massassignmentLocal.py:18:26:18:28 | ControlFlowNode for key | Use of $@. | massassignmentLocal.py:8:13:8:31 | ControlFlowNode for Attribute() | mass assignment |
12
| massassignmentLocal.py:18:26:18:28 | ControlFlowNode for key | Use of $@. | massassignmentLocal.py:30:10:30:20 | ControlFlowNode for Attribute | mass assignment |
3+
| massassignmentLocal.py:24:15:24:25 | ControlFlowNode for Attribute | Use of $@. | massassignmentLocal.py:8:13:8:31 | ControlFlowNode for Attribute() | mass assignment |
24
| massassignmentLocal.py:24:15:24:25 | ControlFlowNode for Attribute | Use of $@. | massassignmentLocal.py:24:15:24:25 | ControlFlowNode for Attribute | mass assignment |
5+
| massassignmentLocal.py:27:18:27:28 | ControlFlowNode for Attribute | Use of $@. | massassignmentLocal.py:8:13:8:31 | ControlFlowNode for Attribute() | mass assignment |
36
| massassignmentLocal.py:27:18:27:28 | ControlFlowNode for Attribute | Use of $@. | massassignmentLocal.py:27:18:27:28 | ControlFlowNode for Attribute | mass assignment |

0 commit comments

Comments
 (0)