# Security Analysis Report for ../results/code\test_backdoor_detection.md ## High Risk - Line 9: os.system('rm -rf /') - Line 10: exec('print("Hello")') - Line 11: eval('2 + 2') - Line 15: self.assertIn((2, "os.system('rm -rf /')"), results["high"]) - Line 16: self.assertIn((3, "exec('print(\"Hello\")')"), results["high"]) - Line 17: self.assertIn((4, "eval('2 + 2')"), results["high"]) - Line 44: eval('2 + 2') - Line 50: (3, "eval('2 + 2')"), ## Medium Risk - Line 21: subprocess.run(['ls', '-l']) - Line 23: os.popen('ls') - Line 27: self.assertIn((2, "subprocess.run(['ls', '-l'])"), results["medium"]) - Line 28: self.assertIn((4, "os.popen('ls')"), results["medium"]) - Line 45: subprocess.run(['echo', 'hello']) - Line 54: (4, "subprocess.run(['echo', 'hello'])"), ## Low Risk ## None Risk - Line 1: import unittest - Line 3: from detection.backdoor_detection import find_dangerous_functions - Line 6: class TestBackdoorDetection(unittest.TestCase): - Line 7: def test_high_risk_detection(self): - Line 8: content = """import os - Line 12: """ - Line 13: file_extension = ".py" - Line 14: results = find_dangerous_functions(content, file_extension) - Line 19: def test_medium_risk_detection(self): - Line 20: content = """import subprocess - Line 22: import os - Line 24: """ - Line 25: file_extension = ".py" - Line 26: results = find_dangerous_functions(content, file_extension) - Line 30: def test_no_risk_detection(self): - Line 31: content = """a = 10 - Line 32: b = a + 5 - Line 33: print('This should not be detected as risky.') - Line 34: """ - Line 35: file_extension = ".py" - Line 36: results = find_dangerous_functions(content, file_extension) - Line 37: self.assertEqual(len(results["high"]), 0) - Line 38: self.assertEqual(len(results["medium"]), 0) - Line 39: self.assertEqual(len(results["low"]), 0) - Line 41: def test_inclusion_of_comments(self): - Line 42: content = """ - Line 43: print('This is a safe line') - Line 46: """ - Line 47: file_extension = ".py" - Line 48: results = find_dangerous_functions(content, file_extension) - Line 49: self.assertIn( - Line 51: results["high"], - Line 52: ) - Line 53: self.assertIn( - Line 55: results["medium"], - Line 56: ) - Line 59: if __name__ == "__main__": - Line 60: unittest.main()