adding bundle tests

Author: jsinglet

example/cpp/customizations/src/codeql-pack.lock.yml

@@ -0,0 +1,18 @@
+---
+lockVersion: 1.0.0
+dependencies:
+  codeql/cpp-all:
+    version: 0.12.2
+  codeql/dataflow:
+    version: 0.1.5
+  codeql/rangeanalysis:
+    version: 0.0.4
+  codeql/ssa:
+    version: 0.2.5
+  codeql/tutorial:
+    version: 0.2.5
+  codeql/typetracking:
+    version: 0.2.5
+  codeql/util:
+    version: 0.2.5
+compiled: false

example/cpp/customizations/src/qlpack.yml

@@ -0,0 +1,5 @@
+library: true
+name: qlt/cpp-customizations
+version: 0.0.1
+dependencies:
+  "codeql/cpp-all": "0.12.2"

example/cpp/customizations/src/qlt/Customizations.qll

@@ -0,0 +1,13 @@
+import cpp
+private import semmle.code.cpp.security.FlowSources
+
+module FooSources {
+  private class FooExternalSourceFunction extends RemoteFlowSourceFunction {
+    FooExternalSourceFunction() { this.hasName("foo") }
+
+    override predicate hasRemoteFlowSource(FunctionOutput output, string description) {
+      output.isReturnValue() and
+      description = "value returned by " + this.getName()
+    }
+  }
+}

example/cpp/customizations/test/codeql-pack.lock.yml

@@ -0,0 +1,18 @@
+---
+lockVersion: 1.0.0
+dependencies:
+  codeql/cpp-all:
+    version: 0.12.2
+  codeql/dataflow:
+    version: 0.1.5
+  codeql/rangeanalysis:
+    version: 0.0.4
+  codeql/ssa:
+    version: 0.2.5
+  codeql/tutorial:
+    version: 0.2.5
+  codeql/typetracking:
+    version: 0.2.5
+  codeql/util:
+    version: 0.2.5
+compiled: false

example/cpp/customizations/test/post-bundle/FooExternalSourceFunction/Foo.expected

@@ -0,0 +1 @@
+| test.c:4:13:4:15 | call to foo |

example/cpp/customizations/test/post-bundle/FooExternalSourceFunction/Foo.ql

@@ -0,0 +1,5 @@
+import cpp
+import qlt.Customizations
+import semmle.code.cpp.security.FlowSources
+
+select any(RemoteFlowSource s)

example/cpp/customizations/test/post-bundle/FooExternalSourceFunction/test.c

@@ -0,0 +1,7 @@
+int foo();
+
+int main(int argc, char** argv) {
+    int i = foo();
+
+    return i;
+}

example/cpp/customizations/test/pre-bundle/FooExternalSourceFunction/Foo.expected

@@ -0,0 +1,4 @@
+import cpp
+import semmle.code.cpp.security.FlowSources
+
+select any(RemoteFlowSource s)

example/cpp/customizations/test/pre-bundle/FooExternalSourceFunction/Foo.ql

@@ -0,0 +1,7 @@
+int foo();
+
+int main(int argc, char** argv) {
+    int i = foo();
+
+    return i;
+}