Skip to content
This repository was archived by the owner on Jan 5, 2023. It is now read-only.

Add model for net/http.NewRequest #352

Merged
smowton merged 1 commit into from
Sep 23, 2020
Merged

Add model for net/http.NewRequest #352

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 8 additions & 0 deletions ql/src/semmle/go/frameworks/stdlib/NetHttp.qll
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -252,6 +252,14 @@ module NetHttp {
hasQualifiedName("net/http", "MaxBytesReader") and
(inp.isParameter(1) and outp.isResult())
or
// signature: func NewRequest(method, url string, body io.Reader) (*Request, error)
hasQualifiedName("net/http", "NewRequest") and
(inp.isParameter(1) and outp.isResult(0))
or
// signature: func NewRequestWithContext(ctx context.Context, method, url string, body io.Reader) (*Request, error)
hasQualifiedName("net/http", "NewRequestWithContext") and
(inp.isParameter(2) and outp.isResult(0))
or
// signature: func ReadRequest(b *bufio.Reader) (*Request, error)
hasQualifiedName("net/http", "ReadRequest") and
(inp.isParameter(0) and outp.isResult(0))
Expand Down
20 changes: 20 additions & 0 deletions ql/test/library-tests/semmle/go/frameworks/StdlibTaintFlow/NetHttp.go
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.