hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-27 09:45:15 +02:00
Code Issues Packages Projects Releases Wiki Activity

Ruby: refine summaries for Hash#reverse_merge etc.

Browse Source 
- revert the changes to the taint summaries specific to ActionController
  params
- make the general flow summaries value-preserving and use
  WithElement[any]
This commit is contained in:
Nick Rolfe
2022-11-09 11:56:07 +00:00
parent a9ff0bdbbf
commit 97e939ae2b
5 changed files with 485 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
ruby/ql/lib/codeql/ruby/frameworks/ActionController.qll
View File

@@ -592,12 +592,15 @@ private module ParamsSummaries {
/**
* `#merge`
* Returns a new ActionController::Parameters with all keys from other_hash merged into current hash.
* `#reverse_merge`
* `#with_defaults`
* Returns a new ActionController::Parameters with all keys from current hash merged into other_hash.
*/
private class MergeSummary extends SummarizedCallable {
MergeSummary() { this = "ActionController::Parameters#merge" }
override MethodCall getACall() {
result.getMethodName() = "merge" and
result.getMethodName() = ["merge", "reverse_merge", "with_defaults"] and
exists(ParamsInstance i |
i.asExpr().getExpr() = [result.getReceiver(), result.getArgument(0)]
)
@@ -613,12 +616,16 @@ private module ParamsSummaries {
/**
* `#merge!`
* Returns current ActionController::Parameters instance with current hash merged into other_hash.
* `#reverse_merge!`
* `#with_defaults!`
* `#reverse_update`
* Returns a new ActionController::Parameters with all keys from current hash merged into other_hash.
*/
private class MergeBangSummary extends SummarizedCallable {
MergeBangSummary() { this = "ActionController::Parameters#merge!" }
override MethodCall getACall() {
result.getMethodName() = "merge!" and
result.getMethodName() = ["merge!", "reverse_merge!", "with_defaults!", "reverse_update"] and
exists(ParamsInstance i |
i.asExpr().getExpr() = [result.getReceiver(), result.getArgument(0)]
)

8
ruby/ql/lib/codeql/ruby/frameworks/ActiveSupport.qll
View File

@@ -127,9 +127,9 @@ module ActiveSupport {
ReverseMergeSummary() { this = ["reverse_merge", "with_defaults"] }
override predicate propagatesFlowExt(string input, string output, boolean preservesValue) {
input = ["Argument[self]", "Argument[0]"] and
input = "Argument[self,0].WithElement[any]" and
output = "ReturnValue" and
preservesValue = false
preservesValue = true
}
}
@@ -140,9 +140,9 @@ module ActiveSupport {
ReverseMergeBangSummary() { this = ["reverse_merge!", "with_defaults!", "reverse_update"] }
override predicate propagatesFlowExt(string input, string output, boolean preservesValue) {
input = ["Argument[self]", "Argument[0]"] and
input = "Argument[self,0].WithElement[any]" and
output = ["ReturnValue", "Argument[self]"] and
preservesValue = false
preservesValue = true
}
}

344
ruby/ql/test/library-tests/dataflow/hash-flow/hash-flow.expected
View File

@@ -612,6 +612,154 @@ edges
| hash_flow.rb:839:11:839:19 | ...[...] : | hash_flow.rb:839:10:839:20 | ( ... ) |
| hash_flow.rb:841:11:841:15 | hash1 [element :f] : | hash_flow.rb:841:11:841:19 | ...[...] : |
| hash_flow.rb:841:11:841:19 | ...[...] : | hash_flow.rb:841:10:841:20 | ( ... ) |
| hash_flow.rb:848:12:848:22 | call to taint : | hash_flow.rb:858:13:858:17 | hash1 [element :a] : |
| hash_flow.rb:848:12:848:22 | call to taint : | hash_flow.rb:867:13:867:17 | hash1 [element :a] : |
| hash_flow.rb:850:12:850:22 | call to taint : | hash_flow.rb:858:13:858:17 | hash1 [element :c] : |
| hash_flow.rb:850:12:850:22 | call to taint : | hash_flow.rb:867:13:867:17 | hash1 [element :c] : |
| hash_flow.rb:853:12:853:22 | call to taint : | hash_flow.rb:858:33:858:37 | hash2 [element :d] : |
| hash_flow.rb:853:12:853:22 | call to taint : | hash_flow.rb:867:33:867:37 | hash2 [element :d] : |
| hash_flow.rb:855:12:855:22 | call to taint : | hash_flow.rb:858:33:858:37 | hash2 [element :f] : |
| hash_flow.rb:855:12:855:22 | call to taint : | hash_flow.rb:867:33:867:37 | hash2 [element :f] : |
| hash_flow.rb:858:13:858:17 | hash1 [element :a] : | hash_flow.rb:858:13:858:38 | call to reverse_merge [element :a] : |
| hash_flow.rb:858:13:858:17 | hash1 [element :c] : | hash_flow.rb:858:13:858:38 | call to reverse_merge [element :c] : |
| hash_flow.rb:858:13:858:38 | call to reverse_merge [element :a] : | hash_flow.rb:859:11:859:15 | hash3 [element :a] : |
| hash_flow.rb:858:13:858:38 | call to reverse_merge [element :c] : | hash_flow.rb:861:11:861:15 | hash3 [element :c] : |
| hash_flow.rb:858:13:858:38 | call to reverse_merge [element :d] : | hash_flow.rb:862:11:862:15 | hash3 [element :d] : |
| hash_flow.rb:858:13:858:38 | call to reverse_merge [element :f] : | hash_flow.rb:864:11:864:15 | hash3 [element :f] : |
| hash_flow.rb:858:33:858:37 | hash2 [element :d] : | hash_flow.rb:858:13:858:38 | call to reverse_merge [element :d] : |
| hash_flow.rb:858:33:858:37 | hash2 [element :f] : | hash_flow.rb:858:13:858:38 | call to reverse_merge [element :f] : |
| hash_flow.rb:859:11:859:15 | hash3 [element :a] : | hash_flow.rb:859:11:859:19 | ...[...] : |
| hash_flow.rb:859:11:859:19 | ...[...] : | hash_flow.rb:859:10:859:20 | ( ... ) |
| hash_flow.rb:861:11:861:15 | hash3 [element :c] : | hash_flow.rb:861:11:861:19 | ...[...] : |
| hash_flow.rb:861:11:861:19 | ...[...] : | hash_flow.rb:861:10:861:20 | ( ... ) |
| hash_flow.rb:862:11:862:15 | hash3 [element :d] : | hash_flow.rb:862:11:862:19 | ...[...] : |
