Skip to content

Commit a533c95

Browse files
hvitvedhvitved
committed
C++: Update expected test output
1 parent d3488da commit a533c95

File tree

18 files changed

+0
-332
lines changed

18 files changed

+0
-332
lines changed

‎cpp/ql/test/experimental/query-tests/Security/CWE/CWE-193/pointer-deref/InvalidPointerDeref.expected

Lines changed: 0 additions & 128 deletions
Large diffs are not rendered by default.

‎cpp/ql/test/query-tests/Security/CWE/CWE-022/SAMATE/TaintedPath/TaintedPath.expected

Lines changed: 0 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -12,11 +12,8 @@ nodes
1212
| CWE23_Relative_Path_Traversal__char_console_fopen_11.cpp:55:27:55:38 | ... + ... | semmle.label | ... + ... |
1313
| CWE23_Relative_Path_Traversal__char_console_fopen_11.cpp:55:27:55:38 | fgets output argument | semmle.label | fgets output argument |
1414
| CWE23_Relative_Path_Traversal__char_console_fopen_11.cpp:77:23:77:26 | (const char *)... | semmle.label | (const char *)... |
15-
| CWE23_Relative_Path_Traversal__char_console_fopen_11.cpp:77:23:77:26 | (const char *)... | semmle.label | (const char *)... |
16-
| CWE23_Relative_Path_Traversal__char_console_fopen_11.cpp:77:23:77:26 | data | semmle.label | data |
1715
| CWE23_Relative_Path_Traversal__char_console_fopen_11.cpp:77:23:77:26 | data | semmle.label | data |
1816
| CWE23_Relative_Path_Traversal__char_console_fopen_11.cpp:77:23:77:26 | data | semmle.label | data |
1917
| CWE23_Relative_Path_Traversal__char_console_fopen_11.cpp:77:23:77:26 | data indirection | semmle.label | data indirection |
20-
| CWE23_Relative_Path_Traversal__char_console_fopen_11.cpp:77:23:77:26 | data indirection | semmle.label | data indirection |
2118
#select
2219
| CWE23_Relative_Path_Traversal__char_console_fopen_11.cpp:77:23:77:26 | data | CWE23_Relative_Path_Traversal__char_console_fopen_11.cpp:55:27:55:38 | ... + ... | CWE23_Relative_Path_Traversal__char_console_fopen_11.cpp:77:23:77:26 | data | This argument to a file access function is derived from $@ and then passed to fopen(filename). | CWE23_Relative_Path_Traversal__char_console_fopen_11.cpp:55:27:55:38 | ... + ... | user input (fgets) |

‎cpp/ql/test/query-tests/Security/CWE/CWE-022/semmle/tests/TaintedPath.expected

Lines changed: 0 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -12,11 +12,8 @@ nodes
1212
| test.c:9:23:9:26 | argv | semmle.label | argv |
1313
| test.c:9:23:9:26 | argv | semmle.label | argv |
1414
| test.c:17:11:17:18 | (const char *)... | semmle.label | (const char *)... |
15-
| test.c:17:11:17:18 | (const char *)... | semmle.label | (const char *)... |
16-
| test.c:17:11:17:18 | fileName | semmle.label | fileName |
1715
| test.c:17:11:17:18 | fileName | semmle.label | fileName |
1816
| test.c:17:11:17:18 | fileName | semmle.label | fileName |
1917
| test.c:17:11:17:18 | fileName indirection | semmle.label | fileName indirection |
20-
| test.c:17:11:17:18 | fileName indirection | semmle.label | fileName indirection |
2118
#select
2219
| test.c:17:11:17:18 | fileName | test.c:9:23:9:26 | argv | test.c:17:11:17:18 | fileName | This argument to a file access function is derived from $@ and then passed to fopen(filename). | test.c:9:23:9:26 | argv | user input (argv) |

