hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-21 03:06:31 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #15775 from RasmusWL/scope-consistency

Browse Source 
Python: Add consistency check for `PhaseDependentFlow`
This commit is contained in:
yoff
2024-03-04 14:43:13 +01:00
committed by GitHub
parent a9ce2e10ad 85a45b0155
commit 569bb991d4
1 changed files with 21 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

21
python/ql/consistency-queries/PhaseDependentFlowConsistency.ql Normal file
View File

@@ -0,0 +1,21 @@
private import python
private import semmle.python.dataflow.new.DataFlow::DataFlow
private import semmle.python.dataflow.new.internal.DataFlowPrivate as DataFlowPrivate
private import semmle.python.dataflow.new.internal.VariableCapture as VariableCapture
from Node node
where
not exists(node.getScope()) and
exists(Node nodeFrom, Node nodeTo | node in [nodeFrom, nodeTo] |
// the list of step relations used with PhaseDependentFlow has been compiled
// manually, and there isn't really a good way to do so automatically :|
DataFlowPrivate::LocalFlow::definitionFlowStep(nodeFrom, nodeTo)
or
DataFlowPrivate::LocalFlow::expressionFlowStep(nodeFrom, nodeTo)
or
DataFlowPrivate::LocalFlow::useUseFlowStep(nodeFrom, nodeTo)
or
VariableCapture::valueStep(nodeFrom, nodeTo)
)
select node,
"Node being used in PhaseDependentFlow does not have result for .getScope(), so will not work properly (since division into run-time/import-time is based on .getScope result)"