Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Showing
3 changed files
with
166 additions
and
120 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
160 changes: 160 additions & 0 deletions
160
.../src/test/java/com/h3xstream/findsecbugs/kotlin/IdentityFunctionCommandInjectionTest.java
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,160 @@ | ||
| /** | ||
| * Find Security Bugs | ||
| * Copyright (c) Philippe Arteau, All rights reserved. | ||
| * | ||
| * This library is free software; you can redistribute it and/or | ||
| * modify it under the terms of the GNU Lesser General Public | ||
| * License as published by the Free Software Foundation; either | ||
| * version 3.0 of the License, or (at your option) any later version. | ||
| * | ||
| * This library is distributed in the hope that it will be useful, | ||
| * but WITHOUT ANY WARRANTY; without even the implied warranty of | ||
| * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU | ||
| * Lesser General Public License for more details. | ||
| * | ||
| * You should have received a copy of the GNU Lesser General Public | ||
| * License along with this library. | ||
| */ | ||
| package com.h3xstream.findsecbugs.kotlin; | ||
|
|
||
| import com.h3xstream.findbugs.test.BaseDetectorTest; | ||
| import com.h3xstream.findbugs.test.EasyBugReporter; | ||
| import com.h3xstream.findsecbugs.FindSecBugsGlobalConfig; | ||
| import org.testng.annotations.Test; | ||
|
|
||
| import static org.mockito.Mockito.spy; | ||
| import static org.mockito.Mockito.verify; | ||
|
|
||
| public class IdentityFunctionCommandInjectionTest extends BaseDetectorTest { | ||
|
|
||
|
|
||
| @Test | ||
| public void detectCommandInjection() throws Exception { | ||
|
|
||
| //Locate test code | ||
| String[] files = { | ||
| getClassFilePath("com/h3xstream/findsecbugs/command/IdentityFunctionCommandInjection") | ||
| }; | ||
|
|
||
| //Run the analysis | ||
| EasyBugReporter reporter = spy(new BaseDetectorTest.SecurityReporter()); | ||
| analyze(files, reporter); | ||
|
|
||
| // tained input executed after always true filter | ||
| verify(reporter).doReportBug( | ||
| bugDefinition() | ||
| .bugType("COMMAND_INJECTION") | ||
| .inClass("IdentityFunctionCommandInjection").atLine(25) | ||
| .withPriority("Medium") | ||
| .build() | ||
| ); | ||
|
|
||
| // tained input executed after always false not filter | ||
| verify(reporter).doReportBug( | ||
| bugDefinition() | ||
| .bugType("COMMAND_INJECTION") | ||
| .inClass("IdentityFunctionCommandInjection").atLine(31) | ||
| .withPriority("Medium") | ||
| .build() | ||
| ); | ||
|
|
||
| // tained input executed after identity function with run | ||
| verify(reporter).doReportBug( | ||
| bugDefinition() | ||
| .bugType("COMMAND_INJECTION") | ||
| .inClass("IdentityFunctionCommandInjection").atLine(37) | ||
| .withPriority("Medium") | ||
| .build() | ||
| ); | ||
|
|
||
| // tained input executed after identity function with let | ||
| verify(reporter).doReportBug( | ||
| bugDefinition() | ||
| .bugType("COMMAND_INJECTION") | ||
| .inClass("IdentityFunctionCommandInjection").atLine(43) | ||
| .withPriority("Medium") | ||
| .build() | ||
| ); | ||
|
|
||
| // tained input executed after identity function with apply | ||
| verify(reporter).doReportBug( | ||
| bugDefinition() | ||
| .bugType("COMMAND_INJECTION") | ||
| .inClass("IdentityFunctionCommandInjection").atLine(47) | ||
| .withPriority("Medium") | ||
| .build() | ||
| ); | ||
|
|
||
| // tained input executed after drop while always false | ||
| verify(reporter).doReportBug( | ||
| bugDefinition() | ||
| .bugType("COMMAND_INJECTION") | ||
| .inClass("IdentityFunctionCommandInjection").atLine(53) | ||
| .withPriority("Medium") | ||
| .build() | ||
| ); | ||
|
|
||
| // tained input executed after drop last while always false | ||
| verify(reporter).doReportBug( | ||
| bugDefinition() | ||
| .bugType("COMMAND_INJECTION") | ||
| .inClass("IdentityFunctionCommandInjection").atLine(59) | ||
| .withPriority("Medium") | ||
| .build() | ||
| ); | ||
|
|
||
| // tained input executed after take while always true | ||
| verify(reporter).doReportBug( | ||
| bugDefinition() | ||
| .bugType("COMMAND_INJECTION") | ||
| .inClass("IdentityFunctionCommandInjection").atLine(65) | ||
| .withPriority("Medium") | ||
| .build() | ||
| ); | ||
|
|
||
| // tained input executed after take last while always true then reversed | ||
| verify(reporter).doReportBug( | ||
| bugDefinition() | ||
| .bugType("COMMAND_INJECTION") | ||
| .inClass("IdentityFunctionCommandInjection").atLine(71) | ||
| .withPriority("Medium") | ||
| .build() | ||
| ); | ||
|
|
||
| // tained input executed after trim always false | ||
| verify(reporter).doReportBug( | ||
| bugDefinition() | ||
| .bugType("COMMAND_INJECTION") | ||
| .inClass("IdentityFunctionCommandInjection").atLine(77) | ||
| .withPriority("Medium") | ||
| .build() | ||
| ); | ||
|
|
||
| // tained input executed after trim end always false | ||
| verify(reporter).doReportBug( | ||
| bugDefinition() | ||
| .bugType("COMMAND_INJECTION") | ||
| .inClass("IdentityFunctionCommandInjection").atLine(83) | ||
| .withPriority("Medium") | ||
| .build() | ||
| ); | ||
|
|
||
| // tained input executed after trim start always false | ||
| verify(reporter).doReportBug( | ||
| bugDefinition() | ||
| .bugType("COMMAND_INJECTION") | ||
| .inClass("IdentityFunctionCommandInjection").atLine(89) | ||
| .withPriority("Medium") | ||
| .build() | ||
| ); | ||
|
|
||
| // tained input executed after also does nothing | ||
| verify(reporter).doReportBug( | ||
| bugDefinition() | ||
| .bugType("COMMAND_INJECTION") | ||
| .inClass("IdentityFunctionCommandInjection").atLine(95) | ||
| .withPriority("Medium") | ||
| .build() | ||
| ); | ||
| } | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters