mirror of
https://github.com/github/codeql.git
synced 2026-05-01 19:55:15 +02:00
Merge pull request #3020 from aschackmull/dataflow/type-pruning-bigstep
Dataflow: Fix bug in type pruning.
This commit is contained in:
Tom Hvitved
@@ -1307,15 +1307,20 @@ private predicate localFlowExit(Node node, Configuration config) {
|
||||
*/
|
||||
pragma[nomagic]
|
||||
private predicate localFlowStepPlus(
|
||||
Node node1, Node node2, boolean preservesValue, Configuration config, LocalCallContext cc
|
||||
Node node1, Node node2, boolean preservesValue, DataFlowType t, Configuration config,
|
||||
LocalCallContext cc
|
||||
) {
|
||||
not isUnreachableInCall(node2, cc.(LocalCallContextSpecificCall).getCall()) and
|
||||
(
|
||||
localFlowEntry(node1, config) and
|
||||
(
|
||||
localFlowStep(node1, node2, config) and preservesValue = true
|
||||
localFlowStep(node1, node2, config) and
|
||||
preservesValue = true and
|
||||
t = getErasedNodeTypeBound(node1)
|
||||
or
|
||||
additionalLocalFlowStep(node1, node2, config) and preservesValue = false
|
||||
additionalLocalFlowStep(node1, node2, config) and
|
||||
preservesValue = false and
|
||||
t = getErasedNodeTypeBound(node2)
|
||||
) and
|
||||
node1 != node2 and
|
||||
cc.relevantFor(node1.getEnclosingCallable()) and
|
||||
@@ -1323,17 +1328,18 @@ private predicate localFlowStepPlus(
|
||||
nodeCand(TNormalNode(node2), unbind(config))
|
||||
or
|
||||
exists(Node mid |
|
||||
localFlowStepPlus(node1, mid, preservesValue, config, cc) and
|
||||
localFlowStepPlus(node1, mid, preservesValue, t, config, cc) and
|
||||
localFlowStep(mid, node2, config) and
|
||||
not mid instanceof CastNode and
|
||||
nodeCand(TNormalNode(node2), unbind(config))
|
||||
)
|
||||
or
|
||||
exists(Node mid |
|
||||
localFlowStepPlus(node1, mid, _, config, cc) and
|
||||
localFlowStepPlus(node1, mid, _, _, config, cc) and
|
||||
additionalLocalFlowStep(mid, node2, config) and
|
||||
not mid instanceof CastNode and
|
||||
preservesValue = false and
|
||||
t = getErasedNodeTypeBound(node2) and
|
||||
nodeCand(TNormalNode(node2), unbind(config))
|
||||
)
|
||||
)
|
||||
@@ -1345,17 +1351,18 @@ private predicate localFlowStepPlus(
|
||||
*/
|
||||
pragma[nomagic]
|
||||
private predicate localFlowBigStep(
|
||||
Node node1, Node node2, boolean preservesValue, Configuration config, LocalCallContext callContext
|
||||
Node node1, Node node2, boolean preservesValue, DataFlowType t, Configuration config,
|
||||
LocalCallContext callContext
|
||||
) {
|
||||
localFlowStepPlus(node1, node2, preservesValue, config, callContext) and
|
||||
localFlowStepPlus(node1, node2, preservesValue, t, config, callContext) and
|
||||
localFlowExit(node2, config)
|
||||
}
|
||||
|
||||
pragma[nomagic]
|
||||
private predicate localFlowBigStepExt(
|
||||
NodeExt node1, NodeExt node2, boolean preservesValue, Configuration config
|
||||
NodeExt node1, NodeExt node2, boolean preservesValue, AccessPathFrontNil apf, Configuration config
|
||||
) {
|
||||
localFlowBigStep(node1.getNode(), node2.getNode(), preservesValue, config, _)
|
||||
localFlowBigStep(node1.getNode(), node2.getNode(), preservesValue, apf.getType(), config, _)
|
||||
}
|
||||
|
||||
private newtype TAccessPathFront =
|
||||
@@ -1395,46 +1402,24 @@ private predicate flowCandFwd(
|
||||
else any()
|
||||
}
|
||||
|
||||
/**
|
||||
* A node that requires an empty access path and should have its tracked type
|
||||
* (re-)computed. This is either a source or a node reached through an
|
||||
* additional step.
|
||||
*/
|
||||
private class AccessPathFrontNilNode extends NormalNodeExt {
|
||||
AccessPathFrontNilNode() {
|
||||
nodeCand(this, _) and
|
||||
(
|
||||
any(Configuration c).isSource(this.getNode())
|
||||
or
|
||||
localFlowBigStepExt(_, this, false, _)
|
||||
or
|
||||
additionalJumpStepExt(_, this, _)
|
||||
)
|
||||
}
|
||||
|
||||
/** Gets the `nil` path front for this node. */
|
||||
AccessPathFrontNil getApf() { result = TFrontNil(this.getErasedNodeTypeBound()) }
|
||||
}
|
||||
|
||||
private predicate flowCandFwd0(
|
||||
NodeExt node, boolean fromArg, AccessPathFront apf, Configuration config
|
||||
) {
|
||||
nodeCand2(node, _, false, config) and
|
||||
config.isSource(node.getNode()) and
|
||||
fromArg = false and
|
||||
apf = node.(AccessPathFrontNilNode).getApf()
|
||||
apf = TFrontNil(node.getErasedNodeTypeBound())
|
||||
or
|
||||
nodeCand(node, unbind(config)) and
|
||||
(
|
||||
exists(NodeExt mid |
|
||||
flowCandFwd(mid, fromArg, apf, config) and
|
||||
localFlowBigStepExt(mid, node, true, config)
|
||||
localFlowBigStepExt(mid, node, true, _, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathFrontNil nil |
|
||||
flowCandFwd(mid, fromArg, nil, config) and
|
||||
localFlowBigStepExt(mid, node, false, config) and
|
||||
apf = node.(AccessPathFrontNilNode).getApf()
|
||||
localFlowBigStepExt(mid, node, false, apf, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid |
|
||||
@@ -1447,7 +1432,7 @@ private predicate flowCandFwd0(
|
||||
flowCandFwd(mid, _, nil, config) and
|
||||
additionalJumpStepExt(mid, node, config) and
|
||||
fromArg = false and
|
||||
apf = node.(AccessPathFrontNilNode).getApf()
|
||||
apf = TFrontNil(node.getErasedNodeTypeBound())
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, boolean allowsFieldFlow |
|
||||
@@ -1589,13 +1574,13 @@ private predicate flowCand0(
|
||||
apf instanceof AccessPathFrontNil
|
||||
or
|
||||
exists(NodeExt mid |
|
||||
localFlowBigStepExt(node, mid, true, config) and
|
||||
localFlowBigStepExt(node, mid, true, _, config) and
|
||||
flowCand(mid, toReturn, apf, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathFrontNil nil |
|
||||
flowCandFwd(node, _, apf, config) and
|
||||
localFlowBigStepExt(node, mid, false, config) and
|
||||
localFlowBigStepExt(node, mid, false, _, config) and
|
||||
flowCand(mid, toReturn, nil, config) and
|
||||
apf instanceof AccessPathFrontNil
|
||||
)
|
||||
@@ -1810,18 +1795,6 @@ private predicate popWithFront(AccessPath ap0, Content f, AccessPathFront apf, A
|
||||
/** Gets the access path obtained by pushing `f` onto `ap`. */
|
||||
private AccessPath push(Content f, AccessPath ap) { ap = pop(f, result) }
|
||||
|
||||
/**
|
||||
* A node that requires an empty access path and should have its tracked type
|
||||
* (re-)computed. This is either a source or a node reached through an
|
||||
* additional step.
|
||||
*/
|
||||
private class AccessPathNilNode extends NormalNodeExt {
|
||||
AccessPathNilNode() { flowCand(this.(AccessPathFrontNilNode), _, _, _) }
|
||||
|
||||
/** Gets the `nil` path for this node. */
|
||||
AccessPathNil getAp() { result = TNil(this.getErasedNodeTypeBound()) }
|
||||
}
|
||||
|
||||
/**
|
||||
* Holds if data can flow from a source to `node` with the given `ap`.
|
||||
*/
|
||||
@@ -1838,20 +1811,19 @@ private predicate flowFwd0(
|
||||
flowCand(node, _, _, config) and
|
||||
config.isSource(node.getNode()) and
|
||||
fromArg = false and
|
||||
ap = node.(AccessPathNilNode).getAp() and
|
||||
ap = TNil(node.getErasedNodeTypeBound()) and
|
||||
apf = ap.(AccessPathNil).getFront()
|
||||
or
|
||||
flowCand(node, _, _, unbind(config)) and
|
||||
(
|
||||
exists(NodeExt mid |
|
||||
flowFwd(mid, fromArg, apf, ap, config) and
|
||||
localFlowBigStepExt(mid, node, true, config)
|
||||
localFlowBigStepExt(mid, node, true, _, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathNil nil |
|
||||
flowFwd(mid, fromArg, _, nil, config) and
|
||||
localFlowBigStepExt(mid, node, false, config) and
|
||||
ap = node.(AccessPathNilNode).getAp() and
|
||||
localFlowBigStepExt(mid, node, false, apf, config) and
|
||||
apf = ap.(AccessPathNil).getFront()
|
||||
)
|
||||
or
|
||||
@@ -1865,7 +1837,7 @@ private predicate flowFwd0(
|
||||
flowFwd(mid, _, _, nil, config) and
|
||||
additionalJumpStepExt(mid, node, config) and
|
||||
fromArg = false and
|
||||
ap = node.(AccessPathNilNode).getAp() and
|
||||
ap = TNil(node.getErasedNodeTypeBound()) and
|
||||
apf = ap.(AccessPathNil).getFront()
|
||||
)
|
||||
or
|
||||
@@ -1982,13 +1954,13 @@ private predicate flow0(NodeExt node, boolean toReturn, AccessPath ap, Configura
|
||||
ap instanceof AccessPathNil
|
||||
or
|
||||
exists(NodeExt mid |
|
||||
localFlowBigStepExt(node, mid, true, config) and
|
||||
localFlowBigStepExt(node, mid, true, _, config) and
|
||||
flow(mid, toReturn, ap, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathNil nil |
|
||||
flowFwd(node, _, _, ap, config) and
|
||||
localFlowBigStepExt(node, mid, false, config) and
|
||||
localFlowBigStepExt(node, mid, false, _, config) and
|
||||
flow(mid, toReturn, nil, config) and
|
||||
ap instanceof AccessPathNil
|
||||
)
|
||||
@@ -2164,7 +2136,7 @@ private newtype TPathNode =
|
||||
config.isSource(node) and
|
||||
cc instanceof CallContextAny and
|
||||
sc instanceof SummaryCtxNone and
|
||||
ap = any(AccessPathNilNode nil | nil.getNode() = node).getAp()
|
||||
ap = TNil(getErasedNodeTypeBound(node))
|
||||
or
|
||||
// ... or a step from an existing PathNode to another node.
|
||||
exists(PathNodeMid mid |
|
||||
@@ -2357,12 +2329,11 @@ private predicate pathStep(PathNodeMid mid, Node node, CallContext cc, SummaryCt
|
||||
pathIntoLocalStep(mid, midnode, cc, enclosing, sc, ap0, conf) and
|
||||
localCC = getLocalCallContext(cc, enclosing)
|
||||
|
|
||||
localFlowBigStep(midnode, node, true, conf, localCC) and
|
||||
localFlowBigStep(midnode, node, true, _, conf, localCC) and
|
||||
ap = ap0
|
||||
or
|
||||
localFlowBigStep(midnode, node, false, conf, localCC) and
|
||||
ap0 instanceof AccessPathNil and
|
||||
ap = any(AccessPathNilNode nil | nil.getNode() = node).getAp()
|
||||
localFlowBigStep(midnode, node, false, ap.(AccessPathNil).getType(), conf, localCC) and
|
||||
ap0 instanceof AccessPathNil
|
||||
)
|
||||
or
|
||||
jumpStep(mid.getNode(), node, mid.getConfiguration()) and
|
||||
@@ -2374,7 +2345,7 @@ private predicate pathStep(PathNodeMid mid, Node node, CallContext cc, SummaryCt
|
||||
cc instanceof CallContextAny and
|
||||
sc instanceof SummaryCtxNone and
|
||||
mid.getAp() instanceof AccessPathNil and
|
||||
ap = any(AccessPathNilNode nil | nil.getNode() = node).getAp()
|
||||
ap = TNil(getErasedNodeTypeBound(node))
|
||||
or
|
||||
exists(Content f, AccessPath ap0 | pathReadStep(mid, node, ap0, f, cc) and ap = pop(f, ap0)) and
|
||||
sc = mid.getSummaryCtx()
|
||||
@@ -2397,7 +2368,7 @@ private predicate pathIntoLocalStep(
|
||||
midnode = mid.getNode() and
|
||||
cc = mid.getCallContext() and
|
||||
conf = mid.getConfiguration() and
|
||||
localFlowBigStep(midnode, _, _, conf, _) and
|
||||
localFlowBigStep(midnode, _, _, _, conf, _) and
|
||||
enclosing = midnode.getEnclosingCallable() and
|
||||
sc = mid.getSummaryCtx() and
|
||||
ap0 = mid.getAp()
|
||||
|
||||
@@ -1307,15 +1307,20 @@ private predicate localFlowExit(Node node, Configuration config) {
|
||||
*/
|
||||
pragma[nomagic]
|
||||
private predicate localFlowStepPlus(
|
||||
Node node1, Node node2, boolean preservesValue, Configuration config, LocalCallContext cc
|
||||
Node node1, Node node2, boolean preservesValue, DataFlowType t, Configuration config,
|
||||
LocalCallContext cc
|
||||
) {
|
||||
not isUnreachableInCall(node2, cc.(LocalCallContextSpecificCall).getCall()) and
|
||||
(
|
||||
localFlowEntry(node1, config) and
|
||||
(
|
||||
localFlowStep(node1, node2, config) and preservesValue = true
|
||||
localFlowStep(node1, node2, config) and
|
||||
preservesValue = true and
|
||||
t = getErasedNodeTypeBound(node1)
|
||||
or
|
||||
additionalLocalFlowStep(node1, node2, config) and preservesValue = false
|
||||
additionalLocalFlowStep(node1, node2, config) and
|
||||
preservesValue = false and
|
||||
t = getErasedNodeTypeBound(node2)
|
||||
) and
|
||||
node1 != node2 and
|
||||
cc.relevantFor(node1.getEnclosingCallable()) and
|
||||
@@ -1323,17 +1328,18 @@ private predicate localFlowStepPlus(
|
||||
nodeCand(TNormalNode(node2), unbind(config))
|
||||
or
|
||||
exists(Node mid |
|
||||
localFlowStepPlus(node1, mid, preservesValue, config, cc) and
|
||||
localFlowStepPlus(node1, mid, preservesValue, t, config, cc) and
|
||||
localFlowStep(mid, node2, config) and
|
||||
not mid instanceof CastNode and
|
||||
nodeCand(TNormalNode(node2), unbind(config))
|
||||
)
|
||||
or
|
||||
exists(Node mid |
|
||||
localFlowStepPlus(node1, mid, _, config, cc) and
|
||||
localFlowStepPlus(node1, mid, _, _, config, cc) and
|
||||
additionalLocalFlowStep(mid, node2, config) and
|
||||
not mid instanceof CastNode and
|
||||
preservesValue = false and
|
||||
t = getErasedNodeTypeBound(node2) and
|
||||
nodeCand(TNormalNode(node2), unbind(config))
|
||||
)
|
||||
)
|
||||
@@ -1345,17 +1351,18 @@ private predicate localFlowStepPlus(
|
||||
*/
|
||||
pragma[nomagic]
|
||||
private predicate localFlowBigStep(
|
||||
Node node1, Node node2, boolean preservesValue, Configuration config, LocalCallContext callContext
|
||||
Node node1, Node node2, boolean preservesValue, DataFlowType t, Configuration config,
|
||||
LocalCallContext callContext
|
||||
) {
|
||||
localFlowStepPlus(node1, node2, preservesValue, config, callContext) and
|
||||
localFlowStepPlus(node1, node2, preservesValue, t, config, callContext) and
|
||||
localFlowExit(node2, config)
|
||||
}
|
||||
|
||||
pragma[nomagic]
|
||||
private predicate localFlowBigStepExt(
|
||||
NodeExt node1, NodeExt node2, boolean preservesValue, Configuration config
|
||||
NodeExt node1, NodeExt node2, boolean preservesValue, AccessPathFrontNil apf, Configuration config
|
||||
) {
|
||||
localFlowBigStep(node1.getNode(), node2.getNode(), preservesValue, config, _)
|
||||
localFlowBigStep(node1.getNode(), node2.getNode(), preservesValue, apf.getType(), config, _)
|
||||
}
|
||||
|
||||
private newtype TAccessPathFront =
|
||||
@@ -1395,46 +1402,24 @@ private predicate flowCandFwd(
|
||||
else any()
|
||||
}
|
||||
|
||||
/**
|
||||
* A node that requires an empty access path and should have its tracked type
|
||||
* (re-)computed. This is either a source or a node reached through an
|
||||
* additional step.
|
||||
*/
|
||||
private class AccessPathFrontNilNode extends NormalNodeExt {
|
||||
AccessPathFrontNilNode() {
|
||||
nodeCand(this, _) and
|
||||
(
|
||||
any(Configuration c).isSource(this.getNode())
|
||||
or
|
||||
localFlowBigStepExt(_, this, false, _)
|
||||
or
|
||||
additionalJumpStepExt(_, this, _)
|
||||
)
|
||||
}
|
||||
|
||||
/** Gets the `nil` path front for this node. */
|
||||
AccessPathFrontNil getApf() { result = TFrontNil(this.getErasedNodeTypeBound()) }
|
||||
}
|
||||
|
||||
private predicate flowCandFwd0(
|
||||
NodeExt node, boolean fromArg, AccessPathFront apf, Configuration config
|
||||
) {
|
||||
nodeCand2(node, _, false, config) and
|
||||
config.isSource(node.getNode()) and
|
||||
fromArg = false and
|
||||
apf = node.(AccessPathFrontNilNode).getApf()
|
||||
apf = TFrontNil(node.getErasedNodeTypeBound())
|
||||
or
|
||||
nodeCand(node, unbind(config)) and
|
||||
(
|
||||
exists(NodeExt mid |
|
||||
flowCandFwd(mid, fromArg, apf, config) and
|
||||
localFlowBigStepExt(mid, node, true, config)
|
||||
localFlowBigStepExt(mid, node, true, _, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathFrontNil nil |
|
||||
flowCandFwd(mid, fromArg, nil, config) and
|
||||
localFlowBigStepExt(mid, node, false, config) and
|
||||
apf = node.(AccessPathFrontNilNode).getApf()
|
||||
localFlowBigStepExt(mid, node, false, apf, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid |
|
||||
@@ -1447,7 +1432,7 @@ private predicate flowCandFwd0(
|
||||
flowCandFwd(mid, _, nil, config) and
|
||||
additionalJumpStepExt(mid, node, config) and
|
||||
fromArg = false and
|
||||
apf = node.(AccessPathFrontNilNode).getApf()
|
||||
apf = TFrontNil(node.getErasedNodeTypeBound())
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, boolean allowsFieldFlow |
|
||||
@@ -1589,13 +1574,13 @@ private predicate flowCand0(
|
||||
apf instanceof AccessPathFrontNil
|
||||
or
|
||||
exists(NodeExt mid |
|
||||
localFlowBigStepExt(node, mid, true, config) and
|
||||
localFlowBigStepExt(node, mid, true, _, config) and
|
||||
flowCand(mid, toReturn, apf, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathFrontNil nil |
|
||||
flowCandFwd(node, _, apf, config) and
|
||||
localFlowBigStepExt(node, mid, false, config) and
|
||||
localFlowBigStepExt(node, mid, false, _, config) and
|
||||
flowCand(mid, toReturn, nil, config) and
|
||||
apf instanceof AccessPathFrontNil
|
||||
)
|
||||
@@ -1810,18 +1795,6 @@ private predicate popWithFront(AccessPath ap0, Content f, AccessPathFront apf, A
|
||||
/** Gets the access path obtained by pushing `f` onto `ap`. */
|
||||
private AccessPath push(Content f, AccessPath ap) { ap = pop(f, result) }
|
||||
|
||||
/**
|
||||
* A node that requires an empty access path and should have its tracked type
|
||||
* (re-)computed. This is either a source or a node reached through an
|
||||
* additional step.