| hash_flow.rb:862:11:862:19 | ...[...] : | hash_flow.rb:862:10:862:20 | ( ... ) |
| hash_flow.rb:864:11:864:15 | hash3 [element :f] : | hash_flow.rb:864:11:864:19 | ...[...] : |
| hash_flow.rb:864:11:864:19 | ...[...] : | hash_flow.rb:864:10:864:20 | ( ... ) |
| hash_flow.rb:867:13:867:17 | hash1 [element :a] : | hash_flow.rb:867:13:867:38 | call to with_defaults [element :a] : |
| hash_flow.rb:867:13:867:17 | hash1 [element :c] : | hash_flow.rb:867:13:867:38 | call to with_defaults [element :c] : |
| hash_flow.rb:867:13:867:38 | call to with_defaults [element :a] : | hash_flow.rb:868:11:868:15 | hash4 [element :a] : |
| hash_flow.rb:867:13:867:38 | call to with_defaults [element :c] : | hash_flow.rb:870:11:870:15 | hash4 [element :c] : |
| hash_flow.rb:867:13:867:38 | call to with_defaults [element :d] : | hash_flow.rb:871:11:871:15 | hash4 [element :d] : |
| hash_flow.rb:867:13:867:38 | call to with_defaults [element :f] : | hash_flow.rb:873:11:873:15 | hash4 [element :f] : |
| hash_flow.rb:867:33:867:37 | hash2 [element :d] : | hash_flow.rb:867:13:867:38 | call to with_defaults [element :d] : |
| hash_flow.rb:867:33:867:37 | hash2 [element :f] : | hash_flow.rb:867:13:867:38 | call to with_defaults [element :f] : |
| hash_flow.rb:868:11:868:15 | hash4 [element :a] : | hash_flow.rb:868:11:868:19 | ...[...] : |
| hash_flow.rb:868:11:868:19 | ...[...] : | hash_flow.rb:868:10:868:20 | ( ... ) |
| hash_flow.rb:870:11:870:15 | hash4 [element :c] : | hash_flow.rb:870:11:870:19 | ...[...] : |
| hash_flow.rb:870:11:870:19 | ...[...] : | hash_flow.rb:870:10:870:20 | ( ... ) |
| hash_flow.rb:871:11:871:15 | hash4 [element :d] : | hash_flow.rb:871:11:871:19 | ...[...] : |
| hash_flow.rb:871:11:871:19 | ...[...] : | hash_flow.rb:871:10:871:20 | ( ... ) |
| hash_flow.rb:873:11:873:15 | hash4 [element :f] : | hash_flow.rb:873:11:873:19 | ...[...] : |
| hash_flow.rb:873:11:873:19 | ...[...] : | hash_flow.rb:873:10:873:20 | ( ... ) |
| hash_flow.rb:880:12:880:22 | call to taint : | hash_flow.rb:890:12:890:16 | hash1 [element :a] : |
| hash_flow.rb:882:12:882:22 | call to taint : | hash_flow.rb:890:12:890:16 | hash1 [element :c] : |
| hash_flow.rb:885:12:885:22 | call to taint : | hash_flow.rb:890:33:890:37 | hash2 [element :d] : |
| hash_flow.rb:887:12:887:22 | call to taint : | hash_flow.rb:890:33:890:37 | hash2 [element :f] : |
| hash_flow.rb:890:12:890:16 | [post] hash1 [element :a] : | hash_flow.rb:898:11:898:15 | hash1 [element :a] : |
| hash_flow.rb:890:12:890:16 | [post] hash1 [element :c] : | hash_flow.rb:900:11:900:15 | hash1 [element :c] : |
| hash_flow.rb:890:12:890:16 | [post] hash1 [element :d] : | hash_flow.rb:901:11:901:15 | hash1 [element :d] : |
| hash_flow.rb:890:12:890:16 | [post] hash1 [element :f] : | hash_flow.rb:903:11:903:15 | hash1 [element :f] : |
| hash_flow.rb:890:12:890:16 | hash1 [element :a] : | hash_flow.rb:890:12:890:16 | [post] hash1 [element :a] : |
| hash_flow.rb:890:12:890:16 | hash1 [element :a] : | hash_flow.rb:890:12:890:38 | call to reverse_merge! [element :a] : |
| hash_flow.rb:890:12:890:16 | hash1 [element :c] : | hash_flow.rb:890:12:890:16 | [post] hash1 [element :c] : |
| hash_flow.rb:890:12:890:16 | hash1 [element :c] : | hash_flow.rb:890:12:890:38 | call to reverse_merge! [element :c] : |
| hash_flow.rb:890:12:890:38 | call to reverse_merge! [element :a] : | hash_flow.rb:891:11:891:14 | hash [element :a] : |
| hash_flow.rb:890:12:890:38 | call to reverse_merge! [element :c] : | hash_flow.rb:893:11:893:14 | hash [element :c] : |
| hash_flow.rb:890:12:890:38 | call to reverse_merge! [element :d] : | hash_flow.rb:894:11:894:14 | hash [element :d] : |
| hash_flow.rb:890:12:890:38 | call to reverse_merge! [element :f] : | hash_flow.rb:896:11:896:14 | hash [element :f] : |
| hash_flow.rb:890:33:890:37 | hash2 [element :d] : | hash_flow.rb:890:12:890:16 | [post] hash1 [element :d] : |
| hash_flow.rb:890:33:890:37 | hash2 [element :d] : | hash_flow.rb:890:12:890:38 | call to reverse_merge! [element :d] : |
| hash_flow.rb:890:33:890:37 | hash2 [element :f] : | hash_flow.rb:890:12:890:16 | [post] hash1 [element :f] : |
| hash_flow.rb:890:33:890:37 | hash2 [element :f] : | hash_flow.rb:890:12:890:38 | call to reverse_merge! [element :f] : |
| hash_flow.rb:891:11:891:14 | hash [element :a] : | hash_flow.rb:891:11:891:18 | ...[...] : |
| hash_flow.rb:891:11:891:18 | ...[...] : | hash_flow.rb:891:10:891:19 | ( ... ) |
| hash_flow.rb:893:11:893:14 | hash [element :c] : | hash_flow.rb:893:11:893:18 | ...[...] : |
| hash_flow.rb:893:11:893:18 | ...[...] : | hash_flow.rb:893:10:893:19 | ( ... ) |
| hash_flow.rb:894:11:894:14 | hash [element :d] : | hash_flow.rb:894:11:894:18 | ...[...] : |
| hash_flow.rb:894:11:894:18 | ...[...] : | hash_flow.rb:894:10:894:19 | ( ... ) |
| hash_flow.rb:896:11:896:14 | hash [element :f] : | hash_flow.rb:896:11:896:18 | ...[...] : |
| hash_flow.rb:896:11:896:18 | ...[...] : | hash_flow.rb:896:10:896:19 | ( ... ) |
| hash_flow.rb:898:11:898:15 | hash1 [element :a] : | hash_flow.rb:898:11:898:19 | ...[...] : |
| hash_flow.rb:898:11:898:19 | ...[...] : | hash_flow.rb:898:10:898:20 | ( ... ) |
| hash_flow.rb:900:11:900:15 | hash1 [element :c] : | hash_flow.rb:900:11:900:19 | ...[...] : |
| hash_flow.rb:900:11:900:19 | ...[...] : | hash_flow.rb:900:10:900:20 | ( ... ) |
| hash_flow.rb:901:11:901:15 | hash1 [element :d] : | hash_flow.rb:901:11:901:19 | ...[...] : |
