Skip to content

Commit ce6d7d5

Browse files
committed
fixed taint in security
1 parent 8899b4f commit ce6d7d5

1 file changed

Lines changed: 5 additions & 0 deletions

File tree

  • core/src/main/kotlin/org/evomaster/core/problem/rest/service

core/src/main/kotlin/org/evomaster/core/problem/rest/service/SecurityRest.kt

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -214,6 +214,7 @@ class SecurityRest {
214214
PUT /x BAR
215215
*/
216216
val repeat = lastCall.copy() as RestCallAction
217+
repeat.forceNewTaints()
217218
copy.addMainActionInEmptyEnterpriseGroup(action = repeat)
218219
copy.resetLocalIdRecursively() //TODO what about links?
219220
copy.doInitializeLocalId()
@@ -626,6 +627,7 @@ class SecurityRest {
626627

627628
actions.forEach {
628629
it.resetLocalIdRecursively()
630+
it.forceNewTaints()
629631
//make sure using same auth
630632
it.auth = lastAction.auth
631633
it.usePreviousLocationId = lastAction.usePreviousLocationId
@@ -819,7 +821,9 @@ class SecurityRest {
819821
val copyNoAuthLast = copyLast.copy() as RestCallAction
820822

821823
copyLast.resetLocalIdRecursively()
824+
copyLast.forceNewTaints()
822825
copyNoAuthLast.resetLocalIdRecursively()
826+
copyNoAuthLast.forceNewTaints()
823827

824828

825829
val otherUsers = authSettings.getAllOthers(copyLast.auth.name, HttpWsAuthenticationInfo::class.java)
@@ -969,6 +973,7 @@ class SecurityRest {
969973
val targetAction = targetInd.seeMainExecutableActions()[targetActionIndex].copy() as RestCallAction
970974
assert(targetAction.verb == verb && targetAction.path.isEquivalent(path))
971975
targetAction.resetLocalIdRecursively()
976+
targetAction.forceNewTaints()
972977
targetAction.auth =
973978
authSettings.getDifferentOne(creationAction.auth.name, HttpWsAuthenticationInfo::class.java, randomness)
974979

0 commit comments

Comments
 (0)