C#: Exclude Microsoft.Data.SqlClient.SqlCommand from the best effort SqlSink creation.

Author: michaelnebel

csharp/ql/lib/semmle/code/csharp/frameworks/Sql.qll

@@ -35,6 +35,7 @@ class IDbCommandConstructionSqlExpr extends SqlExpr, ObjectCreation {
       ic.getParameter(0).getType() instanceof StringType and
       not exists(Type t | t = ic.getDeclaringType() |
         // Known sealed classes:
+        t.hasFullyQualifiedName("Microsoft.Data.SqlClient", "SqlCommand") or
         t.hasFullyQualifiedName("System.Data.SqlClient", "SqlCommand") or
         t.hasFullyQualifiedName("System.Data.Odbc", "OdbcCommand") or
         t.hasFullyQualifiedName("System.Data.OleDb", "OleDbCommand") or

csharp/ql/test/query-tests/Security Features/CWE-089-2/SqlInjection.expected

@@ -1,21 +1,11 @@
 #select
-| SqlInjection.cs:26:42:26:52 | access to local variable queryString | SqlInjection.cs:25:21:25:29 | access to property Text : String | SqlInjection.cs:26:42:26:52 | access to local variable queryString | This query depends on $@. | SqlInjection.cs:25:21:25:29 | access to property Text : String | this TextBox text |
-| SqlInjection.cs:35:42:35:52 | access to local variable queryString | SqlInjection.cs:34:21:34:38 | call to method ReadLine : String | SqlInjection.cs:35:42:35:52 | access to local variable queryString | This query depends on $@. | SqlInjection.cs:34:21:34:38 | call to method ReadLine : String | this read from stdin |
 edges
-| SqlInjection.cs:24:21:24:31 | access to local variable queryString : String | SqlInjection.cs:26:42:26:52 | access to local variable queryString | provenance |  |
-| SqlInjection.cs:25:21:25:29 | access to property Text : String | SqlInjection.cs:24:21:24:31 | access to local variable queryString : String | provenance |  |
-| SqlInjection.cs:33:21:33:31 | access to local variable queryString : String | SqlInjection.cs:35:42:35:52 | access to local variable queryString | provenance |  |
-| SqlInjection.cs:34:21:34:38 | call to method ReadLine : String | SqlInjection.cs:33:21:33:31 | access to local variable queryString : String | provenance | Src:MaD:1  |
-models
-| 1 | Source: System; Console; false; ReadLine; ; ; ReturnValue; stdin; manual |
 nodes
-| SqlInjection.cs:24:21:24:31 | access to local variable queryString : String | semmle.label | access to local variable queryString : String |
-| SqlInjection.cs:25:21:25:29 | access to property Text : String | semmle.label | access to property Text : String |
-| SqlInjection.cs:26:42:26:52 | access to local variable queryString | semmle.label | access to local variable queryString |
-| SqlInjection.cs:33:21:33:31 | access to local variable queryString : String | semmle.label | access to local variable queryString : String |
-| SqlInjection.cs:34:21:34:38 | call to method ReadLine : String | semmle.label | call to method ReadLine : String |
-| SqlInjection.cs:35:42:35:52 | access to local variable queryString | semmle.label | access to local variable queryString |
 subpaths
 testFailures
+| SqlInjection.cs:25:53:25:81 | // ... | Missing result: Source[cs/sql-injection] |
+| SqlInjection.cs:26:56:26:83 | // ... | Missing result: Alert[cs/sql-injection] |
 | SqlInjection.cs:27:56:27:83 | // ... | Missing result: Alert[cs/sql-injection] |
+| SqlInjection.cs:34:62:34:90 | // ... | Missing result: Source[cs/sql-injection] |
+| SqlInjection.cs:35:56:35:83 | // ... | Missing result: Alert[cs/sql-injection] |
 | SqlInjection.cs:36:56:36:83 | // ... | Missing result: Alert[cs/sql-injection] |