Curry0624 all

sast-go/cases/accuracy/context_sensitive/argument_return_value_passing/argument_passing_reference_001_F/argument_passing_reference_001_F.go

@@ -0,0 +1,25 @@
+
+// evaluation information start
+// real case = false
+// evaluation item = 准确度->上下文敏感分析->参数/返回值传递
+// scene introduction = 参数值传递->引用传递->map
+// level = 2
+// bind_url = accuracy/context_sensitive/argument_return_value_passing/argument_passing_reference_001_F/argument_passing_reference_001_F
+// evaluation information end
+
+package argument_passing_reference_001_F
+
+func argument_passing_reference_001_F(__taint_src interface{}) {
+	obj := map[string]interface{}{
+		"data": __taint_src,
+	}
+	process(obj)
+	__taint_sink(obj["data"])
+}
+
+func process(obj map[string]interface{}) {
+	obj["data"] = "_"
+}
+
+func __taint_sink(o interface{}) {
+}

sast-go/cases/accuracy/context_sensitive/argument_return_value_passing/argument_passing_reference_002_T/argument_passing_reference_002_T.go

@@ -0,0 +1,25 @@
+
+// evaluation information start
+// real case = true
+// evaluation item = 准确度->上下文敏感分析->参数/返回值传递
+// scene introduction = 参数值传递->引用传递->map
+// level = 2
+// bind_url = accuracy/context_sensitive/argument_return_value_passing/argument_passing_reference_002_T/argument_passing_reference_002_T
+// evaluation information end
+
+package argument_passing_reference_002_T
+
+func argument_passing_reference_002_T(__taint_src interface{}) {
+	obj := map[string]interface{}{
+		"data": "_",
+	}
+	process(obj, __taint_src)
+	__taint_sink(obj["data"])
+}
+
+func process(obj map[string]interface{}, src interface{}) {
+	obj["data"] = src
+}
+
+func __taint_sink(o interface{}) {
+}

sast-go/cases/accuracy/context_sensitive/argument_return_value_passing/argument_passing_reference_003_F/argument_passing_reference_003_F.go

@@ -0,0 +1,23 @@
+
+// evaluation information start
+// real case = false
+// evaluation item = 准确度->上下文敏感分析->参数/返回值传递
+// scene introduction = 参数值传递->引用传递->数组
+// level = 2
+// bind_url = accuracy/context_sensitive/argument_return_value_passing/argument_passing_reference_003_F/argument_passing_reference_003_F
+// evaluation information end
+
+package argument_passing_reference_003_F
+
+func argument_passing_reference_003_F(__taint_src interface{}) {
+	arr := []interface{}{__taint_src}
+	process(arr)
+	__taint_sink(arr)
+}
+
+func process(inputArr []interface{}) {
+	inputArr[0] = "changed"
+}
+
+func __taint_sink(o interface{}) {
+}

sast-go/cases/accuracy/context_sensitive/argument_return_value_passing/argument_passing_reference_004_T/argument_passing_reference_004_T.go

@@ -0,0 +1,23 @@
+
+// evaluation information start
+// real case = true
+// evaluation item = 准确度->上下文敏感分析->参数/返回值传递
+// scene introduction = 参数值传递->引用传递->数组
+// level = 2
+// bind_url = accuracy/context_sensitive/argument_return_value_passing/argument_passing_reference_004_T/argument_passing_reference_004_T
+// evaluation information end
+
+package argument_passing_reference_004_T
+
+func argument_passing_reference_005_T(__taint_src interface{}) {
+	arr := []interface{}{"_"}
+	process(arr, __taint_src)
+	__taint_sink(arr)
+}
+
+func process(inputArr []interface{}, src interface{}) {
+	inputArr[0] = src
+}
+
+func __taint_sink(o []interface{}) {
+}

sast-go/cases/accuracy/context_sensitive/argument_return_value_passing/argument_passing_reference_005_F/argument_passing_reference_005_F.go

