codeql/java/ql/test/library-tests/frameworks/apache-commons-lang3/StrTokenizerTest.java at codeql-cli/v2.25.2 · github/codeql · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
import org.apache.commons.lang3.text.StrTokenizer;
import org.apache.commons.lang3.text.StrMatcher;

public class StrTokenizerTest {
  String taint() { return "tainted"; }

  void sink(Object o) {}

  void test() throws Exception {

    // Test constructors:
    sink((new StrTokenizer(taint().toCharArray())).toString()); // $ hasTaintFlow
    sink((new StrTokenizer(taint().toCharArray(), ',')).toString()); // $ hasTaintFlow
    sink((new StrTokenizer(taint().toCharArray(), ',', '"')).toString()); // $ hasTaintFlow
    sink((new StrTokenizer(taint().toCharArray(), ",")).toString()); // $ hasTaintFlow
    sink((new StrTokenizer(taint().toCharArray(), (StrMatcher)null)).toString()); // $ hasTaintFlow
    sink((new StrTokenizer(taint().toCharArray(), (StrMatcher)null, (StrMatcher)null)).toString()); // $ hasTaintFlow
    sink((new StrTokenizer(taint())).toString()); // $ hasTaintFlow
    sink((new StrTokenizer(taint(), ',')).toString()); // $ hasTaintFlow
    sink((new StrTokenizer(taint(), ',', '"')).toString()); // $ hasTaintFlow
    sink((new StrTokenizer(taint(), ",")).toString()); // $ hasTaintFlow
    sink((new StrTokenizer(taint(), (StrMatcher)null)).toString()); // $ hasTaintFlow
    sink((new StrTokenizer(taint(), (StrMatcher)null, (StrMatcher)null)).toString()); // $ hasTaintFlow

    // Test constructing static methods:
    sink(StrTokenizer.getCSVInstance(taint().toCharArray()).toString()); // $ hasTaintFlow
    sink(StrTokenizer.getCSVInstance(taint()).toString()); // $ hasTaintFlow
    sink(StrTokenizer.getTSVInstance(taint().toCharArray()).toString()); // $ hasTaintFlow
    sink(StrTokenizer.getTSVInstance(taint()).toString()); // $ hasTaintFlow

    // Test accessors:
    sink((new StrTokenizer(taint())).clone()); // $ hasTaintFlow
    sink((new StrTokenizer(taint())).getContent()); // $ hasTaintFlow
    sink((new StrTokenizer(taint())).getTokenArray()); // $ hasTaintFlow
    sink((new StrTokenizer(taint())).getTokenList()); // $ hasTaintFlow
    sink((new StrTokenizer(taint())).next()); // $ hasTaintFlow
    sink((new StrTokenizer(taint())).nextToken()); // $ hasTaintFlow
    sink((new StrTokenizer(taint())).previous()); // $ hasTaintFlow
    sink((new StrTokenizer(taint())).previousToken()); // $ hasTaintFlow

    // Test mutators:
    sink((new StrTokenizer()).reset(taint().toCharArray()).toString()); // $ hasTaintFlow
    sink((new StrTokenizer()).reset(taint()).toString()); // $ hasTaintFlow

  }
}