Skip to content

Commit 3b8af1e

Browse files
aschackmullaschackmull
committed
Go: Add empty provenance column to expected files.
1 parent 21a6520 commit 3b8af1e

File tree

59 files changed

+1620
-1620
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

59 files changed

+1620
-1620
lines changed

‎go/ql/test/experimental/CWE-090/LDAPInjection.expected

Lines changed: 20 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -1,24 +1,24 @@
11
edges
2-
| LDAPInjection.go:57:15:57:29 | call to UserAgent | LDAPInjection.go:59:3:59:11 | untrusted |
3-
| LDAPInjection.go:57:15:57:29 | call to UserAgent | LDAPInjection.go:61:3:61:51 | ...+... |
4-
| LDAPInjection.go:57:15:57:29 | call to UserAgent | LDAPInjection.go:62:3:62:33 | slice literal |
5-
| LDAPInjection.go:57:15:57:29 | call to UserAgent | LDAPInjection.go:62:24:62:32 | untrusted |
6-
| LDAPInjection.go:57:15:57:29 | call to UserAgent | LDAPInjection.go:66:3:66:11 | untrusted |
7-
| LDAPInjection.go:57:15:57:29 | call to UserAgent | LDAPInjection.go:68:3:68:51 | ...+... |
8-
| LDAPInjection.go:57:15:57:29 | call to UserAgent | LDAPInjection.go:69:3:69:33 | slice literal |
9-
| LDAPInjection.go:57:15:57:29 | call to UserAgent | LDAPInjection.go:69:24:69:32 | untrusted |
10-
| LDAPInjection.go:57:15:57:29 | call to UserAgent | LDAPInjection.go:73:3:73:11 | untrusted |
11-
| LDAPInjection.go:57:15:57:29 | call to UserAgent | LDAPInjection.go:75:3:75:51 | ...+... |
12-
| LDAPInjection.go:57:15:57:29 | call to UserAgent | LDAPInjection.go:76:3:76:33 | slice literal |
13-
| LDAPInjection.go:57:15:57:29 | call to UserAgent | LDAPInjection.go:76:24:76:32 | untrusted |
14-
| LDAPInjection.go:57:15:57:29 | call to UserAgent | LDAPInjection.go:80:22:80:30 | untrusted |
15-
| LDAPInjection.go:57:15:57:29 | call to UserAgent | LDAPInjection.go:81:25:81:33 | untrusted |
16-
| LDAPInjection.go:62:3:62:33 | slice literal [array] | LDAPInjection.go:62:3:62:33 | slice literal |
17-
| LDAPInjection.go:62:24:62:32 | untrusted | LDAPInjection.go:62:3:62:33 | slice literal [array] |
18-
| LDAPInjection.go:69:3:69:33 | slice literal [array] | LDAPInjection.go:69:3:69:33 | slice literal |
19-
| LDAPInjection.go:69:24:69:32 | untrusted | LDAPInjection.go:69:3:69:33 | slice literal [array] |
20-
| LDAPInjection.go:76:3:76:33 | slice literal [array] | LDAPInjection.go:76:3:76:33 | slice literal |
21-
| LDAPInjection.go:76:24:76:32 | untrusted | LDAPInjection.go:76:3:76:33 | slice literal [array] |
2+
| LDAPInjection.go:57:15:57:29 | call to UserAgent | LDAPInjection.go:59:3:59:11 | untrusted | provenance | |
3+
| LDAPInjection.go:57:15:57:29 | call to UserAgent | LDAPInjection.go:61:3:61:51 | ...+... | provenance | |
4+
| LDAPInjection.go:57:15:57:29 | call to UserAgent | LDAPInjection.go:62:3:62:33 | slice literal | provenance | |
5+
| LDAPInjection.go:57:15:57:29 | call to UserAgent | LDAPInjection.go:62:24:62:32 | untrusted | provenance | |
6+
| LDAPInjection.go:57:15:57:29 | call to UserAgent | LDAPInjection.go:66:3:66:11 | untrusted | provenance | |
7+
| LDAPInjection.go:57:15:57:29 | call to UserAgent | LDAPInjection.go:68:3:68:51 | ...+... | provenance | |
8+
| LDAPInjection.go:57:15:57:29 | call to UserAgent | LDAPInjection.go:69:3:69:33 | slice literal | provenance | |
9+
| LDAPInjection.go:57:15:57:29 | call to UserAgent | LDAPInjection.go:69:24:69:32 | untrusted | provenance | |
10+
| LDAPInjection.go:57:15:57:29 | call to UserAgent | LDAPInjection.go:73:3:73:11 | untrusted | provenance | |
11+
| LDAPInjection.go:57:15:57:29 | call to UserAgent | LDAPInjection.go:75:3:75:51 | ...+... | provenance | |
12+
| LDAPInjection.go:57:15:57:29 | call to UserAgent | LDAPInjection.go:76:3:76:33 | slice literal | provenance | |
13+
| LDAPInjection.go:57:15:57:29 | call to UserAgent | LDAPInjection.go:76:24:76:32 | untrusted | provenance | |
14+
| LDAPInjection.go:57:15:57:29 | call to UserAgent | LDAPInjection.go:80:22:80:30 | untrusted | provenance | |
15+
| LDAPInjection.go:57:15:57:29 | call to UserAgent | LDAPInjection.go:81:25:81:33 | untrusted | provenance | |
16+
| LDAPInjection.go:62:3:62:33 | slice literal [array] | LDAPInjection.go:62:3:62:33 | slice literal | provenance | |
17+
| LDAPInjection.go:62:24:62:32 | untrusted | LDAPInjection.go:62:3:62:33 | slice literal [array] | provenance | |
18+
| LDAPInjection.go:69:3:69:33 | slice literal [array] | LDAPInjection.go:69:3:69:33 | slice literal | provenance | |
19+
| LDAPInjection.go:69:24:69:32 | untrusted | LDAPInjection.go:69:3:69:33 | slice literal [array] | provenance | |
20+
| LDAPInjection.go:76:3:76:33 | slice literal [array] | LDAPInjection.go:76:3:76:33 | slice literal | provenance | |
21+
| LDAPInjection.go:76:24:76:32 | untrusted | LDAPInjection.go:76:3:76:33 | slice literal [array] | provenance | |
2222
nodes
2323
| LDAPInjection.go:57:15:57:29 | call to UserAgent | semmle.label | call to UserAgent |
2424
| LDAPInjection.go:59:3:59:11 | untrusted | semmle.label | untrusted |

