hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-27 09:45:15 +02:00
Code Issues Packages Projects Releases Wiki Activity

Do not pass regular positional args into the rest parameter

Browse Source
This commit is contained in:
Asger F
2024-08-12 13:18:58 +02:00
parent a72f79576a
commit 623dbda77d
1 changed files with 5 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
javascript/ql/lib/semmle/javascript/dataflow/internal/DataFlowPrivate.qll
View File

@@ -287,7 +287,11 @@ abstract class LibraryCallable extends string {
} }
private predicate isParameterNodeImpl(Node p, DataFlowCallable c, ParameterPosition pos) { private predicate isParameterNodeImpl(Node p, DataFlowCallable c, ParameterPosition pos) {
p = c.asSourceCallable().(Function).getParameter(pos.asPositional()).flow() exists(Parameter parameter |
parameter = c.asSourceCallable().(Function).getParameter(pos.asPositional()) and
not parameter.isRestParameter() and
p = TValueNode(parameter)
)
or or
pos.isThis() and p = TThisNode(c.asSourceCallable().(Function)) pos.isThis() and p = TThisNode(c.asSourceCallable().(Function))
or or