Skip to content

Commit f15a34f

Browse files
committed
Rust: Add test cases for transactions as well.
1 parent 883e005 commit f15a34f

File tree

1 file changed

+10
-0
lines changed
  • rust/ql/test/query-tests/security/CWE-089

1 file changed

+10
-0
lines changed

rust/ql/test/query-tests/security/CWE-089/mysql.rs

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -45,6 +45,11 @@ mod sync_test
4545
let _ = conn.exec_map(&stmt, (remote_string.as_str(),), |_: i64| -> () {})?;
4646
let _ = conn.exec_map_opt(&stmt, (remote_string.as_str(),), |_: Result<i64, FromRowError>| -> () {})?;
4747

48+
// transactions
49+
let mut trans = conn.start_transaction(TxOpts::default())?;
50+
trans.query_drop(unsafe_query.as_str()); // $ MISSING: sql-sink Alert[rust/sql-injection]=remote11
51+
trans.commit()?;
52+
4853
Ok(())
4954
}
5055
}
@@ -88,6 +93,11 @@ mod async_test
8893
let _ = conn.exec_stream::<i64, &Statement, (&str,)>(&stmt, (remote_string.as_str(),)).await?;
8994
let _ = conn.exec_map(&stmt, (remote_string.as_str(),), |_: i64| -> () {}).await?;
9095

96+
// transactions
97+
let mut trans = conn.start_transaction(TxOpts::default()).await?;
98+
trans.query_drop(unsafe_query.as_str()); // $ MISSING: sql-sink Alert[rust/sql-injection]=remote11
99+
trans.commit().await?;
100+
91101
Ok(())
92102
}
93103
}

0 commit comments

Comments
 (0)