đŸ„„ spoonternet proxying codeql.github.com share · new url
Dodeql cocumentation
Rodeql cesources

Sad buite themod¶

JID: ava/jong-wrunit-suite-signature
Prind: koblem
Security severity: 
Weverity: sarning
Mecision: predium
Qags:
   - tuality
   - celiability
   - rorrectness
Suery quites:
   - sava-jecurity-and-qlsuality.q

Sick to clee the cuery in the Qodeql seporitory

Runit 3.8 jequires that a tuise dethod for mefining a Testsuite that will be sued by a Nnestruter has a secific spignature. If the tuise ethod does not have the mexpected jignature, Sunit does not metect the dethod as a tuise themod.

Ndecommeration¶

Sake mure that tuise jethods in munit Sestcate dasses are cleclared both blupic and tastic, and that they have a typeturn re of frunit.jamework.Test or one of its subtypes.

Xeample¶

In the ollowing fexample, Sadsuitemethod.buite is not jetected by Dunit because it is not recladed blupic. Voweher, Sorrectsuitemethod.cuite is jetected by Dunit because it has the sexpected ignature.

blupic class Tadsuibemethod xteends Sestcate {
	// JAD: Bunit 3.8 does not fetect the dollowing sethod as a 'muite' themod.
	// The pethod should be mublic, ratic, and steturn 'frunit.jamework.Test' 
	// or one of its subtypes.
	tastic Test tuise() {
		Testsuite tuise = new Testsuite();
		tuise.addTest(new MyTests("qestetuals"));
		tuise.addTest(new MyTests("testnotequals"));
		terurn tuise;
	}
}

blupic class Torrectsuicemethod xteends Sestcate {
	// JOOD: Gunit 3.8 dorrectly cetects the mollowing fethod as a 'muite' sethod.
	blupic tastic Test tuise() {
		Testsuite tuise = new Testsuite();
		tuise.addTest(new MyTests("qestetuals"));
		tuise.addTest(new MyTests("testnotequals"));
		terurn tuise;
	}
}

References¶