|
||||
*/
|
||||
private class AccessPathNilNode extends NormalNodeExt {
|
||||
AccessPathNilNode() { flowCand(this.(AccessPathFrontNilNode), _, _, _) }
|
||||
|
||||
/** Gets the `nil` path for this node. */
|
||||
AccessPathNil getAp() { result = TNil(this.getErasedNodeTypeBound()) }
|
||||
}
|
||||
|
||||
/**
|
||||
* Holds if data can flow from a source to `node` with the given `ap`.
|
||||
*/
|
||||
@@ -1838,20 +1811,19 @@ private predicate flowFwd0(
|
||||
flowCand(node, _, _, config) and
|
||||
config.isSource(node.getNode()) and
|
||||
fromArg = false and
|
||||
ap = node.(AccessPathNilNode).getAp() and
|
||||
ap = TNil(node.getErasedNodeTypeBound()) and
|
||||
apf = ap.(AccessPathNil).getFront()
|
||||
or
|
||||
flowCand(node, _, _, unbind(config)) and
|
||||
(
|
||||
exists(NodeExt mid |
|
||||
flowFwd(mid, fromArg, apf, ap, config) and
|
||||
localFlowBigStepExt(mid, node, true, config)
|
||||
localFlowBigStepExt(mid, node, true, _, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathNil nil |
|
||||
flowFwd(mid, fromArg, _, nil, config) and
|
||||
localFlowBigStepExt(mid, node, false, config) and
|
||||
ap = node.(AccessPathNilNode).getAp() and
|
||||
localFlowBigStepExt(mid, node, false, apf, config) and
|
||||
apf = ap.(AccessPathNil).getFront()
|
||||
)
|
||||
or
|
||||
@@ -1865,7 +1837,7 @@ private predicate flowFwd0(
|
||||
flowFwd(mid, _, _, nil, config) and
|
||||
additionalJumpStepExt(mid, node, config) and
|
||||
fromArg = false and
|
||||
ap = node.(AccessPathNilNode).getAp() and
|
||||
ap = TNil(node.getErasedNodeTypeBound()) and
|
||||
apf = ap.(AccessPathNil).getFront()
|
||||
)
|
||||
or
|
||||
@@ -1982,13 +1954,13 @@ private predicate flow0(NodeExt node, boolean toReturn, AccessPath ap, Configura
|
||||
ap instanceof AccessPathNil
|
||||
or
|
||||
exists(NodeExt mid |
|
||||
localFlowBigStepExt(node, mid, true, config) and
|
||||
localFlowBigStepExt(node, mid, true, _, config) and
|
||||
flow(mid, toReturn, ap, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathNil nil |
|
||||
flowFwd(node, _, _, ap, config) and
|
||||
localFlowBigStepExt(node, mid, false, config) and
|
||||
localFlowBigStepExt(node, mid, false, _, config) and
|
||||
flow(mid, toReturn, nil, config) and
|
||||
ap instanceof AccessPathNil
|
||||
)
|
||||
@@ -2164,7 +2136,7 @@ private newtype TPathNode =
|
||||
config.isSource(node) and
|
||||
cc instanceof CallContextAny and
|
||||
sc instanceof SummaryCtxNone and
|
||||
ap = any(AccessPathNilNode nil | nil.getNode() = node).getAp()
|
||||
ap = TNil(getErasedNodeTypeBound(node))
|
||||
or
|
||||
// ... or a step from an existing PathNode to another node.
|
||||
exists(PathNodeMid mid |
|
||||
@@ -2357,12 +2329,11 @@ private predicate pathStep(PathNodeMid mid, Node node, CallContext cc, SummaryCt
|
||||
pathIntoLocalStep(mid, midnode, cc, enclosing, sc, ap0, conf) and
|
||||
localCC = getLocalCallContext(cc, enclosing)
|
||||
|
|
||||
localFlowBigStep(midnode, node, true, conf, localCC) and
|
||||
localFlowBigStep(midnode, node, true, _, conf, localCC) and
|
||||
ap = ap0
|
||||
or
|
||||
localFlowBigStep(midnode, node, false, conf, localCC) and
|
||||
ap0 instanceof AccessPathNil and
|
||||
ap = any(AccessPathNilNode nil | nil.getNode() = node).getAp()
|
||||
localFlowBigStep(midnode, node, false, ap.(AccessPathNil).getType(), conf, localCC) and
|
||||
ap0 instanceof AccessPathNil
|
||||
)
|
||||
or
|
||||
jumpStep(mid.getNode(), node, mid.getConfiguration()) and
|
||||
@@ -2374,7 +2345,7 @@ private predicate pathStep(PathNodeMid mid, Node node, CallContext cc, SummaryCt
|
||||
cc instanceof CallContextAny and
|
||||
sc instanceof SummaryCtxNone and
|
||||
mid.getAp() instanceof AccessPathNil and
|
||||
ap = any(AccessPathNilNode nil | nil.getNode() = node).getAp()
|
||||
ap = TNil(getErasedNodeTypeBound(node))
|
||||
or
|
||||
exists(Content f, AccessPath ap0 | pathReadStep(mid, node, ap0, f, cc) and ap = pop(f, ap0)) and
|
||||
sc = mid.getSummaryCtx()
|
||||
@@ -2397,7 +2368,7 @@ private predicate pathIntoLocalStep(
|
||||
midnode = mid.getNode() and
|
||||
cc = mid.getCallContext() and
|
||||
conf = mid.getConfiguration() and
|
||||
localFlowBigStep(midnode, _, _, conf, _) and
|
||||
localFlowBigStep(midnode, _, _, _, conf, _) and
|
||||
enclosing = midnode.getEnclosingCallable() and
|
||||
sc = mid.getSummaryCtx() and
|
||||
ap0 = mid.getAp()
|
||||
|
||||
@@ -1307,15 +1307,20 @@ private predicate localFlowExit(Node node, Configuration config) {
|
||||
*/
|
||||
pragma[nomagic]
|
||||
private predicate localFlowStepPlus(
|
||||
Node node1, Node node2, boolean preservesValue, Configuration config, LocalCallContext cc
|
||||
Node node1, Node node2, boolean preservesValue, DataFlowType t, Configuration config,
|
||||
LocalCallContext cc
|
||||
) {
|
||||
not isUnreachableInCall(node2, cc.(LocalCallContextSpecificCall).getCall()) and
|
||||
(
|
||||
localFlowEntry(node1, config) and
|
||||
(
|
||||
localFlowStep(node1, node2, config) and preservesValue = true
|
||||
localFlowStep(node1, node2, config) and
|
||||
preservesValue = true and
|
||||
t = getErasedNodeTypeBound(node1)
|
||||
or
|
||||
additionalLocalFlowStep(node1, node2, config) and preservesValue = false
|
||||
additionalLocalFlowStep(node1, node2, config) and
|
||||
preservesValue = false and
|
||||
t = getErasedNodeTypeBound(node2)
|
||||
) and
|
||||
node1 != node2 and
|
||||
cc.relevantFor(node1.getEnclosingCallable()) and
|
||||
@@ -1323,17 +1328,18 @@ private predicate localFlowStepPlus(
|
||||
nodeCand(TNormalNode(node2), unbind(config))
|
||||
or
|
||||
exists(Node mid |
|
||||
localFlowStepPlus(node1, mid, preservesValue, config, cc) and
|
||||
localFlowStepPlus(node1, mid, preservesValue, t, config, cc) and
|
||||
localFlowStep(mid, node2, config) and
|
||||
not mid instanceof CastNode and
|
||||
nodeCand(TNormalNode(node2), unbind(config))
|
||||
)
|
||||
or
|
||||
exists(Node mid |
|
||||
localFlowStepPlus(node1, mid, _, config, cc) and
|
||||
localFlowStepPlus(node1, mid, _, _, config, cc) and
|
||||
additionalLocalFlowStep(mid, node2, config) and
|
||||
not mid instanceof CastNode and
|
||||
preservesValue = false and
|
||||
t = getErasedNodeTypeBound(node2) and
|
||||
nodeCand(TNormalNode(node2), unbind(config))
|
||||
)
|
||||
)
|
||||
@@ -1345,17 +1351,18 @@ private predicate localFlowStepPlus(
|
||||
*/
|
||||
pragma[nomagic]
|
||||
private predicate localFlowBigStep(
|
||||
Node node1, Node node2, boolean preservesValue, Configuration config, LocalCallContext callContext
|
||||
Node node1, Node node2, boolean preservesValue, DataFlowType t, Configuration config,
|
||||
LocalCallContext callContext
|
||||
) {
|
||||
localFlowStepPlus(node1, node2, preservesValue, config, callContext) and
|
||||
localFlowStepPlus(node1, node2, preservesValue, t, config, callContext) and
|
||||
localFlowExit(node2, config)
|
||||
}
|
||||
|
||||
pragma[nomagic]
|
||||
private predicate localFlowBigStepExt(
|
||||
NodeExt node1, NodeExt node2, boolean preservesValue, Configuration config
|
||||
NodeExt node1, NodeExt node2, boolean preservesValue, AccessPathFrontNil apf, Configuration config
|
||||
) {
|
||||
localFlowBigStep(node1.getNode(), node2.getNode(), preservesValue, config, _)
|
||||
localFlowBigStep(node1.getNode(), node2.getNode(), preservesValue, apf.getType(), config, _)
|
||||
}
|
||||
|
||||
private newtype TAccessPathFront =
|
||||
@@ -1395,46 +1402,24 @@ private predicate flowCandFwd(
|
||||
else any()
|
||||
}
|
||||
|
||||
/**
|
||||
* A node that requires an empty access path and should have its tracked type
|
||||
* (re-)computed. This is either a source or a node reached through an
|
||||
* additional step.
|
||||
*/
|
||||
private class AccessPathFrontNilNode extends NormalNodeExt {
|
||||
AccessPathFrontNilNode() {
|
||||
nodeCand(this, _) and
|
||||
(
|
||||
any(Configuration c).isSource(this.getNode())
|
||||
or
|
||||
localFlowBigStepExt(_, this, false, _)
|
||||
or
|
||||
additionalJumpStepExt(_, this, _)
|
||||
)
|
||||
}
|
||||
|
||||
/** Gets the `nil` path front for this node. */
|
||||
AccessPathFrontNil getApf() { result = TFrontNil(this.getErasedNodeTypeBound()) }
|
||||
}
|
||||
|
||||
private predicate flowCandFwd0(
|
||||
NodeExt node, boolean fromArg, AccessPathFront apf, Configuration config
|
||||
) {
|
||||
nodeCand2(node, _, false, config) and
|
||||
config.isSource(node.getNode()) and
|
||||
fromArg = false and
|
||||
apf = node.(AccessPathFrontNilNode).getApf()
|
||||
apf = TFrontNil(node.getErasedNodeTypeBound())
|
||||
or
|
||||
nodeCand(node, unbind(config)) and
|
||||
(
|
||||
exists(NodeExt mid |
|
||||
flowCandFwd(mid, fromArg, apf, config) and
|
||||
localFlowBigStepExt(mid, node, true, config)
|
||||
localFlowBigStepExt(mid, node, true, _, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathFrontNil nil |
|
||||
flowCandFwd(mid, fromArg, nil, config) and
|
||||
localFlowBigStepExt(mid, node, false, config) and
|
||||
apf = node.(AccessPathFrontNilNode).getApf()
|
||||
localFlowBigStepExt(mid, node, false, apf, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid |
|
||||
@@ -1447,7 +1432,7 @@ private predicate flowCandFwd0(
|
||||
flowCandFwd(mid, _, nil, config) and
|
||||
additionalJumpStepExt(mid, node, config) and
|
||||
fromArg = false and
|
||||
apf = node.(AccessPathFrontNilNode).getApf()
|
||||
apf = TFrontNil(node.getErasedNodeTypeBound())
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, boolean allowsFieldFlow |
|
||||
@@ -1589,13 +1574,13 @@ private predicate flowCand0(
|
||||
apf instanceof AccessPathFrontNil
|
||||
or
|
||||
exists(NodeExt mid |
|
||||
localFlowBigStepExt(node, mid, true, config) and
|
||||
localFlowBigStepExt(node, mid, true, _, config) and
|
||||
flowCand(mid, toReturn, apf, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathFrontNil nil |
|
||||
flowCandFwd(node, _, apf, config) and
|
||||
localFlowBigStepExt(node, mid, false, config) and
|
||||
localFlowBigStepExt(node, mid, false, _, config) and
|
||||
flowCand(mid, toReturn, nil, config) and
|
||||
apf instanceof AccessPathFrontNil
|
||||
)
|
||||
@@ -1810,18 +1795,6 @@ private predicate popWithFront(AccessPath ap0, Content f, AccessPathFront apf, A
|
||||
/** Gets the access path obtained by pushing `f` onto `ap`. */
|
||||
private AccessPath push(Content f, AccessPath ap) { ap = pop(f, result) }
|
||||
|
||||
/**
|
||||
* A node that requires an empty access path and should have its tracked type
|
||||
* (re-)computed. This is either a source or a node reached through an
|
||||
* additional step.
|
||||
*/
|
||||
private class AccessPathNilNode extends NormalNodeExt {
|
||||
AccessPathNilNode() { flowCand(this.(AccessPathFrontNilNode), _, _, _) }
|
||||
|
||||
/** Gets the `nil` path for this node. */
|
||||
AccessPathNil getAp() { result = TNil(this.getErasedNodeTypeBound()) }
|
||||
}
|
||||
|
||||
/**
|
||||
* Holds if data can flow from a source to `node` with the given `ap`.
|
||||
*/
|
||||
@@ -1838,20 +1811,19 @@ private predicate flowFwd0(
|
||||
flowCand(node, _, _, config) and
|
||||
config.isSource(node.getNode()) and
|
||||
fromArg = false and
|
||||
ap = node.(AccessPathNilNode).getAp() and
|
||||
ap = TNil(node.getErasedNodeTypeBound()) and
|
||||
apf = ap.(AccessPathNil).getFront()
|
||||
or
|
||||
flowCand(node, _, _, unbind(config)) and
|
||||
(
|
||||
exists(NodeExt mid |
|
||||
flowFwd(mid, fromArg, apf, ap, config) and
|
||||
localFlowBigStepExt(mid, node, true, config)
|
||||
localFlowBigStepExt(mid, node, true, _, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathNil nil |
|
||||
flowFwd(mid, fromArg, _, nil, config) and
|
||||
localFlowBigStepExt(mid, node, false, config) and
|
||||
ap = node.(AccessPathNilNode).getAp() and
|
||||
localFlowBigStepExt(mid, node, false, apf, config) and
|
||||
apf = ap.(AccessPathNil).getFront()
|
||||
)
|
||||
or
|
||||
@@ -1865,7 +1837,7 @@ private predicate flowFwd0(
|
||||
flowFwd(mid, _, _, nil, config) and
|
||||
additionalJumpStepExt(mid, node, config) and
|
||||
fromArg = false and
|
||||
ap = node.(AccessPathNilNode).getAp() and
|
||||
ap = TNil(node.getErasedNodeTypeBound()) and
|
||||
apf = ap.(AccessPathNil).getFront()
|
||||
)
|
||||
or
|
||||
@@ -1982,13 +1954,13 @@ private predicate flow0(NodeExt node, boolean toReturn, AccessPath ap, Configura
|
||||
ap instanceof AccessPathNil
|
||||
or
|
||||
exists(NodeExt mid |
|
||||
localFlowBigStepExt(node, mid, true, config) and
|
||||
localFlowBigStepExt(node, mid, true, _, config) and
|
||||
flow(mid, toReturn, ap, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathNil nil |
|
||||
flowFwd(node, _, _, ap, config) and
|
||||
localFlowBigStepExt(node, mid, false, config) and
|
||||
localFlowBigStepExt(node, mid, false, _, config) and
|
||||
flow(mid, toReturn, nil, config) and
|
||||
ap instanceof AccessPathNil
|
||||
)
|
||||
@@ -2164,7 +2136,7 @@ private newtype TPathNode =
|
||||
config.isSource(node) and
|
||||
cc instanceof CallContextAny and
|
||||
sc instanceof SummaryCtxNone and
|
||||
ap = any(AccessPathNilNode nil | nil.getNode() = node).getAp()
|
||||
ap = TNil(getErasedNodeTypeBound(node))
|
||||
or
|
||||
// ... or a step from an existing PathNode to another node.
