hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-28 18:25:24 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #921 from asger-semmle/class-node-absval

Browse Source 
JS: use type inference to back up function-style classes
This commit is contained in:
Max Schaefer
2019-02-13 10:12:20 +00:00
committed by GitHub
parent ca6f145b12 74a9c4b500
commit 5b2df068d3
4 changed files with 25 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

27
javascript/ql/src/semmle/javascript/dataflow/Nodes.qll
View File

@@ -725,8 +725,15 @@ module ClassNode {
*/
class FunctionStyleClass extends Range, DataFlow::ValueNode {
override Function astNode;
AbstractFunction function;
FunctionStyleClass() { exists(getAPropertyReference("prototype")) }
FunctionStyleClass() {
function.getFunction() = astNode and
exists (DataFlow::PropRef read |
read.getPropertyName() = "prototype" and
read.getBase().analyze().getAValue() = function
)
}
override string getName() { result = astNode.getName() }
@@ -775,14 +782,16 @@ module ClassNode {
/**
* Gets a reference to the prototype of this class.
*/
private DataFlow::SourceNode getAPrototypeReference() {
result = getAPropertyRead("prototype")
or
result = getAPropertySource("prototype")
or
exists(ExtendCall call |
call.getDestinationOperand() = getAPropertyRead("prototype") and
result = call.getASourceOperand()
DataFlow::SourceNode getAPrototypeReference() {
exists (DataFlow::SourceNode base | base.analyze().getAValue() = function |
result = base.getAPropertyRead("prototype")
or
result = base.getAPropertySource("prototype")
or
exists(ExtendCall call |
call.getDestinationOperand() = base.getAPropertyRead("prototype") and
result = call.getASourceOperand()
)
)
}