hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-26 01:05:15 +02:00
Code Issues Packages Projects Releases Wiki Activity

Restore model of builtin copy function.

Browse Source 
This is another with no real signature type.
This commit is contained in:
Chris Smowton
2023-03-23 15:46:33 +00:00
parent 0249669299
commit 9e38e8d675
1 changed files with 14 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
go/ql/lib/semmle/go/frameworks/Stdlib.qll
View File

@@ -44,8 +44,8 @@ import semmle.go.frameworks.stdlib.TextTabwriter
import semmle.go.frameworks.stdlib.TextTemplate
import semmle.go.frameworks.stdlib.Unsafe
// This is modelled using TaintTracking::FunctionModel because it doesn't have a real type signature,
// and therefore currently has an InvalidType, not a SignatureType, which breaks Models as Data.
// These are modelled using TaintTracking::FunctionModel because they doesn't have real type signatures,
// and therefore currently have an InvalidType, not a SignatureType, which breaks Models as Data.
/**
* A model of the built-in `append` function, which propagates taint from its arguments to its
* result.
@@ -58,6 +58,18 @@ private class AppendFunction extends TaintTracking::FunctionModel {
}
}
/**
* A model of the built-in `copy` function, which propagates taint from its second argument
* to its first.
*/
private class CopyFunction extends TaintTracking::FunctionModel {
CopyFunction() { this = Builtin::copy() }
override predicate hasTaintFlow(FunctionInput inp, FunctionOutput outp) {
inp.isParameter(1) and outp.isParameter(0)
}
}
/** Provides a class for modeling functions which convert strings into integers. */
module IntegerParser {
/**