File tree Expand file tree Collapse file tree 9 files changed +11
-11
lines changed
lib/semmle/python/dataflow/new Expand file tree Collapse file tree 9 files changed +11
-11
lines changed Original file line number Diff line number Diff line change 362
362
" java/ql/lib/semmle/code/java/security/internal/EncryptionKeySizes.qll"
363
363
],
364
364
"Python model summaries test extension" : [
365
- " python/ql/test/experimental /dataflow/model-summaries/InlineTaintTest.ext.yml" ,
366
- " python/ql/test/experimental /dataflow/model-summaries/NormalDataflowTest.ext.yml"
365
+ " python/ql/test/library-tests /dataflow/model-summaries/InlineTaintTest.ext.yml" ,
366
+ " python/ql/test/library-tests /dataflow/model-summaries/NormalDataflowTest.ext.yml"
367
367
]
368
- }
368
+ }
Original file line number Diff line number Diff line change @@ -89,7 +89,7 @@ private module SensitiveDataModeling {
89
89
*/
90
90
DataFlow:: Node sensitiveLookupStringConst ( SensitiveDataClassification classification ) {
91
91
// Note: If this is implemented with type-tracking, we will get cross-talk as
92
- // illustrated in python/ql/test/experimental /dataflow/sensitive-data/test.py
92
+ // illustrated in python/ql/test/library-tests /dataflow/sensitive-data/test.py
93
93
exists ( DataFlow:: LocalSourceNode source |
94
94
source .asExpr ( ) .( StringLiteral ) .getText ( ) = sensitiveString ( classification ) and
95
95
source .flowsTo ( result )
Original file line number Diff line number Diff line change @@ -638,7 +638,7 @@ newtype TContent =
638
638
// name = any(AccessPathToken a).getAnArgument("Attribute")
639
639
// instead we use a qltest to alert if we write a new summary in QL that uses an
640
640
// attribute -- see
641
- // python/ql/test/experimental /dataflow/summaries-checks/missing-attribute-content.ql
641
+ // python/ql/test/library-tests /dataflow/summaries-checks/missing-attribute-content.ql
642
642
attr in [ "re" , "string" , "pattern" ]
643
643
or
644
644
//
Original file line number Diff line number Diff line change 6
6
# A thorough covering of methods in that document is found in classes.py.
7
7
#
8
8
# Intended sources should be the variable `SOURCE` and intended sinks should be
9
- # arguments to the function `SINK` (see python/ql/test/experimental /dataflow/testConfig.qll).
9
+ # arguments to the function `SINK` (see python/ql/test/library-tests /dataflow/testConfig.qll).
10
10
11
11
import sys
12
12
import os
Original file line number Diff line number Diff line change 2
2
# Headings refer to https://docs.python.org/3/reference/expressions.html,
3
3
# and are selected whenever they incur dataflow.
4
4
# Intended sources should be the variable `SOURCE` and intended sinks should be
5
- # arguments to the function `SINK` (see python/ql/test/experimental /dataflow/testConfig.qll).
5
+ # arguments to the function `SINK` (see python/ql/test/library-tests /dataflow/testConfig.qll).
6
6
#
7
7
# Functions whose name ends with "_with_local_flow" will also be tested for local flow.
8
8
#
Original file line number Diff line number Diff line change 1
1
import base64
2
2
3
- # TODO: These tests should be merged with python/ql/test/experimental /dataflow/tainttracking/defaultAdditionalTaintStep-py3/test_string.py
3
+ # TODO: These tests should be merged with python/ql/test/library-tests /dataflow/tainttracking/defaultAdditionalTaintStep-py3/test_string.py
4
4
base64 .a85decode (payload ) # $ decodeInput=payload decodeOutput=base64.a85decode(..) decodeFormat=Ascii85
5
5
base64 .b85decode (payload ) # $ decodeInput=payload decodeOutput=base64.b85decode(..) decodeFormat=Base85
6
6
base64 .decodebytes (payload ) # $ decodeInput=payload decodeOutput=base64.decodebytes(..) decodeFormat=Base64
Original file line number Diff line number Diff line change 1
1
import base64
2
2
3
- # TODO: These tests should be merged with python/ql/test/experimental /dataflow/tainttracking/defaultAdditionalTaintStep-py3/test_string.py
3
+ # TODO: These tests should be merged with python/ql/test/library-tests /dataflow/tainttracking/defaultAdditionalTaintStep-py3/test_string.py
4
4
base64 .a85encode (bs ) # $ encodeInput=bs encodeOutput=base64.a85encode(..) encodeFormat=Ascii85
5
5
base64 .b85encode (bs )# $ encodeInput=bs encodeOutput=base64.b85encode(..) encodeFormat=Base85
6
6
base64 .encodebytes (bs )# $ encodeInput=bs encodeOutput=base64.encodebytes(..) encodeFormat=Base64
Original file line number Diff line number Diff line change 26
26
shelve .open (filepath ) # $ decodeInput=filepath decodeOutput=shelve.open(..) decodeFormat=pickle decodeMayExecuteInput getAPathArgument=filepath
27
27
shelve .open (filename = filepath ) # $ decodeInput=filepath decodeOutput=shelve.open(..) decodeFormat=pickle decodeMayExecuteInput getAPathArgument=filepath
28
28
29
- # TODO: These tests should be merged with python/ql/test/experimental /dataflow/tainttracking/defaultAdditionalTaintStep/test_string.py
29
+ # TODO: These tests should be merged with python/ql/test/library-tests /dataflow/tainttracking/defaultAdditionalTaintStep/test_string.py
30
30
base64 .b64decode (payload ) # $ decodeInput=payload decodeOutput=base64.b64decode(..) decodeFormat=Base64
31
31
base64 .standard_b64decode (payload ) # $ decodeInput=payload decodeOutput=base64.standard_b64decode(..) decodeFormat=Base64
32
32
base64 .urlsafe_b64decode (payload ) # $ decodeInput=payload decodeOutput=base64.urlsafe_b64decode(..) decodeFormat=Base64
Original file line number Diff line number Diff line change 5
5
pickle .dumps (obj ) # $ MISSING: encodeInput=obj encodeOutput=pickle.dumps(..) encodeFormat=pickle encodeMayExecuteInput
6
6
marshal .dumps (obj ) # $ MISSING: encodeInput=obj encodeOutput=marshal.dumps(..) encodeFormat=marshal encodeMayExecuteInput
7
7
8
- # TODO: These tests should be merged with python/ql/test/experimental /dataflow/tainttracking/defaultAdditionalTaintStep/test_string.py
8
+ # TODO: These tests should be merged with python/ql/test/library-tests /dataflow/tainttracking/defaultAdditionalTaintStep/test_string.py
9
9
base64 .b64encode (bs ) # $ encodeInput=bs encodeOutput=base64.b64encode(..) encodeFormat=Base64
10
10
base64 .standard_b64encode (bs ) # $ encodeInput=bs encodeOutput=base64.standard_b64encode(..) encodeFormat=Base64
11
11
base64 .urlsafe_b64encode (bs ) # $ encodeInput=bs encodeOutput=base64.urlsafe_b64encode(..) encodeFormat=Base64
You can’t perform that action at this time.
0 commit comments