@@ -0,0 +1,27 @@
+
+// evaluation information start
+// real case = false
+// evaluation item = 准确度->上下文敏感分析->参数/返回值传递
+// scene introduction = 参数值传递->引用传递->map
+// level = 2
+// bind_url = cases/accuracy/context_sensitive/argument_return_value_passing/argument_passing_reference_005_F/argument_passing_reference_005_F
+// evaluation information end
+
+package argument_passing_reference_005_F
+
+func argument_passing_reference_006_F(__taint_src interface{}) {
+	objA := map[string]interface{}{"name": __taint_src}
+	objB := map[string]interface{}{"name": "Bob"}
+
+	swap(objA, objB)
+	__taint_sink(objA["name"])
+}
+
+func swap(obj1, obj2 map[string]interface{}) {
+	temp := obj1["name"]
+	obj1["name"] = obj2["name"]
+	obj2["name"] = temp
+}
+
+func __taint_sink(o interface{}) {
+}

sast-go/cases/accuracy/context_sensitive/argument_return_value_passing/argument_passing_reference_006_T/argument_passing_reference_006_T.go

@@ -0,0 +1,27 @@
+
+// evaluation information start
+// real case = true
+// evaluation item = 准确度->上下文敏感分析->参数/返回值传递
+// scene introduction = 参数值传递->引用传递->map
+// level = 2
+// bind_url = cases/accuracy/context_sensitive/argument_return_value_passing/argument_passing_reference_006_T/argument_passing_reference_006_T
+// evaluation information end
+
+package argument_passing_reference_006_T
+
+func argument_passing_reference_006_T(__taint_src interface{}) {
+	objA := map[string]interface{}{"name": __taint_src}
+	objB := map[string]interface{}{"name": "Bob"}
+
+	swap(objA, objB)
+	__taint_sink(objB["name"])
+}
+
+func swap(obj1, obj2 map[string]interface{}) {
+	temp := obj1["name"]
+	obj1["name"] = obj2["name"]
+	obj2["name"] = temp
+}
+
+func __taint_sink(o interface{}) {
+}

sast-go/cases/accuracy/context_sensitive/argument_return_value_passing/argument_passing_reference_007_T/argument_passing_reference_007_T.go

@@ -0,0 +1,31 @@
+
+// evaluation information start
+// real case = true
+// evaluation item = 准确度->上下文敏感分析->参数/返回值传递
+// scene introduction = 参数值传递->引用传递->this
+// level = 2
+// bind_url = accuracy/context_sensitive/argument_return_value_passing/argument_passing_reference_007_T/argument_passing_reference_007_T
+// evaluation information end
+
+package argument_passing_reference_007_T
+
+type Person struct {
+	Name string
+}
+
+func argument_passing_reference_007_T(__taint_src string) {
+	person := Person{Name: "safe"}
+
+	(&person).UpdateNamePointer(__taint_src)
+	__taint_sink((&person).GetNamePointer())
+}
+
+func (p *Person) UpdateNamePointer(newName string) {
+	p.Name = newName
+}
+
+func (p *Person) GetNamePointer() string {
+	return p.Name
+}
+func __taint_sink(o interface{}) {
+}

sast-go/cases/accuracy/context_sensitive/argument_return_value_passing/argument_passing_reference_008_F/argument_passing_reference_008_F.go

@@ -0,0 +1,31 @@
+
+// evaluation information start
+// real case = false
+// evaluation item = 准确度->上下文敏感分析->参数/返回值传递
+// scene introduction = 参数值传递->引用传递->this
+// level = 2
+// bind_url = accuracy/context_sensitive/argument_return_value_passing/argument_passing_reference_008_F/argument_passing_reference_008_F
+// evaluation information end
+
+package argument_passing_reference_008_F
+
+type Person struct {
+	Name string
+}
+
+func argument_passing_reference_008_F(__taint_src string) {
+	person := Person{Name: __taint_src}
+
+	(&person).UpdateNamePointer("safe")
+	__taint_sink((&person).GetNamePointer())
+}
+
+func (p *Person) UpdateNamePointer(newName string) {
+	p.Name = newName
+}
+
+func (p *Person) GetNamePointer() string {
+	return p.Name
+}
+func __taint_sink(o interface{}) {
+}

sast-go/cases/accuracy/context_sensitive/argument_return_value_passing/argument_passing_value_011_F/argument_passing_value_011_F.go

@@ -0,0 +1,21 @@
+// evaluation information start
+// real case = false
+// evaluation item = 准确度->上下文敏感分析->参数/返回值传递
+// scene introduction = 
+// level = 2
+// bind_url = accuracy/context_sensitive/argument_return_value_passing/argument_passing_value_011_F/argument_passing_value_011_F
+// evaluation information end
+
+package argument_passing_value_011_F
+
+func argument_passing_value_011_F(__taint_src interface{}) {
+	process(__taint_src)
+}
+
+func process(arg interface{}) {
+	arg = "safe"
+	__taint_sink(arg)
+}
+
+func __taint_sink(o interface{}) {
+}

sast-go/cases/accuracy/context_sensitive/argument_return_value_passing/argument_passing_value_012_T/argument_passing_value_012_T.go

