hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-27 09:45:15 +02:00
Code Issues Packages Projects Releases Wiki Activity

Support more escaped characters

Browse Source
This commit is contained in:
Joe Farebrother
2022-02-14 15:15:48 +00:00
parent 4b845d5dac
commit 457cf41825
1 changed files with 9 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
java/ql/lib/semmle/code/java/regex/RegexTreeView.qll
View File

@@ -480,10 +480,12 @@ class RegExpEscape extends RegExpNormalChar {
or
this.getUnescaped() = "t" and result = "\t"
or
// TODO: Find a way to include a formfeed character
// also the alert/bell character for \a and escape character for \e.
// this.getUnescaped() = "f" and result = " "
// or
this.getUnescaped() = "f" and result = 12.toUnicode() // form feed
or
this.getUnescaped() = "a" and result = 7.toUnicode() // alert/bell
or
this.getUnescaped() = "e" and result = 27.toUnicode() // escape (0x1B)
or
this.isUnicode() and
result = this.getUnicode()
}
@@ -664,6 +666,7 @@ class RegExpCharacterRange extends RegExpTerm, TRegExpCharacterRange {
/**
* A normal character in a regular expression, that is, a character
* without special meaning. This includes escaped characters.
* It also includes escape sequences that represent character classes.
*
* Examples:
* ```
@@ -727,11 +730,8 @@ class RegExpConstant extends RegExpTerm {
string value;
RegExpConstant() {
(this = TRegExpNormalChar(re, start, end) or this = TRegExpQuote(re, start, end)) and
not this instanceof RegExpCharacterClassEscape and
// exclude chars in quantifiers
// TODO: push this into regex library
(value = this.(RegExpNormalChar).getValue() or value = this.(RegExpQuote).getValue())
(value = this.(RegExpNormalChar).getValue() or value = this.(RegExpQuote).getValue()) and
not this instanceof RegExpCharacterClassEscape
}
/**