hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-25 16:55:19 +02:00
Code Issues Packages Projects Releases Wiki Activity

Ruby: use asCallable() in Twirp model

Browse Source
This commit is contained in:
Asger F
2023-06-28 11:47:15 +02:00
parent dd868437ce
commit 423da55fb9
1 changed files with 8 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
ruby/ql/lib/codeql/ruby/frameworks/Twirp.qll
View File

@@ -21,16 +21,17 @@ module Twirp {
this = API::getTopLevelMember("Twirp").getMember("Service").getAnInstantiation()
}
private DataFlow::ClassNode getAHandlerClass() {
result.getAnImmediateReference().getAMethodCall("new").flowsTo(this.getArgument(0))
}
/**
* Gets a handler's method.
*/
Ast::Method getAHandlerMethod() {
result = this.getAHandlerClass().getAnAncestor().getAnOwnInstanceMethod().asCallableAstNode()
DataFlow::MethodNode getAHandlerMethodNode() {
result = this.getArgument(0).backtrack().getMethod(_).asCallable()
}
/**
* Gets a handler's method as an AST node.
*/
Ast::Method getAHandlerMethod() { result = this.getAHandlerMethodNode().asCallableAstNode() }
}
/**
@@ -52,7 +53,7 @@ module Twirp {
DataFlow::ParameterNode
{
UnmarshaledParameter() {
exists(ServiceInstantiation i | i.getAHandlerMethod().getParameter(0) = this.asParameter())
this = any(ServiceInstantiation i).getAHandlerMethodNode().getParameter(0)
}
override string getSourceType() { result = "Twirp Unmarhaled Parameter" }