|
||||
exists(PathNodeMid mid |
|
||||
@@ -2357,12 +2329,11 @@ private predicate pathStep(PathNodeMid mid, Node node, CallContext cc, SummaryCt
|
||||
pathIntoLocalStep(mid, midnode, cc, enclosing, sc, ap0, conf) and
|
||||
localCC = getLocalCallContext(cc, enclosing)
|
||||
|
|
||||
localFlowBigStep(midnode, node, true, conf, localCC) and
|
||||
localFlowBigStep(midnode, node, true, _, conf, localCC) and
|
||||
ap = ap0
|
||||
or
|
||||
localFlowBigStep(midnode, node, false, conf, localCC) and
|
||||
ap0 instanceof AccessPathNil and
|
||||
ap = any(AccessPathNilNode nil | nil.getNode() = node).getAp()
|
||||
localFlowBigStep(midnode, node, false, ap.(AccessPathNil).getType(), conf, localCC) and
|
||||
ap0 instanceof AccessPathNil
|
||||
)
|
||||
or
|
||||
jumpStep(mid.getNode(), node, mid.getConfiguration()) and
|
||||
@@ -2374,7 +2345,7 @@ private predicate pathStep(PathNodeMid mid, Node node, CallContext cc, SummaryCt
|
||||
cc instanceof CallContextAny and
|
||||
sc instanceof SummaryCtxNone and
|
||||
mid.getAp() instanceof AccessPathNil and
|
||||
ap = any(AccessPathNilNode nil | nil.getNode() = node).getAp()
|
||||
ap = TNil(getErasedNodeTypeBound(node))
|
||||
or
|
||||
exists(Content f, AccessPath ap0 | pathReadStep(mid, node, ap0, f, cc) and ap = pop(f, ap0)) and
|
||||
sc = mid.getSummaryCtx()
|
||||
@@ -2397,7 +2368,7 @@ private predicate pathIntoLocalStep(
|
||||
midnode = mid.getNode() and
|
||||
cc = mid.getCallContext() and
|
||||
conf = mid.getConfiguration() and
|
||||
localFlowBigStep(midnode, _, _, conf, _) and
|
||||
localFlowBigStep(midnode, _, _, _, conf, _) and
|
||||
enclosing = midnode.getEnclosingCallable() and
|
||||
sc = mid.getSummaryCtx() and
|
||||
ap0 = mid.getAp()
|
||||
|
||||
@@ -1307,15 +1307,20 @@ private predicate localFlowExit(Node node, Configuration config) {
|
||||
*/
|
||||
pragma[nomagic]
|
||||
private predicate localFlowStepPlus(
|
||||
Node node1, Node node2, boolean preservesValue, Configuration config, LocalCallContext cc
|
||||
Node node1, Node node2, boolean preservesValue, DataFlowType t, Configuration config,
|
||||
LocalCallContext cc
|
||||
) {
|
||||
not isUnreachableInCall(node2, cc.(LocalCallContextSpecificCall).getCall()) and
|
||||
(
|
||||
localFlowEntry(node1, config) and
|
||||
(
|
||||
localFlowStep(node1, node2, config) and preservesValue = true
|
||||
localFlowStep(node1, node2, config) and
|
||||
preservesValue = true and
|
||||
t = getErasedNodeTypeBound(node1)
|
||||
or
|
||||
additionalLocalFlowStep(node1, node2, config) and preservesValue = false
|
||||
additionalLocalFlowStep(node1, node2, config) and
|
||||
preservesValue = false and
|
||||
t = getErasedNodeTypeBound(node2)
|
||||
) and
|
||||
node1 != node2 and
|
||||
cc.relevantFor(node1.getEnclosingCallable()) and
|
||||
@@ -1323,17 +1328,18 @@ private predicate localFlowStepPlus(
|
||||
nodeCand(TNormalNode(node2), unbind(config))
|
||||
or
|
||||
exists(Node mid |
|
||||
localFlowStepPlus(node1, mid, preservesValue, config, cc) and
|
||||
localFlowStepPlus(node1, mid, preservesValue, t, config, cc) and
|
||||
localFlowStep(mid, node2, config) and
|
||||
not mid instanceof CastNode and
|
||||
nodeCand(TNormalNode(node2), unbind(config))
|
||||
)
|
||||
or
|
||||
exists(Node mid |
|
||||
localFlowStepPlus(node1, mid, _, config, cc) and
|
||||
localFlowStepPlus(node1, mid, _, _, config, cc) and
|
||||
additionalLocalFlowStep(mid, node2, config) and
|
||||
not mid instanceof CastNode and
|
||||
preservesValue = false and
|
||||
t = getErasedNodeTypeBound(node2) and
|
||||
nodeCand(TNormalNode(node2), unbind(config))
|
||||
)
|
||||
)
|
||||
@@ -1345,17 +1351,18 @@ private predicate localFlowStepPlus(
|
||||
*/
|
||||
pragma[nomagic]
|
||||
private predicate localFlowBigStep(
|
||||
Node node1, Node node2, boolean preservesValue, Configuration config, LocalCallContext callContext
|
||||
Node node1, Node node2, boolean preservesValue, DataFlowType t, Configuration config,
|
||||
LocalCallContext callContext
|
||||
) {
|
||||
localFlowStepPlus(node1, node2, preservesValue, config, callContext) and
|
||||
localFlowStepPlus(node1, node2, preservesValue, t, config, callContext) and
|
||||
localFlowExit(node2, config)
|
||||
}
|
||||
|
||||
pragma[nomagic]
|
||||
private predicate localFlowBigStepExt(
|
||||
NodeExt node1, NodeExt node2, boolean preservesValue, Configuration config
|
||||
NodeExt node1, NodeExt node2, boolean preservesValue, AccessPathFrontNil apf, Configuration config
|
||||
) {
|
||||
localFlowBigStep(node1.getNode(), node2.getNode(), preservesValue, config, _)
|
||||
localFlowBigStep(node1.getNode(), node2.getNode(), preservesValue, apf.getType(), config, _)
|
||||
}
|
||||
|
||||
private newtype TAccessPathFront =
|
||||
@@ -1395,46 +1402,24 @@ private predicate flowCandFwd(
|
||||
else any()
|
||||
}
|
||||
|
||||
/**
|
||||
* A node that requires an empty access path and should have its tracked type
|
||||
* (re-)computed. This is either a source or a node reached through an
|
||||
* additional step.
|
||||
*/
|
||||
private class AccessPathFrontNilNode extends NormalNodeExt {
|
||||
AccessPathFrontNilNode() {
|
||||
nodeCand(this, _) and
|
||||
(
|
||||
any(Configuration c).isSource(this.getNode())
|
||||
or
|
||||
localFlowBigStepExt(_, this, false, _)
|
||||
or
|
||||
additionalJumpStepExt(_, this, _)
|
||||
)
|
||||
}
|
||||
|
||||
/** Gets the `nil` path front for this node. */
|
||||
AccessPathFrontNil getApf() { result = TFrontNil(this.getErasedNodeTypeBound()) }
|
||||
}
|
||||
|
||||
private predicate flowCandFwd0(
|
||||
NodeExt node, boolean fromArg, AccessPathFront apf, Configuration config
|
||||
) {
|
||||
nodeCand2(node, _, false, config) and
|
||||
config.isSource(node.getNode()) and
|
||||
fromArg = false and
|
||||
apf = node.(AccessPathFrontNilNode).getApf()
|
||||
apf = TFrontNil(node.getErasedNodeTypeBound())
|
||||
or
|
||||
nodeCand(node, unbind(config)) and
|
||||
(
|
||||
exists(NodeExt mid |
|
||||
flowCandFwd(mid, fromArg, apf, config) and
|
||||
localFlowBigStepExt(mid, node, true, config)
|
||||
localFlowBigStepExt(mid, node, true, _, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathFrontNil nil |
|
||||
flowCandFwd(mid, fromArg, nil, config) and
|
||||
localFlowBigStepExt(mid, node, false, config) and
|
||||
apf = node.(AccessPathFrontNilNode).getApf()
|
||||
localFlowBigStepExt(mid, node, false, apf, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid |
|
||||
@@ -1447,7 +1432,7 @@ private predicate flowCandFwd0(
|
||||
flowCandFwd(mid, _, nil, config) and
|
||||
additionalJumpStepExt(mid, node, config) and
|
||||
fromArg = false and
|
||||
apf = node.(AccessPathFrontNilNode).getApf()
|
||||
apf = TFrontNil(node.getErasedNodeTypeBound())
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, boolean allowsFieldFlow |
|
||||
@@ -1589,13 +1574,13 @@ private predicate flowCand0(
|
||||
apf instanceof AccessPathFrontNil
|
||||
or
|
||||
exists(NodeExt mid |
|
||||
localFlowBigStepExt(node, mid, true, config) and
|
||||
localFlowBigStepExt(node, mid, true, _, config) and
|
||||
flowCand(mid, toReturn, apf, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathFrontNil nil |
|
||||
flowCandFwd(node, _, apf, config) and
|
||||
localFlowBigStepExt(node, mid, false, config) and
|
||||
localFlowBigStepExt(node, mid, false, _, config) and
|
||||
flowCand(mid, toReturn, nil, config) and
|
||||
apf instanceof AccessPathFrontNil
|
||||
)
|
||||
@@ -1810,18 +1795,6 @@ private predicate popWithFront(AccessPath ap0, Content f, AccessPathFront apf, A
|
||||
/** Gets the access path obtained by pushing `f` onto `ap`. */
|
||||
private AccessPath push(Content f, AccessPath ap) { ap = pop(f, result) }
|
||||
|
||||
/**
|
||||
* A node that requires an empty access path and should have its tracked type
|
||||
* (re-)computed. This is either a source or a node reached through an
|
||||
* additional step.
|
||||
*/
|
||||
private class AccessPathNilNode extends NormalNodeExt {
|
||||
AccessPathNilNode() { flowCand(this.(AccessPathFrontNilNode), _, _, _) }
|
||||
|
||||
/** Gets the `nil` path for this node. */
|
||||
AccessPathNil getAp() { result = TNil(this.getErasedNodeTypeBound()) }
|
||||
}
|
||||
|
||||
/**
|
||||
* Holds if data can flow from a source to `node` with the given `ap`.
|
||||
*/
|
||||
@@ -1838,20 +1811,19 @@ private predicate flowFwd0(
|
||||
flowCand(node, _, _, config) and
|
||||
config.isSource(node.getNode()) and
|
||||
fromArg = false and
|
||||
ap = node.(AccessPathNilNode).getAp() and
|
||||
ap = TNil(node.getErasedNodeTypeBound()) and
|
||||
apf = ap.(AccessPathNil).getFront()
|
||||
or
|
||||
flowCand(node, _, _, unbind(config)) and
|
||||
(
|
||||
exists(NodeExt mid |
|
||||
flowFwd(mid, fromArg, apf, ap, config) and
|
||||
localFlowBigStepExt(mid, node, true, config)
|
||||
localFlowBigStepExt(mid, node, true, _, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathNil nil |
|
||||
flowFwd(mid, fromArg, _, nil, config) and
|
||||
localFlowBigStepExt(mid, node, false, config) and
|
||||
ap = node.(AccessPathNilNode).getAp() and
|
||||
localFlowBigStepExt(mid, node, false, apf, config) and
|
||||
apf = ap.(AccessPathNil).getFront()
|
||||
)
|
||||
or
|
||||
@@ -1865,7 +1837,7 @@ private predicate flowFwd0(
|
||||
flowFwd(mid, _, _, nil, config) and
|
||||
additionalJumpStepExt(mid, node, config) and
|
||||
fromArg = false and
|
||||
ap = node.(AccessPathNilNode).getAp() and
|
||||
ap = TNil(node.getErasedNodeTypeBound()) and
|
||||
apf = ap.(AccessPathNil).getFront()
|
||||
)
|
||||
or
|
||||
@@ -1982,13 +1954,13 @@ private predicate flow0(NodeExt node, boolean toReturn, AccessPath ap, Configura
|
||||
ap instanceof AccessPathNil
|
||||
or
|
||||
exists(NodeExt mid |
|
||||
localFlowBigStepExt(node, mid, true, config) and
|
||||
localFlowBigStepExt(node, mid, true, _, config) and
|
||||
flow(mid, toReturn, ap, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathNil nil |
|
||||
flowFwd(node, _, _, ap, config) and
|
||||
localFlowBigStepExt(node, mid, false, config) and
|
||||
localFlowBigStepExt(node, mid, false, _, config) and
|
||||
flow(mid, toReturn, nil, config) and
|
||||
ap instanceof AccessPathNil
|
||||
)
|
||||
@@ -2164,7 +2136,7 @@ private newtype TPathNode =
|
||||
config.isSource(node) and
|
||||
cc instanceof CallContextAny and
|
||||
sc instanceof SummaryCtxNone and
|
||||
ap = any(AccessPathNilNode nil | nil.getNode() = node).getAp()
|
||||
ap = TNil(getErasedNodeTypeBound(node))
|
||||
or
|
||||
// ... or a step from an existing PathNode to another node.
|
||||
exists(PathNodeMid mid |
|
||||
@@ -2357,12 +2329,11 @@ private predicate pathStep(PathNodeMid mid, Node node, CallContext cc, SummaryCt
|
||||
pathIntoLocalStep(mid, midnode, cc, enclosing, sc, ap0, conf) and
|
||||
localCC = getLocalCallContext(cc, enclosing)
|
||||
|
|
||||
localFlowBigStep(midnode, node, true, conf, localCC) and
|
||||
localFlowBigStep(midnode, node, true, _, conf, localCC) and
|
||||
ap = ap0
|
||||
or
|
||||
localFlowBigStep(midnode, node, false, conf, localCC) and
|
||||
ap0 instanceof AccessPathNil and
|
||||
ap = any(AccessPathNilNode nil | nil.getNode() = node).getAp()
|
||||
localFlowBigStep(midnode, node, false, ap.(AccessPathNil).getType(), conf, localCC) and
|
||||
ap0 instanceof AccessPathNil
|
||||
)
|
||||
or
|
||||
jumpStep(mid.getNode(), node, mid.getConfiguration()) and
|
||||
@@ -2374,7 +2345,7 @@ private predicate pathStep(PathNodeMid mid, Node node, CallContext cc, SummaryCt
|
||||
cc instanceof CallContextAny and
|
||||
sc instanceof SummaryCtxNone and
|
||||
mid.getAp() instanceof AccessPathNil and
|
||||
ap = any(AccessPathNilNode nil | nil.getNode() = node).getAp()
|
||||
ap = TNil(getErasedNodeTypeBound(node))
|
||||
or
|
||||
exists(Content f, AccessPath ap0 | pathReadStep(mid, node, ap0, f, cc) and ap = pop(f, ap0)) and
|
||||
sc = mid.getSummaryCtx()
|
||||
@@ -2397,7 +2368,7 @@ private predicate pathIntoLocalStep(
|
||||
midnode = mid.getNode() and
|
||||
cc = mid.getCallContext() and
|
||||
conf = mid.getConfiguration() and
|
||||
localFlowBigStep(midnode, _, _, conf, _) and
|
||||
localFlowBigStep(midnode, _, _, _, conf, _) and
|
||||
enclosing = midnode.getEnclosingCallable() and
|
||||
sc = mid.getSummaryCtx() and
|
||||
ap0 = mid.getAp()
|
||||
|
||||
@@ -1307,15 +1307,20 @@ private predicate localFlowExit(Node node, Configuration config) {
|
||||
*/
|
||||
pragma[nomagic]
|
||||
private predicate localFlowStepPlus(
|
||||
Node node1, Node node2, boolean preservesValue, Configuration config, LocalCallContext cc
|
||||
Node node1, Node node2, boolean preservesValue, DataFlowType t, Configuration config,
|
||||
LocalCallContext cc
|
||||
) {
|
||||
not isUnreachableInCall(node2, cc.(LocalCallContextSpecificCall).getCall()) and
|
||||
(
|
||||
localFlowEntry(node1, config) and
|
||||
(
|
||||
localFlowStep(node1, node2, config) and preservesValue = true
|
||||
localFlowStep(node1, node2, config) and
|
||||
preservesValue = true and
|
||||
t = getErasedNodeTypeBound(node1)
|
||||
or
|
||||
additionalLocalFlowStep(node1, node2, config) and preservesValue = false
|
||||
additionalLocalFlowStep(node1, node2, config) and
|
||||
preservesValue = false and
|
||||
t = getErasedNodeTypeBound(node2)
|
||||
) and
|
||||
node1 != node2 and
|
||||
cc.relevantFor(node1.getEnclosingCallable()) and
|
||||
@@ -1323,17 +1328,18 @@ private predicate localFlowStepPlus(
|
||||
nodeCand(TNormalNode(node2), unbind(config))
|
||||
or
|
||||
exists(Node mid |
|
||||
localFlowStepPlus(node1, mid, preservesValue, config, cc) and
|
||||
localFlowStepPlus(node1, mid, preservesValue, t, config, cc) and
|
||||
localFlowStep(mid, node2, config) and
|
||||
not mid instanceof CastNode and
|
||||
nodeCand(TNormalNode(node2), unbind(config))
|
||||
)
|
||||
or
|
||||
exists(Node mid |
|
||||
localFlowStepPlus(node1, mid, _, config, cc) and
|
||||
localFlowStepPlus(node1, mid, _, _, config, cc) and
|
||||
additionalLocalFlowStep(mid, node2, config) and
|
||||
not mid instanceof CastNode and
|
||||
preservesValue = false and
|
||||
t = getErasedNodeTypeBound(node2) and
|
||||
nodeCand(TNormalNode(node2), unbind(config))
|
||||
)
|
||||
)
|
||||
@@ -1345,17 +1351,18 @@ private predicate localFlowStepPlus(
|
||||
*/
|
||||
pragma[nomagic]
|
||||
private predicate localFlowBigStep(
|
||||
Node node1, Node node2, boolean preservesValue, Configuration config, LocalCallContext callContext
|
||||
Node node1, Node node2, boolean preservesValue, DataFlowType t, Configuration config,
|
||||
LocalCallContext callContext
|
||||
) {
|
||||
localFlowStepPlus(node1, node2, preservesValue, config, callContext) and
|
||||
localFlowStepPlus(node1, node2, preservesValue, t, config, callContext) and
|
||||
localFlowExit(node2, config)
|
||||
}
|
||||
|
||||
pragma[nomagic]
|
||||
private predicate localFlowBigStepExt(
|
||||
NodeExt node1, NodeExt node2, boolean preservesValue, Configuration config
|
||||
NodeExt node1, NodeExt node2, boolean preservesValue, AccessPathFrontNil apf, Configuration config
|
||||
) {
|
||||
localFlowBigStep(node1.getNode(), node2.getNode(), preservesValue, config, _)
|
||||
localFlowBigStep(node1.getNode(), node2.getNode(), preservesValue, apf.getType(), config, _)
|
||||
}
|
||||
|
||||
private newtype TAccessPathFront =
|
||||
@@ -1395,46 +1402,24 @@ private predicate flowCandFwd(
|
||||
else any()
|
||||
}
|
||||
|
||||
/**
|
||||
* A node that requires an empty access path and should have its tracked type
|
||||
* (re-)computed. This is either a source or a node reached through an
|
||||
* additional step.
