C++: Fix testcase.

MathiasVP · MathiasVP · commit f5d5460dde17 · 2021-02-17T10:53:31.000+01:00
diff --git a/cpp/ql/test/query-tests/Security/CWE/CWE-079/semmle/CgiXss/search.c b/cpp/ql/test/query-tests/Security/CWE/CWE-079/semmle/CgiXss/search.c
@@ -37,13 +37,13 @@ void good_server1(char* query) {
   puts(do_search(query));
 }
 
-int snprintf(char *, int, const char *, ...);
+int scanf(const char *, ...);
 
 void good_server2(char* query) {
   puts("<p>Query results for ");
   // GOOD: Only an integer is added to the page.
   int i = 0;
-  snprintf(query, 16, "value=%i", &i);
+  sscanf(query, "value=%i", &i);
   printf("\n<p>%i</p>\n", i);
 }
 

Original file line number	Diff line number	Diff line change
`@@ -37,13 +37,13 @@ void good_server1(char* query) {`
`37`	`37`	`puts(do_search(query));`
`38`	`38`	`}`
`39`	`39`
`40`		`-int snprintf(char , int, const char , ...);`
	`40`	`+int scanf(const char *, ...);`
`41`	`41`
`42`	`42`	`void good_server2(char* query) {`
`43`	`43`	`puts("<p>Query results for ");`
`44`	`44`	`// GOOD: Only an integer is added to the page.`
`45`	`45`	`int i = 0;`
`46`		`- snprintf(query, 16, "value=%i", &i);`
	`46`	`+ sscanf(query, "value=%i", &i);`
`47`	`47`	`printf("\n<p>%i</p>\n", i);`
`48`	`48`	`}`
`49`	`49`