Skip to content

Commit 17741af

Browse files
committed
Rust: Fill out a few gaps in the models.
1 parent b311864 commit 17741af

File tree

2 files changed

+3
-1
lines changed

2 files changed

+3
-1
lines changed

rust/ql/lib/codeql/rust/frameworks/rusqlite.model.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -5,10 +5,12 @@ extensions:
55
data:
66
- ["<rusqlite::Connection>::execute", "Argument[0]", "sql-injection", "manual"]
77
- ["<rusqlite::Connection>::execute_batch", "Argument[0]", "sql-injection", "manual"]
8+
- ["<rusqlite::Connection>::prepare_cached", "Argument[0]", "sql-injection", "manual"]
89
- ["<rusqlite::Connection>::prepare", "Argument[0]", "sql-injection", "manual"]
910
- [<rusqlite::Connection>::prepare_with_flags", "Argument[0]", "sql-injection", "manual"]
1011
- ["<rusqlite::Connection>::query_row", "Argument[0]", "sql-injection", "manual"]
1112
- ["<rusqlite::Connection>::query_row_and_then", "Argument[0]", "sql-injection", "manual"]
13+
- ["<rusqlite::Connection>::query_one", "Argument[0]", "sql-injection", "manual"]
1214
- addsTo:
1315
pack: codeql/rust-all
1416
extensible: sourceModel

rust/ql/test/library-tests/frameworks/rusqlite/main.rs

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -48,7 +48,7 @@ fn main() -> Result<(), Box<dyn std::error::Error>> {
4848
})
4949
})?;
5050

51-
_ = connection.prepare_cached("SELECT id, name, age FROM person")?; // $ MISSING: sql-sink
51+
_ = connection.prepare_cached("SELECT id, name, age FROM person")?; // $ sql-sink
5252
_ = connection.prepare_with_flags("SELECT id, name, age FROM person", rusqlite::PrepFlags::empty())?; // $ MISSING: ql-sink
5353
_ = connection.query_row_and_then("SELECT id, name, age FROM person", [], |row| { // $ sql-sink
5454
let row: &rusqlite::Row<'_> = row;

0 commit comments

Comments
 (0)