|
||||
*/
|
||||
private class AccessPathFrontNilNode extends NormalNodeExt {
|
||||
AccessPathFrontNilNode() {
|
||||
nodeCand(this, _) and
|
||||
(
|
||||
any(Configuration c).isSource(this.getNode())
|
||||
or
|
||||
localFlowBigStepExt(_, this, false, _)
|
||||
or
|
||||
additionalJumpStepExt(_, this, _)
|
||||
)
|
||||
}
|
||||
|
||||
/** Gets the `nil` path front for this node. */
|
||||
AccessPathFrontNil getApf() { result = TFrontNil(this.getErasedNodeTypeBound()) }
|
||||
}
|
||||
|
||||
private predicate flowCandFwd0(
|
||||
NodeExt node, boolean fromArg, AccessPathFront apf, Configuration config
|
||||
) {
|
||||
nodeCand2(node, _, false, config) and
|
||||
config.isSource(node.getNode()) and
|
||||
fromArg = false and
|
||||
apf = node.(AccessPathFrontNilNode).getApf()
|
||||
apf = TFrontNil(node.getErasedNodeTypeBound())
|
||||
or
|
||||
nodeCand(node, unbind(config)) and
|
||||
(
|
||||
exists(NodeExt mid |
|
||||
flowCandFwd(mid, fromArg, apf, config) and
|
||||
localFlowBigStepExt(mid, node, true, config)
|
||||
localFlowBigStepExt(mid, node, true, _, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathFrontNil nil |
|
||||
flowCandFwd(mid, fromArg, nil, config) and
|
||||
localFlowBigStepExt(mid, node, false, config) and
|
||||
apf = node.(AccessPathFrontNilNode).getApf()
|
||||
localFlowBigStepExt(mid, node, false, apf, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid |
|
||||
@@ -1447,7 +1432,7 @@ private predicate flowCandFwd0(
|
||||
flowCandFwd(mid, _, nil, config) and
|
||||
additionalJumpStepExt(mid, node, config) and
|
||||
fromArg = false and
|
||||
apf = node.(AccessPathFrontNilNode).getApf()
|
||||
apf = TFrontNil(node.getErasedNodeTypeBound())
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, boolean allowsFieldFlow |
|
||||
@@ -1589,13 +1574,13 @@ private predicate flowCand0(
|
||||
apf instanceof AccessPathFrontNil
|
||||
or
|
||||
exists(NodeExt mid |
|
||||
localFlowBigStepExt(node, mid, true, config) and
|
||||
localFlowBigStepExt(node, mid, true, _, config) and
|
||||
flowCand(mid, toReturn, apf, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathFrontNil nil |
|
||||
flowCandFwd(node, _, apf, config) and
|
||||
localFlowBigStepExt(node, mid, false, config) and
|
||||
localFlowBigStepExt(node, mid, false, _, config) and
|
||||
flowCand(mid, toReturn, nil, config) and
|
||||
apf instanceof AccessPathFrontNil
|
||||
)
|
||||
@@ -1810,18 +1795,6 @@ private predicate popWithFront(AccessPath ap0, Content f, AccessPathFront apf, A
|
||||
/** Gets the access path obtained by pushing `f` onto `ap`. */
|
||||
private AccessPath push(Content f, AccessPath ap) { ap = pop(f, result) }
|
||||
|
||||
/**
|
||||
* A node that requires an empty access path and should have its tracked type
|
||||
* (re-)computed. This is either a source or a node reached through an
|
||||
* additional step.
|
||||
*/
|
||||
private class AccessPathNilNode extends NormalNodeExt {
|
||||
AccessPathNilNode() { flowCand(this.(AccessPathFrontNilNode), _, _, _) }
|
||||
|
||||
/** Gets the `nil` path for this node. */
|
||||
AccessPathNil getAp() { result = TNil(this.getErasedNodeTypeBound()) }
|
||||
}
|
||||
|
||||
/**
|
||||
* Holds if data can flow from a source to `node` with the given `ap`.
|
||||
*/
|
||||
@@ -1838,20 +1811,19 @@ private predicate flowFwd0(
|
||||
flowCand(node, _, _, config) and
|
||||
config.isSource(node.getNode()) and
|
||||
fromArg = false and
|
||||
ap = node.(AccessPathNilNode).getAp() and
|
||||
ap = TNil(node.getErasedNodeTypeBound()) and
|
||||
apf = ap.(AccessPathNil).getFront()
|
||||
or
|
||||
flowCand(node, _, _, unbind(config)) and
|
||||
(
|
||||
exists(NodeExt mid |
|
||||
flowFwd(mid, fromArg, apf, ap, config) and
|
||||
localFlowBigStepExt(mid, node, true, config)
|
||||
localFlowBigStepExt(mid, node, true, _, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathNil nil |
|
||||
flowFwd(mid, fromArg, _, nil, config) and
|
||||
localFlowBigStepExt(mid, node, false, config) and
|
||||
ap = node.(AccessPathNilNode).getAp() and
|
||||
localFlowBigStepExt(mid, node, false, apf, config) and
|
||||
apf = ap.(AccessPathNil).getFront()
|
||||
)
|
||||
or
|
||||
@@ -1865,7 +1837,7 @@ private predicate flowFwd0(
|
||||
flowFwd(mid, _, _, nil, config) and
|
||||
additionalJumpStepExt(mid, node, config) and
|
||||
fromArg = false and
|
||||
ap = node.(AccessPathNilNode).getAp() and
|
||||
ap = TNil(node.getErasedNodeTypeBound()) and
|
||||
apf = ap.(AccessPathNil).getFront()
|
||||
)
|
||||
or
|
||||
@@ -1982,13 +1954,13 @@ private predicate flow0(NodeExt node, boolean toReturn, AccessPath ap, Configura
|
||||
ap instanceof AccessPathNil
|
||||
or
|
||||
exists(NodeExt mid |
|
||||
localFlowBigStepExt(node, mid, true, config) and
|
||||
localFlowBigStepExt(node, mid, true, _, config) and
|
||||
flow(mid, toReturn, ap, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathNil nil |
|
||||
flowFwd(node, _, _, ap, config) and
|
||||
localFlowBigStepExt(node, mid, false, config) and
|
||||
localFlowBigStepExt(node, mid, false, _, config) and
|
||||
flow(mid, toReturn, nil, config) and
|
||||
ap instanceof AccessPathNil
|
||||
)
|
||||
@@ -2164,7 +2136,7 @@ private newtype TPathNode =
|
||||
config.isSource(node) and
|
||||
cc instanceof CallContextAny and
|
||||
sc instanceof SummaryCtxNone and
|
||||
ap = any(AccessPathNilNode nil | nil.getNode() = node).getAp()
|
||||
ap = TNil(getErasedNodeTypeBound(node))
|
||||
or
|
||||
// ... or a step from an existing PathNode to another node.
|
||||
exists(PathNodeMid mid |
|
||||
@@ -2357,12 +2329,11 @@ private predicate pathStep(PathNodeMid mid, Node node, CallContext cc, SummaryCt
|
||||
pathIntoLocalStep(mid, midnode, cc, enclosing, sc, ap0, conf) and
|
||||
localCC = getLocalCallContext(cc, enclosing)
|
||||
|
|
||||
localFlowBigStep(midnode, node, true, conf, localCC) and
|
||||
localFlowBigStep(midnode, node, true, _, conf, localCC) and
|
||||
ap = ap0
|
||||
or
|
||||
localFlowBigStep(midnode, node, false, conf, localCC) and
|
||||
ap0 instanceof AccessPathNil and
|
||||
ap = any(AccessPathNilNode nil | nil.getNode() = node).getAp()
|
||||
localFlowBigStep(midnode, node, false, ap.(AccessPathNil).getType(), conf, localCC) and
|
||||
ap0 instanceof AccessPathNil
|
||||
)
|
||||
or
|
||||
jumpStep(mid.getNode(), node, mid.getConfiguration()) and
|
||||
@@ -2374,7 +2345,7 @@ private predicate pathStep(PathNodeMid mid, Node node, CallContext cc, SummaryCt
|
||||
cc instanceof CallContextAny and
|
||||
sc instanceof SummaryCtxNone and
|
||||
mid.getAp() instanceof AccessPathNil and
|
||||
ap = any(AccessPathNilNode nil | nil.getNode() = node).getAp()
|
||||
ap = TNil(getErasedNodeTypeBound(node))
|
||||
or
|
||||
exists(Content f, AccessPath ap0 | pathReadStep(mid, node, ap0, f, cc) and ap = pop(f, ap0)) and
|
||||
sc = mid.getSummaryCtx()
|
||||
@@ -2397,7 +2368,7 @@ private predicate pathIntoLocalStep(
|
||||
midnode = mid.getNode() and
|
||||
cc = mid.getCallContext() and
|
||||
conf = mid.getConfiguration() and
|
||||
localFlowBigStep(midnode, _, _, conf, _) and
|
||||
localFlowBigStep(midnode, _, _, _, conf, _) and
|
||||
enclosing = midnode.getEnclosingCallable() and
|
||||
sc = mid.getSummaryCtx() and
|
||||
ap0 = mid.getAp()
|
||||
|
||||
@@ -1307,15 +1307,20 @@ private predicate localFlowExit(Node node, Configuration config) {
|
||||
*/
|
||||
pragma[nomagic]
|
||||
private predicate localFlowStepPlus(
|
||||
Node node1, Node node2, boolean preservesValue, Configuration config, LocalCallContext cc
|
||||
Node node1, Node node2, boolean preservesValue, DataFlowType t, Configuration config,
|
||||
LocalCallContext cc
|
||||
) {
|
||||
not isUnreachableInCall(node2, cc.(LocalCallContextSpecificCall).getCall()) and
|
||||
(
|
||||
localFlowEntry(node1, config) and
|
||||
(
|
||||
localFlowStep(node1, node2, config) and preservesValue = true
|
||||
localFlowStep(node1, node2, config) and
|
||||
preservesValue = true and
|
||||
t = getErasedNodeTypeBound(node1)
|
||||
or
|
||||
additionalLocalFlowStep(node1, node2, config) and preservesValue = false
|
||||
additionalLocalFlowStep(node1, node2, config) and
|
||||
preservesValue = false and
|
||||
t = getErasedNodeTypeBound(node2)
|
||||
) and
|
||||
node1 != node2 and
|
||||
cc.relevantFor(node1.getEnclosingCallable()) and
|
||||
@@ -1323,17 +1328,18 @@ private predicate localFlowStepPlus(
|
||||
nodeCand(TNormalNode(node2), unbind(config))
|
||||
or
|
||||
exists(Node mid |
|
||||
localFlowStepPlus(node1, mid, preservesValue, config, cc) and
|
||||
localFlowStepPlus(node1, mid, preservesValue, t, config, cc) and
|
||||
localFlowStep(mid, node2, config) and
|
||||
not mid instanceof CastNode and
|
||||
nodeCand(TNormalNode(node2), unbind(config))
|
||||
)
|
||||
or
|
||||
exists(Node mid |
|
||||
localFlowStepPlus(node1, mid, _, config, cc) and
|
||||
localFlowStepPlus(node1, mid, _, _, config, cc) and
|
||||
additionalLocalFlowStep(mid, node2, config) and
|
||||
not mid instanceof CastNode and
|
||||
preservesValue = false and
|
||||
t = getErasedNodeTypeBound(node2) and
|
||||
nodeCand(TNormalNode(node2), unbind(config))
|
||||
)
|
||||
)
|
||||
@@ -1345,17 +1351,18 @@ private predicate localFlowStepPlus(
|
||||
*/
|
||||
pragma[nomagic]
|
||||
private predicate localFlowBigStep(
|
||||
Node node1, Node node2, boolean preservesValue, Configuration config, LocalCallContext callContext
|
||||
Node node1, Node node2, boolean preservesValue, DataFlowType t, Configuration config,
|
||||
LocalCallContext callContext
|
||||
) {
|
||||
localFlowStepPlus(node1, node2, preservesValue, config, callContext) and
|
||||
localFlowStepPlus(node1, node2, preservesValue, t, config, callContext) and
|
||||
localFlowExit(node2, config)
|
||||
}
|
||||
|
||||
pragma[nomagic]
|
||||
private predicate localFlowBigStepExt(
|
||||
NodeExt node1, NodeExt node2, boolean preservesValue, Configuration config
|
||||
NodeExt node1, NodeExt node2, boolean preservesValue, AccessPathFrontNil apf, Configuration config
|
||||
) {
|
||||
localFlowBigStep(node1.getNode(), node2.getNode(), preservesValue, config, _)
|
||||
localFlowBigStep(node1.getNode(), node2.getNode(), preservesValue, apf.getType(), config, _)
|
||||
}
|
||||
|
||||
private newtype TAccessPathFront =
|
||||
@@ -1395,46 +1402,24 @@ private predicate flowCandFwd(
|
||||
else any()
|
||||
}
|
||||
|
||||
/**
|
||||
* A node that requires an empty access path and should have its tracked type
|
||||
* (re-)computed. This is either a source or a node reached through an
|
||||
* additional step.
|
||||
*/
|
||||
private class AccessPathFrontNilNode extends NormalNodeExt {
|
||||
AccessPathFrontNilNode() {
|
||||
nodeCand(this, _) and
|
||||
(
|
||||
any(Configuration c).isSource(this.getNode())
|
||||
or
|
||||
localFlowBigStepExt(_, this, false, _)
|
||||
or
|
||||
additionalJumpStepExt(_, this, _)
|
||||
)
|
||||
}
|
||||
|
||||
/** Gets the `nil` path front for this node. */
|
||||
AccessPathFrontNil getApf() { result = TFrontNil(this.getErasedNodeTypeBound()) }
|
||||
}
|
||||
|
||||
private predicate flowCandFwd0(
|
||||
NodeExt node, boolean fromArg, AccessPathFront apf, Configuration config
|
||||
) {
|
||||
nodeCand2(node, _, false, config) and
|
||||
config.isSource(node.getNode()) and
|
||||
fromArg = false and
|
||||
apf = node.(AccessPathFrontNilNode).getApf()
|
||||
apf = TFrontNil(node.getErasedNodeTypeBound())
|
||||
or
|
||||
nodeCand(node, unbind(config)) and
|
||||
(
|
||||
exists(NodeExt mid |
|
||||
flowCandFwd(mid, fromArg, apf, config) and
|
||||
localFlowBigStepExt(mid, node, true, config)
|
||||
localFlowBigStepExt(mid, node, true, _, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathFrontNil nil |
|
||||
flowCandFwd(mid, fromArg, nil, config) and
|
||||
localFlowBigStepExt(mid, node, false, config) and
|
||||
apf = node.(AccessPathFrontNilNode).getApf()
|
||||
localFlowBigStepExt(mid, node, false, apf, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid |
|
||||
@@ -1447,7 +1432,7 @@ private predicate flowCandFwd0(
|
||||
flowCandFwd(mid, _, nil, config) and
|
||||
additionalJumpStepExt(mid, node, config) and
|
||||
fromArg = false and
|
||||
apf = node.(AccessPathFrontNilNode).getApf()
|
||||
apf = TFrontNil(node.getErasedNodeTypeBound())
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, boolean allowsFieldFlow |
|
||||
@@ -1589,13 +1574,13 @@ private predicate flowCand0(
|
||||
apf instanceof AccessPathFrontNil
|
||||
or
|
||||
exists(NodeExt mid |
|
||||
localFlowBigStepExt(node, mid, true, config) and
|
||||
localFlowBigStepExt(node, mid, true, _, config) and
|
||||
flowCand(mid, toReturn, apf, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathFrontNil nil |
|
||||
flowCandFwd(node, _, apf, config) and
|
||||
localFlowBigStepExt(node, mid, false, config) and
|
||||
localFlowBigStepExt(node, mid, false, _, config) and
|
||||
flowCand(mid, toReturn, nil, config) and
|
||||
apf instanceof AccessPathFrontNil
|
||||
)
|
||||
@@ -1810,18 +1795,6 @@ private predicate popWithFront(AccessPath ap0, Content f, AccessPathFront apf, A
|
||||
/** Gets the access path obtained by pushing `f` onto `ap`. */
|
||||
private AccessPath push(Content f, AccessPath ap) { ap = pop(f, result) }
|
||||
|
||||
/**
|
||||
* A node that requires an empty access path and should have its tracked type
|
||||
* (re-)computed. This is either a source or a node reached through an
|
||||
* additional step.
|
||||
*/
|
||||
private class AccessPathNilNode extends NormalNodeExt {
|
||||
AccessPathNilNode() { flowCand(this.(AccessPathFrontNilNode), _, _, _) }
|
||||
|
||||
/** Gets the `nil` path for this node. */
|
||||
AccessPathNil getAp() { result = TNil(this.getErasedNodeTypeBound()) }
|
||||
}
|
||||
|
||||
/**
|
||||
* Holds if data can flow from a source to `node` with the given `ap`.
|
||||
*/
|
||||
@@ -1838,20 +1811,19 @@ private predicate flowFwd0(
|
||||
flowCand(node, _, _, config) and
|
||||
config.isSource(node.getNode()) and
|
||||
fromArg = false and
|
||||
ap = node.(AccessPathNilNode).getAp() and
|
||||
ap = TNil(node.getErasedNodeTypeBound()) and
|
||||
apf = ap.(AccessPathNil).getFront()
|
||||
or
|
||||
flowCand(node, _, _, unbind(config)) and
|
||||
(
|
||||
exists(NodeExt mid |
|
||||
flowFwd(mid, fromArg, apf, ap, config) and
|
||||
localFlowBigStepExt(mid, node, true, config)
|
||||
localFlowBigStepExt(mid, node, true, _, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathNil nil |
|
||||
flowFwd(mid, fromArg, _, nil, config) and
|
||||
localFlowBigStepExt(mid, node, false, config) and
|
||||
ap = node.(AccessPathNilNode).getAp() and
|
||||
localFlowBigStepExt(mid, node, false, apf, config) and
|
||||
apf = ap.(AccessPathNil).getFront()
|
||||
)
|
||||
or
|
||||
@@ -1865,7 +1837,7 @@ private predicate flowFwd0(
|
||||
flowFwd(mid, _, _, nil, config) and
|
||||
additionalJumpStepExt(mid, node, config) and
|
||||
fromArg = false and
|
||||
ap = node.(AccessPathNilNode).getAp() and
|
||||
ap = TNil(node.getErasedNodeTypeBound()) and
|
||||
apf = ap.(AccessPathNil).getFront()
|
||||
)
|
||||
or
|
||||
@@ -1982,13 +1954,13 @@ private predicate flow0(NodeExt node, boolean toReturn, AccessPath ap, Configura
|
||||
ap instanceof AccessPathNil
|
||||
or
|
||||
exists(NodeExt mid |
|
||||
localFlowBigStepExt(node, mid, true, config) and
|
||||
localFlowBigStepExt(node, mid, true, _, config) and
|
||||
flow(mid, toReturn, ap, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathNil nil |
|
||||
flowFwd(node, _, _, ap, config) and
|
||||
localFlowBigStepExt(node, mid, false, config) and
|
||||
localFlowBigStepExt(node, mid, false, _, config) and
|
||||
flow(mid, toReturn, nil, config) and
|
||||
ap instanceof AccessPathNil
|
||||
)
|
||||
@@ -2164,7 +2136,7 @@ private newtype TPathNode =
|
||||
config.isSource(node) and
|
||||
cc instanceof CallContextAny and
|
||||
sc instanceof SummaryCtxNone and
|
||||
ap = any(AccessPathNilNode nil | nil.getNode() = node).getAp()
|
||||
ap = TNil(getErasedNodeTypeBound(node))
|
||||
or
|
||||
// ... or a step from an existing PathNode to another node.
