hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-10 17:44:03 +02:00
Code Issues Packages Projects Releases Wiki Activity

Do not pass regular positional args into the rest parameter

Browse Source
This commit is contained in:
Asger F
2024-08-12 13:18:58 +02:00
parent a72f79576a
commit 623dbda77d
1 changed files with 5 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
javascript/ql/lib/semmle/javascript/dataflow/internal/DataFlowPrivate.qll
View File

@@ -287,7 +287,11 @@ abstract class LibraryCallable extends string {
}
private predicate isParameterNodeImpl(Node p, DataFlowCallable c, ParameterPosition pos) {
p = c.asSourceCallable().(Function).getParameter(pos.asPositional()).flow()
exists(Parameter parameter |
parameter = c.asSourceCallable().(Function).getParameter(pos.asPositional()) and
not parameter.isRestParameter() and
p = TValueNode(parameter)
)
or
pos.isThis() and p = TThisNode(c.asSourceCallable().(Function))
or