File tree Expand file tree Collapse file tree 3 files changed +10
-8
lines changed
javascript/ql/test/library-tests/TaintTracking Expand file tree Collapse file tree 3 files changed +10
-8
lines changed Original file line number Diff line number Diff line change @@ -33,7 +33,7 @@ legacyDataFlowDifference
33
33
| promise.js:12:20:12:27 | source() | promise.js:13:8:13:23 | resolver.promise | only flow with OLD data flow library |
34
34
| sanitizer-guards.js:57:11:57:18 | source() | sanitizer-guards.js:64:8:64:8 | x | only flow with NEW data flow library |
35
35
| use-use-after-implicit-read.js:7:17:7:24 | source() | use-use-after-implicit-read.js:8:10:8:17 | captured | only flow with OLD data flow library |
36
- | use-use-after-implicit-read.js:7:17:7:24 | source() | use-use-after-implicit-read.js:13 :10:13 :10 | x | only flow with NEW data flow library |
36
+ | use-use-after-implicit-read.js:7:17:7:24 | source() | use-use-after-implicit-read.js:15 :10:15 :10 | x | only flow with NEW data flow library |
37
37
consistencyIssue
38
38
| library-tests/TaintTracking/nested-props.js:20 | expected an alert, but found none | NOT OK - but not found | Consistency |
39
39
| library-tests/TaintTracking/stringification-read-steps.js:17 | expected an alert, but found none | NOT OK | Consistency |
291
291
| tst.js:2:13:2:20 | source() | tst.js:48:10:48:22 | new Buffer(x) |
292
292
| tst.js:2:13:2:20 | source() | tst.js:51:10:51:31 | seriali ... ript(x) |
293
293
| tst.js:2:13:2:20 | source() | tst.js:54:14:54:19 | unsafe |
294
- | use-use-after-implicit-read.js:7:17:7:24 | source() | use-use-after-implicit-read.js:13 :10:13 :10 | x |
294
+ | use-use-after-implicit-read.js:7:17:7:24 | source() | use-use-after-implicit-read.js:15 :10:15 :10 | x |
295
295
| xml.js:5:18:5:25 | source() | xml.js:8:14:8:17 | text |
296
296
| xml.js:12:17:12:24 | source() | xml.js:13:14:13:19 | result |
297
297
| xml.js:23:18:23:25 | source() | xml.js:20:14:20:17 | attr |
Original file line number Diff line number Diff line change @@ -24,7 +24,7 @@ legacyDataFlowDifference
24
24
| sanitizer-guards.js:57:11:57:18 | source() | sanitizer-guards.js:64:8:64:8 | x | only flow with NEW data flow library |
25
25
| tst.js:2:13:2:20 | source() | tst.js:35:14:35:16 | ary | only flow with NEW data flow library |
26
26
| tst.js:2:13:2:20 | source() | tst.js:41:14:41:16 | ary | only flow with NEW data flow library |
27
- | use-use-after-implicit-read.js:7:17:7:24 | source() | use-use-after-implicit-read.js:13 :10:13 :10 | x | only flow with NEW data flow library |
27
+ | use-use-after-implicit-read.js:7:17:7:24 | source() | use-use-after-implicit-read.js:15 :10:15 :10 | x | only flow with NEW data flow library |
28
28
flow
29
29
| access-path-sanitizer.js:2:18:2:25 | source() | access-path-sanitizer.js:4:8:4:12 | obj.x |
30
30
| advanced-callgraph.js:2:13:2:20 | source() | advanced-callgraph.js:6:22:6:22 | v |
182
182
| tst.js:2:13:2:20 | source() | tst.js:35:14:35:16 | ary |
183
183
| tst.js:2:13:2:20 | source() | tst.js:41:14:41:16 | ary |
184
184
| tst.js:2:13:2:20 | source() | tst.js:54:14:54:19 | unsafe |
185
- | use-use-after-implicit-read.js:7:17:7:24 | source() | use-use-after-implicit-read.js:13 :10:13 :10 | x |
185
+ | use-use-after-implicit-read.js:7:17:7:24 | source() | use-use-after-implicit-read.js:15 :10:15 :10 | x |
Original file line number Diff line number Diff line change 1
1
import 'dummy' ;
2
2
3
- function f ( ) {
3
+ function f ( x ) {
4
4
let captured ;
5
- function inner ( ) { captured = "sdf" ; return captured ; }
5
+ function inner ( ) { captured ; captured = "sdf" ; }
6
6
7
- captured = [ source ( ) , "safe" ] ;
7
+ captured = [ source ( ) , "safe" , x ] ;
8
8
sink ( captured ) ; // NOT OK [INCONSISTENCY] - no implicit read of ArrayElement
9
- g . apply ( undefined , captured ) ;
9
+ g . apply ( undefined , captured ) ; // with use-use flow the output of an implicit read might flow here
10
+
11
+ return captured ;
10
12
}
11
13
12
14
function g ( x , y ) {
You can’t perform that action at this time.
0 commit comments