|
||||
exists(PathNodeMid mid |
|
||||
@@ -2357,12 +2329,11 @@ private predicate pathStep(PathNodeMid mid, Node node, CallContext cc, SummaryCt
|
||||
pathIntoLocalStep(mid, midnode, cc, enclosing, sc, ap0, conf) and
|
||||
localCC = getLocalCallContext(cc, enclosing)
|
||||
|
|
||||
localFlowBigStep(midnode, node, true, conf, localCC) and
|
||||
localFlowBigStep(midnode, node, true, _, conf, localCC) and
|
||||
ap = ap0
|
||||
or
|
||||
localFlowBigStep(midnode, node, false, conf, localCC) and
|
||||
ap0 instanceof AccessPathNil and
|
||||
ap = any(AccessPathNilNode nil | nil.getNode() = node).getAp()
|
||||
localFlowBigStep(midnode, node, false, ap.(AccessPathNil).getType(), conf, localCC) and
|
||||
ap0 instanceof AccessPathNil
|
||||
)
|
||||
or
|
||||
jumpStep(mid.getNode(), node, mid.getConfiguration()) and
|
||||
@@ -2374,7 +2345,7 @@ private predicate pathStep(PathNodeMid mid, Node node, CallContext cc, SummaryCt
|
||||
cc instanceof CallContextAny and
|
||||
sc instanceof SummaryCtxNone and
|
||||
mid.getAp() instanceof AccessPathNil and
|
||||
ap = any(AccessPathNilNode nil | nil.getNode() = node).getAp()
|
||||
ap = TNil(getErasedNodeTypeBound(node))
|
||||
or
|
||||
exists(Content f, AccessPath ap0 | pathReadStep(mid, node, ap0, f, cc) and ap = pop(f, ap0)) and
|
||||
sc = mid.getSummaryCtx()
|
||||
@@ -2397,7 +2368,7 @@ private predicate pathIntoLocalStep(
|
||||
midnode = mid.getNode() and
|
||||
cc = mid.getCallContext() and
|
||||
conf = mid.getConfiguration() and
|
||||
localFlowBigStep(midnode, _, _, conf, _) and
|
||||
localFlowBigStep(midnode, _, _, _, conf, _) and
|
||||
enclosing = midnode.getEnclosingCallable() and
|
||||
sc = mid.getSummaryCtx() and
|
||||
ap0 = mid.getAp()
|
||||
|
||||
@@ -1307,15 +1307,20 @@ private predicate localFlowExit(Node node, Configuration config) {
|
||||
*/
|
||||
pragma[nomagic]
|
||||
private predicate localFlowStepPlus(
|
||||
Node node1, Node node2, boolean preservesValue, Configuration config, LocalCallContext cc
|
||||
Node node1, Node node2, boolean preservesValue, DataFlowType t, Configuration config,
|
||||
LocalCallContext cc
|
||||
) {
|
||||
not isUnreachableInCall(node2, cc.(LocalCallContextSpecificCall).getCall()) and
|
||||
(
|
||||
localFlowEntry(node1, config) and
|
||||
(
|
||||
localFlowStep(node1, node2, config) and preservesValue = true
|
||||
localFlowStep(node1, node2, config) and
|
||||
preservesValue = true and
|
||||
t = getErasedNodeTypeBound(node1)
|
||||
or
|
||||
additionalLocalFlowStep(node1, node2, config) and preservesValue = false
|
||||
additionalLocalFlowStep(node1, node2, config) and
|
||||
preservesValue = false and
|
||||
t = getErasedNodeTypeBound(node2)
|
||||
) and
|
||||
node1 != node2 and
|
||||
cc.relevantFor(node1.getEnclosingCallable()) and
|
||||
@@ -1323,17 +1328,18 @@ private predicate localFlowStepPlus(
|
||||
nodeCand(TNormalNode(node2), unbind(config))
|
||||
or
|
||||
exists(Node mid |
|
||||
localFlowStepPlus(node1, mid, preservesValue, config, cc) and
|
||||
localFlowStepPlus(node1, mid, preservesValue, t, config, cc) and
|
||||
localFlowStep(mid, node2, config) and
|
||||
not mid instanceof CastNode and
|
||||
nodeCand(TNormalNode(node2), unbind(config))
|
||||
)
|
||||
or
|
||||
exists(Node mid |
|
||||
localFlowStepPlus(node1, mid, _, config, cc) and
|
||||
localFlowStepPlus(node1, mid, _, _, config, cc) and
|
||||
additionalLocalFlowStep(mid, node2, config) and
|
||||
not mid instanceof CastNode and
|
||||
preservesValue = false and
|
||||
t = getErasedNodeTypeBound(node2) and
|
||||
nodeCand(TNormalNode(node2), unbind(config))
|
||||
)
|
||||
)
|
||||
@@ -1345,17 +1351,18 @@ private predicate localFlowStepPlus(
|
||||
*/
|
||||
pragma[nomagic]
|
||||
private predicate localFlowBigStep(
|
||||
Node node1, Node node2, boolean preservesValue, Configuration config, LocalCallContext callContext
|
||||
Node node1, Node node2, boolean preservesValue, DataFlowType t, Configuration config,
|
||||
LocalCallContext callContext
|
||||
) {
|
||||
localFlowStepPlus(node1, node2, preservesValue, config, callContext) and
|
||||
localFlowStepPlus(node1, node2, preservesValue, t, config, callContext) and
|
||||
localFlowExit(node2, config)
|
||||
}
|
||||
|
||||
pragma[nomagic]
|
||||
private predicate localFlowBigStepExt(
|
||||
NodeExt node1, NodeExt node2, boolean preservesValue, Configuration config
|
||||
NodeExt node1, NodeExt node2, boolean preservesValue, AccessPathFrontNil apf, Configuration config
|
||||
) {
|
||||
localFlowBigStep(node1.getNode(), node2.getNode(), preservesValue, config, _)
|
||||
localFlowBigStep(node1.getNode(), node2.getNode(), preservesValue, apf.getType(), config, _)
|
||||
}
|
||||
|
||||
private newtype TAccessPathFront =
|
||||
@@ -1395,46 +1402,24 @@ private predicate flowCandFwd(
|
||||
else any()
|
||||
}
|
||||
|
||||
/**
|
||||
* A node that requires an empty access path and should have its tracked type
|
||||
* (re-)computed. This is either a source or a node reached through an
|
||||
* additional step.
|
||||
*/
|
||||
private class AccessPathFrontNilNode extends NormalNodeExt {
|
||||
AccessPathFrontNilNode() {
|
||||
nodeCand(this, _) and
|
||||
(
|
||||
any(Configuration c).isSource(this.getNode())
|
||||
or
|
||||
localFlowBigStepExt(_, this, false, _)
|
||||
or
|
||||
additionalJumpStepExt(_, this, _)
|
||||
)
|
||||
}
|
||||
|
||||
/** Gets the `nil` path front for this node. */
|
||||
AccessPathFrontNil getApf() { result = TFrontNil(this.getErasedNodeTypeBound()) }
|
||||
}
|
||||
|
||||
private predicate flowCandFwd0(
|
||||
NodeExt node, boolean fromArg, AccessPathFront apf, Configuration config
|
||||
) {
|
||||
nodeCand2(node, _, false, config) and
|
||||
config.isSource(node.getNode()) and
|
||||
fromArg = false and
|
||||
apf = node.(AccessPathFrontNilNode).getApf()
|
||||
apf = TFrontNil(node.getErasedNodeTypeBound())
|
||||
or
|
||||
nodeCand(node, unbind(config)) and
|
||||
(
|
||||
exists(NodeExt mid |
|
||||
flowCandFwd(mid, fromArg, apf, config) and
|
||||
localFlowBigStepExt(mid, node, true, config)
|
||||
localFlowBigStepExt(mid, node, true, _, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathFrontNil nil |
|
||||
flowCandFwd(mid, fromArg, nil, config) and
|
||||
localFlowBigStepExt(mid, node, false, config) and
|
||||
apf = node.(AccessPathFrontNilNode).getApf()
|
||||
localFlowBigStepExt(mid, node, false, apf, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid |
|
||||
@@ -1447,7 +1432,7 @@ private predicate flowCandFwd0(
|
||||
flowCandFwd(mid, _, nil, config) and
|
||||
additionalJumpStepExt(mid, node, config) and
|
||||
fromArg = false and
|
||||
apf = node.(AccessPathFrontNilNode).getApf()
|
||||
apf = TFrontNil(node.getErasedNodeTypeBound())
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, boolean allowsFieldFlow |
|
||||
@@ -1589,13 +1574,13 @@ private predicate flowCand0(
|
||||
apf instanceof AccessPathFrontNil
|
||||
or
|
||||
exists(NodeExt mid |
|
||||
localFlowBigStepExt(node, mid, true, config) and
|
||||
localFlowBigStepExt(node, mid, true, _, config) and
|
||||
flowCand(mid, toReturn, apf, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathFrontNil nil |
|
||||
flowCandFwd(node, _, apf, config) and
|
||||
localFlowBigStepExt(node, mid, false, config) and
|
||||
localFlowBigStepExt(node, mid, false, _, config) and
|
||||
flowCand(mid, toReturn, nil, config) and
|
||||
apf instanceof AccessPathFrontNil
|
||||
)
|
||||
@@ -1810,18 +1795,6 @@ private predicate popWithFront(AccessPath ap0, Content f, AccessPathFront apf, A
|
||||
/** Gets the access path obtained by pushing `f` onto `ap`. */
|
||||
private AccessPath push(Content f, AccessPath ap) { ap = pop(f, result) }
|
||||
|
||||
/**
|
||||
* A node that requires an empty access path and should have its tracked type
|
||||
* (re-)computed. This is either a source or a node reached through an
|
||||
* additional step.
|
||||
*/
|
||||
private class AccessPathNilNode extends NormalNodeExt {
|
||||
AccessPathNilNode() { flowCand(this.(AccessPathFrontNilNode), _, _, _) }
|
||||
|
||||
/** Gets the `nil` path for this node. */
|
||||
AccessPathNil getAp() { result = TNil(this.getErasedNodeTypeBound()) }
|
||||
}
|
||||
|
||||
/**
|
||||
* Holds if data can flow from a source to `node` with the given `ap`.
|
||||
*/
|
||||
@@ -1838,20 +1811,19 @@ private predicate flowFwd0(
|
||||
flowCand(node, _, _, config) and
|
||||
config.isSource(node.getNode()) and
|
||||
fromArg = false and
|
||||
ap = node.(AccessPathNilNode).getAp() and
|
||||
ap = TNil(node.getErasedNodeTypeBound()) and
|
||||
apf = ap.(AccessPathNil).getFront()
|
||||
or
|
||||
flowCand(node, _, _, unbind(config)) and
|
||||
(
|
||||
exists(NodeExt mid |
|
||||
flowFwd(mid, fromArg, apf, ap, config) and
|
||||
localFlowBigStepExt(mid, node, true, config)
|
||||
localFlowBigStepExt(mid, node, true, _, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathNil nil |
|
||||
flowFwd(mid, fromArg, _, nil, config) and
|
||||
localFlowBigStepExt(mid, node, false, config) and
|
||||
ap = node.(AccessPathNilNode).getAp() and
|
||||
localFlowBigStepExt(mid, node, false, apf, config) and
|
||||
apf = ap.(AccessPathNil).getFront()
|
||||
)
|
||||
or
|
||||
@@ -1865,7 +1837,7 @@ private predicate flowFwd0(
|
||||
flowFwd(mid, _, _, nil, config) and
|
||||
additionalJumpStepExt(mid, node, config) and
|
||||
fromArg = false and
|
||||
ap = node.(AccessPathNilNode).getAp() and
|
||||
ap = TNil(node.getErasedNodeTypeBound()) and
|
||||
apf = ap.(AccessPathNil).getFront()
|
||||
)
|
||||
or
|
||||
@@ -1982,13 +1954,13 @@ private predicate flow0(NodeExt node, boolean toReturn, AccessPath ap, Configura
|
||||
ap instanceof AccessPathNil
|
||||
or
|
||||
exists(NodeExt mid |
|
||||
localFlowBigStepExt(node, mid, true, config) and
|
||||
localFlowBigStepExt(node, mid, true, _, config) and
|
||||
flow(mid, toReturn, ap, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathNil nil |
|
||||
flowFwd(node, _, _, ap, config) and
|
||||
localFlowBigStepExt(node, mid, false, config) and
|
||||
localFlowBigStepExt(node, mid, false, _, config) and
|
||||
flow(mid, toReturn, nil, config) and
|
||||
ap instanceof AccessPathNil
|
||||
)
|
||||
@@ -2164,7 +2136,7 @@ private newtype TPathNode =
|
||||
config.isSource(node) and
|
||||
cc instanceof CallContextAny and
|
||||
sc instanceof SummaryCtxNone and
|
||||
ap = any(AccessPathNilNode nil | nil.getNode() = node).getAp()
|
||||
ap = TNil(getErasedNodeTypeBound(node))
|
||||
or
|
||||
// ... or a step from an existing PathNode to another node.
|
||||
exists(PathNodeMid mid |
|
||||
@@ -2357,12 +2329,11 @@ private predicate pathStep(PathNodeMid mid, Node node, CallContext cc, SummaryCt
|
||||
pathIntoLocalStep(mid, midnode, cc, enclosing, sc, ap0, conf) and
|
||||
localCC = getLocalCallContext(cc, enclosing)
|
||||
|
|
||||
localFlowBigStep(midnode, node, true, conf, localCC) and
|
||||
localFlowBigStep(midnode, node, true, _, conf, localCC) and
|
||||
ap = ap0
|
||||
or
|
||||
localFlowBigStep(midnode, node, false, conf, localCC) and
|
||||
ap0 instanceof AccessPathNil and
|
||||
ap = any(AccessPathNilNode nil | nil.getNode() = node).getAp()
|
||||
localFlowBigStep(midnode, node, false, ap.(AccessPathNil).getType(), conf, localCC) and
|
||||
ap0 instanceof AccessPathNil
|
||||
)
|
||||
or
|
||||
jumpStep(mid.getNode(), node, mid.getConfiguration()) and
|
||||
@@ -2374,7 +2345,7 @@ private predicate pathStep(PathNodeMid mid, Node node, CallContext cc, SummaryCt
|
||||
cc instanceof CallContextAny and
|
||||
sc instanceof SummaryCtxNone and
|
||||
mid.getAp() instanceof AccessPathNil and
|
||||
ap = any(AccessPathNilNode nil | nil.getNode() = node).getAp()
|
||||
ap = TNil(getErasedNodeTypeBound(node))
|
||||
or
|
||||
exists(Content f, AccessPath ap0 | pathReadStep(mid, node, ap0, f, cc) and ap = pop(f, ap0)) and
|
||||
sc = mid.getSummaryCtx()
|
||||
@@ -2397,7 +2368,7 @@ private predicate pathIntoLocalStep(
|
||||
midnode = mid.getNode() and
|
||||
cc = mid.getCallContext() and
|
||||
conf = mid.getConfiguration() and
|
||||
localFlowBigStep(midnode, _, _, conf, _) and
|
||||
localFlowBigStep(midnode, _, _, _, conf, _) and
|
||||
enclosing = midnode.getEnclosingCallable() and
|
||||
sc = mid.getSummaryCtx() and
|
||||
ap0 = mid.getAp()
|
||||
|
||||
@@ -1307,15 +1307,20 @@ private predicate localFlowExit(Node node, Configuration config) {
|
||||
*/
|
||||
pragma[nomagic]
|
||||
private predicate localFlowStepPlus(
|
||||
Node node1, Node node2, boolean preservesValue, Configuration config, LocalCallContext cc
|
||||
Node node1, Node node2, boolean preservesValue, DataFlowType t, Configuration config,
|
||||
LocalCallContext cc
|
||||
) {
|
||||
not isUnreachableInCall(node2, cc.(LocalCallContextSpecificCall).getCall()) and
|
||||
(
|
||||
localFlowEntry(node1, config) and
|
||||
(
|
||||
localFlowStep(node1, node2, config) and preservesValue = true
|
||||
localFlowStep(node1, node2, config) and
|
||||
preservesValue = true and
|
||||
t = getErasedNodeTypeBound(node1)
|
||||
or
|
||||
additionalLocalFlowStep(node1, node2, config) and preservesValue = false
|
||||
additionalLocalFlowStep(node1, node2, config) and
|
||||
preservesValue = false and
|
||||
t = getErasedNodeTypeBound(node2)
|
||||
) and
|
||||
node1 != node2 and
|
||||
cc.relevantFor(node1.getEnclosingCallable()) and
|
||||
@@ -1323,17 +1328,18 @@ private predicate localFlowStepPlus(
|
||||
nodeCand(TNormalNode(node2), unbind(config))
|
||||
or
|
||||
exists(Node mid |
|
||||
localFlowStepPlus(node1, mid, preservesValue, config, cc) and
|
||||
localFlowStepPlus(node1, mid, preservesValue, t, config, cc) and
|
||||
localFlowStep(mid, node2, config) and
|
||||
not mid instanceof CastNode and
|
||||
nodeCand(TNormalNode(node2), unbind(config))
|
||||
)
|
||||
or
|
||||
exists(Node mid |
|
||||
localFlowStepPlus(node1, mid, _, config, cc) and
|
||||
localFlowStepPlus(node1, mid, _, _, config, cc) and
|
||||
additionalLocalFlowStep(mid, node2, config) and
|
||||
not mid instanceof CastNode and
|
||||
preservesValue = false and
|
||||
t = getErasedNodeTypeBound(node2) and
|
||||
nodeCand(TNormalNode(node2), unbind(config))
|
||||
)
|
||||
)
|
||||
@@ -1345,17 +1351,18 @@ private predicate localFlowStepPlus(
|
||||
*/
|
||||
pragma[nomagic]
|
||||
private predicate localFlowBigStep(
|
||||
Node node1, Node node2, boolean preservesValue, Configuration config, LocalCallContext callContext
|
||||
Node node1, Node node2, boolean preservesValue, DataFlowType t, Configuration config,
|
||||
LocalCallContext callContext
|
||||
) {
|
||||
localFlowStepPlus(node1, node2, preservesValue, config, callContext) and
|
||||
localFlowStepPlus(node1, node2, preservesValue, t, config, callContext) and
|
||||
localFlowExit(node2, config)
|
||||
}
|
||||
|
||||
pragma[nomagic]
|
||||
private predicate localFlowBigStepExt(
|
||||
NodeExt node1, NodeExt node2, boolean preservesValue, Configuration config
|
||||
NodeExt node1, NodeExt node2, boolean preservesValue, AccessPathFrontNil apf, Configuration config
|
||||
) {
|
||||
localFlowBigStep(node1.getNode(), node2.getNode(), preservesValue, config, _)
|
||||
localFlowBigStep(node1.getNode(), node2.getNode(), preservesValue, apf.getType(), config, _)
|
||||
}
|
||||
|
||||
private newtype TAccessPathFront =
|
||||
@@ -1395,46 +1402,24 @@ private predicate flowCandFwd(
|
||||
else any()
|
||||
}
|
||||
|
||||
/**
|
||||
* A node that requires an empty access path and should have its tracked type
|
||||
* (re-)computed. This is either a source or a node reached through an
|
||||
* additional step.