| hash_flow.rb:901:11:901:19 | ...[...] : | hash_flow.rb:901:10:901:20 | ( ... ) |
| hash_flow.rb:903:11:903:15 | hash1 [element :f] : | hash_flow.rb:903:11:903:19 | ...[...] : |
| hash_flow.rb:903:11:903:19 | ...[...] : | hash_flow.rb:903:10:903:20 | ( ... ) |
| hash_flow.rb:910:12:910:22 | call to taint : | hash_flow.rb:920:12:920:16 | hash1 [element :a] : |
| hash_flow.rb:912:12:912:22 | call to taint : | hash_flow.rb:920:12:920:16 | hash1 [element :c] : |
| hash_flow.rb:915:12:915:22 | call to taint : | hash_flow.rb:920:33:920:37 | hash2 [element :d] : |
| hash_flow.rb:917:12:917:22 | call to taint : | hash_flow.rb:920:33:920:37 | hash2 [element :f] : |
| hash_flow.rb:920:12:920:16 | [post] hash1 [element :a] : | hash_flow.rb:928:11:928:15 | hash1 [element :a] : |
| hash_flow.rb:920:12:920:16 | [post] hash1 [element :c] : | hash_flow.rb:930:11:930:15 | hash1 [element :c] : |
| hash_flow.rb:920:12:920:16 | [post] hash1 [element :d] : | hash_flow.rb:931:11:931:15 | hash1 [element :d] : |
| hash_flow.rb:920:12:920:16 | [post] hash1 [element :f] : | hash_flow.rb:933:11:933:15 | hash1 [element :f] : |
| hash_flow.rb:920:12:920:16 | hash1 [element :a] : | hash_flow.rb:920:12:920:16 | [post] hash1 [element :a] : |
| hash_flow.rb:920:12:920:16 | hash1 [element :a] : | hash_flow.rb:920:12:920:38 | call to with_defaults! [element :a] : |
| hash_flow.rb:920:12:920:16 | hash1 [element :c] : | hash_flow.rb:920:12:920:16 | [post] hash1 [element :c] : |
| hash_flow.rb:920:12:920:16 | hash1 [element :c] : | hash_flow.rb:920:12:920:38 | call to with_defaults! [element :c] : |
| hash_flow.rb:920:12:920:38 | call to with_defaults! [element :a] : | hash_flow.rb:921:11:921:14 | hash [element :a] : |
| hash_flow.rb:920:12:920:38 | call to with_defaults! [element :c] : | hash_flow.rb:923:11:923:14 | hash [element :c] : |
| hash_flow.rb:920:12:920:38 | call to with_defaults! [element :d] : | hash_flow.rb:924:11:924:14 | hash [element :d] : |
| hash_flow.rb:920:12:920:38 | call to with_defaults! [element :f] : | hash_flow.rb:926:11:926:14 | hash [element :f] : |
| hash_flow.rb:920:33:920:37 | hash2 [element :d] : | hash_flow.rb:920:12:920:16 | [post] hash1 [element :d] : |
| hash_flow.rb:920:33:920:37 | hash2 [element :d] : | hash_flow.rb:920:12:920:38 | call to with_defaults! [element :d] : |
| hash_flow.rb:920:33:920:37 | hash2 [element :f] : | hash_flow.rb:920:12:920:16 | [post] hash1 [element :f] : |
| hash_flow.rb:920:33:920:37 | hash2 [element :f] : | hash_flow.rb:920:12:920:38 | call to with_defaults! [element :f] : |
| hash_flow.rb:921:11:921:14 | hash [element :a] : | hash_flow.rb:921:11:921:18 | ...[...] : |
| hash_flow.rb:921:11:921:18 | ...[...] : | hash_flow.rb:921:10:921:19 | ( ... ) |
| hash_flow.rb:923:11:923:14 | hash [element :c] : | hash_flow.rb:923:11:923:18 | ...[...] : |
| hash_flow.rb:923:11:923:18 | ...[...] : | hash_flow.rb:923:10:923:19 | ( ... ) |
| hash_flow.rb:924:11:924:14 | hash [element :d] : | hash_flow.rb:924:11:924:18 | ...[...] : |
| hash_flow.rb:924:11:924:18 | ...[...] : | hash_flow.rb:924:10:924:19 | ( ... ) |
| hash_flow.rb:926:11:926:14 | hash [element :f] : | hash_flow.rb:926:11:926:18 | ...[...] : |
| hash_flow.rb:926:11:926:18 | ...[...] : | hash_flow.rb:926:10:926:19 | ( ... ) |
| hash_flow.rb:928:11:928:15 | hash1 [element :a] : | hash_flow.rb:928:11:928:19 | ...[...] : |
| hash_flow.rb:928:11:928:19 | ...[...] : | hash_flow.rb:928:10:928:20 | ( ... ) |
| hash_flow.rb:930:11:930:15 | hash1 [element :c] : | hash_flow.rb:930:11:930:19 | ...[...] : |
| hash_flow.rb:930:11:930:19 | ...[...] : | hash_flow.rb:930:10:930:20 | ( ... ) |
| hash_flow.rb:931:11:931:15 | hash1 [element :d] : | hash_flow.rb:931:11:931:19 | ...[...] : |
| hash_flow.rb:931:11:931:19 | ...[...] : | hash_flow.rb:931:10:931:20 | ( ... ) |
| hash_flow.rb:933:11:933:15 | hash1 [element :f] : | hash_flow.rb:933:11:933:19 | ...[...] : |
| hash_flow.rb:933:11:933:19 | ...[...] : | hash_flow.rb:933:10:933:20 | ( ... ) |
| hash_flow.rb:940:12:940:22 | call to taint : | hash_flow.rb:950:12:950:16 | hash1 [element :a] : |
| hash_flow.rb:942:12:942:22 | call to taint : | hash_flow.rb:950:12:950:16 | hash1 [element :c] : |
| hash_flow.rb:945:12:945:22 | call to taint : | hash_flow.rb:950:33:950:37 | hash2 [element :d] : |
| hash_flow.rb:947:12:947:22 | call to taint : | hash_flow.rb:950:33:950:37 | hash2 [element :f] : |
| hash_flow.rb:950:12:950:16 | [post] hash1 [element :a] : | hash_flow.rb:958:11:958:15 | hash1 [element :a] : |
| hash_flow.rb:950:12:950:16 | [post] hash1 [element :c] : | hash_flow.rb:960:11:960:15 | hash1 [element :c] : |
| hash_flow.rb:950:12:950:16 | [post] hash1 [element :d] : | hash_flow.rb:961:11:961:15 | hash1 [element :d] : |
| hash_flow.rb:950:12:950:16 | [post] hash1 [element :f] : | hash_flow.rb:963:11:963:15 | hash1 [element :f] : |
| hash_flow.rb:950:12:950:16 | hash1 [element :a] : | hash_flow.rb:950:12:950:16 | [post] hash1 [element :a] : |
| hash_flow.rb:950:12:950:16 | hash1 [element :a] : | hash_flow.rb:950:12:950:38 | call to with_defaults! [element :a] : |
| hash_flow.rb:950:12:950:16 | hash1 [element :c] : | hash_flow.rb:950:12:950:16 | [post] hash1 [element :c] : |
| hash_flow.rb:950:12:950:16 | hash1 [element :c] : | hash_flow.rb:950:12:950:38 | call to with_defaults! [element :c] : |
| hash_flow.rb:950:12:950:38 | call to with_defaults! [element :a] : | hash_flow.rb:951:11:951:14 | hash [element :a] : |