‎cpp/ql/test/query-tests/Security/CWE/CWE-079/semmle/CgiXss/CgiXss.expected

Lines changed: 0 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -29,18 +29,13 @@ nodes
2929
| search.c:14:24:14:28 | *query | semmle.label | *query |
3030
| search.c:14:24:14:28 | query | semmle.label | query |
3131
| search.c:17:8:17:12 | (const char *)... | semmle.label | (const char *)... |
32-
| search.c:17:8:17:12 | (const char *)... | semmle.label | (const char *)... |
33-
| search.c:17:8:17:12 | query | semmle.label | query |
3432
| search.c:17:8:17:12 | query | semmle.label | query |
3533
| search.c:17:8:17:12 | query | semmle.label | query |
3634
| search.c:17:8:17:12 | query indirection | semmle.label | query indirection |
37-
| search.c:17:8:17:12 | query indirection | semmle.label | query indirection |
3835
| search.c:22:24:22:28 | *query | semmle.label | *query |
3936
| search.c:22:24:22:28 | query | semmle.label | query |
4037
| search.c:23:39:23:43 | query | semmle.label | query |
4138
| search.c:23:39:23:43 | query | semmle.label | query |
42-
| search.c:23:39:23:43 | query | semmle.label | query |
43-
| search.c:23:39:23:43 | query indirection | semmle.label | query indirection |
4439
| search.c:23:39:23:43 | query indirection | semmle.label | query indirection |
4540
| search.c:51:21:51:26 | call to getenv | semmle.label | call to getenv |
4641
| search.c:51:21:51:26 | call to getenv | semmle.label | call to getenv |

‎cpp/ql/test/query-tests/Security/CWE/CWE-089/SqlTainted/SqlTainted.expected

Lines changed: 0 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -18,18 +18,13 @@ nodes
1818
| test.c:15:20:15:23 | argv | semmle.label | argv |
1919
| test.c:15:20:15:23 | argv | semmle.label | argv |
2020
| test.c:21:18:21:23 | (const char *)... | semmle.label | (const char *)... |
21-
| test.c:21:18:21:23 | (const char *)... | semmle.label | (const char *)... |
2221
| test.c:21:18:21:23 | query1 | semmle.label | query1 |
2322
| test.c:21:18:21:23 | query1 indirection | semmle.label | query1 indirection |
24-
| test.c:21:18:21:23 | query1 indirection | semmle.label | query1 indirection |
2523
| test.cpp:43:27:43:30 | argv | semmle.label | argv |
2624
| test.cpp:43:27:43:30 | argv | semmle.label | argv |
2725
| test.cpp:43:27:43:33 | (const char *)... | semmle.label | (const char *)... |
28-
| test.cpp:43:27:43:33 | (const char *)... | semmle.label | (const char *)... |
2926
| test.cpp:43:27:43:33 | access to array | semmle.label | access to array |
3027
| test.cpp:43:27:43:33 | access to array | semmle.label | access to array |
31-
| test.cpp:43:27:43:33 | access to array | semmle.label | access to array |
32-
| test.cpp:43:27:43:33 | access to array indirection | semmle.label | access to array indirection |
3328
| test.cpp:43:27:43:33 | access to array indirection | semmle.label | access to array indirection |
3429
#select
3530
| test.c:21:18:21:23 | query1 | test.c:15:20:15:23 | argv | test.c:21:18:21:23 | query1 | This argument to a SQL query function is derived from $@ and then passed to mysql_query(sqlArg). | test.c:15:20:15:23 | argv | user input (argv) |

‎cpp/ql/test/query-tests/Security/CWE/CWE-114/SAMATE/UncontrolledProcessOperation/UncontrolledProcessOperation.expected

