Rust: Add a test for sensitive data.

Author: geoffw0

rust/ql/test/library-tests/sensitivedata/test.rs

@@ -0,0 +1,150 @@
+
+fn get_string() -> String { "string".to_string() }
+
+fn sink<T>(_: T) { }
+
+// --- tests ---
+
+struct MyStruct {
+	harmless: String,
+	password: String,
+	password_file_path: String,
+	password_enabled: String,
+}
+
+impl MyStruct {
+	fn get_certificate(&self) -> String { return get_string() }
+	fn get_certificate_url(&self) -> String { return get_string() }
+	fn get_certificate_file(&self) -> String { return get_string() }
+}
+
+fn get_password() -> String { get_string() }
+
+fn test_passwords(
+	password: &str, passwd: &str, my_password: &str, password_str: &str, pass_phrase: &str,
+	auth_key: &str, authenticationkey: &str, authKey: &str,
+	harmless: &str, encrypted_password: &str, password_hash: &str,
+	ms: &MyStruct
+) {
+	// passwords
+	sink(password); // $ MISSING: sensitive=password
+	sink(passwd); // $ MISSING: sensitive=password
+	sink(my_password); // $ MISSING: sensitive=password
+	sink(password_str); // $ MISSING: sensitive=password
+	sink(pass_phrase); // $ MISSING: sensitive=password
+	sink(auth_key); // $ MISSING: sensitive=password
+	sink(authenticationkey); // $ MISSING: sensitive=password
+	sink(authKey); // $ MISSING: sensitive=password
+
+	sink(ms); // $ MISSING: sensitive=password
+	sink(ms.password.as_str()); // $ MISSING: sensitive=password
+
+	sink(get_password()); // $ MISSING: sensitive=password
+	let password2 = get_string();
+	sink(password2); // $ MISSING: sensitive=password
+
+	// not passwords
+	sink(harmless);
+	sink(encrypted_password);
+	sink(password_hash);
+
+	sink(ms.harmless.as_str());
+	sink(ms.password_file_path.as_str());
+	sink(ms.password_enabled.as_str());
+
+	sink(get_string());
+	let harmless2 = get_string();
+	sink(harmless2);
+}
+
+fn generate_secret_key() -> String { get_string() }
+fn get_secure_key() -> String { get_string() }
+fn get_private_key() -> String { get_string() }
+fn get_public_key() -> String { get_string() }
+fn get_secret_token() -> String { get_string() }
+fn get_next_token() -> String { get_string() }
+
+fn test_credentials(
+	account_key: &str, accnt_key: &str, license_key: &str, secret_key: &str, is_secret: bool, num_accounts: i64, uid: i64,
+	ms: &MyStruct
+) {
+	// credentials
+	sink(account_key); // $ MISSING: sensitive=secret
+	sink(accnt_key); // $ MISSING: sensitive=secret
+	sink(license_key); // $ MISSING: sensitive=secret
+	sink(secret_key); // $ MISSING: sensitive=secret
+
+	sink(ms.get_certificate()); // $ MISSING: sensitive=certificate
+
+	sink(generate_secret_key()); // $ MISSING: sensitive=secret
+	sink(get_secure_key()); // $ MISSING: sensitive=secret
+	sink(get_private_key()); // $ MISSING: sensitive=secret
+	sink(get_secret_token()); // $ MISSING: sensitive=secret
+
+	// not credentials
+	sink(is_secret);
+	sink(num_accounts);
+	sink(uid);
+
+	sink(ms.get_certificate_url());
+	sink(ms.get_certificate_file());
+
+	sink(get_public_key());
+	sink(get_next_token());
+}
+
+struct Financials {
+	harmless: String,
+	my_bank_account_number: String,
+	credit_card_no: String,
+	credit_rating: i32,
+	user_ccn: String
+}
+
+struct MyPrivateInfo {
+	mobile_phone_num: String,
+	contact_email: String,
+	contact_e_mail_2: String,
+	my_ssn: String,
+	birthday: String,
+	emergency_contact: String,
+	name_of_employer: String,
+
+	medical_notes: Vec<String>,
+	latitude: f64,
+	longitude: Option<f64>,
+
+	financials: Financials
+}
+
+fn test_private_info(
+	info: &MyPrivateInfo
+) {
+	// private info
+	sink(info.mobile_phone_num.as_str()); // $ MISSING: sensitive=private
+	sink(info.mobile_phone_num.to_string()); // $ MISSING: sensitive=private
+	sink(info.contact_email.as_str()); // $ MISSING: sensitive=private
+	sink(info.contact_e_mail_2.as_str()); // $ MISSING: sensitive=private
+	sink(info.my_ssn.as_str()); // $ MISSING: sensitive=private
+	sink(info.birthday.as_str()); // $ MISSING: sensitive=private
+	sink(info.emergency_contact.as_str()); // $ MISSING: sensitive=private
+	sink(info.name_of_employer.as_str()); // $ MISSING: sensitive=private
+
+	sink(&info.medical_notes); // $ MISSING: sensitive=private
+	sink(info.medical_notes[0].as_str()); // $ MISSING: sensitive=private
+	for n in info.medical_notes.iter() {
+		sink(n.as_str()); // $ MISSING: sensitive=private
+	}
+
+	sink(info.latitude); // $ MISSING: sensitive=private
+	let x = info.longitude.unwrap();
+	sink(x); // $ MISSING: sensitive=private
+
+	sink(info.financials.my_bank_account_number.as_str()); // $ MISSING: sensitive=private
+	sink(info.financials.credit_card_no.as_str()); // $ MISSING: sensitive=private
+	sink(info.financials.credit_rating); // $ MISSING: sensitive=private
+	sink(info.financials.user_ccn.as_str()); // $ MISSING: sensitive=private
+
+	// not private info
+	sink(info.financials.harmless.as_str());
+}