| hash_flow.rb:950:12:950:38 | call to with_defaults! [element :c] : | hash_flow.rb:953:11:953:14 | hash [element :c] : |
| hash_flow.rb:950:12:950:38 | call to with_defaults! [element :d] : | hash_flow.rb:954:11:954:14 | hash [element :d] : |
| hash_flow.rb:950:12:950:38 | call to with_defaults! [element :f] : | hash_flow.rb:956:11:956:14 | hash [element :f] : |
| hash_flow.rb:950:33:950:37 | hash2 [element :d] : | hash_flow.rb:950:12:950:16 | [post] hash1 [element :d] : |
| hash_flow.rb:950:33:950:37 | hash2 [element :d] : | hash_flow.rb:950:12:950:38 | call to with_defaults! [element :d] : |
| hash_flow.rb:950:33:950:37 | hash2 [element :f] : | hash_flow.rb:950:12:950:16 | [post] hash1 [element :f] : |
| hash_flow.rb:950:33:950:37 | hash2 [element :f] : | hash_flow.rb:950:12:950:38 | call to with_defaults! [element :f] : |
| hash_flow.rb:951:11:951:14 | hash [element :a] : | hash_flow.rb:951:11:951:18 | ...[...] : |
| hash_flow.rb:951:11:951:18 | ...[...] : | hash_flow.rb:951:10:951:19 | ( ... ) |
| hash_flow.rb:953:11:953:14 | hash [element :c] : | hash_flow.rb:953:11:953:18 | ...[...] : |
| hash_flow.rb:953:11:953:18 | ...[...] : | hash_flow.rb:953:10:953:19 | ( ... ) |
| hash_flow.rb:954:11:954:14 | hash [element :d] : | hash_flow.rb:954:11:954:18 | ...[...] : |
| hash_flow.rb:954:11:954:18 | ...[...] : | hash_flow.rb:954:10:954:19 | ( ... ) |
| hash_flow.rb:956:11:956:14 | hash [element :f] : | hash_flow.rb:956:11:956:18 | ...[...] : |
| hash_flow.rb:956:11:956:18 | ...[...] : | hash_flow.rb:956:10:956:19 | ( ... ) |
| hash_flow.rb:958:11:958:15 | hash1 [element :a] : | hash_flow.rb:958:11:958:19 | ...[...] : |
| hash_flow.rb:958:11:958:19 | ...[...] : | hash_flow.rb:958:10:958:20 | ( ... ) |
| hash_flow.rb:960:11:960:15 | hash1 [element :c] : | hash_flow.rb:960:11:960:19 | ...[...] : |
| hash_flow.rb:960:11:960:19 | ...[...] : | hash_flow.rb:960:10:960:20 | ( ... ) |
| hash_flow.rb:961:11:961:15 | hash1 [element :d] : | hash_flow.rb:961:11:961:19 | ...[...] : |
| hash_flow.rb:961:11:961:19 | ...[...] : | hash_flow.rb:961:10:961:20 | ( ... ) |
| hash_flow.rb:963:11:963:15 | hash1 [element :f] : | hash_flow.rb:963:11:963:19 | ...[...] : |
| hash_flow.rb:963:11:963:19 | ...[...] : | hash_flow.rb:963:10:963:20 | ( ... ) |
nodes
| hash_flow.rb:11:15:11:24 | call to taint : | semmle.label | call to taint : |
| hash_flow.rb:13:12:13:21 | call to taint : | semmle.label | call to taint : |
@@ -1282,6 +1430,170 @@ nodes
| hash_flow.rb:841:10:841:20 | ( ... ) | semmle.label | ( ... ) |
| hash_flow.rb:841:11:841:15 | hash1 [element :f] : | semmle.label | hash1 [element :f] : |
| hash_flow.rb:841:11:841:19 | ...[...] : | semmle.label | ...[...] : |
| hash_flow.rb:848:12:848:22 | call to taint : | semmle.label | call to taint : |
| hash_flow.rb:850:12:850:22 | call to taint : | semmle.label | call to taint : |
| hash_flow.rb:853:12:853:22 | call to taint : | semmle.label | call to taint : |
| hash_flow.rb:855:12:855:22 | call to taint : | semmle.label | call to taint : |
| hash_flow.rb:858:13:858:17 | hash1 [element :a] : | semmle.label | hash1 [element :a] : |
| hash_flow.rb:858:13:858:17 | hash1 [element :c] : | semmle.label | hash1 [element :c] : |
| hash_flow.rb:858:13:858:38 | call to reverse_merge [element :a] : | semmle.label | call to reverse_merge [element :a] : |
| hash_flow.rb:858:13:858:38 | call to reverse_merge [element :c] : | semmle.label | call to reverse_merge [element :c] : |
| hash_flow.rb:858:13:858:38 | call to reverse_merge [element :d] : | semmle.label | call to reverse_merge [element :d] : |
| hash_flow.rb:858:13:858:38 | call to reverse_merge [element :f] : | semmle.label | call to reverse_merge [element :f] : |
| hash_flow.rb:858:33:858:37 | hash2 [element :d] : | semmle.label | hash2 [element :d] : |
| hash_flow.rb:858:33:858:37 | hash2 [element :f] : | semmle.label | hash2 [element :f] : |
| hash_flow.rb:859:10:859:20 | ( ... ) | semmle.label | ( ... ) |
| hash_flow.rb:859:11:859:15 | hash3 [element :a] : | semmle.label | hash3 [element :a] : |
| hash_flow.rb:859:11:859:19 | ...[...] : | semmle.label | ...[...] : |
| hash_flow.rb:861:10:861:20 | ( ... ) | semmle.label | ( ... ) |
| hash_flow.rb:861:11:861:15 | hash3 [element :c] : | semmle.label | hash3 [element :c] : |
| hash_flow.rb:861:11:861:19 | ...[...] : | semmle.label | ...[...] : |
| hash_flow.rb:862:10:862:20 | ( ... ) | semmle.label | ( ... ) |
| hash_flow.rb:862:11:862:15 | hash3 [element :d] : | semmle.label | hash3 [element :d] : |
| hash_flow.rb:862:11:862:19 | ...[...] : | semmle.label | ...[...] : |
| hash_flow.rb:864:10:864:20 | ( ... ) | semmle.label | ( ... ) |
| hash_flow.rb:864:11:864:15 | hash3 [element :f] : | semmle.label | hash3 [element :f] : |
| hash_flow.rb:864:11:864:19 | ...[...] : | semmle.label | ...[...] : |
| hash_flow.rb:867:13:867:17 | hash1 [element :a] : | semmle.label | hash1 [element :a] : |
| hash_flow.rb:867:13:867:17 | hash1 [element :c] : | semmle.label | hash1 [element :c] : |
| hash_flow.rb:867:13:867:38 | call to with_defaults [element :a] : | semmle.label | call to with_defaults [element :a] : |
| hash_flow.rb:867:13:867:38 | call to with_defaults [element :c] : | semmle.label | call to with_defaults [element :c] : |
| hash_flow.rb:867:13:867:38 | call to with_defaults [element :d] : | semmle.label | call to with_defaults [element :d] : |
| hash_flow.rb:867:13:867:38 | call to with_defaults [element :f] : | semmle.label | call to with_defaults [element :f] : |
