Skip to content

Commit 1ac7591

Browse files
committed
JS: Update missed flow in capture-flow.js
We previously caught this flow because of a heuristic in capture flow. We'll have to fix it properly later.
1 parent 9dad2d6 commit 1ac7591

File tree

3 files changed

+3
-3
lines changed

3 files changed

+3
-3
lines changed

javascript/ql/test/library-tests/TaintTracking/BasicTaintTracking.expected

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -17,6 +17,7 @@ legacyDataFlowDifference
1717
| callbacks.js:44:17:44:24 | source() | callbacks.js:38:35:38:35 | x | only flow with NEW data flow library |
1818
| capture-flow.js:89:13:89:20 | source() | capture-flow.js:89:6:89:21 | test3c(source()) | only flow with NEW data flow library |
1919
| capture-flow.js:101:12:101:19 | source() | capture-flow.js:102:6:102:20 | test5("safe")() | only flow with OLD data flow library |
20+
| capture-flow.js:126:25:126:32 | source() | capture-flow.js:123:14:123:26 | orderingTaint | only flow with OLD data flow library |
2021
| constructor-calls.js:4:18:4:25 | source() | constructor-calls.js:40:8:40:14 | e.taint | only flow with NEW data flow library |
2122
| constructor-calls.js:4:18:4:25 | source() | constructor-calls.js:44:8:44:19 | f_safe.taint | only flow with NEW data flow library |
2223
| constructor-calls.js:20:15:20:22 | source() | constructor-calls.js:39:8:39:14 | e.param | only flow with NEW data flow library |
@@ -109,7 +110,6 @@ flow
109110
| capture-flow.js:101:12:101:19 | source() | capture-flow.js:101:6:101:22 | test5(source())() |
110111
| capture-flow.js:110:12:110:19 | source() | capture-flow.js:106:14:106:14 | x |
111112
| capture-flow.js:118:37:118:44 | source() | capture-flow.js:114:14:114:14 | x |
112-
| capture-flow.js:126:25:126:32 | source() | capture-flow.js:123:14:123:26 | orderingTaint |
113113
| capture-flow.js:126:25:126:32 | source() | capture-flow.js:129:14:129:26 | orderingTaint |
114114
| capture-flow.js:177:26:177:33 | source() | capture-flow.js:173:14:173:14 | x |
115115
| capture-flow.js:187:34:187:41 | source() | capture-flow.js:183:14:183:14 | x |

javascript/ql/test/library-tests/TaintTracking/DataFlowTracking.expected

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -11,6 +11,7 @@ legacyDataFlowDifference
1111
| callbacks.js:44:17:44:24 | source() | callbacks.js:38:35:38:35 | x | only flow with NEW data flow library |
1212
| capture-flow.js:89:13:89:20 | source() | capture-flow.js:89:6:89:21 | test3c(source()) | only flow with NEW data flow library |
1313
| capture-flow.js:101:12:101:19 | source() | capture-flow.js:102:6:102:20 | test5("safe")() | only flow with OLD data flow library |
14+
| capture-flow.js:126:25:126:32 | source() | capture-flow.js:123:14:123:26 | orderingTaint | only flow with OLD data flow library |
1415
| constructor-calls.js:4:18:4:25 | source() | constructor-calls.js:40:8:40:14 | e.taint | only flow with NEW data flow library |
1516
| constructor-calls.js:4:18:4:25 | source() | constructor-calls.js:44:8:44:19 | f_safe.taint | only flow with NEW data flow library |
1617
| constructor-calls.js:20:15:20:22 | source() | constructor-calls.js:39:8:39:14 | e.param | only flow with NEW data flow library |
@@ -84,7 +85,6 @@ flow
8485
| capture-flow.js:101:12:101:19 | source() | capture-flow.js:101:6:101:22 | test5(source())() |
8586
| capture-flow.js:110:12:110:19 | source() | capture-flow.js:106:14:106:14 | x |
8687
| capture-flow.js:118:37:118:44 | source() | capture-flow.js:114:14:114:14 | x |
87-
| capture-flow.js:126:25:126:32 | source() | capture-flow.js:123:14:123:26 | orderingTaint |
8888
| capture-flow.js:126:25:126:32 | source() | capture-flow.js:129:14:129:26 | orderingTaint |
8989
| capture-flow.js:177:26:177:33 | source() | capture-flow.js:173:14:173:14 | x |
9090
| capture-flow.js:187:34:187:41 | source() | capture-flow.js:183:14:183:14 | x |

javascript/ql/test/library-tests/TaintTracking/capture-flow.js

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -120,7 +120,7 @@ global.doEscape(testEscapeViaReturn(source()));
120120
function ordering() {
121121
var orderingTaint;
122122
global.addEventListener('click', () => {
123-
sink(orderingTaint); // NOT OK
123+
sink(orderingTaint); // NOT OK [INCONSISTENCY]
124124
});
125125
global.addEventListener('load', () => {
126126
orderingTaint = source();

0 commit comments

Comments
 (0)