|
||||
*/
|
||||
private class AccessPathFrontNilNode extends NormalNodeExt {
|
||||
AccessPathFrontNilNode() {
|
||||
nodeCand(this, _) and
|
||||
(
|
||||
any(Configuration c).isSource(this.getNode())
|
||||
or
|
||||
localFlowBigStepExt(_, this, false, _)
|
||||
or
|
||||
additionalJumpStepExt(_, this, _)
|
||||
)
|
||||
}
|
||||
|
||||
/** Gets the `nil` path front for this node. */
|
||||
AccessPathFrontNil getApf() { result = TFrontNil(this.getErasedNodeTypeBound()) }
|
||||
}
|
||||
|
||||
private predicate flowCandFwd0(
|
||||
NodeExt node, boolean fromArg, AccessPathFront apf, Configuration config
|
||||
) {
|
||||
nodeCand2(node, _, false, config) and
|
||||
config.isSource(node.getNode()) and
|
||||
fromArg = false and
|
||||
apf = node.(AccessPathFrontNilNode).getApf()
|
||||
apf = TFrontNil(node.getErasedNodeTypeBound())
|
||||
or
|
||||
nodeCand(node, unbind(config)) and
|
||||
(
|
||||
exists(NodeExt mid |
|
||||
flowCandFwd(mid, fromArg, apf, config) and
|
||||
localFlowBigStepExt(mid, node, true, config)
|
||||
localFlowBigStepExt(mid, node, true, _, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathFrontNil nil |
|
||||
flowCandFwd(mid, fromArg, nil, config) and
|
||||
localFlowBigStepExt(mid, node, false, config) and
|
||||
apf = node.(AccessPathFrontNilNode).getApf()
|
||||
localFlowBigStepExt(mid, node, false, apf, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid |
|
||||
@@ -1447,7 +1432,7 @@ private predicate flowCandFwd0(
|
||||
flowCandFwd(mid, _, nil, config) and
|
||||
additionalJumpStepExt(mid, node, config) and
|
||||
fromArg = false and
|
||||
apf = node.(AccessPathFrontNilNode).getApf()
|
||||
apf = TFrontNil(node.getErasedNodeTypeBound())
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, boolean allowsFieldFlow |
|
||||
@@ -1589,13 +1574,13 @@ private predicate flowCand0(
|
||||
apf instanceof AccessPathFrontNil
|
||||
or
|
||||
exists(NodeExt mid |
|
||||
localFlowBigStepExt(node, mid, true, config) and
|
||||
localFlowBigStepExt(node, mid, true, _, config) and
|
||||
flowCand(mid, toReturn, apf, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathFrontNil nil |
|
||||
flowCandFwd(node, _, apf, config) and
|
||||
localFlowBigStepExt(node, mid, false, config) and
|
||||
localFlowBigStepExt(node, mid, false, _, config) and
|
||||
flowCand(mid, toReturn, nil, config) and
|
||||
apf instanceof AccessPathFrontNil
|
||||
)
|
||||
@@ -1810,18 +1795,6 @@ private predicate popWithFront(AccessPath ap0, Content f, AccessPathFront apf, A
|
||||
/** Gets the access path obtained by pushing `f` onto `ap`. */
|
||||
private AccessPath push(Content f, AccessPath ap) { ap = pop(f, result) }
|
||||
|
||||
/**
|
||||
* A node that requires an empty access path and should have its tracked type
|
||||
* (re-)computed. This is either a source or a node reached through an
|
||||
* additional step.
|
||||
*/
|
||||
private class AccessPathNilNode extends NormalNodeExt {
|
||||
AccessPathNilNode() { flowCand(this.(AccessPathFrontNilNode), _, _, _) }
|
||||
|
||||
/** Gets the `nil` path for this node. */
|
||||
AccessPathNil getAp() { result = TNil(this.getErasedNodeTypeBound()) }
|
||||
}
|
||||
|
||||
/**
|
||||
* Holds if data can flow from a source to `node` with the given `ap`.
|
||||
*/
|
||||
@@ -1838,20 +1811,19 @@ private predicate flowFwd0(
|
||||
flowCand(node, _, _, config) and
|
||||
config.isSource(node.getNode()) and
|
||||
fromArg = false and
|
||||
ap = node.(AccessPathNilNode).getAp() and
|
||||
ap = TNil(node.getErasedNodeTypeBound()) and
|
||||
apf = ap.(AccessPathNil).getFront()
|
||||
or
|
||||
flowCand(node, _, _, unbind(config)) and
|
||||
(
|
||||
exists(NodeExt mid |
|
||||
flowFwd(mid, fromArg, apf, ap, config) and
|
||||
localFlowBigStepExt(mid, node, true, config)
|
||||
localFlowBigStepExt(mid, node, true, _, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathNil nil |
|
||||
flowFwd(mid, fromArg, _, nil, config) and
|
||||
localFlowBigStepExt(mid, node, false, config) and
|
||||
ap = node.(AccessPathNilNode).getAp() and
|
||||
localFlowBigStepExt(mid, node, false, apf, config) and
|
||||
apf = ap.(AccessPathNil).getFront()
|
||||
)
|
||||
or
|
||||
@@ -1865,7 +1837,7 @@ private predicate flowFwd0(
|
||||
flowFwd(mid, _, _, nil, config) and
|
||||
additionalJumpStepExt(mid, node, config) and
|
||||
fromArg = false and
|
||||
ap = node.(AccessPathNilNode).getAp() and
|
||||
ap = TNil(node.getErasedNodeTypeBound()) and
|
||||
apf = ap.(AccessPathNil).getFront()
|
||||
)
|
||||
or
|
||||
@@ -1982,13 +1954,13 @@ private predicate flow0(NodeExt node, boolean toReturn, AccessPath ap, Configura
|
||||
ap instanceof AccessPathNil
|
||||
or
|
||||
exists(NodeExt mid |
|
||||
localFlowBigStepExt(node, mid, true, config) and
|
||||
localFlowBigStepExt(node, mid, true, _, config) and
|
||||
flow(mid, toReturn, ap, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathNil nil |
|
||||
flowFwd(node, _, _, ap, config) and
|
||||
localFlowBigStepExt(node, mid, false, config) and
|
||||
localFlowBigStepExt(node, mid, false, _, config) and
|
||||
flow(mid, toReturn, nil, config) and
|
||||
ap instanceof AccessPathNil
|
||||
)
|
||||
@@ -2164,7 +2136,7 @@ private newtype TPathNode =
|
||||
config.isSource(node) and
|
||||
cc instanceof CallContextAny and
|
||||
sc instanceof SummaryCtxNone and
|
||||
ap = any(AccessPathNilNode nil | nil.getNode() = node).getAp()
|
||||
ap = TNil(getErasedNodeTypeBound(node))
|
||||
or
|
||||
// ... or a step from an existing PathNode to another node.
|
||||
exists(PathNodeMid mid |
|
||||
@@ -2357,12 +2329,11 @@ private predicate pathStep(PathNodeMid mid, Node node, CallContext cc, SummaryCt
|
||||
pathIntoLocalStep(mid, midnode, cc, enclosing, sc, ap0, conf) and
|
||||
localCC = getLocalCallContext(cc, enclosing)
|
||||
|
|
||||
localFlowBigStep(midnode, node, true, conf, localCC) and
|
||||
localFlowBigStep(midnode, node, true, _, conf, localCC) and
|
||||
ap = ap0
|
||||
or
|
||||
localFlowBigStep(midnode, node, false, conf, localCC) and
|
||||
ap0 instanceof AccessPathNil and
|
||||
ap = any(AccessPathNilNode nil | nil.getNode() = node).getAp()
|
||||
localFlowBigStep(midnode, node, false, ap.(AccessPathNil).getType(), conf, localCC) and
|
||||
ap0 instanceof AccessPathNil
|
||||
)
|
||||
or
|
||||
jumpStep(mid.getNode(), node, mid.getConfiguration()) and
|
||||
@@ -2374,7 +2345,7 @@ private predicate pathStep(PathNodeMid mid, Node node, CallContext cc, SummaryCt
|
||||
cc instanceof CallContextAny and
|
||||
sc instanceof SummaryCtxNone and
|
||||
mid.getAp() instanceof AccessPathNil and
|
||||
ap = any(AccessPathNilNode nil | nil.getNode() = node).getAp()
|
||||
ap = TNil(getErasedNodeTypeBound(node))
|
||||
or
|
||||
exists(Content f, AccessPath ap0 | pathReadStep(mid, node, ap0, f, cc) and ap = pop(f, ap0)) and
|
||||
sc = mid.getSummaryCtx()
|
||||
@@ -2397,7 +2368,7 @@ private predicate pathIntoLocalStep(
|
||||
midnode = mid.getNode() and
|
||||
cc = mid.getCallContext() and
|
||||
conf = mid.getConfiguration() and
|
||||
localFlowBigStep(midnode, _, _, conf, _) and
|
||||
localFlowBigStep(midnode, _, _, _, conf, _) and
|
||||
enclosing = midnode.getEnclosingCallable() and
|
||||
sc = mid.getSummaryCtx() and
|
||||
ap0 = mid.getAp()
|
||||
|
||||
@@ -1307,15 +1307,20 @@ private predicate localFlowExit(Node node, Configuration config) {
|
||||
*/
|
||||
pragma[nomagic]
|
||||
private predicate localFlowStepPlus(
|
||||
Node node1, Node node2, boolean preservesValue, Configuration config, LocalCallContext cc
|
||||
Node node1, Node node2, boolean preservesValue, DataFlowType t, Configuration config,
|
||||
LocalCallContext cc
|
||||
) {
|
||||
not isUnreachableInCall(node2, cc.(LocalCallContextSpecificCall).getCall()) and
|
||||
(
|
||||
localFlowEntry(node1, config) and
|
||||
(
|
||||
localFlowStep(node1, node2, config) and preservesValue = true
|
||||
localFlowStep(node1, node2, config) and
|
||||
preservesValue = true and
|
||||
t = getErasedNodeTypeBound(node1)
|
||||
or
|
||||
additionalLocalFlowStep(node1, node2, config) and preservesValue = false
|
||||
additionalLocalFlowStep(node1, node2, config) and
|
||||
preservesValue = false and
|
||||
t = getErasedNodeTypeBound(node2)
|
||||
) and
|
||||
node1 != node2 and
|
||||
cc.relevantFor(node1.getEnclosingCallable()) and
|
||||
@@ -1323,17 +1328,18 @@ private predicate localFlowStepPlus(
|
||||
nodeCand(TNormalNode(node2), unbind(config))
|
||||
or
|
||||
exists(Node mid |
|
||||
localFlowStepPlus(node1, mid, preservesValue, config, cc) and
|
||||
localFlowStepPlus(node1, mid, preservesValue, t, config, cc) and
|
||||
localFlowStep(mid, node2, config) and
|
||||
not mid instanceof CastNode and
|
||||
nodeCand(TNormalNode(node2), unbind(config))
|
||||
)
|
||||
or
|
||||
exists(Node mid |
|
||||
localFlowStepPlus(node1, mid, _, config, cc) and
|
||||
localFlowStepPlus(node1, mid, _, _, config, cc) and
|
||||
additionalLocalFlowStep(mid, node2, config) and
|
||||
not mid instanceof CastNode and
|
||||
preservesValue = false and
|
||||
t = getErasedNodeTypeBound(node2) and
|
||||
nodeCand(TNormalNode(node2), unbind(config))
|
||||
)
|
||||
)
|
||||
@@ -1345,17 +1351,18 @@ private predicate localFlowStepPlus(
|
||||
*/
|
||||
pragma[nomagic]
|
||||
private predicate localFlowBigStep(
|
||||
Node node1, Node node2, boolean preservesValue, Configuration config, LocalCallContext callContext
|
||||
Node node1, Node node2, boolean preservesValue, DataFlowType t, Configuration config,
|
||||
LocalCallContext callContext
|
||||
) {
|
||||
localFlowStepPlus(node1, node2, preservesValue, config, callContext) and
|
||||
localFlowStepPlus(node1, node2, preservesValue, t, config, callContext) and
|
||||
localFlowExit(node2, config)
|
||||
}
|
||||
|
||||
pragma[nomagic]
|
||||
private predicate localFlowBigStepExt(
|
||||
NodeExt node1, NodeExt node2, boolean preservesValue, Configuration config
|
||||
NodeExt node1, NodeExt node2, boolean preservesValue, AccessPathFrontNil apf, Configuration config
|
||||
) {
|
||||
localFlowBigStep(node1.getNode(), node2.getNode(), preservesValue, config, _)
|
||||
localFlowBigStep(node1.getNode(), node2.getNode(), preservesValue, apf.getType(), config, _)
|
||||
}
|
||||
|
||||
private newtype TAccessPathFront =
|
||||
@@ -1395,46 +1402,24 @@ private predicate flowCandFwd(
|
||||
else any()
|
||||
}
|
||||
|
||||
/**
|
||||
* A node that requires an empty access path and should have its tracked type
|
||||
* (re-)computed. This is either a source or a node reached through an
|
||||
* additional step.
|
||||
*/
|
||||
private class AccessPathFrontNilNode extends NormalNodeExt {
|
||||
AccessPathFrontNilNode() {
|
||||
nodeCand(this, _) and
|
||||
(
|
||||
any(Configuration c).isSource(this.getNode())
|
||||
or
|
||||
localFlowBigStepExt(_, this, false, _)
|
||||
or
|
||||
additionalJumpStepExt(_, this, _)
|
||||
)
|
||||
}
|
||||
|
||||
/** Gets the `nil` path front for this node. */
|
||||
AccessPathFrontNil getApf() { result = TFrontNil(this.getErasedNodeTypeBound()) }
|
||||
}
|
||||
|
||||
private predicate flowCandFwd0(
|
||||
NodeExt node, boolean fromArg, AccessPathFront apf, Configuration config
|
||||
) {
|
||||
nodeCand2(node, _, false, config) and
|
||||
config.isSource(node.getNode()) and
|
||||
fromArg = false and
|
||||
apf = node.(AccessPathFrontNilNode).getApf()
|
||||
apf = TFrontNil(node.getErasedNodeTypeBound())
|
||||
or
|
||||
nodeCand(node, unbind(config)) and
|
||||
(
|
||||
exists(NodeExt mid |
|
||||
flowCandFwd(mid, fromArg, apf, config) and
|
||||
localFlowBigStepExt(mid, node, true, config)
|
||||
localFlowBigStepExt(mid, node, true, _, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathFrontNil nil |
|
||||
flowCandFwd(mid, fromArg, nil, config) and
|
||||
localFlowBigStepExt(mid, node, false, config) and
|
||||
apf = node.(AccessPathFrontNilNode).getApf()
|
||||
localFlowBigStepExt(mid, node, false, apf, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid |
|
||||
@@ -1447,7 +1432,7 @@ private predicate flowCandFwd0(
|
||||
flowCandFwd(mid, _, nil, config) and
|
||||
additionalJumpStepExt(mid, node, config) and
|
||||
fromArg = false and
|
||||
apf = node.(AccessPathFrontNilNode).getApf()
|
||||
apf = TFrontNil(node.getErasedNodeTypeBound())
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, boolean allowsFieldFlow |
|
||||
@@ -1589,13 +1574,13 @@ private predicate flowCand0(
|
||||
apf instanceof AccessPathFrontNil
|
||||
or
|
||||
exists(NodeExt mid |
|
||||
localFlowBigStepExt(node, mid, true, config) and
|
||||
localFlowBigStepExt(node, mid, true, _, config) and
|
||||
flowCand(mid, toReturn, apf, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathFrontNil nil |
|
||||
flowCandFwd(node, _, apf, config) and
|
||||
localFlowBigStepExt(node, mid, false, config) and
|
||||
localFlowBigStepExt(node, mid, false, _, config) and
|
||||
flowCand(mid, toReturn, nil, config) and
|
||||
apf instanceof AccessPathFrontNil
|
||||
)
|
||||
@@ -1810,18 +1795,6 @@ private predicate popWithFront(AccessPath ap0, Content f, AccessPathFront apf, A
|
||||
/** Gets the access path obtained by pushing `f` onto `ap`. */
|
||||
private AccessPath push(Content f, AccessPath ap) { ap = pop(f, result) }
|
||||
|
||||
/**
|
||||
* A node that requires an empty access path and should have its tracked type
|
||||
* (re-)computed. This is either a source or a node reached through an
|
||||
* additional step.
|
||||
*/
|
||||
private class AccessPathNilNode extends NormalNodeExt {
|
||||
AccessPathNilNode() { flowCand(this.(AccessPathFrontNilNode), _, _, _) }
|
||||
|
||||
/** Gets the `nil` path for this node. */
|
||||
AccessPathNil getAp() { result = TNil(this.getErasedNodeTypeBound()) }
|
||||
}
|
||||
|
||||
/**
|
||||
* Holds if data can flow from a source to `node` with the given `ap`.
|
||||
*/
|
||||
@@ -1838,20 +1811,19 @@ private predicate flowFwd0(
|
||||
flowCand(node, _, _, config) and
|
||||
config.isSource(node.getNode()) and
|
||||
fromArg = false and
|
||||
ap = node.(AccessPathNilNode).getAp() and
|
||||
ap = TNil(node.getErasedNodeTypeBound()) and
|
||||
apf = ap.(AccessPathNil).getFront()
|
||||
or
|
||||
flowCand(node, _, _, unbind(config)) and
|
||||
(
|
||||
exists(NodeExt mid |
|
||||
flowFwd(mid, fromArg, apf, ap, config) and
|
||||
localFlowBigStepExt(mid, node, true, config)
|
||||
localFlowBigStepExt(mid, node, true, _, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathNil nil |
|
||||
flowFwd(mid, fromArg, _, nil, config) and
|
||||
localFlowBigStepExt(mid, node, false, config) and
|
||||
ap = node.(AccessPathNilNode).getAp() and
|
||||
localFlowBigStepExt(mid, node, false, apf, config) and
|
||||
apf = ap.(AccessPathNil).getFront()
|
||||
)
|
||||
or
|
||||
@@ -1865,7 +1837,7 @@ private predicate flowFwd0(
|
||||
flowFwd(mid, _, _, nil, config) and
|
||||
additionalJumpStepExt(mid, node, config) and
|
||||
fromArg = false and
|
||||
ap = node.(AccessPathNilNode).getAp() and
|
||||
ap = TNil(node.getErasedNodeTypeBound()) and
|
||||
apf = ap.(AccessPathNil).getFront()
|
||||
)
|
||||
or
|
||||
@@ -1982,13 +1954,13 @@ private predicate flow0(NodeExt node, boolean toReturn, AccessPath ap, Configura
|
||||
ap instanceof AccessPathNil
|
||||
or
|
||||
exists(NodeExt mid |
|
||||
localFlowBigStepExt(node, mid, true, config) and
|
||||
localFlowBigStepExt(node, mid, true, _, config) and
|
||||
flow(mid, toReturn, ap, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathNil nil |
|
||||
flowFwd(node, _, _, ap, config) and
|
||||
localFlowBigStepExt(node, mid, false, config) and
|
||||
localFlowBigStepExt(node, mid, false, _, config) and
|
||||
flow(mid, toReturn, nil, config) and
|
||||
ap instanceof AccessPathNil
|
||||
)
|
||||
@@ -2164,7 +2136,7 @@ private newtype TPathNode =
|
||||
config.isSource(node) and
|
||||
cc instanceof CallContextAny and
|
||||
sc instanceof SummaryCtxNone and
|
||||
ap = any(AccessPathNilNode nil | nil.getNode() = node).getAp()
|
||||
ap = TNil(getErasedNodeTypeBound(node))
|
||||
or
|
||||
// ... or a step from an existing PathNode to another node.
