Skip to content

Commit 5787406

Browse files
jorgectfjorgectf
committed
Add .expected
1 parent 1320eee commit 5787406

File tree

1 file changed

+87
-0
lines changed

1 file changed

+87
-0
lines changed

‎python/ql/test/experimental/query-tests/Security/CWE-287/ImproperLdapAuth.expected

Lines changed: 87 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,87 @@
1+
edges
2+
| auth_bad_2.py:14:10:14:16 | ControlFlowNode for request | auth_bad_2.py:15:21:15:27 | ControlFlowNode for request |
3+
| auth_bad_2.py:14:10:14:16 | ControlFlowNode for request | auth_bad_2.py:15:21:15:32 | ControlFlowNode for Attribute |
4+
| auth_bad_2.py:15:21:15:27 | ControlFlowNode for request | auth_bad_2.py:15:21:15:32 | ControlFlowNode for Attribute |
5+
| auth_bad_2.py:15:21:15:32 | ControlFlowNode for Attribute | auth_bad_2.py:15:21:15:42 | ControlFlowNode for Subscript |
6+
| auth_bad_2.py:15:21:15:42 | ControlFlowNode for Subscript | auth_bad_2.py:19:61:19:73 | ControlFlowNode for search_filter |
7+
| auth_bad_2.py:29:10:29:16 | ControlFlowNode for request | auth_bad_2.py:30:21:30:27 | ControlFlowNode for request |
8+
| auth_bad_2.py:29:10:29:16 | ControlFlowNode for request | auth_bad_2.py:30:21:30:32 | ControlFlowNode for Attribute |
9+
| auth_bad_2.py:30:21:30:27 | ControlFlowNode for request | auth_bad_2.py:30:21:30:32 | ControlFlowNode for Attribute |
10+
| auth_bad_2.py:30:21:30:32 | ControlFlowNode for Attribute | auth_bad_2.py:30:21:30:42 | ControlFlowNode for Subscript |
11+
| auth_bad_2.py:30:21:30:42 | ControlFlowNode for Subscript | auth_bad_2.py:34:61:34:73 | ControlFlowNode for search_filter |
12+
| auth_bad_2.py:44:10:44:16 | ControlFlowNode for request | auth_bad_2.py:45:21:45:27 | ControlFlowNode for request |
13+
| auth_bad_2.py:44:10:44:16 | ControlFlowNode for request | auth_bad_2.py:45:21:45:32 | ControlFlowNode for Attribute |
14+
| auth_bad_2.py:45:21:45:27 | ControlFlowNode for request | auth_bad_2.py:45:21:45:32 | ControlFlowNode for Attribute |
15+
| auth_bad_2.py:45:21:45:32 | ControlFlowNode for Attribute | auth_bad_2.py:45:21:45:42 | ControlFlowNode for Subscript |
16+
| auth_bad_2.py:45:21:45:42 | ControlFlowNode for Subscript | auth_bad_2.py:49:61:49:73 | ControlFlowNode for search_filter |
17+
| auth_bad_2.py:59:10:59:16 | ControlFlowNode for request | auth_bad_2.py:60:21:60:27 | ControlFlowNode for request |
18+
| auth_bad_2.py:59:10:59:16 | ControlFlowNode for request | auth_bad_2.py:60:21:60:32 | ControlFlowNode for Attribute |
19+
| auth_bad_2.py:60:21:60:27 | ControlFlowNode for request | auth_bad_2.py:60:21:60:32 | ControlFlowNode for Attribute |
20+
| auth_bad_2.py:60:21:60:32 | ControlFlowNode for Attribute | auth_bad_2.py:60:21:60:42 | ControlFlowNode for Subscript |
21+
| auth_bad_2.py:60:21:60:42 | ControlFlowNode for Subscript | auth_bad_2.py:64:61:64:73 | ControlFlowNode for search_filter |
22+
| auth_bad_3.py:14:10:14:16 | ControlFlowNode for request | auth_bad_3.py:15:21:15:27 | ControlFlowNode for request |
23+
| auth_bad_3.py:14:10:14:16 | ControlFlowNode for request | auth_bad_3.py:15:21:15:32 | ControlFlowNode for Attribute |
24+
| auth_bad_3.py:15:21:15:27 | ControlFlowNode for request | auth_bad_3.py:15:21:15:32 | ControlFlowNode for Attribute |
25+
| auth_bad_3.py:15:21:15:32 | ControlFlowNode for Attribute | auth_bad_3.py:15:21:15:42 | ControlFlowNode for Subscript |
26+
| auth_bad_3.py:15:21:15:42 | ControlFlowNode for Subscript | auth_bad_3.py:19:51:19:63 | ControlFlowNode for search_filter |
27+
| auth_bad_3.py:29:10:29:16 | ControlFlowNode for request | auth_bad_3.py:30:21:30:27 | ControlFlowNode for request |
28+
