File tree Expand file tree Collapse file tree 2 files changed +2
-8
lines changed
cpp/ql/test/library-tests/dataflow/DefaultTaintTracking Expand file tree Collapse file tree 2 files changed +2
-8
lines changed Original file line number Diff line number Diff line change @@ -10,8 +10,8 @@ void sink(const char *);
1010void sink (int );
1111
1212int main (int argc, char *argv[]) {
13- int taintedInt = atoi ( getenv ( " VAR " ));
14- taintedInt++; // BUG: `taintedInt` isn't marked as tainted. Only `++` is.
13+
14+
1515
1616 sink (_strdup (getenv (" VAR" )));
1717 sink (strdup (getenv (" VAR" )));
Original file line number Diff line number Diff line change 1- | defaulttainttracking.cpp:13:25:13:30 | call to getenv | defaulttainttracking.cpp:1:22:1:25 | nptr |
2- | defaulttainttracking.cpp:13:25:13:30 | call to getenv | defaulttainttracking.cpp:13:7:13:16 | taintedInt |
3- | defaulttainttracking.cpp:13:25:13:30 | call to getenv | defaulttainttracking.cpp:13:20:13:23 | call to atoi |
4- | defaulttainttracking.cpp:13:25:13:30 | call to getenv | defaulttainttracking.cpp:13:25:13:30 | call to getenv |
5- | defaulttainttracking.cpp:13:25:13:30 | call to getenv | defaulttainttracking.cpp:13:25:13:37 | (const char *)... |
6- | defaulttainttracking.cpp:13:25:13:30 | call to getenv | defaulttainttracking.cpp:14:3:14:14 | ... ++ |
71| defaulttainttracking.cpp:16:16:16:21 | call to getenv | defaulttainttracking.cpp:6:15:6:24 | p#0 |
82| defaulttainttracking.cpp:16:16:16:21 | call to getenv | defaulttainttracking.cpp:9:11:9:20 | p#0 |
93| defaulttainttracking.cpp:16:16:16:21 | call to getenv | defaulttainttracking.cpp:16:8:16:14 | call to _strdup |
You can’t perform that action at this time.
0 commit comments