|
||||
exists(PathNodeMid mid |
|
||||
@@ -2357,12 +2329,11 @@ private predicate pathStep(PathNodeMid mid, Node node, CallContext cc, SummaryCt
|
||||
pathIntoLocalStep(mid, midnode, cc, enclosing, sc, ap0, conf) and
|
||||
localCC = getLocalCallContext(cc, enclosing)
|
||||
|
|
||||
localFlowBigStep(midnode, node, true, conf, localCC) and
|
||||
localFlowBigStep(midnode, node, true, _, conf, localCC) and
|
||||
ap = ap0
|
||||
or
|
||||
localFlowBigStep(midnode, node, false, conf, localCC) and
|
||||
ap0 instanceof AccessPathNil and
|
||||
ap = any(AccessPathNilNode nil | nil.getNode() = node).getAp()
|
||||
localFlowBigStep(midnode, node, false, ap.(AccessPathNil).getType(), conf, localCC) and
|
||||
ap0 instanceof AccessPathNil
|
||||
)
|
||||
or
|
||||
jumpStep(mid.getNode(), node, mid.getConfiguration()) and
|
||||
@@ -2374,7 +2345,7 @@ private predicate pathStep(PathNodeMid mid, Node node, CallContext cc, SummaryCt
|
||||
cc instanceof CallContextAny and
|
||||
sc instanceof SummaryCtxNone and
|
||||
mid.getAp() instanceof AccessPathNil and
|
||||
ap = any(AccessPathNilNode nil | nil.getNode() = node).getAp()
|
||||
ap = TNil(getErasedNodeTypeBound(node))
|
||||
or
|
||||
exists(Content f, AccessPath ap0 | pathReadStep(mid, node, ap0, f, cc) and ap = pop(f, ap0)) and
|
||||
sc = mid.getSummaryCtx()
|
||||
@@ -2397,7 +2368,7 @@ private predicate pathIntoLocalStep(
|
||||
midnode = mid.getNode() and
|
||||
cc = mid.getCallContext() and
|
||||
conf = mid.getConfiguration() and
|
||||
localFlowBigStep(midnode, _, _, conf, _) and
|
||||
localFlowBigStep(midnode, _, _, _, conf, _) and
|
||||
enclosing = midnode.getEnclosingCallable() and
|
||||
sc = mid.getSummaryCtx() and
|
||||
ap0 = mid.getAp()
|
||||
|
||||
@@ -1307,15 +1307,20 @@ private predicate localFlowExit(Node node, Configuration config) {
|
||||
*/
|
||||
pragma[nomagic]
|
||||
private predicate localFlowStepPlus(
|
||||
Node node1, Node node2, boolean preservesValue, Configuration config, LocalCallContext cc
|
||||
Node node1, Node node2, boolean preservesValue, DataFlowType t, Configuration config,
|
||||
LocalCallContext cc
|
||||
) {
|
||||
not isUnreachableInCall(node2, cc.(LocalCallContextSpecificCall).getCall()) and
|
||||
(
|
||||
localFlowEntry(node1, config) and
|
||||
(
|
||||
localFlowStep(node1, node2, config) and preservesValue = true
|
||||
localFlowStep(node1, node2, config) and
|
||||
preservesValue = true and
|
||||
t = getErasedNodeTypeBound(node1)
|
||||
or
|
||||
additionalLocalFlowStep(node1, node2, config) and preservesValue = false
|
||||
additionalLocalFlowStep(node1, node2, config) and
|
||||
preservesValue = false and
|
||||
t = getErasedNodeTypeBound(node2)
|
||||
) and
|
||||
node1 != node2 and
|
||||
cc.relevantFor(node1.getEnclosingCallable()) and
|
||||
@@ -1323,17 +1328,18 @@ private predicate localFlowStepPlus(
|
||||
nodeCand(TNormalNode(node2), unbind(config))
|
||||
or
|
||||
exists(Node mid |
|
||||
localFlowStepPlus(node1, mid, preservesValue, config, cc) and
|
||||
localFlowStepPlus(node1, mid, preservesValue, t, config, cc) and
|
||||
localFlowStep(mid, node2, config) and
|
||||
not mid instanceof CastNode and
|
||||
nodeCand(TNormalNode(node2), unbind(config))
|
||||
)
|
||||
or
|
||||
exists(Node mid |
|
||||
localFlowStepPlus(node1, mid, _, config, cc) and
|
||||
localFlowStepPlus(node1, mid, _, _, config, cc) and
|
||||
additionalLocalFlowStep(mid, node2, config) and
|
||||
not mid instanceof CastNode and
|
||||
preservesValue = false and
|
||||
t = getErasedNodeTypeBound(node2) and
|
||||
nodeCand(TNormalNode(node2), unbind(config))
|
||||
)
|
||||
)
|
||||
@@ -1345,17 +1351,18 @@ private predicate localFlowStepPlus(
|
||||
*/
|
||||
pragma[nomagic]
|
||||
private predicate localFlowBigStep(
|
||||
Node node1, Node node2, boolean preservesValue, Configuration config, LocalCallContext callContext
|
||||
Node node1, Node node2, boolean preservesValue, DataFlowType t, Configuration config,
|
||||
LocalCallContext callContext
|
||||
) {
|
||||
localFlowStepPlus(node1, node2, preservesValue, config, callContext) and
|
||||
localFlowStepPlus(node1, node2, preservesValue, t, config, callContext) and
|
||||
localFlowExit(node2, config)
|
||||
}
|
||||
|
||||
pragma[nomagic]
|
||||
private predicate localFlowBigStepExt(
|
||||
NodeExt node1, NodeExt node2, boolean preservesValue, Configuration config
|
||||
NodeExt node1, NodeExt node2, boolean preservesValue, AccessPathFrontNil apf, Configuration config
|
||||
) {
|
||||
localFlowBigStep(node1.getNode(), node2.getNode(), preservesValue, config, _)
|
||||
localFlowBigStep(node1.getNode(), node2.getNode(), preservesValue, apf.getType(), config, _)
|
||||
}
|
||||
|
||||
private newtype TAccessPathFront =
|
||||
@@ -1395,46 +1402,24 @@ private predicate flowCandFwd(
|
||||
else any()
|
||||
}
|
||||
|
||||
/**
|
||||
* A node that requires an empty access path and should have its tracked type
|
||||
* (re-)computed. This is either a source or a node reached through an
|
||||
* additional step.
|
||||
*/
|
||||
private class AccessPathFrontNilNode extends NormalNodeExt {
|
||||
AccessPathFrontNilNode() {
|
||||
nodeCand(this, _) and
|
||||
(
|
||||
any(Configuration c).isSource(this.getNode())
|
||||
or
|
||||
localFlowBigStepExt(_, this, false, _)
|
||||
or
|
||||
additionalJumpStepExt(_, this, _)
|
||||
)
|
||||
}
|
||||
|
||||
/** Gets the `nil` path front for this node. */
|
||||
AccessPathFrontNil getApf() { result = TFrontNil(this.getErasedNodeTypeBound()) }
|
||||
}
|
||||
|
||||
private predicate flowCandFwd0(
|
||||
NodeExt node, boolean fromArg, AccessPathFront apf, Configuration config
|
||||
) {
|
||||
nodeCand2(node, _, false, config) and
|
||||
config.isSource(node.getNode()) and
|
||||
fromArg = false and
|
||||
apf = node.(AccessPathFrontNilNode).getApf()
|
||||
apf = TFrontNil(node.getErasedNodeTypeBound())
|
||||
or
|
||||
nodeCand(node, unbind(config)) and
|
||||
(
|
||||
exists(NodeExt mid |
|
||||
flowCandFwd(mid, fromArg, apf, config) and
|
||||
localFlowBigStepExt(mid, node, true, config)
|
||||
localFlowBigStepExt(mid, node, true, _, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathFrontNil nil |
|
||||
flowCandFwd(mid, fromArg, nil, config) and
|
||||
localFlowBigStepExt(mid, node, false, config) and
|
||||
apf = node.(AccessPathFrontNilNode).getApf()
|
||||
localFlowBigStepExt(mid, node, false, apf, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid |
|
||||
@@ -1447,7 +1432,7 @@ private predicate flowCandFwd0(
|
||||
flowCandFwd(mid, _, nil, config) and
|
||||
additionalJumpStepExt(mid, node, config) and
|
||||
fromArg = false and
|
||||
apf = node.(AccessPathFrontNilNode).getApf()
|
||||
apf = TFrontNil(node.getErasedNodeTypeBound())
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, boolean allowsFieldFlow |
|
||||
@@ -1589,13 +1574,13 @@ private predicate flowCand0(
|
||||
apf instanceof AccessPathFrontNil
|
||||
or
|
||||
exists(NodeExt mid |
|
||||
localFlowBigStepExt(node, mid, true, config) and
|
||||
localFlowBigStepExt(node, mid, true, _, config) and
|
||||
flowCand(mid, toReturn, apf, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathFrontNil nil |
|
||||
flowCandFwd(node, _, apf, config) and
|
||||
localFlowBigStepExt(node, mid, false, config) and
|
||||
localFlowBigStepExt(node, mid, false, _, config) and
|
||||
flowCand(mid, toReturn, nil, config) and
|
||||
apf instanceof AccessPathFrontNil
|
||||
)
|
||||
@@ -1810,18 +1795,6 @@ private predicate popWithFront(AccessPath ap0, Content f, AccessPathFront apf, A
|
||||
/** Gets the access path obtained by pushing `f` onto `ap`. */
|
||||
private AccessPath push(Content f, AccessPath ap) { ap = pop(f, result) }
|
||||
|
||||
/**
|
||||
* A node that requires an empty access path and should have its tracked type
|
||||
* (re-)computed. This is either a source or a node reached through an
|
||||
* additional step.
|
||||
*/
|
||||
private class AccessPathNilNode extends NormalNodeExt {
|
||||
AccessPathNilNode() { flowCand(this.(AccessPathFrontNilNode), _, _, _) }
|
||||
|
||||
/** Gets the `nil` path for this node. */
|
||||
AccessPathNil getAp() { result = TNil(this.getErasedNodeTypeBound()) }
|
||||
}
|
||||
|
||||
/**
|
||||
* Holds if data can flow from a source to `node` with the given `ap`.
|
||||
*/
|
||||
@@ -1838,20 +1811,19 @@ private predicate flowFwd0(
|
||||
flowCand(node, _, _, config) and
|
||||
config.isSource(node.getNode()) and
|
||||
fromArg = false and
|
||||
ap = node.(AccessPathNilNode).getAp() and
|
||||
ap = TNil(node.getErasedNodeTypeBound()) and
|
||||
apf = ap.(AccessPathNil).getFront()
|
||||
or
|
||||
flowCand(node, _, _, unbind(config)) and
|
||||
(
|
||||
exists(NodeExt mid |
|
||||
flowFwd(mid, fromArg, apf, ap, config) and
|
||||
localFlowBigStepExt(mid, node, true, config)
|
||||
localFlowBigStepExt(mid, node, true, _, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathNil nil |
|
||||
flowFwd(mid, fromArg, _, nil, config) and
|
||||
localFlowBigStepExt(mid, node, false, config) and
|
||||
ap = node.(AccessPathNilNode).getAp() and
|
||||
localFlowBigStepExt(mid, node, false, apf, config) and
|
||||
apf = ap.(AccessPathNil).getFront()
|
||||
)
|
||||
or
|
||||
@@ -1865,7 +1837,7 @@ private predicate flowFwd0(
|
||||
flowFwd(mid, _, _, nil, config) and
|
||||
additionalJumpStepExt(mid, node, config) and
|
||||
fromArg = false and
|
||||
ap = node.(AccessPathNilNode).getAp() and
|
||||
ap = TNil(node.getErasedNodeTypeBound()) and
|
||||
apf = ap.(AccessPathNil).getFront()
|
||||
)
|
||||
or
|
||||
@@ -1982,13 +1954,13 @@ private predicate flow0(NodeExt node, boolean toReturn, AccessPath ap, Configura
|
||||
ap instanceof AccessPathNil
|
||||
or
|
||||
exists(NodeExt mid |
|
||||
localFlowBigStepExt(node, mid, true, config) and
|
||||
localFlowBigStepExt(node, mid, true, _, config) and
|
||||
flow(mid, toReturn, ap, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathNil nil |
|
||||
flowFwd(node, _, _, ap, config) and
|
||||
localFlowBigStepExt(node, mid, false, config) and
|
||||
localFlowBigStepExt(node, mid, false, _, config) and
|
||||
flow(mid, toReturn, nil, config) and
|
||||
ap instanceof AccessPathNil
|
||||
)
|
||||
@@ -2164,7 +2136,7 @@ private newtype TPathNode =
|
||||
config.isSource(node) and
|
||||
cc instanceof CallContextAny and
|
||||
sc instanceof SummaryCtxNone and
|
||||
ap = any(AccessPathNilNode nil | nil.getNode() = node).getAp()
|
||||
ap = TNil(getErasedNodeTypeBound(node))
|
||||
or
|
||||
// ... or a step from an existing PathNode to another node.
|
||||
exists(PathNodeMid mid |
|
||||
@@ -2357,12 +2329,11 @@ private predicate pathStep(PathNodeMid mid, Node node, CallContext cc, SummaryCt
|
||||
pathIntoLocalStep(mid, midnode, cc, enclosing, sc, ap0, conf) and
|
||||
localCC = getLocalCallContext(cc, enclosing)
|
||||
|
|
||||
localFlowBigStep(midnode, node, true, conf, localCC) and
|
||||
localFlowBigStep(midnode, node, true, _, conf, localCC) and
|
||||
ap = ap0
|
||||
or
|
||||
localFlowBigStep(midnode, node, false, conf, localCC) and
|
||||
ap0 instanceof AccessPathNil and
|
||||
ap = any(AccessPathNilNode nil | nil.getNode() = node).getAp()
|
||||
localFlowBigStep(midnode, node, false, ap.(AccessPathNil).getType(), conf, localCC) and
|
||||
ap0 instanceof AccessPathNil
|
||||
)
|
||||
or
|
||||
jumpStep(mid.getNode(), node, mid.getConfiguration()) and
|
||||
@@ -2374,7 +2345,7 @@ private predicate pathStep(PathNodeMid mid, Node node, CallContext cc, SummaryCt
|
||||
cc instanceof CallContextAny and
|
||||
sc instanceof SummaryCtxNone and
|
||||
mid.getAp() instanceof AccessPathNil and
|
||||
ap = any(AccessPathNilNode nil | nil.getNode() = node).getAp()
|
||||
ap = TNil(getErasedNodeTypeBound(node))
|
||||
or
|
||||
exists(Content f, AccessPath ap0 | pathReadStep(mid, node, ap0, f, cc) and ap = pop(f, ap0)) and
|
||||
sc = mid.getSummaryCtx()
|
||||
@@ -2397,7 +2368,7 @@ private predicate pathIntoLocalStep(
|
||||
midnode = mid.getNode() and
|
||||
cc = mid.getCallContext() and
|
||||
conf = mid.getConfiguration() and
|
||||
localFlowBigStep(midnode, _, _, conf, _) and
|
||||
localFlowBigStep(midnode, _, _, _, conf, _) and
|
||||
enclosing = midnode.getEnclosingCallable() and
|
||||
sc = mid.getSummaryCtx() and
|
||||
ap0 = mid.getAp()
|
||||
|
||||
@@ -1307,15 +1307,20 @@ private predicate localFlowExit(Node node, Configuration config) {
|
||||
*/
|
||||
pragma[nomagic]
|
||||
private predicate localFlowStepPlus(
|
||||
Node node1, Node node2, boolean preservesValue, Configuration config, LocalCallContext cc
|
||||
Node node1, Node node2, boolean preservesValue, DataFlowType t, Configuration config,
|
||||
LocalCallContext cc
|
||||
) {
|
||||
not isUnreachableInCall(node2, cc.(LocalCallContextSpecificCall).getCall()) and
|
||||
(
|
||||
localFlowEntry(node1, config) and
|
||||
(
|
||||
localFlowStep(node1, node2, config) and preservesValue = true
|
||||
localFlowStep(node1, node2, config) and
|
||||
preservesValue = true and
|
||||
t = getErasedNodeTypeBound(node1)
|
||||
or
|
||||
additionalLocalFlowStep(node1, node2, config) and preservesValue = false
|
||||
additionalLocalFlowStep(node1, node2, config) and
|
||||
preservesValue = false and
|
||||
t = getErasedNodeTypeBound(node2)
|
||||
) and
|
||||
node1 != node2 and
|
||||
cc.relevantFor(node1.getEnclosingCallable()) and
|
||||
@@ -1323,17 +1328,18 @@ private predicate localFlowStepPlus(
|
||||
nodeCand(TNormalNode(node2), unbind(config))
|
||||
or
|
||||
exists(Node mid |
|
||||
localFlowStepPlus(node1, mid, preservesValue, config, cc) and
|
||||
localFlowStepPlus(node1, mid, preservesValue, t, config, cc) and
|
||||
localFlowStep(mid, node2, config) and
|
||||
not mid instanceof CastNode and
|
||||
nodeCand(TNormalNode(node2), unbind(config))
|
||||
)
|
||||
or
|
||||
exists(Node mid |
|
||||
localFlowStepPlus(node1, mid, _, config, cc) and
|
||||
localFlowStepPlus(node1, mid, _, _, config, cc) and
|
||||
additionalLocalFlowStep(mid, node2, config) and
|
||||
not mid instanceof CastNode and
|
||||
preservesValue = false and
|
||||
t = getErasedNodeTypeBound(node2) and
|
||||
nodeCand(TNormalNode(node2), unbind(config))
|
||||
)
|
||||
)
|
||||
@@ -1345,17 +1351,18 @@ private predicate localFlowStepPlus(
|
||||
*/
|
||||
pragma[nomagic]
|
||||
private predicate localFlowBigStep(
|
||||
Node node1, Node node2, boolean preservesValue, Configuration config, LocalCallContext callContext
|
||||
Node node1, Node node2, boolean preservesValue, DataFlowType t, Configuration config,
|
||||
LocalCallContext callContext
|
||||
) {
|
||||
localFlowStepPlus(node1, node2, preservesValue, config, callContext) and
|
||||
localFlowStepPlus(node1, node2, preservesValue, t, config, callContext) and
|
||||
localFlowExit(node2, config)
|
||||
}
|
||||
|
||||
pragma[nomagic]
|
||||
private predicate localFlowBigStepExt(
|
||||
NodeExt node1, NodeExt node2, boolean preservesValue, Configuration config
|
||||
NodeExt node1, NodeExt node2, boolean preservesValue, AccessPathFrontNil apf, Configuration config
|
||||
) {
|
||||
localFlowBigStep(node1.getNode(), node2.getNode(), preservesValue, config, _)
|
||||
localFlowBigStep(node1.getNode(), node2.getNode(), preservesValue, apf.getType(), config, _)
|
||||
}
|
||||
|
||||
private newtype TAccessPathFront =
|
||||
@@ -1395,46 +1402,24 @@ private predicate flowCandFwd(
|
||||
else any()
|
||||
}
|
||||
|
||||
/**
|
||||
* A node that requires an empty access path and should have its tracked type
|
||||
* (re-)computed. This is either a source or a node reached through an
|
||||
* additional step.