Lines changed: 0 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -17,12 +17,9 @@ nodes
1717
| test.cpp:37:73:37:76 | *data | semmle.label | *data |
1818
| test.cpp:37:73:37:76 | data | semmle.label | data |
1919
| test.cpp:43:32:43:35 | (LPCSTR)... | semmle.label | (LPCSTR)... |
20-
| test.cpp:43:32:43:35 | (LPCSTR)... | semmle.label | (LPCSTR)... |
21-
| test.cpp:43:32:43:35 | data | semmle.label | data |
2220
| test.cpp:43:32:43:35 | data | semmle.label | data |
2321
| test.cpp:43:32:43:35 | data | semmle.label | data |
2422
| test.cpp:43:32:43:35 | data indirection | semmle.label | data indirection |
25-
| test.cpp:43:32:43:35 | data indirection | semmle.label | data indirection |
2623
| test.cpp:64:30:64:35 | call to getenv | semmle.label | call to getenv |
2724
| test.cpp:64:30:64:35 | call to getenv | semmle.label | call to getenv |
2825
| test.cpp:73:24:73:27 | data | semmle.label | data |

‎cpp/ql/test/query-tests/Security/CWE/CWE-114/semmle/UncontrolledProcessOperation/UncontrolledProcessOperation.expected

Lines changed: 0 additions & 22 deletions
Original file line numberDiff line numberDiff line change
@@ -79,15 +79,11 @@ nodes
7979
| test.cpp:24:30:24:36 | command | semmle.label | command |
8080
| test.cpp:26:10:26:16 | command | semmle.label | command |
8181
| test.cpp:26:10:26:16 | command | semmle.label | command |
82-
| test.cpp:26:10:26:16 | command | semmle.label | command |
83-
| test.cpp:26:10:26:16 | command indirection | semmle.label | command indirection |
8482
| test.cpp:26:10:26:16 | command indirection | semmle.label | command indirection |
8583
| test.cpp:29:30:29:36 | *command | semmle.label | *command |
8684
| test.cpp:29:30:29:36 | command | semmle.label | command |
8785
| test.cpp:31:10:31:16 | command | semmle.label | command |
8886
| test.cpp:31:10:31:16 | command | semmle.label | command |
89-
| test.cpp:31:10:31:16 | command | semmle.label | command |
90-
| test.cpp:31:10:31:16 | command indirection | semmle.label | command indirection |
9187
| test.cpp:31:10:31:16 | command indirection | semmle.label | command indirection |
9288
| test.cpp:42:18:42:23 | call to getenv | semmle.label | call to getenv |
9389
| test.cpp:42:18:42:34 | (const char *)... | semmle.label | (const char *)... |
@@ -100,54 +96,36 @@ nodes
10096
| test.cpp:56:12:56:17 | buffer | semmle.label | buffer |
10197
| test.cpp:56:12:56:17 | fgets output argument | semmle.label | fgets output argument |
10298
| test.cpp:62:10:62:15 | (const char *)... | semmle.label | (const char *)... |
103-
| test.cpp:62:10:62:15 | (const char *)... | semmle.label | (const char *)... |
10499
| test.cpp:62:10:62:15 | buffer | semmle.label | buffer |
105100
| test.cpp:62:10:62:15 | buffer indirection | semmle.label | buffer indirection |
106-
| test.cpp:62:10:62:15 | buffer indirection | semmle.label | buffer indirection |
107101
| test.cpp:63:10:63:13 | (const char *)... | semmle.label | (const char *)... |
108-
| test.cpp:63:10:63:13 | (const char *)... | semmle.label | (const char *)... |
109-
| test.cpp:63:10:63:13 | data | semmle.label | data |
110102
| test.cpp:63:10:63:13 | data | semmle.label | data |
111103
| test.cpp:63:10:63:13 | data | semmle.label | data |
112104
| test.cpp:63:10:63:13 | data indirection | semmle.label | data indirection |
113-
| test.cpp:63:10:63:13 | data indirection | semmle.label | data indirection |
114105
| test.cpp:64:10:64:16 | (const char *)... | semmle.label | (const char *)... |
115-
