File tree Expand file tree Collapse file tree 9 files changed +11
-11
lines changed
lib/semmle/python/dataflow/new Expand file tree Collapse file tree 9 files changed +11
-11
lines changed Original file line number Diff line number Diff line change 362362 " java/ql/lib/semmle/code/java/security/internal/EncryptionKeySizes.qll"
363363 ],
364364 "Python model summaries test extension" : [
365- " python/ql/test/experimental /dataflow/model-summaries/InlineTaintTest.ext.yml" ,
366- " python/ql/test/experimental /dataflow/model-summaries/NormalDataflowTest.ext.yml"
365+ " python/ql/test/library-tests /dataflow/model-summaries/InlineTaintTest.ext.yml" ,
366+ " python/ql/test/library-tests /dataflow/model-summaries/NormalDataflowTest.ext.yml"
367367 ]
368- }
368+ }
Original file line number Diff line number Diff line change @@ -89,7 +89,7 @@ private module SensitiveDataModeling {
8989 */
9090 DataFlow:: Node sensitiveLookupStringConst ( SensitiveDataClassification classification ) {
9191 // Note: If this is implemented with type-tracking, we will get cross-talk as
92- // illustrated in python/ql/test/experimental /dataflow/sensitive-data/test.py
92+ // illustrated in python/ql/test/library-tests /dataflow/sensitive-data/test.py
9393 exists ( DataFlow:: LocalSourceNode source |
9494 source .asExpr ( ) .( StringLiteral ) .getText ( ) = sensitiveString ( classification ) and
9595 source .flowsTo ( result )
Original file line number Diff line number Diff line change @@ -638,7 +638,7 @@ newtype TContent =
638638 // name = any(AccessPathToken a).getAnArgument("Attribute")
639639 // instead we use a qltest to alert if we write a new summary in QL that uses an
640640 // attribute -- see
641- // python/ql/test/experimental /dataflow/summaries-checks/missing-attribute-content.ql
641+ // python/ql/test/library-tests /dataflow/summaries-checks/missing-attribute-content.ql
642642 attr in [ "re" , "string" , "pattern" ]
643643 or
644644 //
Original file line number Diff line number Diff line change 66# A thorough covering of methods in that document is found in classes.py.
77#
88# Intended sources should be the variable `SOURCE` and intended sinks should be
9- # arguments to the function `SINK` (see python/ql/test/experimental /dataflow/testConfig.qll).
9+ # arguments to the function `SINK` (see python/ql/test/library-tests /dataflow/testConfig.qll).
1010
1111import sys
1212import os
Original file line number Diff line number Diff line change 22# Headings refer to https://docs.python.org/3/reference/expressions.html,
33# and are selected whenever they incur dataflow.
44# Intended sources should be the variable `SOURCE` and intended sinks should be
5- # arguments to the function `SINK` (see python/ql/test/experimental /dataflow/testConfig.qll).
5+ # arguments to the function `SINK` (see python/ql/test/library-tests /dataflow/testConfig.qll).
66#
77# Functions whose name ends with "_with_local_flow" will also be tested for local flow.
88#
Original file line number Diff line number Diff line change 11import base64
22
3- # TODO: These tests should be merged with python/ql/test/experimental /dataflow/tainttracking/defaultAdditionalTaintStep-py3/test_string.py
3+ # TODO: These tests should be merged with python/ql/test/library-tests /dataflow/tainttracking/defaultAdditionalTaintStep-py3/test_string.py
44base64 .a85decode (payload ) # $ decodeInput=payload decodeOutput=base64.a85decode(..) decodeFormat=Ascii85
55base64 .b85decode (payload ) # $ decodeInput=payload decodeOutput=base64.b85decode(..) decodeFormat=Base85
66base64 .decodebytes (payload ) # $ decodeInput=payload decodeOutput=base64.decodebytes(..) decodeFormat=Base64
Original file line number Diff line number Diff line change 11import base64
22
3- # TODO: These tests should be merged with python/ql/test/experimental /dataflow/tainttracking/defaultAdditionalTaintStep-py3/test_string.py
3+ # TODO: These tests should be merged with python/ql/test/library-tests /dataflow/tainttracking/defaultAdditionalTaintStep-py3/test_string.py
44base64 .a85encode (bs ) # $ encodeInput=bs encodeOutput=base64.a85encode(..) encodeFormat=Ascii85
55base64 .b85encode (bs )# $ encodeInput=bs encodeOutput=base64.b85encode(..) encodeFormat=Base85
66base64 .encodebytes (bs )# $ encodeInput=bs encodeOutput=base64.encodebytes(..) encodeFormat=Base64
Original file line number Diff line number Diff line change 2626shelve .open (filepath ) # $ decodeInput=filepath decodeOutput=shelve.open(..) decodeFormat=pickle decodeMayExecuteInput getAPathArgument=filepath
2727shelve .open (filename = filepath ) # $ decodeInput=filepath decodeOutput=shelve.open(..) decodeFormat=pickle decodeMayExecuteInput getAPathArgument=filepath
2828
29- # TODO: These tests should be merged with python/ql/test/experimental /dataflow/tainttracking/defaultAdditionalTaintStep/test_string.py
29+ # TODO: These tests should be merged with python/ql/test/library-tests /dataflow/tainttracking/defaultAdditionalTaintStep/test_string.py
3030base64 .b64decode (payload ) # $ decodeInput=payload decodeOutput=base64.b64decode(..) decodeFormat=Base64
3131base64 .standard_b64decode (payload ) # $ decodeInput=payload decodeOutput=base64.standard_b64decode(..) decodeFormat=Base64
3232base64 .urlsafe_b64decode (payload ) # $ decodeInput=payload decodeOutput=base64.urlsafe_b64decode(..) decodeFormat=Base64
Original file line number Diff line number Diff line change 55pickle .dumps (obj ) # $ MISSING: encodeInput=obj encodeOutput=pickle.dumps(..) encodeFormat=pickle encodeMayExecuteInput
66marshal .dumps (obj ) # $ MISSING: encodeInput=obj encodeOutput=marshal.dumps(..) encodeFormat=marshal encodeMayExecuteInput
77
8- # TODO: These tests should be merged with python/ql/test/experimental /dataflow/tainttracking/defaultAdditionalTaintStep/test_string.py
8+ # TODO: These tests should be merged with python/ql/test/library-tests /dataflow/tainttracking/defaultAdditionalTaintStep/test_string.py
99base64 .b64encode (bs ) # $ encodeInput=bs encodeOutput=base64.b64encode(..) encodeFormat=Base64
1010base64 .standard_b64encode (bs ) # $ encodeInput=bs encodeOutput=base64.standard_b64encode(..) encodeFormat=Base64
1111base64 .urlsafe_b64encode (bs ) # $ encodeInput=bs encodeOutput=base64.urlsafe_b64encode(..) encodeFormat=Base64
You can’t perform that action at this time.
0 commit comments