| auth_bad_3.py:29:10:29:16 | ControlFlowNode for request | auth_bad_3.py:30:21:30:32 | ControlFlowNode for Attribute |
29+
| auth_bad_3.py:30:21:30:27 | ControlFlowNode for request | auth_bad_3.py:30:21:30:32 | ControlFlowNode for Attribute |
30+
| auth_bad_3.py:30:21:30:32 | ControlFlowNode for Attribute | auth_bad_3.py:30:21:30:42 | ControlFlowNode for Subscript |
31+
| auth_bad_3.py:30:21:30:42 | ControlFlowNode for Subscript | auth_bad_3.py:34:51:34:63 | ControlFlowNode for search_filter |
32+
| auth_bad_3.py:44:10:44:16 | ControlFlowNode for request | auth_bad_3.py:45:21:45:27 | ControlFlowNode for request |
33+
| auth_bad_3.py:44:10:44:16 | ControlFlowNode for request | auth_bad_3.py:45:21:45:32 | ControlFlowNode for Attribute |
34+
| auth_bad_3.py:45:21:45:27 | ControlFlowNode for request | auth_bad_3.py:45:21:45:32 | ControlFlowNode for Attribute |
35+
| auth_bad_3.py:45:21:45:32 | ControlFlowNode for Attribute | auth_bad_3.py:45:21:45:42 | ControlFlowNode for Subscript |
36+
| auth_bad_3.py:45:21:45:42 | ControlFlowNode for Subscript | auth_bad_3.py:49:51:49:63 | ControlFlowNode for search_filter |
37+
nodes
38+
| auth_bad_2.py:14:10:14:16 | ControlFlowNode for request | semmle.label | ControlFlowNode for request |
39+
| auth_bad_2.py:15:21:15:27 | ControlFlowNode for request | semmle.label | ControlFlowNode for request |
40+
| auth_bad_2.py:15:21:15:32 | ControlFlowNode for Attribute | semmle.label | ControlFlowNode for Attribute |
41+
| auth_bad_2.py:15:21:15:42 | ControlFlowNode for Subscript | semmle.label | ControlFlowNode for Subscript |
42+
| auth_bad_2.py:19:61:19:73 | ControlFlowNode for search_filter | semmle.label | ControlFlowNode for search_filter |
43+
| auth_bad_2.py:29:10:29:16 | ControlFlowNode for request | semmle.label | ControlFlowNode for request |
44+
| auth_bad_2.py:30:21:30:27 | ControlFlowNode for request | semmle.label | ControlFlowNode for request |
45+
| auth_bad_2.py:30:21:30:32 | ControlFlowNode for Attribute | semmle.label | ControlFlowNode for Attribute |
46+
| auth_bad_2.py:30:21:30:42 | ControlFlowNode for Subscript | semmle.label | ControlFlowNode for Subscript |
47+
| auth_bad_2.py:34:61:34:73 | ControlFlowNode for search_filter | semmle.label | ControlFlowNode for search_filter |
48+
| auth_bad_2.py:44:10:44:16 | ControlFlowNode for request | semmle.label | ControlFlowNode for request |
49+
| auth_bad_2.py:45:21:45:27 | ControlFlowNode for request | semmle.label | ControlFlowNode for request |
50+
| auth_bad_2.py:45:21:45:32 | ControlFlowNode for Attribute | semmle.label | ControlFlowNode for Attribute |
51+
| auth_bad_2.py:45:21:45:42 | ControlFlowNode for Subscript | semmle.label | ControlFlowNode for Subscript |
52+
| auth_bad_2.py:49:61:49:73 | ControlFlowNode for search_filter | semmle.label | ControlFlowNode for search_filter |
53+
| auth_bad_2.py:59:10:59:16 | ControlFlowNode for request | semmle.label | ControlFlowNode for request |
54+
| auth_bad_2.py:60:21:60:27 | ControlFlowNode for request | semmle.label | ControlFlowNode for request |
55+
| auth_bad_2.py:60:21:60:32 | ControlFlowNode for Attribute | semmle.label | ControlFlowNode for Attribute |
56+
| auth_bad_2.py:60:21:60:42 | ControlFlowNode for Subscript | semmle.label | ControlFlowNode for Subscript |
57+
| auth_bad_2.py:64:61:64:73 | ControlFlowNode for search_filter | semmle.label | ControlFlowNode for search_filter |
58+
| auth_bad_3.py:14:10:14:16 | ControlFlowNode for request | semmle.label | ControlFlowNode for request |
59+
| auth_bad_3.py:15:21:15:27 | ControlFlowNode for request | semmle.label | ControlFlowNode for request |
60+
| auth_bad_3.py:15:21:15:32 | ControlFlowNode for Attribute | semmle.label | ControlFlowNode for Attribute |
