hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-17 01:03:14 +01:00
Code Issues Packages Projects Releases Wiki Activity

TEMP: DataFlow: Java-only flow including base

Browse Source 
This won't work for other languages until we can annotate a `forceLocal`
call with `local?`.
This commit is contained in:
Jonas Jensen
2025-07-04 10:18:05 +02:00
committed by Alex Eyers-Taylor
parent 687b504951
commit 814cf743bf
1 changed files with 60 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

63
shared/dataflow/codeql/dataflow/internal/DataFlowImpl.qll
View File

@@ -3376,24 +3376,81 @@ module MakeImpl<LocationSig Location, InputSig<Location> Lang> {
import S6
/**
* Holds if data can flow from `source` to `sink`.
* Holds if data can flow from `source` to `sink`. When running in overlay
* incremental mode on a supported language, this predicate only has
* results where either the source or sink is in the overlay database.
*/
predicate flow(Node source, Node sink) {
private predicate flowIncremental(Node source, Node sink) {
exists(PathNode source0, PathNode sink0 |
flowPath(source0, sink0) and source0.getNode() = source and sink0.getNode() = sink
)
}
overlay[local]
private predicate flowLocal(Node source, Node sink) =
forceLocal(flowIncremental/2)(source, sink)
/**
* Holds if data can flow from `source` to `sink`.
*/
predicate flow(Node source, Node sink) {
flowIncremental(source, sink)
or
flowLocal(source, sink)
}
/**
* Holds if data can flow from some source to `sink`. When running in
* overlay incremental mode on a supported language, this predicate only
* has results where either the source or sink is in the overlay database.
*/
private predicate flowToIncremental(Node sink) {
exists(PathNode n | n.isSink() and n.getNode() = sink)
}
overlay[local]
private predicate flowToLocal(Node sink) = forceLocal(flowToIncremental/1)(sink)
/**
* Holds if data can flow from some source to `sink`.
*/
predicate flowTo(Node sink) { exists(PathNode n | n.isSink() and n.getNode() = sink) }
predicate flowTo(Node sink) {
flowToIncremental(sink)
or
flowToLocal(sink)
}
/**
* Holds if data can flow from some source to `sink`.
*/
predicate flowToExpr(Expr sink) { flowTo(exprNode(sink)) }
/**
* Holds if data can flow from `source` to some sink. When running in
* overlay incremental mode on a supported language, this predicate only
* has results where either the source or sink is in the overlay database.
*/
private predicate flowFromIncremental(Node source) {
exists(PathNode n | n.isSource() and n.getNode() = source)
}
overlay[local]
private predicate flowFromLocal(Node source) = forceLocal(flowFromIncremental/1)(source)
/**
* Holds if data can flow from `source` to some sink.
*/
predicate flowFrom(Node source) {
flowFromIncremental(source)
or
flowFromLocal(source)
}
/**
* Holds if data can flow from `source` to some sink.
*/
predicate flowFromExpr(Expr source) { flowFrom(exprNode(source)) }
/**
* INTERNAL: Only for debugging.
*