add step through the fclone library

This commit is contained in:
Erik Krogh Kristensen
2021-06-24 11:32:59 +02:00
parent f99a33598f
commit 94cbc4b2c0
5 changed files with 36 additions and 3 deletions

View File

@@ -178,11 +178,11 @@ private class ExtendCallTaintStep extends TaintTracking::SharedTaintStep {
private import semmle.javascript.dataflow.internal.PreCallGraphStep
/**
* A step for the `clone` package.
* A step through a cloning library, such as `clone` or `fclone`.
*/
private class CloneStep extends PreCallGraphStep {
override predicate step(DataFlow::Node pred, DataFlow::Node succ) {
exists(DataFlow::CallNode call | call = DataFlow::moduleImport("clone").getACall() |
exists(DataFlow::CallNode call | call = DataFlow::moduleImport(["clone", "fclone"]).getACall() |
pred = call.getArgument(0) and
succ = call
)