hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-25 00:27:09 +02:00
Code Issues Packages Projects Releases Wiki Activity

PS: Add helper predicate on 'Call' for getting a runtime target.

Browse Source
This commit is contained in:
Mathias Vorreiter Pedersen
2024-10-02 15:37:19 +01:00
parent b05409380a
commit 816aa79a45
1 changed files with 22 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

22
powershell/ql/lib/semmle/code/powershell/Call.qll
View File

@@ -1,4 +1,7 @@
import powershell
private import semmle.code.powershell.dataflow.internal.DataFlowImplCommon
private import semmle.code.powershell.dataflow.internal.DataFlowDispatch
private import semmle.code.powershell.controlflow.CfgNodes
abstract private class AbstractCall extends Ast {
abstract Expr getCommand();
@@ -17,6 +20,9 @@ abstract private class AbstractCall extends Ast {
/** Gets the qualifier of this call, if any. */
Expr getQualifier() { none() }
/** Gets a possible runtime target of this call. */
abstract Function getATarget();
}
private class CmdCall extends AbstractCall instanceof Cmd {
@@ -27,6 +33,14 @@ private class CmdCall extends AbstractCall instanceof Cmd {
final override Expr getArgument(int i) { result = Cmd.super.getArgument(i) }
final override Expr getNamedArgument(string name) { result = Cmd.super.getNamedArgument(name) }
final override Function getATarget() {
exists(DataFlowCall call | call.asCall().(StmtNodes::CmdCfgNode).getStmt() = this |
result.getBody() = viableCallableLambda(call, _).asCfgScope()
or
result.getBody() = getTarget(call)
)
}
}
private class InvokeMemberCall extends AbstractCall instanceof InvokeMemberExpr {
@@ -41,6 +55,14 @@ private class InvokeMemberCall extends AbstractCall instanceof InvokeMemberExpr
final override Expr getQualifier() { result = InvokeMemberExpr.super.getQualifier() }
final override Expr getNamedArgument(string name) { none() }
final override Function getATarget() {
exists(DataFlowCall call | call.asCall().(ExprNodes::InvokeMemberCfgNode).getExpr() = this |
result.getBody() = viableCallableLambda(call, _).asCfgScope()
or
result.getBody() = getTarget(call)
)
}
}
final class Call = AbstractCall;