| test.cpp:64:10:64:16 | (const char *)... | semmle.label | (const char *)... |
116-
| test.cpp:64:10:64:16 | (reference dereference) | semmle.label | (reference dereference) |
117106
| test.cpp:64:10:64:16 | (reference dereference) | semmle.label | (reference dereference) |
118107
| test.cpp:64:10:64:16 | dataref | semmle.label | dataref |
119108
| test.cpp:64:10:64:16 | dataref | semmle.label | dataref |
120-
| test.cpp:64:10:64:16 | dataref | semmle.label | dataref |
121-
| test.cpp:64:10:64:16 | dataref indirection | semmle.label | dataref indirection |
122109
| test.cpp:64:10:64:16 | dataref indirection | semmle.label | dataref indirection |
123110
| test.cpp:65:10:65:14 | (const char *)... | semmle.label | (const char *)... |
124-
| test.cpp:65:10:65:14 | (const char *)... | semmle.label | (const char *)... |
125111
| test.cpp:65:10:65:14 | data2 | semmle.label | data2 |
126112
| test.cpp:65:10:65:14 | data2 | semmle.label | data2 |
127-
| test.cpp:65:10:65:14 | data2 | semmle.label | data2 |
128-
| test.cpp:65:10:65:14 | data2 indirection | semmle.label | data2 indirection |
129113
| test.cpp:65:10:65:14 | data2 indirection | semmle.label | data2 indirection |
130114
| test.cpp:76:12:76:17 | buffer | semmle.label | buffer |
131115
| test.cpp:76:12:76:17 | fgets output argument | semmle.label | fgets output argument |
132116
| test.cpp:78:10:78:15 | (const char *)... | semmle.label | (const char *)... |
133-
| test.cpp:78:10:78:15 | (const char *)... | semmle.label | (const char *)... |
134117
| test.cpp:78:10:78:15 | buffer | semmle.label | buffer |
135118
| test.cpp:78:10:78:15 | buffer indirection | semmle.label | buffer indirection |
136-
| test.cpp:78:10:78:15 | buffer indirection | semmle.label | buffer indirection |
137119
| test.cpp:98:17:98:22 | buffer | semmle.label | buffer |
138120
| test.cpp:98:17:98:22 | recv output argument | semmle.label | recv output argument |
139121
| test.cpp:99:15:99:20 | (const char *)... | semmle.label | (const char *)... |
140-
| test.cpp:99:15:99:20 | (const char *)... | semmle.label | (const char *)... |
141122
| test.cpp:99:15:99:20 | buffer | semmle.label | buffer |
142123
| test.cpp:99:15:99:20 | buffer indirection | semmle.label | buffer indirection |
143-
| test.cpp:99:15:99:20 | buffer indirection | semmle.label | buffer indirection |
144124
| test.cpp:106:17:106:22 | buffer | semmle.label | buffer |
145125
| test.cpp:106:17:106:22 | recv output argument | semmle.label | recv output argument |
146126
| test.cpp:107:15:107:20 | (const char *)... | semmle.label | (const char *)... |
147-
| test.cpp:107:15:107:20 | (const char *)... | semmle.label | (const char *)... |
148127
| test.cpp:107:15:107:20 | buffer | semmle.label | buffer |
149128
| test.cpp:107:15:107:20 | buffer indirection | semmle.label | buffer indirection |
150-
| test.cpp:107:15:107:20 | buffer indirection | semmle.label | buffer indirection |
151129
#select
152130
| test.cpp:26:10:26:16 | command | test.cpp:42:18:42:23 | call to getenv | test.cpp:26:10:26:16 | command | The value of this argument may come from $@ and is being passed to system. | test.cpp:42:18:42:23 | call to getenv | call to getenv |
153131
| test.cpp:31:10:31:16 | command | test.cpp:43:18:43:23 | call to getenv | test.cpp:31:10:31:16 | command | The value of this argument may come from $@ and is being passed to system. | test.cpp:43:18:43:23 | call to getenv | call to getenv |

‎cpp/ql/test/query-tests/Security/CWE/CWE-120/semmle/tests/UnboundedWrite.expected

