hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-24 16:25:15 +02:00
Code Issues Packages Projects Releases Wiki Activity

JS: Only parameter-calls as lambda calls

Browse Source
This commit is contained in:
Asger F
2024-10-28 14:12:45 +01:00
parent 1e9e57e46e
commit 2fb108419c
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
javascript/ql/lib/semmle/javascript/dataflow/internal/DataFlowPrivate.qll
View File

@@ -1530,7 +1530,9 @@ predicate lambdaCreation(Node creation, LambdaCallKind kind, DataFlowCallable c)
predicate lambdaCall(DataFlowCall call, LambdaCallKind kind, Node receiver) {
call.isSummaryCall(_, receiver.(FlowSummaryNode).getSummaryNode()) and exists(kind)
or
receiver = call.asOrdinaryCall().getCalleeNode() and exists(kind)
receiver = call.asOrdinaryCall().getCalleeNode() and
exists(kind) and
receiver.getALocalSource() instanceof DataFlow::ParameterNode
}
/** Extra data-flow steps needed for lambda flow analysis. */