File tree Expand file tree Collapse file tree 1 file changed +8
-0
lines changed
swift/ql/test/query-tests/Security/CWE-946 Expand file tree Collapse file tree 1 file changed +8
-0
lines changed Original file line number Diff line number Diff line change @@ -21,10 +21,18 @@ class NSPredicate {
21
21
22
22
func test( ) {
23
23
let remoteString = String ( contentsOf: URL ( string: " http://example.com/ " ) !)
24
+ let safeString = " safe "
24
25
25
26
NSPredicate ( format: remoteString, argumentArray: [ ] ) // $ hasPredicateInjection=23
27
+ NSPredicate ( format: safeString, argumentArray: [ ] ) // Safe
28
+ NSPredicate ( format: safeString, argumentArray: [ remoteString] ) // Safe
26
29
NSPredicate ( format: remoteString, arguments: CVaListPointer ( _fromUnsafeMutablePointer: UnsafeMutablePointer ( bitPattern: 0 ) !) ) // $ hasPredicateInjection=23
30
+ NSPredicate ( format: safeString, arguments: CVaListPointer ( _fromUnsafeMutablePointer: UnsafeMutablePointer ( bitPattern: 0 ) !) ) // Safe
27
31
NSPredicate ( format: remoteString) // $ hasPredicateInjection=23
32
+ NSPredicate ( format: safeString) // Safe
28
33
NSPredicate ( format: remoteString, " " as! CVarArg ) // $ hasPredicateInjection=23
34
+ NSPredicate ( format: safeString, " " as! CVarArg ) // Safe
35
+ NSPredicate ( format: safeString, remoteString as! CVarArg ) // Safe
29
36
NSPredicate ( fromMetadataQueryString: remoteString) // $ hasPredicateInjection=23
37
+ NSPredicate ( fromMetadataQueryString: safeString) // Safe
30
38
}
You can’t perform that action at this time.
0 commit comments