‎go/ql/test/experimental/CWE-1004/CookieWithoutHttpOnly.expected

Lines changed: 408 additions & 408 deletions
Large diffs are not rendered by default.

‎go/ql/test/experimental/CWE-203/Timing.expected

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -1,10 +1,10 @@
11
edges
2-
| timing.go:15:18:15:27 | selection of Header | timing.go:15:18:15:45 | call to Get |
3-
| timing.go:15:18:15:45 | call to Get | timing.go:17:31:17:42 | headerSecret |
4-
| timing.go:28:18:28:27 | selection of Header | timing.go:28:18:28:45 | call to Get |
5-
| timing.go:28:18:28:45 | call to Get | timing.go:30:47:30:58 | headerSecret |
6-
| timing.go:41:18:41:27 | selection of Header | timing.go:41:18:41:45 | call to Get |
7-
| timing.go:41:18:41:45 | call to Get | timing.go:42:25:42:36 | headerSecret |
2+
| timing.go:15:18:15:27 | selection of Header | timing.go:15:18:15:45 | call to Get | provenance | |
3+
| timing.go:15:18:15:45 | call to Get | timing.go:17:31:17:42 | headerSecret | provenance | |
4+
| timing.go:28:18:28:27 | selection of Header | timing.go:28:18:28:45 | call to Get | provenance | |
5+
| timing.go:28:18:28:45 | call to Get | timing.go:30:47:30:58 | headerSecret | provenance | |
6+
| timing.go:41:18:41:27 | selection of Header | timing.go:41:18:41:45 | call to Get | provenance | |
7+
| timing.go:41:18:41:45 | call to Get | timing.go:42:25:42:36 | headerSecret | provenance | |
88
nodes
99
| timing.go:15:18:15:27 | selection of Header | semmle.label | selection of Header |
1010
| timing.go:15:18:15:45 | call to Get | semmle.label | call to Get |

