Skip to content

Commit 0f8ebd1

Browse files
yoffRasmusWL
andauthored
Update python/ql/test/experimental/dataflow/model-summaries/model_summaries.py
Co-authored-by: Rasmus Wriedt Larsen <[email protected]>
1 parent cb2de69 commit 0f8ebd1

File tree

1 file changed

+7
-0
lines changed

1 file changed

+7
-0
lines changed

python/ql/test/experimental/dataflow/model-summaries/model_summaries.py

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -120,7 +120,14 @@ def explicit_identity(x):
120120
tainted_list_implicit[0] # $ tainted
121121
)
122122

123+
# Modeled flow-summary is not value preserving
123124
from json import MS_loads as json_loads
125+
126+
# so no data-flow
127+
SINK_F(json_loads(SOURCE))
128+
SINK_F(json_loads(SOURCE)[0])
129+
130+
# but has taint-flow
124131
tainted_resultlist = json_loads(TAINTED_STRING)
125132
ensure_tainted(
126133
tainted_resultlist, # $ tainted

0 commit comments

Comments
 (0)