| hash_flow.rb:867:33:867:37 | hash2 [element :d] : | semmle.label | hash2 [element :d] : |
| hash_flow.rb:867:33:867:37 | hash2 [element :f] : | semmle.label | hash2 [element :f] : |
| hash_flow.rb:868:10:868:20 | ( ... ) | semmle.label | ( ... ) |
| hash_flow.rb:868:11:868:15 | hash4 [element :a] : | semmle.label | hash4 [element :a] : |
| hash_flow.rb:868:11:868:19 | ...[...] : | semmle.label | ...[...] : |
| hash_flow.rb:870:10:870:20 | ( ... ) | semmle.label | ( ... ) |
| hash_flow.rb:870:11:870:15 | hash4 [element :c] : | semmle.label | hash4 [element :c] : |
| hash_flow.rb:870:11:870:19 | ...[...] : | semmle.label | ...[...] : |
| hash_flow.rb:871:10:871:20 | ( ... ) | semmle.label | ( ... ) |
| hash_flow.rb:871:11:871:15 | hash4 [element :d] : | semmle.label | hash4 [element :d] : |
| hash_flow.rb:871:11:871:19 | ...[...] : | semmle.label | ...[...] : |
| hash_flow.rb:873:10:873:20 | ( ... ) | semmle.label | ( ... ) |
| hash_flow.rb:873:11:873:15 | hash4 [element :f] : | semmle.label | hash4 [element :f] : |
| hash_flow.rb:873:11:873:19 | ...[...] : | semmle.label | ...[...] : |
| hash_flow.rb:880:12:880:22 | call to taint : | semmle.label | call to taint : |
| hash_flow.rb:882:12:882:22 | call to taint : | semmle.label | call to taint : |
| hash_flow.rb:885:12:885:22 | call to taint : | semmle.label | call to taint : |
| hash_flow.rb:887:12:887:22 | call to taint : | semmle.label | call to taint : |
| hash_flow.rb:890:12:890:16 | [post] hash1 [element :a] : | semmle.label | [post] hash1 [element :a] : |
| hash_flow.rb:890:12:890:16 | [post] hash1 [element :c] : | semmle.label | [post] hash1 [element :c] : |
| hash_flow.rb:890:12:890:16 | [post] hash1 [element :d] : | semmle.label | [post] hash1 [element :d] : |
| hash_flow.rb:890:12:890:16 | [post] hash1 [element :f] : | semmle.label | [post] hash1 [element :f] : |
| hash_flow.rb:890:12:890:16 | hash1 [element :a] : | semmle.label | hash1 [element :a] : |
| hash_flow.rb:890:12:890:16 | hash1 [element :c] : | semmle.label | hash1 [element :c] : |
| hash_flow.rb:890:12:890:38 | call to reverse_merge! [element :a] : | semmle.label | call to reverse_merge! [element :a] : |
| hash_flow.rb:890:12:890:38 | call to reverse_merge! [element :c] : | semmle.label | call to reverse_merge! [element :c] : |
| hash_flow.rb:890:12:890:38 | call to reverse_merge! [element :d] : | semmle.label | call to reverse_merge! [element :d] : |
| hash_flow.rb:890:12:890:38 | call to reverse_merge! [element :f] : | semmle.label | call to reverse_merge! [element :f] : |
| hash_flow.rb:890:33:890:37 | hash2 [element :d] : | semmle.label | hash2 [element :d] : |
| hash_flow.rb:890:33:890:37 | hash2 [element :f] : | semmle.label | hash2 [element :f] : |
| hash_flow.rb:891:10:891:19 | ( ... ) | semmle.label | ( ... ) |
| hash_flow.rb:891:11:891:14 | hash [element :a] : | semmle.label | hash [element :a] : |
| hash_flow.rb:891:11:891:18 | ...[...] : | semmle.label | ...[...] : |
| hash_flow.rb:893:10:893:19 | ( ... ) | semmle.label | ( ... ) |
| hash_flow.rb:893:11:893:14 | hash [element :c] : | semmle.label | hash [element :c] : |
| hash_flow.rb:893:11:893:18 | ...[...] : | semmle.label | ...[...] : |
| hash_flow.rb:894:10:894:19 | ( ... ) | semmle.label | ( ... ) |
| hash_flow.rb:894:11:894:14 | hash [element :d] : | semmle.label | hash [element :d] : |
| hash_flow.rb:894:11:894:18 | ...[...] : | semmle.label | ...[...] : |
| hash_flow.rb:896:10:896:19 | ( ... ) | semmle.label | ( ... ) |
| hash_flow.rb:896:11:896:14 | hash [element :f] : | semmle.label | hash [element :f] : |
| hash_flow.rb:896:11:896:18 | ...[...] : | semmle.label | ...[...] : |
| hash_flow.rb:898:10:898:20 | ( ... ) | semmle.label | ( ... ) |
| hash_flow.rb:898:11:898:15 | hash1 [element :a] : | semmle.label | hash1 [element :a] : |
| hash_flow.rb:898:11:898:19 | ...[...] : | semmle.label | ...[...] : |
| hash_flow.rb:900:10:900:20 | ( ... ) | semmle.label | ( ... ) |
| hash_flow.rb:900:11:900:15 | hash1 [element :c] : | semmle.label | hash1 [element :c] : |
| hash_flow.rb:900:11:900:19 | ...[...] : | semmle.label | ...[...] : |
| hash_flow.rb:901:10:901:20 | ( ... ) | semmle.label | ( ... ) |
| hash_flow.rb:901:11:901:15 | hash1 [element :d] : | semmle.label | hash1 [element :d] : |
| hash_flow.rb:901:11:901:19 | ...[...] : | semmle.label | ...[...] : |
| hash_flow.rb:903:10:903:20 | ( ... ) | semmle.label | ( ... ) |
| hash_flow.rb:903:11:903:15 | hash1 [element :f] : | semmle.label | hash1 [element :f] : |
| hash_flow.rb:903:11:903:19 | ...[...] : | semmle.label | ...[...] : |
| hash_flow.rb:910:12:910:22 | call to taint : | semmle.label | call to taint : |
| hash_flow.rb:912:12:912:22 | call to taint : | semmle.label | call to taint : |
| hash_flow.rb:915:12:915:22 | call to taint : | semmle.label | call to taint : |
| hash_flow.rb:917:12:917:22 | call to taint : | semmle.label | call to taint : |
| hash_flow.rb:920:12:920:16 | [post] hash1 [element :a] : | semmle.label | [post] hash1 [element :a] : |
| hash_flow.rb:920:12:920:16 | [post] hash1 [element :c] : | semmle.label | [post] hash1 [element :c] : |
| hash_flow.rb:920:12:920:16 | [post] hash1 [element :d] : | semmle.label | [post] hash1 [element :d] : |
| hash_flow.rb:920:12:920:16 | [post] hash1 [element :f] : | semmle.label | [post] hash1 [element :f] : |
| hash_flow.rb:920:12:920:16 | hash1 [element :a] : | semmle.label | hash1 [element :a] : |
| hash_flow.rb:920:12:920:16 | hash1 [element :c] : | semmle.label | hash1 [element :c] : |
