Merge branch '3.x-staging' into avara1986/APPSEC-56667-migrate-fastap…

…i_tests
DataDog · Feb 4, 2025 · b3752a6 · b3752a6
2 parents 8657bba + 56a6ca2
commit b3752a6
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/hatch.toml b/hatch.toml
@@ -505,7 +505,8 @@ _DD_IAST_PATCH_MODULES = "scripts.iast"
 test = [
     "uname -a",
     "pip freeze",
-    "python -m pytest tests/appsec/iast_aggregated_memcheck/test_aggregated_memleaks.py",
+    # We use --no-cov due to a pytest-cov problem with eval https://github.com/pytest-dev/pytest-cov/issues/676
+    "python -m pytest --no-cov tests/appsec/iast_aggregated_memcheck/test_aggregated_memleaks.py",
 ]
 
 [[envs.iast_aggregated_leak_testing.matrix]]

diff --git a/scripts/iast/mod_leak_functions.py b/scripts/iast/mod_leak_functions.py
@@ -258,6 +258,7 @@ def sink_points(string_tainted):
     except Exception:
         pass
 
+    _ = eval(f"'a' + '{string_tainted}'")
     # Weak Randomness vulnerability
     _ = random.randint(1, 10)