Skip to content

Commit 60cf1ec

Browse files
egregius313egregius313
committed
Update test results
1 parent 0f06ddc commit 60cf1ec

File tree

2 files changed

+22
-9
lines changed

2 files changed

+22
-9
lines changed

‎go/ql/test/query-tests/Security/CWE-078/StoredCommand.expected

Lines changed: 8 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,16 +1,22 @@
11
#select
22
| StoredCommand.go:14:22:14:28 | cmdName | StoredCommand.go:11:2:11:27 | ... := ...[0] | StoredCommand.go:14:22:14:28 | cmdName | This command depends on a $@. | StoredCommand.go:11:2:11:27 | ... := ...[0] | stored value |
33
edges
4-
| StoredCommand.go:11:2:11:27 | ... := ...[0] | StoredCommand.go:13:2:13:5 | rows | provenance | |
5-
| StoredCommand.go:13:2:13:5 | rows | StoredCommand.go:13:12:13:19 | &... | provenance | FunctionModel |
4+
| StoredCommand.go:11:2:11:27 | ... := ...[0] | StoredCommand.go:13:2:13:5 | rows | provenance | Src:MaD:2 |
5+
| StoredCommand.go:13:2:13:5 | rows | StoredCommand.go:13:2:13:20 | []type{args} | provenance | MaD:3 |
6+
| StoredCommand.go:13:2:13:5 | rows | StoredCommand.go:13:2:13:20 | []type{args} [array] | provenance | MaD:3 |
7+
| StoredCommand.go:13:2:13:20 | []type{args} | StoredCommand.go:13:12:13:19 | &... | provenance | |
8+
| StoredCommand.go:13:2:13:20 | []type{args} | StoredCommand.go:14:22:14:28 | cmdName | provenance | Sink:MaD:1 |
69
| StoredCommand.go:13:2:13:20 | []type{args} [array] | StoredCommand.go:13:12:13:19 | &... | provenance | |
710
| StoredCommand.go:13:12:13:19 | &... | StoredCommand.go:13:2:13:20 | []type{args} [array] | provenance | |
811
| StoredCommand.go:13:12:13:19 | &... | StoredCommand.go:14:22:14:28 | cmdName | provenance | Sink:MaD:1 |
912
models
1013
| 1 | Sink: os/exec; ; false; Command; ; ; Argument[0]; command-injection; manual |
14+
| 2 | Source: database/sql; DB; true; Query; ; ; ReturnValue[0]; database; manual |
15+
| 3 | Summary: database/sql; Rows; true; Scan; ; ; Argument[receiver]; Argument[0].ArrayElement; taint; manual |
1116
nodes
1217
| StoredCommand.go:11:2:11:27 | ... := ...[0] | semmle.label | ... := ...[0] |
1318
| StoredCommand.go:13:2:13:5 | rows | semmle.label | rows |
19+
| StoredCommand.go:13:2:13:20 | []type{args} | semmle.label | []type{args} |
1420
| StoredCommand.go:13:2:13:20 | []type{args} [array] | semmle.label | []type{args} [array] |
1521
| StoredCommand.go:13:12:13:19 | &... | semmle.label | &... |
1622
| StoredCommand.go:14:22:14:28 | cmdName | semmle.label | cmdName |