| hash_flow.rb:920:12:920:38 | call to with_defaults! [element :a] : | semmle.label | call to with_defaults! [element :a] : |
| hash_flow.rb:920:12:920:38 | call to with_defaults! [element :c] : | semmle.label | call to with_defaults! [element :c] : |
| hash_flow.rb:920:12:920:38 | call to with_defaults! [element :d] : | semmle.label | call to with_defaults! [element :d] : |
| hash_flow.rb:920:12:920:38 | call to with_defaults! [element :f] : | semmle.label | call to with_defaults! [element :f] : |
| hash_flow.rb:920:33:920:37 | hash2 [element :d] : | semmle.label | hash2 [element :d] : |
| hash_flow.rb:920:33:920:37 | hash2 [element :f] : | semmle.label | hash2 [element :f] : |
| hash_flow.rb:921:10:921:19 | ( ... ) | semmle.label | ( ... ) |
| hash_flow.rb:921:11:921:14 | hash [element :a] : | semmle.label | hash [element :a] : |
| hash_flow.rb:921:11:921:18 | ...[...] : | semmle.label | ...[...] : |
| hash_flow.rb:923:10:923:19 | ( ... ) | semmle.label | ( ... ) |
| hash_flow.rb:923:11:923:14 | hash [element :c] : | semmle.label | hash [element :c] : |
| hash_flow.rb:923:11:923:18 | ...[...] : | semmle.label | ...[...] : |
| hash_flow.rb:924:10:924:19 | ( ... ) | semmle.label | ( ... ) |
| hash_flow.rb:924:11:924:14 | hash [element :d] : | semmle.label | hash [element :d] : |
| hash_flow.rb:924:11:924:18 | ...[...] : | semmle.label | ...[...] : |
| hash_flow.rb:926:10:926:19 | ( ... ) | semmle.label | ( ... ) |
| hash_flow.rb:926:11:926:14 | hash [element :f] : | semmle.label | hash [element :f] : |
| hash_flow.rb:926:11:926:18 | ...[...] : | semmle.label | ...[...] : |
| hash_flow.rb:928:10:928:20 | ( ... ) | semmle.label | ( ... ) |
| hash_flow.rb:928:11:928:15 | hash1 [element :a] : | semmle.label | hash1 [element :a] : |
| hash_flow.rb:928:11:928:19 | ...[...] : | semmle.label | ...[...] : |
| hash_flow.rb:930:10:930:20 | ( ... ) | semmle.label | ( ... ) |
| hash_flow.rb:930:11:930:15 | hash1 [element :c] : | semmle.label | hash1 [element :c] : |
| hash_flow.rb:930:11:930:19 | ...[...] : | semmle.label | ...[...] : |
| hash_flow.rb:931:10:931:20 | ( ... ) | semmle.label | ( ... ) |
| hash_flow.rb:931:11:931:15 | hash1 [element :d] : | semmle.label | hash1 [element :d] : |
| hash_flow.rb:931:11:931:19 | ...[...] : | semmle.label | ...[...] : |
| hash_flow.rb:933:10:933:20 | ( ... ) | semmle.label | ( ... ) |
| hash_flow.rb:933:11:933:15 | hash1 [element :f] : | semmle.label | hash1 [element :f] : |
| hash_flow.rb:933:11:933:19 | ...[...] : | semmle.label | ...[...] : |
| hash_flow.rb:940:12:940:22 | call to taint : | semmle.label | call to taint : |
| hash_flow.rb:942:12:942:22 | call to taint : | semmle.label | call to taint : |
| hash_flow.rb:945:12:945:22 | call to taint : | semmle.label | call to taint : |
| hash_flow.rb:947:12:947:22 | call to taint : | semmle.label | call to taint : |
| hash_flow.rb:950:12:950:16 | [post] hash1 [element :a] : | semmle.label | [post] hash1 [element :a] : |
| hash_flow.rb:950:12:950:16 | [post] hash1 [element :c] : | semmle.label | [post] hash1 [element :c] : |
| hash_flow.rb:950:12:950:16 | [post] hash1 [element :d] : | semmle.label | [post] hash1 [element :d] : |
| hash_flow.rb:950:12:950:16 | [post] hash1 [element :f] : | semmle.label | [post] hash1 [element :f] : |
| hash_flow.rb:950:12:950:16 | hash1 [element :a] : | semmle.label | hash1 [element :a] : |
| hash_flow.rb:950:12:950:16 | hash1 [element :c] : | semmle.label | hash1 [element :c] : |
| hash_flow.rb:950:12:950:38 | call to with_defaults! [element :a] : | semmle.label | call to with_defaults! [element :a] : |
| hash_flow.rb:950:12:950:38 | call to with_defaults! [element :c] : | semmle.label | call to with_defaults! [element :c] : |
| hash_flow.rb:950:12:950:38 | call to with_defaults! [element :d] : | semmle.label | call to with_defaults! [element :d] : |
| hash_flow.rb:950:12:950:38 | call to with_defaults! [element :f] : | semmle.label | call to with_defaults! [element :f] : |
| hash_flow.rb:950:33:950:37 | hash2 [element :d] : | semmle.label | hash2 [element :d] : |
| hash_flow.rb:950:33:950:37 | hash2 [element :f] : | semmle.label | hash2 [element :f] : |
| hash_flow.rb:951:10:951:19 | ( ... ) | semmle.label | ( ... ) |
| hash_flow.rb:951:11:951:14 | hash [element :a] : | semmle.label | hash [element :a] : |
| hash_flow.rb:951:11:951:18 | ...[...] : | semmle.label | ...[...] : |
| hash_flow.rb:953:10:953:19 | ( ... ) | semmle.label | ( ... ) |
| hash_flow.rb:953:11:953:14 | hash [element :c] : | semmle.label | hash [element :c] : |
| hash_flow.rb:953:11:953:18 | ...[...] : | semmle.label | ...[...] : |
| hash_flow.rb:954:10:954:19 | ( ... ) | semmle.label | ( ... ) |
| hash_flow.rb:954:11:954:14 | hash [element :d] : | semmle.label | hash [element :d] : |
| hash_flow.rb:954:11:954:18 | ...[...] : | semmle.label | ...[...] : |
| hash_flow.rb:956:10:956:19 | ( ... ) | semmle.label | ( ... ) |
| hash_flow.rb:956:11:956:14 | hash [element :f] : | semmle.label | hash [element :f] : |
| hash_flow.rb:956:11:956:18 | ...[...] : | semmle.label | ...[...] : |
| hash_flow.rb:958:10:958:20 | ( ... ) | semmle.label | ( ... ) |
| hash_flow.rb:958:11:958:15 | hash1 [element :a] : | semmle.label | hash1 [element :a] : |
| hash_flow.rb:958:11:958:19 | ...[...] : | semmle.label | ...[...] : |
| hash_flow.rb:960:10:960:20 | ( ... ) | semmle.label | ( ... ) |
| hash_flow.rb:960:11:960:15 | hash1 [element :c] : | semmle.label | hash1 [element :c] : |
