C++: Fix test annotation.

geoffw0 · geoffw0 · commit 81205f37c5ac · 2021-01-06T11:45:17.000Z
diff --git a/cpp/ql/test/query-tests/Security/CWE/CWE-089/SqlTainted/test.c b/cpp/ql/test/query-tests/Security/CWE/CWE-089/SqlTainted/test.c
@@ -30,5 +30,5 @@ int main(int argc, char** argv) {
   // an integer from the user is injected into an SQL query.
   char query3[1000] = {0};
   snprintf(query3, 1000, "SELECT UID FROM USERS where number = \"%i\"", userNumber);
-  mysql_query(0, query3); // BAD
+  mysql_query(0, query3); // GOOD
 }

Original file line number	Diff line number	Diff line change
`@@ -30,5 +30,5 @@ int main(int argc, char** argv) {`
`30`	`30`	`// an integer from the user is injected into an SQL query.`
`31`	`31`	`char query3[1000] = {0};`
`32`	`32`	`snprintf(query3, 1000, "SELECT UID FROM USERS where number = \"%i\"", userNumber);`
`33`		`- mysql_query(0, query3); // BAD`
	`33`	`+ mysql_query(0, query3); // GOOD`
`34`	`34`	`}`