Skip to content

Commit c5f5427

Browse files
egregius313owen-mc
egregius313
authored and
owen-mc
committed
Add test for squirrel package
1 parent 4ab5d34 commit c5f5427

File tree

2 files changed

+792
-0
lines changed

2 files changed

+792
-0
lines changed

‎go/ql/test/library-tests/semmle/go/dataflow/flowsources/local/database/test_Masterminds_squirrel.go

Lines changed: 291 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,291 @@
1+
package test
2+
3+
//go:generate depstubber -vendor github.com/Masterminds/squirrel DeleteBuilder,InsertBuilder,QueryRower,QueryRowerContext,Queryer,QueryerContext,SelectBuilder,StdSql,StdSqlCtx,UpdateBuilder QueryContextWith,QueryRowContextWith,QueryRowWith,QueryWith
4+
5+
import (
6+
"context"
7+
8+
"github.com/Masterminds/squirrel"
9+
src "github.com/nonexistent/sources"
10+
)
11+
12+
func test_Masterminds_squirrel_QueryRower(ctx context.Context, db squirrel.QueryRower, sqlizer squirrel.Sqlizer) {
13+
scanner := db.QueryRow("") // $ source
14+
15+
var r1, r2, r3 string
16+
scanner.Scan(&r1, &r2, &r3)
17+
18+
sink(r1) // $ hasTaintFlow="r1"
19+
sink(r2) // $ hasTaintFlow="r2"
20+
sink(r3) // $ hasTaintFlow="r3"
21+
22+
scanner2 := squirrel.QueryRowWith(db, sqlizer) // $ source
23+
24+
var r4, r5, r6 string
25+
scanner2.Scan(&r4, &r5, &r6)
26+
27+
sink(r4) // $ hasTaintFlow="r4"
28+
sink(r5) // $ hasTaintFlow="r5"
29+
sink(r6) // $ hasTaintFlow="r6"
30+
}
31+
32+
func test_Masterminds_squirrel_QueryRowerContext(ctx context.Context, db squirrel.QueryRowerContext, sqlizer squirrel.Sqlizer) {
33+
scanner := db.QueryRowContext(ctx, "") // $ source
34+
35+
var r1, r2, r3 string
36+
scanner.Scan(&r1, &r2, &r3)
37+
38+
sink(r1) // $ hasTaintFlow="r1"
39+
sink(r2) // $ hasTaintFlow="r2"
40+
sink(r3) // $ hasTaintFlow="r3"
41+
42+
scanner2 := squirrel.QueryRowContextWith(ctx, db, sqlizer) // $ source
43+
44+
var r4, r5, r6 string
45+
scanner2.Scan(&r4, &r5, &r6)
46+
47+
sink(r4) // $ hasTaintFlow="r4"
48+
sink(r5) // $ hasTaintFlow="r5"
49+
sink(r6) // $ hasTaintFlow="r6"
50+
}
51+
52+
func test_Masterminds_squirrel_Queryer(ctx context.Context, db squirrel.Queryer, sqlizer squirrel.Sqlizer) {
53+
v1, err := db.Query("") // $ source
54+
if err != nil {
55+
return
56+
}
57+
sink(v1) // $ hasTaintFlow="v1"
58+
59+
v2, err := squirrel.QueryWith(db, sqlizer) // $ source
60+
if err != nil {
61+
return
62+
}
63+
sink(v2) // $ hasTaintFlow="v2"
64+
}
65+
66+
func test_Masterminds_squirrel_QueryerContext(ctx context.Context, db squirrel.QueryerContext, sqlizer squirrel.Sqlizer) {
67+
v1, err := db.QueryContext(ctx, "") // $ source
68+
if err != nil {
69+
return
70+
}
71+
sink(v1) // $ hasTaintFlow="v1"
72+
73+
v2, err := squirrel.QueryContextWith(ctx, db, sqlizer) // $ source
74+
if err != nil {
75+
return
76+
}
77+
sink(v2) // $ hasTaintFlow="v2"
78+
}
79+
80+
// StdSqlCtx extends StdSql so we can test both with a StdSqlCtx