‎go/ql/test/experimental/CWE-287/ImproperLdapAuth.expected

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
edges
2-
| ImproperLdapAuth.go:18:18:18:24 | selection of URL | ImproperLdapAuth.go:18:18:18:32 | call to Query |
3-
| ImproperLdapAuth.go:18:18:18:32 | call to Query | ImproperLdapAuth.go:28:23:28:34 | bindPassword |
4-
| ImproperLdapAuth.go:87:18:87:19 | "" | ImproperLdapAuth.go:97:23:97:34 | bindPassword |
2+
| ImproperLdapAuth.go:18:18:18:24 | selection of URL | ImproperLdapAuth.go:18:18:18:32 | call to Query | provenance | |
3+
| ImproperLdapAuth.go:18:18:18:32 | call to Query | ImproperLdapAuth.go:28:23:28:34 | bindPassword | provenance | |
4+
| ImproperLdapAuth.go:87:18:87:19 | "" | ImproperLdapAuth.go:97:23:97:34 | bindPassword | provenance | |
55
nodes
66
| ImproperLdapAuth.go:18:18:18:24 | selection of URL | semmle.label | selection of URL |
77
| ImproperLdapAuth.go:18:18:18:32 | call to Query | semmle.label | call to Query |

‎go/ql/test/experimental/CWE-321-V2/HardCodedKeys.expected

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,8 @@
11
edges
2-
| go-jose.v3.go:13:14:13:34 | type conversion | go-jose.v3.go:24:32:24:37 | JwtKey |
3-
| go-jose.v3.go:13:21:13:33 | "AllYourBase" | go-jose.v3.go:13:14:13:34 | type conversion |
4-
| golang-jwt-v5.go:19:15:19:35 | type conversion | golang-jwt-v5.go:27:9:27:15 | JwtKey1 |
5-
| golang-jwt-v5.go:19:22:19:34 | "AllYourBase" | golang-jwt-v5.go:19:15:19:35 | type conversion |
2+
| go-jose.v3.go:13:14:13:34 | type conversion | go-jose.v3.go:24:32:24:37 | JwtKey | provenance | |
3+
| go-jose.v3.go:13:21:13:33 | "AllYourBase" | go-jose.v3.go:13:14:13:34 | type conversion | provenance | |
4+
| golang-jwt-v5.go:19:15:19:35 | type conversion | golang-jwt-v5.go:27:9:27:15 | JwtKey1 | provenance | |
5+
| golang-jwt-v5.go:19:22:19:34 | "AllYourBase" | golang-jwt-v5.go:19:15:19:35 | type conversion | provenance | |
66
nodes
77
| go-jose.v3.go:13:14:13:34 | type conversion | semmle.label | type conversion |
88
| go-jose.v3.go:13:21:13:33 | "AllYourBase" | semmle.label | "AllYourBase" |