Lines changed: 0 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -56,43 +56,31 @@ nodes
5656
| tests.c:28:22:28:25 | argv | semmle.label | argv |
5757
| tests.c:28:22:28:25 | argv | semmle.label | argv |
5858
| tests.c:28:22:28:28 | (const char *)... | semmle.label | (const char *)... |
59-
| tests.c:28:22:28:28 | (const char *)... | semmle.label | (const char *)... |
60-
| tests.c:28:22:28:28 | access to array | semmle.label | access to array |
6159
| tests.c:28:22:28:28 | access to array | semmle.label | access to array |
6260
| tests.c:28:22:28:28 | access to array | semmle.label | access to array |
6361
| tests.c:28:22:28:28 | access to array indirection | semmle.label | access to array indirection |
64-
| tests.c:28:22:28:28 | access to array indirection | semmle.label | access to array indirection |
6562
| tests.c:29:28:29:31 | argv | semmle.label | argv |
6663
| tests.c:29:28:29:31 | argv | semmle.label | argv |
6764
| tests.c:29:28:29:34 | access to array | semmle.label | access to array |
6865
| tests.c:29:28:29:34 | access to array | semmle.label | access to array |
69-
| tests.c:29:28:29:34 | access to array | semmle.label | access to array |
70-
| tests.c:29:28:29:34 | access to array indirection | semmle.label | access to array indirection |
7166
| tests.c:29:28:29:34 | access to array indirection | semmle.label | access to array indirection |
7267
| tests.c:31:15:31:23 | array to pointer conversion | semmle.label | array to pointer conversion |
7368
| tests.c:31:15:31:23 | array to pointer conversion | semmle.label | array to pointer conversion |
7469
| tests.c:31:15:31:23 | buffer100 | semmle.label | buffer100 |
7570
| tests.c:31:15:31:23 | buffer100 | semmle.label | buffer100 |
76-
| tests.c:31:15:31:23 | buffer100 | semmle.label | buffer100 |
77-
| tests.c:31:15:31:23 | buffer100 indirection | semmle.label | buffer100 indirection |
7871
| tests.c:31:15:31:23 | buffer100 indirection | semmle.label | buffer100 indirection |
7972
| tests.c:31:15:31:23 | scanf output argument | semmle.label | scanf output argument |
8073
| tests.c:33:21:33:29 | array to pointer conversion | semmle.label | array to pointer conversion |
8174
| tests.c:33:21:33:29 | array to pointer conversion | semmle.label | array to pointer conversion |
8275
| tests.c:33:21:33:29 | buffer100 | semmle.label | buffer100 |
8376
| tests.c:33:21:33:29 | buffer100 | semmle.label | buffer100 |
84-
| tests.c:33:21:33:29 | buffer100 | semmle.label | buffer100 |
85-
| tests.c:33:21:33:29 | buffer100 indirection | semmle.label | buffer100 indirection |
8677
| tests.c:33:21:33:29 | buffer100 indirection | semmle.label | buffer100 indirection |
8778
| tests.c:34:10:34:13 | argv | semmle.label | argv |
8879
| tests.c:34:10:34:13 | argv | semmle.label | argv |
8980
| tests.c:34:10:34:16 | (const char *)... | semmle.label | (const char *)... |
90-
| tests.c:34:10:34:16 | (const char *)... | semmle.label | (const char *)... |
91-
| tests.c:34:10:34:16 | access to array | semmle.label | access to array |
9281
| tests.c:34:10:34:16 | access to array | semmle.label | access to array |
9382
| tests.c:34:10:34:16 | access to array | semmle.label | access to array |
9483
| tests.c:34:10:34:16 | access to array indirection | semmle.label | access to array indirection |
95-
| tests.c:34:10:34:16 | access to array indirection | semmle.label | access to array indirection |
9684
#select
9785
| tests.c:28:3:28:9 | call to sprintf | tests.c:28:22:28:25 | argv | tests.c:28:22:28:28 | access to array | This 'call to sprintf' with input from $@ may overflow the destination. | tests.c:28:22:28:25 | argv | argv |
9886
| tests.c:29:3:29:9 | call to sprintf | tests.c:29:28:29:31 | argv | tests.c:29:28:29:34 | access to array | This 'call to sprintf' with input from $@ may overflow the destination. | tests.c:29:28:29:31 | argv | argv |