@@ -0,0 +1,20 @@
+// evaluation information start
+// real case = true
+// evaluation item = 准确度->上下文敏感分析->参数/返回值传递
+// scene introduction = 
+// level = 2
+// bind_url = accuracy/context_sensitive/argument_return_value_passing/argument_passing_value_012_T/argument_passing_value_012_T
+// evaluation information end
+
+package argument_passing_value_012_T
+
+func argument_passing_value_012_T(__taint_src string) {
+	process(__taint_src)
+}
+
+func process(arg string) {
+	__taint_sink(arg)
+}
+
+func __taint_sink(o interface{}) {
+}

sast-go/cases/accuracy/context_sensitive/argument_return_value_passing/argument_passing_value_013_F/argument_passing_value_013_F.go

@@ -0,0 +1,25 @@
+// evaluation information start
+// real case = false
+// evaluation item = 准确度->上下文敏感分析->参数/返回值传递
+// scene introduction = 参数值传递->多函数
+// level = 2
+// bind_url = accuracy/context_sensitive/argument_return_value_passing/argument_passing_value_013_F/argument_passing_value_013_F
+// evaluation information end
+
+package argument_passing_value_013_F
+
+func argument_passing_value_013_F(__taint_src interface{}) {
+	var clean string = "_"
+	process1(clean)
+	process2(__taint_src)
+}
+
+func process1(arg interface{}) {
+	__taint_sink(arg)
+}
+
+func process2(arg interface{}) {
+}
+
+func __taint_sink(o interface{}) {
+}

sast-go/cases/accuracy/context_sensitive/argument_return_value_passing/argument_passing_value_014_T/argument_passing_value_014_T.go

@@ -0,0 +1,25 @@
+// evaluation information start
+// real case = true
+// evaluation item = 准确度->上下文敏感分析->参数/返回值传递
+// scene introduction = 参数值传递->多函数
+// level = 2 
+// bind_url = accuracy/context_sensitive/argument_return_value_passing/argument_passing_value_014_T/argument_passing_value_014_T
+// evaluation information end
+
+package argument_passing_value_014_T
+
+func argument_passing_value_014_T(__taint_src interface{}) {
+	var clean string = "_"
+	process2(clean)
+	process1(__taint_src)
+}
+
+func process1(arg interface{}) {
+	__taint_sink(arg)
+}
+
+func process2(arg interface{}) {
+}
+
+func __taint_sink(o interface{}) {
+}

sast-go/cases/accuracy/context_sensitive/argument_return_value_passing/argument_passing_value_015_F/argument_passing_value_015_F.go

@@ -0,0 +1,19 @@
+// evaluation information start
+// real case = false
+// evaluation item = 准确度->上下文敏感分析->参数/返回值传递
+// scene introduction = 参数值传递->参数顺序
+// level = 2 
+// bind_url = accuracy/context_sensitive/argument_return_value_passing/argument_passing_value_015_F/argument_passing_value_015_F
+// evaluation information end
+
+package argument_passing_value_015_F
+
+func argument_passing_value_015_F(__taint_src string) {
+	process(__taint_src, "_")
+}
+
+func process(arg1 string, arg2 string) {
+	__taint_sink(arg2)
+}
+
+func __taint_sink(o interface{}) {}

sast-go/cases/accuracy/context_sensitive/argument_return_value_passing/argument_passing_value_016_T/argument_passing_value_016_T.go

@@ -0,0 +1,19 @@
+// evaluation information start
+// real case = true
+// evaluation item = 准确度->上下文敏感分析->参数/返回值传递
+// scene introduction = 参数值传递->参数顺序
+// level = 2 
+// bind_url = accuracy/context_sensitive/argument_return_value_passing/argument_passing_value_016_T/argument_passing_value_016_T
+// evaluation information end
+
+package argument_passing_value_016_T
+
+func argument_passing_value_016_T(__taint_src string) {
+	process(__taint_src, "_")
+}
+
+func process(arg1 string, arg2 string) {
+	__taint_sink(arg1)
+}
+
+func __taint_sink(o interface{}) {}