Rust: Add a query test.

Author: geoffw0

rust/ql/test/query-tests/security/CWE-696/BadCTorInitialization.expected

@@ -0,0 +1 @@
+| 0 |

rust/ql/test/query-tests/security/CWE-696/BadCTorInitialization.qlref

@@ -0,0 +1,2 @@
+query: queries/security/CWE-696/BadCtorInitialization.ql
+postprocess: utils/InlineExpectationsTestQuery.ql

rust/ql/test/query-tests/security/CWE-696/options.yml

@@ -0,0 +1,3 @@
+qltest_cargo_check: true
+qltest_dependencies:
+    - ctor = { version = "0.2.9" }

rust/ql/test/query-tests/security/CWE-696/test.rs

@@ -0,0 +1,144 @@
+
+// --- attribute variants ---
+
+use std::io::Write;
+
+fn harmless1_1() {
+    // ...
+}
+
+#[ctor::ctor]
+fn harmless1_2() {
+    // ...
+}
+
+#[ctor::dtor]
+fn harmless1_3() {
+    // ...
+}
+
+fn harmless1_4() {
+    _ = std::io::stdout().write(b"Hello, world!");
+}
+
+#[rustfmt::skip]
+fn harmless1_5() {
+    _ = std::io::stdout().write(b"Hello, world!");
+}
+
+#[ctor::ctor]
+fn bad1_1() { // $ MISSING: Alert[rust/ctor-initialization]
+    _ = std::io::stdout().write(b"Hello, world!");
+}
+
+#[ctor::dtor]
+fn bad1_2() { // $ MISSING: Alert[rust/ctor-initialization]
+    _ = std::io::stdout().write(b"Hello, world!");
+}
+
+#[rustfmt::skip]
+#[ctor::dtor]
+#[rustfmt::skip]
+fn bad1_3() { // $ MISSING: Alert[rust/ctor-initialization]
+    _ = std::io::stdout().write(b"Hello, world!");
+}
+
+// --- code variants ---
+
+use ctor::ctor;
+use std::io::*;
+
+#[ctor]
+fn bad2_1() { // $ MISSING: Alert[rust/ctor-initialization]
+    _ = stdout().write(b"Hello, world!");
+}
+
+#[ctor]
+fn bad2_2() { // $ MISSING: Alert[rust/ctor-initialization]
+    _ = stderr().write_all(b"Hello, world!");
+}
+
+#[ctor]
+fn bad2_3() { // $ MISSING: Alert[rust/ctor-initialization]
+    println!("Hello, world!");
+}
+
+#[ctor]
+fn bad2_4() { // $ MISSING: Alert[rust/ctor-initialization]
+    let mut buff = String::new();
+    _ = std::io::stdin().read_line(&mut buff);
+}
+
+use std::fs;
+
+#[ctor]
+fn bad2_5() { // $ MISSING: Alert[rust/ctor-initialization]
+    let _buff = fs::File::create("hello.txt").unwrap();
+}
+
+#[ctor]
+fn bad2_6() { // $ MISSING: Alert[rust/ctor-initialization]
+    let _t = std::time::Instant::now();
+}
+
+use std::time::Duration;
+
+const DURATION2_7: Duration = Duration::new(1, 0);
+
+#[ctor]
+fn bad2_7() { // $ MISSING: Alert[rust/ctor-initialization]
+    std::thread::sleep(DURATION2_7);
+}
+
+use std::process;
+
+#[ctor]
+fn bad2_8() { // $ MISSING: Alert[rust/ctor-initialization]
+    process::exit(1234);
+}
+
+// --- transitive cases ---
+
+fn call_target3_1() {
+    _ = stderr().write_all(b"Hello, world!");
+}
+
+#[ctor]
+fn bad3_1() { // $ MISSING: Alert[rust/ctor-initialization]
+    call_target3_1();
+}
+
+fn call_target3_2() {
+    for _x in 0..10 {
+        // ...
+    }
+}
+
+#[ctor]
+fn harmless3_2() {
+    call_target3_2();
+}
+
+#[ctor]
+fn bad3_3() { // $ MISSING: Alert[rust/ctor-initialization]
+    call_target3_1();
+    call_target3_2();
+}
+
+#[ctor]
+fn bad3_4() { // $ MISSING: Alert[rust/ctor-initialization]
+    bad3_3();
+}
+
+// --- macros ---
+
+macro_rules! macro4_1 {
+    () => {
+        _ = std::io::stdout().write(b"Hello, world!");
+    };
+}
+
+#[ctor]
+fn bad4_1() { // $ MISSING: Alert[rust/ctor-initialization]
+    macro4_1!();
+}