| hash_flow.rb:960:11:960:19 | ...[...] : | semmle.label | ...[...] : |
| hash_flow.rb:961:10:961:20 | ( ... ) | semmle.label | ( ... ) |
| hash_flow.rb:961:11:961:15 | hash1 [element :d] : | semmle.label | hash1 [element :d] : |
| hash_flow.rb:961:11:961:19 | ...[...] : | semmle.label | ...[...] : |
| hash_flow.rb:963:10:963:20 | ( ... ) | semmle.label | ( ... ) |
| hash_flow.rb:963:11:963:15 | hash1 [element :f] : | semmle.label | hash1 [element :f] : |
| hash_flow.rb:963:11:963:19 | ...[...] : | semmle.label | ...[...] : |
subpaths
#select
| hash_flow.rb:22:10:22:17 | ...[...] | hash_flow.rb:11:15:11:24 | call to taint : | hash_flow.rb:22:10:22:17 | ...[...] | $@ | hash_flow.rb:11:15:11:24 | call to taint : | call to taint : |
@@ -1489,3 +1801,35 @@ subpaths
| hash_flow.rb:838:10:838:20 | ( ... ) | hash_flow.rb:817:15:817:25 | call to taint : | hash_flow.rb:838:10:838:20 | ( ... ) | $@ | hash_flow.rb:817:15:817:25 | call to taint : | call to taint : |
| hash_flow.rb:839:10:839:20 | ( ... ) | hash_flow.rb:820:15:820:25 | call to taint : | hash_flow.rb:839:10:839:20 | ( ... ) | $@ | hash_flow.rb:820:15:820:25 | call to taint : | call to taint : |
| hash_flow.rb:841:10:841:20 | ( ... ) | hash_flow.rb:822:15:822:25 | call to taint : | hash_flow.rb:841:10:841:20 | ( ... ) | $@ | hash_flow.rb:822:15:822:25 | call to taint : | call to taint : |
| hash_flow.rb:859:10:859:20 | ( ... ) | hash_flow.rb:848:12:848:22 | call to taint : | hash_flow.rb:859:10:859:20 | ( ... ) | $@ | hash_flow.rb:848:12:848:22 | call to taint : | call to taint : |
| hash_flow.rb:861:10:861:20 | ( ... ) | hash_flow.rb:850:12:850:22 | call to taint : | hash_flow.rb:861:10:861:20 | ( ... ) | $@ | hash_flow.rb:850:12:850:22 | call to taint : | call to taint : |
| hash_flow.rb:862:10:862:20 | ( ... ) | hash_flow.rb:853:12:853:22 | call to taint : | hash_flow.rb:862:10:862:20 | ( ... ) | $@ | hash_flow.rb:853:12:853:22 | call to taint : | call to taint : |
| hash_flow.rb:864:10:864:20 | ( ... ) | hash_flow.rb:855:12:855:22 | call to taint : | hash_flow.rb:864:10:864:20 | ( ... ) | $@ | hash_flow.rb:855:12:855:22 | call to taint : | call to taint : |
| hash_flow.rb:868:10:868:20 | ( ... ) | hash_flow.rb:848:12:848:22 | call to taint : | hash_flow.rb:868:10:868:20 | ( ... ) | $@ | hash_flow.rb:848:12:848:22 | call to taint : | call to taint : |
| hash_flow.rb:870:10:870:20 | ( ... ) | hash_flow.rb:850:12:850:22 | call to taint : | hash_flow.rb:870:10:870:20 | ( ... ) | $@ | hash_flow.rb:850:12:850:22 | call to taint : | call to taint : |
| hash_flow.rb:871:10:871:20 | ( ... ) | hash_flow.rb:853:12:853:22 | call to taint : | hash_flow.rb:871:10:871:20 | ( ... ) | $@ | hash_flow.rb:853:12:853:22 | call to taint : | call to taint : |
| hash_flow.rb:873:10:873:20 | ( ... ) | hash_flow.rb:855:12:855:22 | call to taint : | hash_flow.rb:873:10:873:20 | ( ... ) | $@ | hash_flow.rb:855:12:855:22 | call to taint : | call to taint : |
| hash_flow.rb:891:10:891:19 | ( ... ) | hash_flow.rb:880:12:880:22 | call to taint : | hash_flow.rb:891:10:891:19 | ( ... ) | $@ | hash_flow.rb:880:12:880:22 | call to taint : | call to taint : |
| hash_flow.rb:893:10:893:19 | ( ... ) | hash_flow.rb:882:12:882:22 | call to taint : | hash_flow.rb:893:10:893:19 | ( ... ) | $@ | hash_flow.rb:882:12:882:22 | call to taint : | call to taint : |
| hash_flow.rb:894:10:894:19 | ( ... ) | hash_flow.rb:885:12:885:22 | call to taint : | hash_flow.rb:894:10:894:19 | ( ... ) | $@ | hash_flow.rb:885:12:885:22 | call to taint : | call to taint : |
| hash_flow.rb:896:10:896:19 | ( ... ) | hash_flow.rb:887:12:887:22 | call to taint : | hash_flow.rb:896:10:896:19 | ( ... ) | $@ | hash_flow.rb:887:12:887:22 | call to taint : | call to taint : |
| hash_flow.rb:898:10:898:20 | ( ... ) | hash_flow.rb:880:12:880:22 | call to taint : | hash_flow.rb:898:10:898:20 | ( ... ) | $@ | hash_flow.rb:880:12:880:22 | call to taint : | call to taint : |
| hash_flow.rb:900:10:900:20 | ( ... ) | hash_flow.rb:882:12:882:22 | call to taint : | hash_flow.rb:900:10:900:20 | ( ... ) | $@ | hash_flow.rb:882:12:882:22 | call to taint : | call to taint : |
| hash_flow.rb:901:10:901:20 | ( ... ) | hash_flow.rb:885:12:885:22 | call to taint : | hash_flow.rb:901:10:901:20 | ( ... ) | $@ | hash_flow.rb:885:12:885:22 | call to taint : | call to taint : |
| hash_flow.rb:903:10:903:20 | ( ... ) | hash_flow.rb:887:12:887:22 | call to taint : | hash_flow.rb:903:10:903:20 | ( ... ) | $@ | hash_flow.rb:887:12:887:22 | call to taint : | call to taint : |
| hash_flow.rb:921:10:921:19 | ( ... ) | hash_flow.rb:910:12:910:22 | call to taint : | hash_flow.rb:921:10:921:19 | ( ... ) | $@ | hash_flow.rb:910:12:910:22 | call to taint : | call to taint : |
| hash_flow.rb:923:10:923:19 | ( ... ) | hash_flow.rb:912:12:912:22 | call to taint : | hash_flow.rb:923:10:923:19 | ( ... ) | $@ | hash_flow.rb:912:12:912:22 | call to taint : | call to taint : |
| hash_flow.rb:924:10:924:19 | ( ... ) | hash_flow.rb:915:12:915:22 | call to taint : | hash_flow.rb:924:10:924:19 | ( ... ) | $@ | hash_flow.rb:915:12:915:22 | call to taint : | call to taint : |
| hash_flow.rb:926:10:926:19 | ( ... ) | hash_flow.rb:917:12:917:22 | call to taint : | hash_flow.rb:926:10:926:19 | ( ... ) | $@ | hash_flow.rb:917:12:917:22 | call to taint : | call to taint : |
| hash_flow.rb:928:10:928:20 | ( ... ) | hash_flow.rb:910:12:910:22 | call to taint : | hash_flow.rb:928:10:928:20 | ( ... ) | $@ | hash_flow.rb:910:12:910:22 | call to taint : | call to taint : |
