hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-24 04:36:35 +01:00
Code Issues Packages Projects Releases Wiki Activity

Prevent JS join order regression

Browse Source
This commit is contained in:
Kasper Svendsen
2023-04-17 10:40:12 +02:00
parent 4e49df1615
commit ad82433a88
2 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
javascript/ql/lib/semmle/javascript/InclusionTests.qll
View File

@@ -69,6 +69,7 @@ module InclusionTest {
inner.getContainerNode().getALocalSource() = DataFlow::parameterNode(callee.getAParameter())
}
pragma[assume_small_delta]
override DataFlow::Node getContainerNode() {
exists(int arg |
inner.getContainerNode().getALocalSource() =
@@ -77,6 +78,7 @@ module InclusionTest {
)
}
pragma[assume_small_delta]
override DataFlow::Node getContainedNode() {
exists(int arg |
inner.getContainedNode().getALocalSource() =

4
javascript/ql/lib/semmle/javascript/StringOps.qll
View File

@@ -67,6 +67,7 @@ module StringOps {
inner.getSubstring().getALocalSource().getEnclosingExpr() = callee.getAParameter()
}
pragma[assume_small_delta]
override DataFlow::Node getBaseString() {
exists(int arg |
inner.getBaseString().getALocalSource().getEnclosingExpr() = callee.getParameter(arg) and
@@ -74,6 +75,7 @@ module StringOps {
)
}
pragma[assume_small_delta]
override DataFlow::Node getSubstring() {
exists(int arg |
inner.getSubstring().getALocalSource().getEnclosingExpr() = callee.getParameter(arg) and
@@ -292,6 +294,7 @@ module StringOps {
inner.getSubstring().getALocalSource().getEnclosingExpr() = callee.getAParameter()
}
pragma[assume_small_delta]
override DataFlow::Node getBaseString() {
exists(int arg |
inner.getBaseString().getALocalSource().getEnclosingExpr() = callee.getParameter(arg) and
@@ -299,6 +302,7 @@ module StringOps {
)
}
pragma[assume_small_delta]
override DataFlow::Node getSubstring() {
exists(int arg |
inner.getSubstring().getALocalSource().getEnclosingExpr() = callee.getParameter(arg) and