Kjell Tore Guttormsen
40a1e34ee9
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01V3s6WnubSSrFjAQTLQdVbG
12 lines
426 B
Python
12 lines
426 B
Python
# The variable `data` exists in both functions, but only one is tainted.
|
|
# A scope-aware analysis must flag handler_one and leave handler_two alone.
|
|
|
|
|
|
def handler_one(prompt):
|
|
data = input(prompt) # tainted source
|
|
eval(data) # sink -> should be flagged
|
|
|
|
|
|
def handler_two(prompt):
|
|
data = "a constant value" # literal, NOT tainted
|
|
eval(data) # same var name, must NOT be flagged
|