hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-26 17:25:19 +02:00
Code Issues Packages Projects Releases Wiki Activity

JavaScript: Introduce additional flow steps between sockets.

Browse Source
This commit is contained in:
Max Schaefer
2019-02-28 10:29:13 +00:00
parent 36c9af977b
commit 41d83d5b7d
3 changed files with 60 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

36
javascript/ql/src/semmle/javascript/frameworks/SocketIO.qll
View File

@@ -526,3 +526,39 @@ private module EventEmitter {
result = "prependOnceListener"
}
}
/** A data flow step through socket.io sockets. */
private class SocketIoStep extends DataFlow::AdditionalFlowStep {
DataFlow::Node pred;
DataFlow::Node succ;
SocketIoStep() {
(
exists(SocketIO::SendNode send, SocketIOClient::ReceiveNode recv, int i |
recv = send.getAReceiver()
|
pred = send.getSentItem(i) and
succ = recv.getReceivedItem(i)
or
pred = recv.getAck().getACall().getArgument(i) and
succ = send.getAck().getParameter(i)
)
or
exists(SocketIOClient::SendNode send, SocketIO::ReceiveNode recv, int i |
recv = send.getAReceiver()
|
pred = send.getSentItem(i) and
succ = recv.getReceivedItem(i)
or
pred = recv.getAck().getACall().getArgument(i) and
succ = send.getAck().getParameter(i)
)
) and
this = pred
}
override predicate step(DataFlow::Node predNode, DataFlow::Node succNode) {
predNode = pred and succNode = succ
}
}