61+
| auth_bad_3.py:15:21:15:42 | ControlFlowNode for Subscript | semmle.label | ControlFlowNode for Subscript |
62+
| auth_bad_3.py:19:51:19:63 | ControlFlowNode for search_filter | semmle.label | ControlFlowNode for search_filter |
63+
| auth_bad_3.py:29:10:29:16 | ControlFlowNode for request | semmle.label | ControlFlowNode for request |
64+
| auth_bad_3.py:30:21:30:27 | ControlFlowNode for request | semmle.label | ControlFlowNode for request |
65+
| auth_bad_3.py:30:21:30:32 | ControlFlowNode for Attribute | semmle.label | ControlFlowNode for Attribute |
66+
| auth_bad_3.py:30:21:30:42 | ControlFlowNode for Subscript | semmle.label | ControlFlowNode for Subscript |
67+
| auth_bad_3.py:34:51:34:63 | ControlFlowNode for search_filter | semmle.label | ControlFlowNode for search_filter |
68+
| auth_bad_3.py:44:10:44:16 | ControlFlowNode for request | semmle.label | ControlFlowNode for request |
69+
| auth_bad_3.py:45:21:45:27 | ControlFlowNode for request | semmle.label | ControlFlowNode for request |
70+
| auth_bad_3.py:45:21:45:32 | ControlFlowNode for Attribute | semmle.label | ControlFlowNode for Attribute |
71+
| auth_bad_3.py:45:21:45:42 | ControlFlowNode for Subscript | semmle.label | ControlFlowNode for Subscript |
72+
| auth_bad_3.py:49:51:49:63 | ControlFlowNode for search_filter | semmle.label | ControlFlowNode for search_filter |
73+
#select
74+
| auth_bad_2.py:19:61:19:73 | ControlFlowNode for search_filter | auth_bad_2.py:14:10:14:16 | ControlFlowNode for request | auth_bad_2.py:19:61:19:73 | ControlFlowNode for search_filter | $@ LDAP query parameter contains $@ and is executed without authentication. | auth_bad_2.py:19:61:19:73 | ControlFlowNode for search_filter | This | auth_bad_2.py:14:10:14:16 | ControlFlowNode for request | a user-provided value |
75+
| auth_bad_2.py:19:61:19:73 | ControlFlowNode for search_filter | auth_bad_2.py:15:21:15:27 | ControlFlowNode for request | auth_bad_2.py:19:61:19:73 | ControlFlowNode for search_filter | $@ LDAP query parameter contains $@ and is executed without authentication. | auth_bad_2.py:19:61:19:73 | ControlFlowNode for search_filter | This | auth_bad_2.py:15:21:15:27 | ControlFlowNode for request | a user-provided value |
76+
| auth_bad_2.py:34:61:34:73 | ControlFlowNode for search_filter | auth_bad_2.py:29:10:29:16 | ControlFlowNode for request | auth_bad_2.py:34:61:34:73 | ControlFlowNode for search_filter | $@ LDAP query parameter contains $@ and is executed without authentication. | auth_bad_2.py:34:61:34:73 | ControlFlowNode for search_filter | This | auth_bad_2.py:29:10:29:16 | ControlFlowNode for request | a user-provided value |
77+
| auth_bad_2.py:34:61:34:73 | ControlFlowNode for search_filter | auth_bad_2.py:30:21:30:27 | ControlFlowNode for request | auth_bad_2.py:34:61:34:73 | ControlFlowNode for search_filter | $@ LDAP query parameter contains $@ and is executed without authentication. | auth_bad_2.py:34:61:34:73 | ControlFlowNode for search_filter | This | auth_bad_2.py:30:21:30:27 | ControlFlowNode for request | a user-provided value |
78+
| auth_bad_2.py:49:61:49:73 | ControlFlowNode for search_filter | auth_bad_2.py:44:10:44:16 | ControlFlowNode for request | auth_bad_2.py:49:61:49:73 | ControlFlowNode for search_filter | $@ LDAP query parameter contains $@ and is executed without authentication. | auth_bad_2.py:49:61:49:73 | ControlFlowNode for search_filter | This | auth_bad_2.py:44:10:44:16 | ControlFlowNode for request | a user-provided value |
79+
