From 88df815e8d3bfb18d9d6cccaa03094087c75f3d0 Mon Sep 17 00:00:00 2001 From: michael hohn Date: Fri, 5 Sep 2025 00:02:59 -0700 Subject: [PATCH] replace the broken source query with a minimal one --- SourceGetUserInfo.ql | 17 ++++------------- 1 file changed, 4 insertions(+), 13 deletions(-) diff --git a/SourceGetUserInfo.ql b/SourceGetUserInfo.ql index e81159f..2e8b8e4 100644 --- a/SourceGetUserInfo.ql +++ b/SourceGetUserInfo.ql @@ -4,17 +4,8 @@ */ import go +import DataFlow as DF -/** A source expression corresponding to the value returned from getUserInfo. */ -predicate isSource(Expr e) { - exists(Function f, ReturnStmt r, int i | - f.getName() = "getUserInfo" and - r.getEnclosingFunction() = f and - e = r.getExpr(i) - ) -} - -from Expr e -where isSource(e) -select e, "Source: return value of getUserInfo" - +from DF::CallNode cn +where cn.getACalleeIncludingExternals().getName() = "ReadString" +select cn