hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 11:15:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

Python: Fix up state-tracking library.

Browse Source
This commit is contained in:
Mark Shannon
2019-04-17 15:26:20 +01:00
parent 2ea204f7f9
commit 96eaf815da
1 changed files with 6 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
python/ql/src/semmle/python/dataflow/StateTracking.qll
View File

@@ -11,6 +11,7 @@ import python
private import semmle.python.pointsto.Base
private import semmle.python.pointsto.PointsTo
private import semmle.python.pointsto.PointsToContext
private import semmle.python.objects.ObjectInternal
/** A state that should be tracked. */
abstract class TrackableState extends string {
@@ -106,23 +107,23 @@ module StateTracking {
exists(int n |
f = b.getNode(n) and
appliesToNode(state, b.getNode(n-1), ctx, sense) and
not exists(PyFunctionObject func, Context callee |
not exists(PythonFunctionObjectInternal func, Context callee |
callee.fromCall(f, func, ctx)
)
)
)
or
/* Function entry via call */
exists(FunctionObject func, CallNode call, Context caller |
exists(PythonFunctionObjectInternal func, CallNode call, Context caller |
ctx.fromCall(call, func, caller) and
func.getFunction().getEntryNode() = f and
func.getScope().getEntryNode() = f and
appliesToNode(state, call.getAPredecessor(), caller, sense)
)
or
/* Function return */
exists(PyFunctionObject func, Context callee |
exists(PythonFunctionObjectInternal func, Context callee |
callee.fromCall(f, func, ctx) and
appliesToNode(state, func.getFunction().getANormalExit(), callee, sense)
appliesToNode(state, func.getScope().getANormalExit(), callee, sense)
)
or
/* Other scope entries */