hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-01 11:45:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

join-order improvement in NoSQL.qll

Browse Source
This commit is contained in:
Erik Krogh Kristensen
2020-10-03 22:07:34 +02:00
parent 6acb199074
commit 856ad07694
1 changed files with 5 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
javascript/ql/src/semmle/javascript/frameworks/NoSQL.qll
View File

@@ -537,13 +537,13 @@ private module Mongoose {
param = func.getLastParameter().getParameter(1)
)
or
exists(API::Node f, string executor, int paramIndex |
executor = "then" and paramIndex = 0
exists(API::Node f |
f = Query::getAMongooseQuery().getMember("then") and
param = f.getParameter(0).getParameter(0)
or
executor = "exec" and paramIndex = 1
f = Query::getAMongooseQuery().getMember("exec") and
param = f.getParameter(0).getParameter(1)
|
f = Query::getAMongooseQuery().getMember(executor) and
param = f.getParameter(0).getParameter(paramIndex) and
exists(DataFlow::MethodCallNode pred |
// limitation: look at the previous method call
Query::MethodSignatures::returnsDocumentQuery(pred.getMethodName(), asArray) and