‎go/ql/test/experimental/CWE-321/HardcodedKeys.expected

Lines changed: 40 additions & 40 deletions
Original file line numberDiff line numberDiff line change
@@ -1,44 +1,44 @@
11
edges
2-
| HardcodedKeysBad.go:11:18:11:38 | type conversion | HardcodedKeysBad.go:19:28:19:39 | mySigningKey |
3-
| HardcodedKeysBad.go:11:25:11:37 | "AllYourBase" | HardcodedKeysBad.go:11:18:11:38 | type conversion |
4-
| main.go:33:18:33:31 | type conversion | main.go:42:28:42:39 | mySigningKey |
5-
| main.go:33:25:33:30 | "key1" | main.go:33:18:33:31 | type conversion |
6-
| main.go:50:23:50:28 | "key2" | main.go:50:16:50:29 | type conversion |
7-
| main.go:68:9:68:22 | type conversion | main.go:69:44:69:46 | key |
8-
| main.go:68:16:68:21 | `key3` | main.go:68:9:68:22 | type conversion |
9-
| main.go:73:9:73:22 | type conversion | main.go:74:66:74:68 | key |
10-
| main.go:73:16:73:21 | "key4" | main.go:73:9:73:22 | type conversion |
11-
| main.go:77:10:77:23 | type conversion | main.go:82:15:82:18 | key2 |
12-
| main.go:77:17:77:22 | "key5" | main.go:77:10:77:23 | type conversion |
13-
| main.go:88:9:88:22 | type conversion | main.go:92:41:92:43 | key |
14-
| main.go:88:16:88:21 | "key6" | main.go:88:9:88:22 | type conversion |
15-
| main.go:97:10:97:23 | type conversion | main.go:99:66:99:69 | key2 |
16-
| main.go:97:17:97:22 | "key7" | main.go:97:10:97:23 | type conversion |
17-
| main.go:105:9:105:22 | type conversion | main.go:110:30:110:32 | key |
18-
| main.go:105:16:105:21 | "key8" | main.go:105:9:105:22 | type conversion |
19-
| main.go:114:15:114:28 | type conversion | main.go:115:16:115:24 | sharedKey |
20-
| main.go:114:22:114:27 | "key9" | main.go:114:15:114:28 | type conversion |
21-
| main.go:118:23:118:37 | type conversion | main.go:121:16:121:30 | sharedKeyglobal |
22-
| main.go:118:30:118:36 | "key10" | main.go:118:23:118:37 | type conversion |
23-
| main.go:127:27:127:33 | "key11" | main.go:127:20:127:34 | type conversion |
24-
| main.go:142:14:142:28 | type conversion | main.go:144:39:144:46 | mySecret |
25-
| main.go:142:21:142:27 | "key12" | main.go:142:14:142:28 | type conversion |
26-
| main.go:149:14:149:28 | type conversion | main.go:153:11:153:18 | mySecret |
27-
| main.go:149:21:149:27 | "key13" | main.go:149:14:149:28 | type conversion |
28-
| main.go:160:12:160:26 | type conversion | main.go:161:34:161:39 | secret |
29-
| main.go:160:19:160:25 | "key14" | main.go:160:12:160:26 | type conversion |
30-
| main.go:166:12:166:26 | type conversion | main.go:167:32:167:37 | secret |
31-
| main.go:166:19:166:25 | "key15" | main.go:166:12:166:26 | type conversion |
32-
| main.go:172:12:172:26 | type conversion | main.go:173:41:173:46 | secret |
33-
| main.go:172:19:172:25 | "key16" | main.go:172:12:172:26 | type conversion |
34-
| main.go:178:12:178:26 | type conversion | main.go:179:51:179:56 | secret |
35-
| main.go:178:19:178:25 | "key17" | main.go:178:12:178:26 | type conversion |
36-
| main.go:184:12:184:26 | type conversion | main.go:185:42:185:47 | secret |
37-
| main.go:184:19:184:25 | "key18" | main.go:184:12:184:26 | type conversion |
38-
| main.go:190:12:190:26 | type conversion | main.go:193:33:193:38 | secret |
39-
| main.go:190:19:190:25 | "key19" | main.go:190:12:190:26 | type conversion |
40-
| sanitizer.go:17:9:17:21 | type conversion | sanitizer.go:18:44:18:46 | key |
41-
| sanitizer.go:17:16:17:20 | `key` | sanitizer.go:17:9:17:21 | type conversion |
2+
| HardcodedKeysBad.go:11:18:11:38 | type conversion | HardcodedKeysBad.go:19:28:19:39 | mySigningKey | provenance | |
3+
| HardcodedKeysBad.go:11:25:11:37 | "AllYourBase" | HardcodedKeysBad.go:11:18:11:38 | type conversion | provenance | |
4+
| main.go:33:18:33:31 | type conversion | main.go:42:28:42:39 | mySigningKey | provenance | |