‎cpp/ql/test/query-tests/Security/CWE/CWE-134/SAMATE/UncontrolledFormatString.expected

Lines changed: 0 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -27,26 +27,18 @@ nodes
2727
| char_connect_socket_w32_vsnprintf_01_bad.c:94:55:94:68 | ... + ... | semmle.label | ... + ... |
2828
| char_connect_socket_w32_vsnprintf_01_bad.c:125:15:125:18 | data | semmle.label | data |
2929
| char_connect_socket_w32_vsnprintf_01_bad.c:125:15:125:18 | data | semmle.label | data |
30-
| char_connect_socket_w32_vsnprintf_01_bad.c:125:15:125:18 | data | semmle.label | data |
31-
| char_connect_socket_w32_vsnprintf_01_bad.c:125:15:125:18 | data indirection | semmle.label | data indirection |
3230
| char_connect_socket_w32_vsnprintf_01_bad.c:125:15:125:18 | data indirection | semmle.label | data indirection |
3331
| char_console_fprintf_01_bad.c:30:23:30:35 | ... + ... | semmle.label | ... + ... |
3432
| char_console_fprintf_01_bad.c:30:23:30:35 | fgets output argument | semmle.label | fgets output argument |
3533
| char_console_fprintf_01_bad.c:49:21:49:24 | (const char *)... | semmle.label | (const char *)... |
36-
| char_console_fprintf_01_bad.c:49:21:49:24 | (const char *)... | semmle.label | (const char *)... |
37-
| char_console_fprintf_01_bad.c:49:21:49:24 | data | semmle.label | data |
3834
| char_console_fprintf_01_bad.c:49:21:49:24 | data | semmle.label | data |
3935
| char_console_fprintf_01_bad.c:49:21:49:24 | data | semmle.label | data |
4036
| char_console_fprintf_01_bad.c:49:21:49:24 | data indirection | semmle.label | data indirection |
41-
| char_console_fprintf_01_bad.c:49:21:49:24 | data indirection | semmle.label | data indirection |
4237
| char_environment_fprintf_01_bad.c:27:30:27:35 | call to getenv | semmle.label | call to getenv |
4338
| char_environment_fprintf_01_bad.c:27:30:27:35 | call to getenv | semmle.label | call to getenv |
4439
| char_environment_fprintf_01_bad.c:36:21:36:24 | (const char *)... | semmle.label | (const char *)... |
45-
| char_environment_fprintf_01_bad.c:36:21:36:24 | (const char *)... | semmle.label | (const char *)... |
4640
| char_environment_fprintf_01_bad.c:36:21:36:24 | data | semmle.label | data |
4741
| char_environment_fprintf_01_bad.c:36:21:36:24 | data | semmle.label | data |
48-
| char_environment_fprintf_01_bad.c:36:21:36:24 | data | semmle.label | data |
49-
| char_environment_fprintf_01_bad.c:36:21:36:24 | data indirection | semmle.label | data indirection |
5042
| char_environment_fprintf_01_bad.c:36:21:36:24 | data indirection | semmle.label | data indirection |
5143
#select
5244
| char_connect_socket_w32_vsnprintf_01_bad.c:125:15:125:18 | data | char_connect_socket_w32_vsnprintf_01_bad.c:94:55:94:68 | ... + ... | char_connect_socket_w32_vsnprintf_01_bad.c:125:15:125:18 | data | The value of this argument may come from $@ and is being used as a formatting argument to badVaSink(data), which calls vsnprintf(format). | char_connect_socket_w32_vsnprintf_01_bad.c:94:55:94:68 | ... + ... | recv |

0 commit comments

Comments
 (0)