JS: Fix missing flow into rest pattern lvalue

2026-04-28 02:05:14 +02:00 · 2025-04-11 08:33:29 +02:00
parent 7703b1fab5
commit 719456e27d
3 changed files with 11 additions and 3 deletions
--- a/javascript/ql/lib/semmle/javascript/dataflow/DataFlow.qll
+++ b/javascript/ql/lib/semmle/javascript/dataflow/DataFlow.qll
@@ -1610,6 +1610,11 @@ module DataFlow {
      pred = TElementPatternNode(_, element) and
      succ = lvalueNodeInternal(element)
    )
+    or
+    exists(Expr rest |
+      pred = TRestPatternNode(_, rest) and
+      succ = lvalueNodeInternal(rest)
+    )
  }

  /**