5+
| main.go:33:25:33:30 | "key1" | main.go:33:18:33:31 | type conversion | provenance | |
6+
| main.go:50:23:50:28 | "key2" | main.go:50:16:50:29 | type conversion | provenance | |
7+
| main.go:68:9:68:22 | type conversion | main.go:69:44:69:46 | key | provenance | |
8+
| main.go:68:16:68:21 | `key3` | main.go:68:9:68:22 | type conversion | provenance | |
9+
| main.go:73:9:73:22 | type conversion | main.go:74:66:74:68 | key | provenance | |
10+
| main.go:73:16:73:21 | "key4" | main.go:73:9:73:22 | type conversion | provenance | |
11+
| main.go:77:10:77:23 | type conversion | main.go:82:15:82:18 | key2 | provenance | |
12+
| main.go:77:17:77:22 | "key5" | main.go:77:10:77:23 | type conversion | provenance | |
13+
| main.go:88:9:88:22 | type conversion | main.go:92:41:92:43 | key | provenance | |
14+
| main.go:88:16:88:21 | "key6" | main.go:88:9:88:22 | type conversion | provenance | |
15+
| main.go:97:10:97:23 | type conversion | main.go:99:66:99:69 | key2 | provenance | |
16+
| main.go:97:17:97:22 | "key7" | main.go:97:10:97:23 | type conversion | provenance | |
17+
| main.go:105:9:105:22 | type conversion | main.go:110:30:110:32 | key | provenance | |
18+
| main.go:105:16:105:21 | "key8" | main.go:105:9:105:22 | type conversion | provenance | |
19+
| main.go:114:15:114:28 | type conversion | main.go:115:16:115:24 | sharedKey | provenance | |
20+
| main.go:114:22:114:27 | "key9" | main.go:114:15:114:28 | type conversion | provenance | |
21+
| main.go:118:23:118:37 | type conversion | main.go:121:16:121:30 | sharedKeyglobal | provenance | |
22+
| main.go:118:30:118:36 | "key10" | main.go:118:23:118:37 | type conversion | provenance | |
23+
| main.go:127:27:127:33 | "key11" | main.go:127:20:127:34 | type conversion | provenance | |
24+
| main.go:142:14:142:28 | type conversion | main.go:144:39:144:46 | mySecret | provenance | |
25+
| main.go:142:21:142:27 | "key12" | main.go:142:14:142:28 | type conversion | provenance | |
26+
| main.go:149:14:149:28 | type conversion | main.go:153:11:153:18 | mySecret | provenance | |
27+
| main.go:149:21:149:27 | "key13" | main.go:149:14:149:28 | type conversion | provenance | |
28+
| main.go:160:12:160:26 | type conversion | main.go:161:34:161:39 | secret | provenance | |
29+
| main.go:160:19:160:25 | "key14" | main.go:160:12:160:26 | type conversion | provenance | |
30+
| main.go:166:12:166:26 | type conversion | main.go:167:32:167:37 | secret | provenance | |
31+
| main.go:166:19:166:25 | "key15" | main.go:166:12:166:26 | type conversion | provenance | |
32+
| main.go:172:12:172:26 | type conversion | main.go:173:41:173:46 | secret | provenance | |
33+
| main.go:172:19:172:25 | "key16" | main.go:172:12:172:26 | type conversion | provenance | |
34+
| main.go:178:12:178:26 | type conversion | main.go:179:51:179:56 | secret | provenance | |
35+
| main.go:178:19:178:25 | "key17" | main.go:178:12:178:26 | type conversion | provenance | |
36+
| main.go:184:12:184:26 | type conversion | main.go:185:42:185:47 | secret | provenance | |
37+
| main.go:184:19:184:25 | "key18" | main.go:184:12:184:26 | type conversion | provenance | |
38+
| main.go:190:12:190:26 | type conversion | main.go:193:33:193:38 | secret | provenance | |
39+
| main.go:190:19:190:25 | "key19" | main.go:190:12:190:26 | type conversion | provenance | |
40+
| sanitizer.go:17:9:17:21 | type conversion | sanitizer.go:18:44:18:46 | key | provenance | |
41+
| sanitizer.go:17:16:17:20 | `key` | sanitizer.go:17:9:17:21 | type conversion | provenance | |
4242
nodes
4343
| HardcodedKeysBad.go:11:18:11:38 | type conversion | semmle.label | type conversion |
4444
| HardcodedKeysBad.go:11:25:11:37 | "AllYourBase" | semmle.label | "AllYourBase" |