81+
func test_Masterminds_squirrel_StdSql_StdSqlCtx(ctx context.Context, std squirrel.StdSqlCtx) {
82+
v1, err := std.Query("") // $ source
83+
if err != nil {
84+
return
85+
}
86+
sink(v1) // $ hasTaintFlow="v1"
87+
88+
v2, err := std.QueryContext(ctx, "") // $ source
89+
if err != nil {
90+
return
91+
}
92+
93+
sink(v2) // $ hasTaintFlow="v2"
94+
95+
s3 := std.QueryRow("") // $ source
96+
97+
if err != nil {
98+
return
99+
}
100+
var r31, r32, r33 string
101+
s3.Scan(&r31, &r32, &r33)
102+
103+
sink(r31) // $ hasTaintFlow="r31"
104+
sink(r32) // $ hasTaintFlow="r32"
105+
sink(r33) // $ hasTaintFlow="r33"
106+
107+
s4 := std.QueryRowContext(ctx, "") // $ source
108+
109+
var r41, r42, r43 string
110+
s4.Scan(&r41, &r42, &r43)
111+
112+
sink(r41) // $ hasTaintFlow="r41"
113+
sink(r42) // $ hasTaintFlow="r42"
114+
sink(r43) // $ hasTaintFlow="r43"
115+
}
116+
117+
func test_Masterminds_squirrel_DeleteBuilder(ctx context.Context, builder squirrel.DeleteBuilder) {
118+
v1, err := builder.Query() // $ source
119+
if err != nil {
120+
return
121+
}
122+
sink(v1) // $ hasTaintFlow="v1"
123+
124+
v2, err := builder.QueryContext(ctx) // $ source
125+
if err != nil {
126+
return
127+
}
128+
sink(v2) // $ hasTaintFlow="v2"
129+
130+
s3 := builder.QueryRowContext(ctx) // $ source
131+
132+
var r31, r32, r33 string
133+
s3.Scan(&r31, &r32, &r33)
134+
135+
sink(r31) // $ hasTaintFlow="r31"
136+
sink(r32) // $ hasTaintFlow="r32"
137+
sink(r33) // $ hasTaintFlow="r33"
138+
139+
builder2 := src.Source[squirrel.DeleteBuilder]() // $ source
140+
141+
var r41, r42, r43 string
142+
builder2.ScanContext(ctx, &r41, &r42, &r43)
143+
144+
sink(r41) // $ hasTaintFlow="r41"
145+
sink(r42) // $ hasTaintFlow="r42"
146+
sink(r43) // $ hasTaintFlow="r43"
147+
}
148+
149+
func test_Masterminds_squirrel_InsertBuilder(ctx context.Context, builder squirrel.InsertBuilder) {
150+
v1, err := builder.Query() // $ source
151+
if err != nil {
152+
return
153+
}
154+
sink(v1) // $ hasTaintFlow="v1"
155+
156+
v2, err := builder.QueryContext(ctx) // $ source
157+
if err != nil {
158+
return
159+
}
160+
sink(v2) // $ hasTaintFlow="v2"
161+
162+
s3 := builder.QueryRow() // $ source
163+
164+
var r31, r32, r33 string
165+
s3.Scan(&r31, &r32, &r33)
166+
167+
sink(r31) // $ hasTaintFlow="r31"
168+
sink(r32) // $ hasTaintFlow="r32"
169+
sink(r33) // $ hasTaintFlow="r33"
170+
171+
s4 := builder.QueryRowContext(ctx) // $ source
172+
173+
var r41, r42, r43 string
174+
s4.Scan(&r41, &r42, &r43)
175+
176+
sink(r41) // $ hasTaintFlow="r41"
177+
sink(r42) // $ hasTaintFlow="r42"
178+
sink(r43) // $ hasTaintFlow="r43"
179+
180+
builder2 := src.Source[squirrel.InsertBuilder]() // $ source
181+
182+
var r51, r52, r53 string
183+
builder2.Scan(&r51, &r52, &r53)
184+
185+
sink(r51) // $ hasTaintFlow="r51"
186+
sink(r52) // $ hasTaintFlow="r52"
187+
sink(r53) // $ hasTaintFlow="r53"
188+