‎go/ql/test/query-tests/Security/CWE-079/StoredXss.expected

Lines changed: 14 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -1,27 +1,34 @@
1+
#select
2+
| StoredXss.go:13:21:13:36 | ...+... | StoredXss.go:13:21:13:31 | call to Name | StoredXss.go:13:21:13:36 | ...+... | Stored cross-site scripting vulnerability due to $@. | StoredXss.go:13:21:13:31 | call to Name | stored value |
3+
| stored.go:30:22:30:25 | name | stored.go:18:3:18:28 | ... := ...[0] | stored.go:30:22:30:25 | name | Stored cross-site scripting vulnerability due to $@. | stored.go:18:3:18:28 | ... := ...[0] | stored value |
4+
| stored.go:61:22:61:25 | path | stored.go:59:30:59:33 | definition of path | stored.go:61:22:61:25 | path | Stored cross-site scripting vulnerability due to $@. | stored.go:59:30:59:33 | definition of path | stored value |
15
edges
26
| StoredXss.go:13:21:13:31 | call to Name | StoredXss.go:13:21:13:36 | ...+... | provenance | |
3-
| stored.go:18:3:18:28 | ... := ...[0] | stored.go:25:14:25:17 | rows | provenance | |
4-
| stored.go:25:14:25:17 | rows | stored.go:25:24:25:26 | &... | provenance | FunctionModel |
5-
| stored.go:25:14:25:17 | rows | stored.go:25:29:25:33 | &... | provenance | FunctionModel |
7+
| stored.go:18:3:18:28 | ... := ...[0] | stored.go:25:14:25:17 | rows | provenance | Src:MaD:1 |
8+
| stored.go:25:14:25:17 | rows | stored.go:25:14:25:34 | []type{args} | provenance | MaD:2 |
9+
| stored.go:25:14:25:17 | rows | stored.go:25:14:25:34 | []type{args} [array] | provenance | MaD:2 |
10+
| stored.go:25:14:25:34 | []type{args} | stored.go:25:24:25:26 | &... | provenance | |
11+
| stored.go:25:14:25:34 | []type{args} | stored.go:25:29:25:33 | &... | provenance | |
12+
| stored.go:25:14:25:34 | []type{args} | stored.go:30:22:30:25 | name | provenance | |
613
| stored.go:25:14:25:34 | []type{args} [array] | stored.go:25:24:25:26 | &... | provenance | |
714
| stored.go:25:14:25:34 | []type{args} [array] | stored.go:25:29:25:33 | &... | provenance | |
815
| stored.go:25:24:25:26 | &... | stored.go:25:14:25:34 | []type{args} [array] | provenance | |
916
| stored.go:25:29:25:33 | &... | stored.go:25:14:25:34 | []type{args} [array] | provenance | |
1017
| stored.go:25:29:25:33 | &... | stored.go:30:22:30:25 | name | provenance | |
1118
| stored.go:59:30:59:33 | definition of path | stored.go:61:22:61:25 | path | provenance | |
19+
models
20+
| 1 | Source: database/sql; DB; true; Query; ; ; ReturnValue[0]; database; manual |
21+
| 2 | Summary: database/sql; Rows; true; Scan; ; ; Argument[receiver]; Argument[0].ArrayElement; taint; manual |
1222
nodes
1323
| StoredXss.go:13:21:13:31 | call to Name | semmle.label | call to Name |
1424
| StoredXss.go:13:21:13:36 | ...+... | semmle.label | ...+... |
1525
| stored.go:18:3:18:28 | ... := ...[0] | semmle.label | ... := ...[0] |
1626
| stored.go:25:14:25:17 | rows | semmle.label | rows |
27+
| stored.go:25:14:25:34 | []type{args} | semmle.label | []type{args} |
1728
| stored.go:25:14:25:34 | []type{args} [array] | semmle.label | []type{args} [array] |
1829
| stored.go:25:24:25:26 | &... | semmle.label | &... |
1930
| stored.go:25:29:25:33 | &... | semmle.label | &... |
2031
| stored.go:30:22:30:25 | name | semmle.label | name |
2132
| stored.go:59:30:59:33 | definition of path | semmle.label | definition of path |
2233
| stored.go:61:22:61:25 | path | semmle.label | path |
2334
subpaths
24-
#select
25-
| StoredXss.go:13:21:13:36 | ...+... | StoredXss.go:13:21:13:31 | call to Name | StoredXss.go:13:21:13:36 | ...+... | Stored cross-site scripting vulnerability due to $@. | StoredXss.go:13:21:13:31 | call to Name | stored value |
26-
| stored.go:30:22:30:25 | name | stored.go:18:3:18:28 | ... := ...[0] | stored.go:30:22:30:25 | name | Stored cross-site scripting vulnerability due to $@. | stored.go:18:3:18:28 | ... := ...[0] | stored value |
27-
| stored.go:61:22:61:25 | path | stored.go:59:30:59:33 | definition of path | stored.go:61:22:61:25 | path | Stored cross-site scripting vulnerability due to $@. | stored.go:59:30:59:33 | definition of path | stored value |

0 commit comments

Comments
 (0)