‎go/ql/test/experimental/CWE-347/ParseJWTWithoutVerification.expected

Lines changed: 12 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -1,16 +1,16 @@
11
edges
2-
| go-jose.v3.go:25:16:25:20 | selection of URL | go-jose.v3.go:25:16:25:28 | call to Query |
3-
| go-jose.v3.go:25:16:25:28 | call to Query | go-jose.v3.go:25:16:25:47 | call to Get |
4-
| go-jose.v3.go:25:16:25:47 | call to Get | go-jose.v3.go:26:15:26:25 | signedToken |
5-
| go-jose.v3.go:26:15:26:25 | signedToken | go-jose.v3.go:29:19:29:29 | definition of signedToken |
6-
| go-jose.v3.go:29:19:29:29 | definition of signedToken | go-jose.v3.go:31:37:31:47 | signedToken |
7-
| go-jose.v3.go:31:2:31:48 | ... := ...[0] | go-jose.v3.go:33:12:33:23 | DecodedToken |
8-
| go-jose.v3.go:31:37:31:47 | signedToken | go-jose.v3.go:31:2:31:48 | ... := ...[0] |
9-
| golang-jwt-v5.go:28:16:28:20 | selection of URL | golang-jwt-v5.go:28:16:28:28 | call to Query |
10-
| golang-jwt-v5.go:28:16:28:28 | call to Query | golang-jwt-v5.go:28:16:28:47 | call to Get |
11-
| golang-jwt-v5.go:28:16:28:47 | call to Get | golang-jwt-v5.go:29:25:29:35 | signedToken |
12-
| golang-jwt-v5.go:29:25:29:35 | signedToken | golang-jwt-v5.go:32:29:32:39 | definition of signedToken |
13-
| golang-jwt-v5.go:32:29:32:39 | definition of signedToken | golang-jwt-v5.go:34:58:34:68 | signedToken |
2+
| go-jose.v3.go:25:16:25:20 | selection of URL | go-jose.v3.go:25:16:25:28 | call to Query | provenance | |
3+
| go-jose.v3.go:25:16:25:28 | call to Query | go-jose.v3.go:25:16:25:47 | call to Get | provenance | |
4+
| go-jose.v3.go:25:16:25:47 | call to Get | go-jose.v3.go:26:15:26:25 | signedToken | provenance | |
5+
| go-jose.v3.go:26:15:26:25 | signedToken | go-jose.v3.go:29:19:29:29 | definition of signedToken | provenance | |
6+
| go-jose.v3.go:29:19:29:29 | definition of signedToken | go-jose.v3.go:31:37:31:47 | signedToken | provenance | |
7+
| go-jose.v3.go:31:2:31:48 | ... := ...[0] | go-jose.v3.go:33:12:33:23 | DecodedToken | provenance | |
8+
| go-jose.v3.go:31:37:31:47 | signedToken | go-jose.v3.go:31:2:31:48 | ... := ...[0] | provenance | |
9+
| golang-jwt-v5.go:28:16:28:20 | selection of URL | golang-jwt-v5.go:28:16:28:28 | call to Query | provenance | |
10+
| golang-jwt-v5.go:28:16:28:28 | call to Query | golang-jwt-v5.go:28:16:28:47 | call to Get | provenance | |
11+
| golang-jwt-v5.go:28:16:28:47 | call to Get | golang-jwt-v5.go:29:25:29:35 | signedToken | provenance | |
12+
| golang-jwt-v5.go:29:25:29:35 | signedToken | golang-jwt-v5.go:32:29:32:39 | definition of signedToken | provenance | |
13+
| golang-jwt-v5.go:32:29:32:39 | definition of signedToken | golang-jwt-v5.go:34:58:34:68 | signedToken | provenance | |
1414
nodes
1515
| go-jose.v3.go:25:16:25:20 | selection of URL | semmle.label | selection of URL |
1616
| go-jose.v3.go:25:16:25:28 | call to Query | semmle.label | call to Query |

0 commit comments

Comments
 (0)