189+
var r61, r62, r63 string
190+
builder2.ScanContext(ctx, &r61, &r62, &r63)
191+
192+
sink(r61) // $ hasTaintFlow="r61"
193+
sink(r62) // $ hasTaintFlow="r62"
194+
sink(r63) // $ hasTaintFlow="r63"
195+
}
196+
197+
func test_Masterminds_squirrel_SelectBuilder(ctx context.Context, builder squirrel.SelectBuilder) {
198+
v1, err := builder.Query() // $ source
199+
if err != nil {
200+
return
201+
}
202+
sink(v1) // $ hasTaintFlow="v1"
203+
204+
v2, err := builder.QueryContext(ctx) // $ source
205+
if err != nil {
206+
return
207+
}
208+
sink(v2) // $ hasTaintFlow="v2"
209+
210+
s3 := builder.QueryRow() // $ source
211+
212+
var r31, r32, r33 string
213+
s3.Scan(&r31, &r32, &r33)
214+
215+
sink(r31) // $ hasTaintFlow="r31"
216+
sink(r32) // $ hasTaintFlow="r32"
217+
sink(r33) // $ hasTaintFlow="r33"
218+
219+
s4 := builder.QueryRowContext(ctx) // $ source
220+
221+
var r41, r42, r43 string
222+
s4.Scan(&r41, &r42, &r43)
223+
224+
sink(r41) // $ hasTaintFlow="r41"
225+
sink(r42) // $ hasTaintFlow="r42"
226+
sink(r43) // $ hasTaintFlow="r43"
227+
228+
builder2 := src.Source[squirrel.SelectBuilder]() // $ source
229+
230+
var r51, r52, r53 string
231+
builder2.Scan(&r51, &r52, &r53)
232+
233+
sink(r51) // $ hasTaintFlow="r51"
234+
sink(r52) // $ hasTaintFlow="r52"
235+
sink(r53) // $ hasTaintFlow="r53"
236+
237+
var r61, r62, r63 string
238+
builder2.ScanContext(ctx, &r61, &r62, &r63)
239+
240+
sink(r61) // $ hasTaintFlow="r61"
241+
sink(r62) // $ hasTaintFlow="r62"
242+
sink(r63) // $ hasTaintFlow="r63"
243+
}
244+
245+
func test_Masterminds_squirrel_UpdateBuilder(ctx context.Context, builder squirrel.UpdateBuilder) {
246+
v1, err := builder.Query() // $ source
247+
if err != nil {
248+
return
249+
}
250+
sink(v1) // $ hasTaintFlow="v1"
251+
252+
v2, err := builder.QueryContext(ctx) // $ source
253+
if err != nil {
254+
return
255+
}
256+
sink(v2) // $ hasTaintFlow="v2"
257+
258+
s3 := builder.QueryRow() // $ source
259+
260+
var r31, r32, r33 string
261+
s3.Scan(&r31, &r32, &r33)
262+
263+
sink(r31) // $ hasTaintFlow="r31"
264+
sink(r32) // $ hasTaintFlow="r32"
265+
sink(r33) // $ hasTaintFlow="r33"
266+
267+
s4 := builder.QueryRowContext(ctx) // $ source
268+
269+
var r41, r42, r43 string
270+
s4.Scan(&r41, &r42, &r43)
271+
272+
sink(r41) // $ hasTaintFlow="r41"
273+
sink(r42) // $ hasTaintFlow="r42"
274+
sink(r43) // $ hasTaintFlow="r43"
275+
276+
builder2 := src.Source[squirrel.UpdateBuilder]() // $ source
277+
278+
var r51, r52, r53 string
279+
builder2.Scan(&r51, &r52, &r53)
280+
281+
sink(r51) // $ hasTaintFlow="r51"
282+
sink(r52) // $ hasTaintFlow="r52"
283+
sink(r53) // $ hasTaintFlow="r53"
284+
285+
var r61, r62, r63 string
286+
builder2.ScanContext(ctx, &r61, &r62, &r63)
287+
288+
sink(r61) // $ hasTaintFlow="r61"
289+
sink(r62) // $ hasTaintFlow="r62"
290+
sink(r63) // $ hasTaintFlow="r63"
291+
}

0 commit comments

Comments
 (0)