| hash_flow.rb:930:10:930:20 | ( ... ) | hash_flow.rb:912:12:912:22 | call to taint : | hash_flow.rb:930:10:930:20 | ( ... ) | $@ | hash_flow.rb:912:12:912:22 | call to taint : | call to taint : |
| hash_flow.rb:931:10:931:20 | ( ... ) | hash_flow.rb:915:12:915:22 | call to taint : | hash_flow.rb:931:10:931:20 | ( ... ) | $@ | hash_flow.rb:915:12:915:22 | call to taint : | call to taint : |
| hash_flow.rb:933:10:933:20 | ( ... ) | hash_flow.rb:917:12:917:22 | call to taint : | hash_flow.rb:933:10:933:20 | ( ... ) | $@ | hash_flow.rb:917:12:917:22 | call to taint : | call to taint : |
| hash_flow.rb:951:10:951:19 | ( ... ) | hash_flow.rb:940:12:940:22 | call to taint : | hash_flow.rb:951:10:951:19 | ( ... ) | $@ | hash_flow.rb:940:12:940:22 | call to taint : | call to taint : |
| hash_flow.rb:953:10:953:19 | ( ... ) | hash_flow.rb:942:12:942:22 | call to taint : | hash_flow.rb:953:10:953:19 | ( ... ) | $@ | hash_flow.rb:942:12:942:22 | call to taint : | call to taint : |
| hash_flow.rb:954:10:954:19 | ( ... ) | hash_flow.rb:945:12:945:22 | call to taint : | hash_flow.rb:954:10:954:19 | ( ... ) | $@ | hash_flow.rb:945:12:945:22 | call to taint : | call to taint : |
| hash_flow.rb:956:10:956:19 | ( ... ) | hash_flow.rb:947:12:947:22 | call to taint : | hash_flow.rb:956:10:956:19 | ( ... ) | $@ | hash_flow.rb:947:12:947:22 | call to taint : | call to taint : |
| hash_flow.rb:958:10:958:20 | ( ... ) | hash_flow.rb:940:12:940:22 | call to taint : | hash_flow.rb:958:10:958:20 | ( ... ) | $@ | hash_flow.rb:940:12:940:22 | call to taint : | call to taint : |
| hash_flow.rb:960:10:960:20 | ( ... ) | hash_flow.rb:942:12:942:22 | call to taint : | hash_flow.rb:960:10:960:20 | ( ... ) | $@ | hash_flow.rb:942:12:942:22 | call to taint : | call to taint : |
| hash_flow.rb:961:10:961:20 | ( ... ) | hash_flow.rb:945:12:945:22 | call to taint : | hash_flow.rb:961:10:961:20 | ( ... ) | $@ | hash_flow.rb:945:12:945:22 | call to taint : | call to taint : |
| hash_flow.rb:963:10:963:20 | ( ... ) | hash_flow.rb:947:12:947:22 | call to taint : | hash_flow.rb:963:10:963:20 | ( ... ) | $@ | hash_flow.rb:947:12:947:22 | call to taint : | call to taint : |

122
ruby/ql/test/library-tests/dataflow/hash-flow/hash_flow.rb
View File

@@ -842,3 +842,125 @@ def m48()
end
m48()
def m49()
hash1 = {
a: taint(49.1),
b: 1,
c: taint(49.2)
}
hash2 = {
d: taint(49.3),
e: 1,
f: taint(49.4)
}
hash3 = hash1.reverse_merge(hash2)
sink (hash3[:a]) # $ hasValueFlow=49.1
sink (hash3[:b])
sink (hash3[:c]) # $ hasValueFlow=49.2
sink (hash3[:d]) # $ hasValueFlow=49.3
sink (hash3[:e])
sink (hash3[:f]) # $ hasValueFlow=49.4
# alias for reverse_merge
hash4 = hash1.with_defaults(hash2)
sink (hash4[:a]) # $ hasValueFlow=49.1
sink (hash4[:b])
sink (hash4[:c]) # $ hasValueFlow=49.2
sink (hash4[:d]) # $ hasValueFlow=49.3
sink (hash4[:e])
sink (hash4[:f]) # $ hasValueFlow=49.4
end
m49()
def m50()
hash1 = {
a: taint(50.1),
b: 1,
c: taint(50.2)
}
hash2 = {
d: taint(50.3),
e: 1,
f: taint(50.4)
}
hash = hash1.reverse_merge!(hash2)
sink (hash[:a]) # $ hasValueFlow=50.1
sink (hash[:b])
sink (hash[:c]) # $ hasValueFlow=50.2
sink (hash[:d]) # $ hasValueFlow=50.3
sink (hash[:e])
sink (hash[:f]) # $ hasValueFlow=50.4
sink (hash1[:a]) # $ hasValueFlow=50.1
sink (hash1[:b])
sink (hash1[:c]) # $ hasValueFlow=50.2
sink (hash1[:d]) # $ hasValueFlow=50.3
sink (hash1[:e])
sink (hash1[:f]) # $ hasValueFlow=50.4
end
m50()
def m51()
hash1 = {
a: taint(51.1),
b: 1,
c: taint(51.2)
}
hash2 = {
d: taint(51.3),
e: 1,
f: taint(51.4)
}
hash = hash1.with_defaults!(hash2)
sink (hash[:a]) # $ hasValueFlow=51.1
sink (hash[:b])
sink (hash[:c]) # $ hasValueFlow=51.2
sink (hash[:d]) # $ hasValueFlow=51.3
sink (hash[:e])
sink (hash[:f]) # $ hasValueFlow=51.4
sink (hash1[:a]) # $ hasValueFlow=51.1
sink (hash1[:b])
sink (hash1[:c]) # $ hasValueFlow=51.2
sink (hash1[:d]) # $ hasValueFlow=51.3
sink (hash1[:e])
sink (hash1[:f]) # $ hasValueFlow=51.4
end
m51()
def m52()
hash1 = {
a: taint(52.1),
b: 1,
c: taint(52.2)
}
hash2 = {
d: taint(52.3),
e: 1,
f: taint(52.4)
}
hash = hash1.with_defaults!(hash2)
sink (hash[:a]) # $ hasValueFlow=52.1
sink (hash[:b])
sink (hash[:c]) # $ hasValueFlow=52.2
sink (hash[:d]) # $ hasValueFlow=52.3
sink (hash[:e])
sink (hash[:f]) # $ hasValueFlow=52.4
sink (hash1[:a]) # $ hasValueFlow=52.1
sink (hash1[:b])
sink (hash1[:c]) # $ hasValueFlow=52.2
sink (hash1[:d]) # $ hasValueFlow=52.3
sink (hash1[:e])
sink (hash1[:f]) # $ hasValueFlow=52.4
end
m52()

6
ruby/ql/test/library-tests/dataflow/hash-flow/type-tracking-hash-flow.expected
View File

@@ -31,3 +31,9 @@
| hash_flow.rb:782:10:782:17 | ...[...] | Unexpected result: hasValueFlow=46.3 |
| hash_flow.rb:839:22:839:42 | # $ hasValueFlow=48.3 | Missing result:hasValueFlow=48.3 |
| hash_flow.rb:841:22:841:42 | # $ hasValueFlow=48.4 | Missing result:hasValueFlow=48.4 |
| hash_flow.rb:901:22:901:42 | # $ hasValueFlow=50.3 | Missing result:hasValueFlow=50.3 |
| hash_flow.rb:903:22:903:42 | # $ hasValueFlow=50.4 | Missing result:hasValueFlow=50.4 |
| hash_flow.rb:931:22:931:42 | # $ hasValueFlow=51.3 | Missing result:hasValueFlow=51.3 |
| hash_flow.rb:933:22:933:42 | # $ hasValueFlow=51.4 | Missing result:hasValueFlow=51.4 |
| hash_flow.rb:961:22:961:42 | # $ hasValueFlow=52.3 | Missing result:hasValueFlow=52.3 |
| hash_flow.rb:963:22:963:42 | # $ hasValueFlow=52.4 | Missing result:hasValueFlow=52.4 |