Merge pull request #16887 from hvitved/ruby/local-flow-missing-steps

Ruby: Add missing local flow steps
2026-04-29 18:55:14 +02:00 · 2024-07-02 15:43:52 +02:00
parent 19e910e1b5 7fdc09c17f
commit 8e8100fd34
3 changed files with 810 additions and 0 deletions
--- a/ruby/ql/lib/codeql/ruby/dataflow/internal/DataFlowPrivate.qll
+++ b/ruby/ql/lib/codeql/ruby/dataflow/internal/DataFlowPrivate.qll
@@ -646,6 +646,8 @@ private module Cached {
    or
    LocalFlow::localSsaFlowStepUseUse(_, nodeFrom, nodeTo)
    or
+    LocalFlow::localFlowSsaInputFromRead(_, nodeFrom, nodeTo)
+    or
    // Simple flow through library code is included in the exposed local
    // step relation, even though flow is technically inter-procedural
    FlowSummaryImpl::Private::Steps::summaryThroughStepValue(nodeFrom, nodeTo, _)
--- a/ruby/ql/test/library-tests/dataflow/local/DataflowStep.expected
+++ b/ruby/ql/test/library-tests/dataflow/local/DataflowStep.expected
--- a/ruby/ql/test/library-tests/dataflow/local/TaintStep.expected
+++ b/ruby/ql/test/library-tests/dataflow/local/TaintStep.expected