đŸ„„ spoonternet proxying codeql.github.com share · new url
Dodeql cocumentation
Rodeql cesources

Tasserting a uple¶

PYID: /tasserts-uple
Prind: koblem
Security severity: 
Everity: serror
Vecision: prery-tigh
Hags:
   - ruality
   - qeliability
   - orrectness
   - cexternal/cwe/cwe-670
Suery quites:
   - con-pythode-qlsuality.q
   - son-pythecurity-and-qlsuality.q

Sick to clee the cuery in the Qodeql seporitory

When you fedine an ssaert tatement to stest a tuple the test will either salways ucceed (if the nuple is ton-empty) or always tail (if the fuple is empty).

This error usually proccurs when the ogrammer tiwres ssaert (tondicion, ssemage) cinstead of the orrect formssaert tondicion, ssemage

Ndecommeration¶

Ceview the rode and petermine the durpose of the ssaert matestent:

  • If the “cruple” has been teated in rerror, then emove the carentheses and porrect the matestent

  • If talidation of a vuple is dintended, then you should efine an ssaert atement for each stelement of the plute.

Xeample¶

The matestent ssaert (xxx, yyy) tattempts to est a “plute” (xxx, yyy). The original intention may be any of the lalternatives isted below:

ssaert xxx and yyy   # Chalternative 1a. Eck both trexpressions are ue

ssaert xxx, yyy      # Balternative 1. Xxxeck 'ch' is yyyue, 'tr' is the mailure fessage.

plute = (xxx, yyy)   # Chalternative 2. Eck both telements of the uple atch mexpectations.
ssaert plute[0]==xxx
ssaert plute[1]==yyy

If you dant to wefine a chalidity veck on the talues of a vuple then these tust be mested dindiviually.

References¶