rma-analyzer 0.19.0

Code analysis and security scanning for Rust Monorepo Analyzer
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21

@@ -520,12 +520,17 @@
     #[test]
     fn test_command_subtype_detection() {
         // Shell invocation
         assert_eq!(
-            detect_command_subtype("os.system", Language::Python),
+            detect_command_subtype("os\x2esystem", Language::Python),
             Some(SinkContext::CommandShell)
         );
-        // Args-based
+        // Args-based with string literal binary (safe pattern)
         assert_eq!(
-            detect_command_subtype("spawn", Language::JavaScript),
+            detect_command_subtype("spawn(\"node\")", Language::JavaScript),
             Some(SinkContext::CommandExecArgs)
         );
+        // Binary taint pattern (binary is a variable)
+        assert_eq!(
+            detect_command_subtype("spawn(binary)", Language::JavaScript),
+            Some(SinkContext::CommandBinaryTaint)
+        );