| auth_bad_2.py:49:61:49:73 | ControlFlowNode for search_filter | auth_bad_2.py:45:21:45:27 | ControlFlowNode for request | auth_bad_2.py:49:61:49:73 | ControlFlowNode for search_filter | $@ LDAP query parameter contains $@ and is executed without authentication. | auth_bad_2.py:49:61:49:73 | ControlFlowNode for search_filter | This | auth_bad_2.py:45:21:45:27 | ControlFlowNode for request | a user-provided value |
80+
| auth_bad_2.py:64:61:64:73 | ControlFlowNode for search_filter | auth_bad_2.py:59:10:59:16 | ControlFlowNode for request | auth_bad_2.py:64:61:64:73 | ControlFlowNode for search_filter | $@ LDAP query parameter contains $@ and is executed without authentication. | auth_bad_2.py:64:61:64:73 | ControlFlowNode for search_filter | This | auth_bad_2.py:59:10:59:16 | ControlFlowNode for request | a user-provided value |
81+
| auth_bad_2.py:64:61:64:73 | ControlFlowNode for search_filter | auth_bad_2.py:60:21:60:27 | ControlFlowNode for request | auth_bad_2.py:64:61:64:73 | ControlFlowNode for search_filter | $@ LDAP query parameter contains $@ and is executed without authentication. | auth_bad_2.py:64:61:64:73 | ControlFlowNode for search_filter | This | auth_bad_2.py:60:21:60:27 | ControlFlowNode for request | a user-provided value |
82+
| auth_bad_3.py:19:51:19:63 | ControlFlowNode for search_filter | auth_bad_3.py:14:10:14:16 | ControlFlowNode for request | auth_bad_3.py:19:51:19:63 | ControlFlowNode for search_filter | $@ LDAP query parameter contains $@ and is executed without authentication. | auth_bad_3.py:19:51:19:63 | ControlFlowNode for search_filter | This | auth_bad_3.py:14:10:14:16 | ControlFlowNode for request | a user-provided value |
83+
| auth_bad_3.py:19:51:19:63 | ControlFlowNode for search_filter | auth_bad_3.py:15:21:15:27 | ControlFlowNode for request | auth_bad_3.py:19:51:19:63 | ControlFlowNode for search_filter | $@ LDAP query parameter contains $@ and is executed without authentication. | auth_bad_3.py:19:51:19:63 | ControlFlowNode for search_filter | This | auth_bad_3.py:15:21:15:27 | ControlFlowNode for request | a user-provided value |
84+
| auth_bad_3.py:34:51:34:63 | ControlFlowNode for search_filter | auth_bad_3.py:29:10:29:16 | ControlFlowNode for request | auth_bad_3.py:34:51:34:63 | ControlFlowNode for search_filter | $@ LDAP query parameter contains $@ and is executed without authentication. | auth_bad_3.py:34:51:34:63 | ControlFlowNode for search_filter | This | auth_bad_3.py:29:10:29:16 | ControlFlowNode for request | a user-provided value |
85+
| auth_bad_3.py:34:51:34:63 | ControlFlowNode for search_filter | auth_bad_3.py:30:21:30:27 | ControlFlowNode for request | auth_bad_3.py:34:51:34:63 | ControlFlowNode for search_filter | $@ LDAP query parameter contains $@ and is executed without authentication. | auth_bad_3.py:34:51:34:63 | ControlFlowNode for search_filter | This | auth_bad_3.py:30:21:30:27 | ControlFlowNode for request | a user-provided value |
86+
| auth_bad_3.py:49:51:49:63 | ControlFlowNode for search_filter | auth_bad_3.py:44:10:44:16 | ControlFlowNode for request | auth_bad_3.py:49:51:49:63 | ControlFlowNode for search_filter | $@ LDAP query parameter contains $@ and is executed without authentication. | auth_bad_3.py:49:51:49:63 | ControlFlowNode for search_filter | This | auth_bad_3.py:44:10:44:16 | ControlFlowNode for request | a user-provided value |
87+
| auth_bad_3.py:49:51:49:63 | ControlFlowNode for search_filter | auth_bad_3.py:45:21:45:27 | ControlFlowNode for request | auth_bad_3.py:49:51:49:63 | ControlFlowNode for search_filter | $@ LDAP query parameter contains $@ and is executed without authentication. | auth_bad_3.py:49:51:49:63 | ControlFlowNode for search_filter | This | auth_bad_3.py:45:21:45:27 | ControlFlowNode for request | a user-provided value |

0 commit comments

Comments
 (0)