C#: Bulk array flow.

michaelnebel · michaelnebel · commit a555e04b5507 · 2022-03-16T09:30:15.000+01:00
diff --git a/csharp/ql/test/utils/model-generator/CaptureSummaryModels.expected b/csharp/ql/test/utils/model-generator/CaptureSummaryModels.expected
@@ -6,6 +6,9 @@
 | Summaries;BasicFlow;false;ReturnSubstring;(System.String);Argument[0];ReturnValue;taint |
 | Summaries;BasicFlow;false;ReturnThis;(System.Object);Argument[Qualifier];ReturnValue;value |
 | Summaries;BasicFlow;false;SetField;(System.String);Argument[0];Argument[Qualifier];taint |
+| Summaries;BulkArrayFlow;false;AssignFieldToBulkArray;(System.Char[]);Argument[Qualifier];Argument[0];taint |
+| Summaries;BulkArrayFlow;false;AssignToBulkArray;(System.Char[],System.Char);Argument[1];Argument[0];taint |
+| Summaries;BulkArrayFlow;false;ReturnBulkArrayElement;(System.Byte[]);Argument[0];ReturnValue;taint |
 | Summaries;CollectionFlow;false;AddFieldToList;(System.Collections.Generic.List<System.String>);Argument[Qualifier];Argument[0].Element;taint |
 | Summaries;CollectionFlow;false;AddToList;(System.Collections.Generic.List<System.Object>,System.Object);Argument[1];Argument[0].Element;taint |
 | Summaries;CollectionFlow;false;AssignFieldToArray;(System.Object[]);Argument[Qualifier];Argument[0].Element;taint |
diff --git a/csharp/ql/test/utils/model-generator/Summaries.cs b/csharp/ql/test/utils/model-generator/Summaries.cs
@@ -102,4 +102,24 @@ public IEnumerable<string> ReturnFieldInIEnumerable()
     {
         return new List<string> { tainted };
     }
+}
+
+public class BulkArrayFlow
+{
+    private char tainted;
+
+    public void AssignToBulkArray(char[] input, char data)
+    {
+        input[0] = data;
+    }
+
+    public byte ReturnBulkArrayElement(byte[] input)
+    {
+        return input[0];
+    }
+
+    public void AssignFieldToBulkArray(char[] input)
+    {
+        input[0] = tainted;
+    }
 }