|
||||
*/
|
||||
private class AccessPathFrontNilNode extends NormalNodeExt {
|
||||
AccessPathFrontNilNode() {
|
||||
nodeCand(this, _) and
|
||||
(
|
||||
any(Configuration c).isSource(this.getNode())
|
||||
or
|
||||
localFlowBigStepExt(_, this, false, _)
|
||||
or
|
||||
additionalJumpStepExt(_, this, _)
|
||||
)
|
||||
}
|
||||
|
||||
/** Gets the `nil` path front for this node. */
|
||||
AccessPathFrontNil getApf() { result = TFrontNil(this.getErasedNodeTypeBound()) }
|
||||
}
|
||||
|
||||
private predicate flowCandFwd0(
|
||||
NodeExt node, boolean fromArg, AccessPathFront apf, Configuration config
|
||||
) {
|
||||
nodeCand2(node, _, false, config) and
|
||||
config.isSource(node.getNode()) and
|
||||
fromArg = false and
|
||||
apf = node.(AccessPathFrontNilNode).getApf()
|
||||
apf = TFrontNil(node.getErasedNodeTypeBound())
|
||||
or
|
||||
nodeCand(node, unbind(config)) and
|
||||
(
|
||||
exists(NodeExt mid |
|
||||
flowCandFwd(mid, fromArg, apf, config) and
|
||||
localFlowBigStepExt(mid, node, true, config)
|
||||
localFlowBigStepExt(mid, node, true, _, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathFrontNil nil |
|
||||
flowCandFwd(mid, fromArg, nil, config) and
|
||||
localFlowBigStepExt(mid, node, false, config) and
|
||||
apf = node.(AccessPathFrontNilNode).getApf()
|
||||
localFlowBigStepExt(mid, node, false, apf, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid |
|
||||
@@ -1447,7 +1432,7 @@ private predicate flowCandFwd0(
|
||||
flowCandFwd(mid, _, nil, config) and
|
||||
additionalJumpStepExt(mid, node, config) and
|
||||
fromArg = false and
|
||||
apf = node.(AccessPathFrontNilNode).getApf()
|
||||
apf = TFrontNil(node.getErasedNodeTypeBound())
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, boolean allowsFieldFlow |
|
||||
@@ -1589,13 +1574,13 @@ private predicate flowCand0(
|
||||
apf instanceof AccessPathFrontNil
|
||||
or
|
||||
exists(NodeExt mid |
|
||||
localFlowBigStepExt(node, mid, true, config) and
|
||||
localFlowBigStepExt(node, mid, true, _, config) and
|
||||
flowCand(mid, toReturn, apf, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathFrontNil nil |
|
||||
flowCandFwd(node, _, apf, config) and
|
||||
localFlowBigStepExt(node, mid, false, config) and
|
||||
localFlowBigStepExt(node, mid, false, _, config) and
|
||||
flowCand(mid, toReturn, nil, config) and
|
||||
apf instanceof AccessPathFrontNil
|
||||
)
|
||||
@@ -1810,18 +1795,6 @@ private predicate popWithFront(AccessPath ap0, Content f, AccessPathFront apf, A
|
||||
/** Gets the access path obtained by pushing `f` onto `ap`. */
|
||||
private AccessPath push(Content f, AccessPath ap) { ap = pop(f, result) }
|
||||
|
||||
/**
|
||||
* A node that requires an empty access path and should have its tracked type
|
||||
* (re-)computed. This is either a source or a node reached through an
|
||||
* additional step.
|
||||
*/
|
||||
private class AccessPathNilNode extends NormalNodeExt {
|
||||
AccessPathNilNode() { flowCand(this.(AccessPathFrontNilNode), _, _, _) }
|
||||
|
||||
/** Gets the `nil` path for this node. */
|
||||
AccessPathNil getAp() { result = TNil(this.getErasedNodeTypeBound()) }
|
||||
}
|
||||
|
||||
/**
|
||||
* Holds if data can flow from a source to `node` with the given `ap`.
|
||||
*/
|
||||
@@ -1838,20 +1811,19 @@ private predicate flowFwd0(
|
||||
flowCand(node, _, _, config) and
|
||||
config.isSource(node.getNode()) and
|
||||
fromArg = false and
|
||||
ap = node.(AccessPathNilNode).getAp() and
|
||||
ap = TNil(node.getErasedNodeTypeBound()) and
|
||||
apf = ap.(AccessPathNil).getFront()
|
||||
or
|
||||
flowCand(node, _, _, unbind(config)) and
|
||||
(
|
||||
exists(NodeExt mid |
|
||||
flowFwd(mid, fromArg, apf, ap, config) and
|
||||
localFlowBigStepExt(mid, node, true, config)
|
||||
localFlowBigStepExt(mid, node, true, _, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathNil nil |
|
||||
flowFwd(mid, fromArg, _, nil, config) and
|
||||
localFlowBigStepExt(mid, node, false, config) and
|
||||
ap = node.(AccessPathNilNode).getAp() and
|
||||
localFlowBigStepExt(mid, node, false, apf, config) and
|
||||
apf = ap.(AccessPathNil).getFront()
|
||||
)
|
||||
or
|
||||
@@ -1865,7 +1837,7 @@ private predicate flowFwd0(
|
||||
flowFwd(mid, _, _, nil, config) and
|
||||
additionalJumpStepExt(mid, node, config) and
|
||||
fromArg = false and
|
||||
ap = node.(AccessPathNilNode).getAp() and
|
||||
ap = TNil(node.getErasedNodeTypeBound()) and
|
||||
apf = ap.(AccessPathNil).getFront()
|
||||
)
|
||||
or
|
||||
@@ -1982,13 +1954,13 @@ private predicate flow0(NodeExt node, boolean toReturn, AccessPath ap, Configura
|
||||
ap instanceof AccessPathNil
|
||||
or
|
||||
exists(NodeExt mid |
|
||||
localFlowBigStepExt(node, mid, true, config) and
|
||||
localFlowBigStepExt(node, mid, true, _, config) and
|
||||
flow(mid, toReturn, ap, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathNil nil |
|
||||
flowFwd(node, _, _, ap, config) and
|
||||
localFlowBigStepExt(node, mid, false, config) and
|
||||
localFlowBigStepExt(node, mid, false, _, config) and
|
||||
flow(mid, toReturn, nil, config) and
|
||||
ap instanceof AccessPathNil
|
||||
)
|
||||
@@ -2164,7 +2136,7 @@ private newtype TPathNode =
|
||||
config.isSource(node) and
|
||||
cc instanceof CallContextAny and
|
||||
sc instanceof SummaryCtxNone and
|
||||
ap = any(AccessPathNilNode nil | nil.getNode() = node).getAp()
|
||||
ap = TNil(getErasedNodeTypeBound(node))
|
||||
or
|
||||
// ... or a step from an existing PathNode to another node.
|
||||
exists(PathNodeMid mid |
|
||||
@@ -2357,12 +2329,11 @@ private predicate pathStep(PathNodeMid mid, Node node, CallContext cc, SummaryCt
|
||||
pathIntoLocalStep(mid, midnode, cc, enclosing, sc, ap0, conf) and
|
||||
localCC = getLocalCallContext(cc, enclosing)
|
||||
|
|
||||
localFlowBigStep(midnode, node, true, conf, localCC) and
|
||||
localFlowBigStep(midnode, node, true, _, conf, localCC) and
|
||||
ap = ap0
|
||||
or
|
||||
localFlowBigStep(midnode, node, false, conf, localCC) and
|
||||
ap0 instanceof AccessPathNil and
|
||||
ap = any(AccessPathNilNode nil | nil.getNode() = node).getAp()
|
||||
localFlowBigStep(midnode, node, false, ap.(AccessPathNil).getType(), conf, localCC) and
|
||||
ap0 instanceof AccessPathNil
|
||||
)
|
||||
or
|
||||
jumpStep(mid.getNode(), node, mid.getConfiguration()) and
|
||||
@@ -2374,7 +2345,7 @@ private predicate pathStep(PathNodeMid mid, Node node, CallContext cc, SummaryCt
|
||||
cc instanceof CallContextAny and
|
||||
sc instanceof SummaryCtxNone and
|
||||
mid.getAp() instanceof AccessPathNil and
|
||||
ap = any(AccessPathNilNode nil | nil.getNode() = node).getAp()
|
||||
ap = TNil(getErasedNodeTypeBound(node))
|
||||
or
|
||||
exists(Content f, AccessPath ap0 | pathReadStep(mid, node, ap0, f, cc) and ap = pop(f, ap0)) and
|
||||
sc = mid.getSummaryCtx()
|
||||
@@ -2397,7 +2368,7 @@ private predicate pathIntoLocalStep(
|
||||
midnode = mid.getNode() and
|
||||
cc = mid.getCallContext() and
|
||||
conf = mid.getConfiguration() and
|
||||
localFlowBigStep(midnode, _, _, conf, _) and
|
||||
localFlowBigStep(midnode, _, _, _, conf, _) and
|
||||
enclosing = midnode.getEnclosingCallable() and
|
||||
sc = mid.getSummaryCtx() and
|
||||
ap0 = mid.getAp()
|
||||
|
||||
@@ -1307,15 +1307,20 @@ private predicate localFlowExit(Node node, Configuration config) {
|
||||
*/
|
||||
pragma[nomagic]
|
||||
private predicate localFlowStepPlus(
|
||||
Node node1, Node node2, boolean preservesValue, Configuration config, LocalCallContext cc
|
||||
Node node1, Node node2, boolean preservesValue, DataFlowType t, Configuration config,
|
||||
LocalCallContext cc
|
||||
) {
|
||||
not isUnreachableInCall(node2, cc.(LocalCallContextSpecificCall).getCall()) and
|
||||
(
|
||||
localFlowEntry(node1, config) and
|
||||
(
|
||||
localFlowStep(node1, node2, config) and preservesValue = true
|
||||
localFlowStep(node1, node2, config) and
|
||||
preservesValue = true and
|
||||
t = getErasedNodeTypeBound(node1)
|
||||
or
|
||||
additionalLocalFlowStep(node1, node2, config) and preservesValue = false
|
||||
additionalLocalFlowStep(node1, node2, config) and
|
||||
preservesValue = false and
|
||||
t = getErasedNodeTypeBound(node2)
|
||||
) and
|
||||
node1 != node2 and
|
||||
cc.relevantFor(node1.getEnclosingCallable()) and
|
||||
@@ -1323,17 +1328,18 @@ private predicate localFlowStepPlus(
|
||||
nodeCand(TNormalNode(node2), unbind(config))
|
||||
or
|
||||
exists(Node mid |
|
||||
localFlowStepPlus(node1, mid, preservesValue, config, cc) and
|
||||
localFlowStepPlus(node1, mid, preservesValue, t, config, cc) and
|
||||
localFlowStep(mid, node2, config) and
|
||||
not mid instanceof CastNode and
|
||||
nodeCand(TNormalNode(node2), unbind(config))
|
||||
)
|
||||
or
|
||||
exists(Node mid |
|
||||
localFlowStepPlus(node1, mid, _, config, cc) and
|
||||
localFlowStepPlus(node1, mid, _, _, config, cc) and
|
||||
additionalLocalFlowStep(mid, node2, config) and
|
||||
not mid instanceof CastNode and
|
||||
preservesValue = false and
|
||||
t = getErasedNodeTypeBound(node2) and
|
||||
nodeCand(TNormalNode(node2), unbind(config))
|
||||
)
|
||||
)
|
||||
@@ -1345,17 +1351,18 @@ private predicate localFlowStepPlus(
|
||||
*/
|
||||
pragma[nomagic]
|
||||
private predicate localFlowBigStep(
|
||||
Node node1, Node node2, boolean preservesValue, Configuration config, LocalCallContext callContext
|
||||
Node node1, Node node2, boolean preservesValue, DataFlowType t, Configuration config,
|
||||
LocalCallContext callContext
|
||||
) {
|
||||
localFlowStepPlus(node1, node2, preservesValue, config, callContext) and
|
||||
localFlowStepPlus(node1, node2, preservesValue, t, config, callContext) and
|
||||
localFlowExit(node2, config)
|
||||
}
|
||||
|
||||
pragma[nomagic]
|
||||
private predicate localFlowBigStepExt(
|
||||
NodeExt node1, NodeExt node2, boolean preservesValue, Configuration config
|
||||
NodeExt node1, NodeExt node2, boolean preservesValue, AccessPathFrontNil apf, Configuration config
|
||||
) {
|
||||
localFlowBigStep(node1.getNode(), node2.getNode(), preservesValue, config, _)
|
||||
localFlowBigStep(node1.getNode(), node2.getNode(), preservesValue, apf.getType(), config, _)
|
||||
}
|
||||
|
||||
private newtype TAccessPathFront =
|
||||
@@ -1395,46 +1402,24 @@ private predicate flowCandFwd(
|
||||
else any()
|
||||
}
|
||||
|
||||
/**
|
||||
* A node that requires an empty access path and should have its tracked type
|
||||
* (re-)computed. This is either a source or a node reached through an
|
||||
* additional step.
|
||||
*/
|
||||
private class AccessPathFrontNilNode extends NormalNodeExt {
|
||||
AccessPathFrontNilNode() {
|
||||
nodeCand(this, _) and
|
||||
(
|
||||
any(Configuration c).isSource(this.getNode())
|
||||
or
|
||||
localFlowBigStepExt(_, this, false, _)
|
||||
or
|
||||
additionalJumpStepExt(_, this, _)
|
||||
)
|
||||
}
|
||||
|
||||
/** Gets the `nil` path front for this node. */
|
||||
AccessPathFrontNil getApf() { result = TFrontNil(this.getErasedNodeTypeBound()) }
|
||||
}
|
||||
|
||||
private predicate flowCandFwd0(
|
||||
NodeExt node, boolean fromArg, AccessPathFront apf, Configuration config
|
||||
) {
|
||||
nodeCand2(node, _, false, config) and
|
||||
config.isSource(node.getNode()) and
|
||||
fromArg = false and
|
||||
apf = node.(AccessPathFrontNilNode).getApf()
|
||||
apf = TFrontNil(node.getErasedNodeTypeBound())
|
||||
or
|
||||
nodeCand(node, unbind(config)) and
|
||||
(
|
||||
exists(NodeExt mid |
|
||||
flowCandFwd(mid, fromArg, apf, config) and
|
||||
localFlowBigStepExt(mid, node, true, config)
|
||||
localFlowBigStepExt(mid, node, true, _, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathFrontNil nil |
|
||||
flowCandFwd(mid, fromArg, nil, config) and
|
||||
localFlowBigStepExt(mid, node, false, config) and
|
||||
apf = node.(AccessPathFrontNilNode).getApf()
|
||||
localFlowBigStepExt(mid, node, false, apf, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid |
|
||||
@@ -1447,7 +1432,7 @@ private predicate flowCandFwd0(
|
||||
flowCandFwd(mid, _, nil, config) and
|
||||
additionalJumpStepExt(mid, node, config) and
|
||||
fromArg = false and
|
||||
apf = node.(AccessPathFrontNilNode).getApf()
|
||||
apf = TFrontNil(node.getErasedNodeTypeBound())
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, boolean allowsFieldFlow |
|
||||
@@ -1589,13 +1574,13 @@ private predicate flowCand0(
|
||||
apf instanceof AccessPathFrontNil
|
||||
or
|
||||
exists(NodeExt mid |
|
||||
localFlowBigStepExt(node, mid, true, config) and
|
||||
localFlowBigStepExt(node, mid, true, _, config) and
|
||||
flowCand(mid, toReturn, apf, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathFrontNil nil |
|
||||
flowCandFwd(node, _, apf, config) and
|
||||
localFlowBigStepExt(node, mid, false, config) and
|
||||
localFlowBigStepExt(node, mid, false, _, config) and
|
||||
flowCand(mid, toReturn, nil, config) and
|
||||
apf instanceof AccessPathFrontNil
|
||||
)
|
||||
@@ -1810,18 +1795,6 @@ private predicate popWithFront(AccessPath ap0, Content f, AccessPathFront apf, A
|
||||
/** Gets the access path obtained by pushing `f` onto `ap`. */
|
||||
private AccessPath push(Content f, AccessPath ap) { ap = pop(f, result) }
|
||||
|
||||
/**
|
||||
* A node that requires an empty access path and should have its tracked type
|
||||
* (re-)computed. This is either a source or a node reached through an
|
||||
* additional step.
|
||||
*/
|
||||
private class AccessPathNilNode extends NormalNodeExt {
|
||||
AccessPathNilNode() { flowCand(this.(AccessPathFrontNilNode), _, _, _) }
|
||||
|
||||
/** Gets the `nil` path for this node. */
|
||||
AccessPathNil getAp() { result = TNil(this.getErasedNodeTypeBound()) }
|
||||
}
|
||||
|
||||
/**
|
||||
* Holds if data can flow from a source to `node` with the given `ap`.
|
||||
*/
|
||||
@@ -1838,20 +1811,19 @@ private predicate flowFwd0(
|
||||
flowCand(node, _, _, config) and
|
||||
config.isSource(node.getNode()) and
|
||||
fromArg = false and
|
||||
ap = node.(AccessPathNilNode).getAp() and
|
||||
ap = TNil(node.getErasedNodeTypeBound()) and
|
||||
apf = ap.(AccessPathNil).getFront()
|
||||
or
|
||||
flowCand(node, _, _, unbind(config)) and
|
||||
(
|
||||
exists(NodeExt mid |
|
||||
flowFwd(mid, fromArg, apf, ap, config) and
|
||||
localFlowBigStepExt(mid, node, true, config)
|
||||
localFlowBigStepExt(mid, node, true, _, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathNil nil |
|
||||
flowFwd(mid, fromArg, _, nil, config) and
|
||||
localFlowBigStepExt(mid, node, false, config) and
|
||||
ap = node.(AccessPathNilNode).getAp() and
|
||||
localFlowBigStepExt(mid, node, false, apf, config) and
|
||||
apf = ap.(AccessPathNil).getFront()
|
||||
)
|
||||
or
|
||||
@@ -1865,7 +1837,7 @@ private predicate flowFwd0(
|
||||
flowFwd(mid, _, _, nil, config) and
|
||||
additionalJumpStepExt(mid, node, config) and
|
||||
fromArg = false and
|
||||
ap = node.(AccessPathNilNode).getAp() and
|
||||
ap = TNil(node.getErasedNodeTypeBound()) and
|
||||
apf = ap.(AccessPathNil).getFront()
|
||||
)
|
||||
or
|
||||
@@ -1982,13 +1954,13 @@ private predicate flow0(NodeExt node, boolean toReturn, AccessPath ap, Configura
|
||||
ap instanceof AccessPathNil
|
||||
or
|
||||
exists(NodeExt mid |
|
||||
localFlowBigStepExt(node, mid, true, config) and
|
||||
localFlowBigStepExt(node, mid, true, _, config) and
|
||||
flow(mid, toReturn, ap, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathNil nil |
|
||||
flowFwd(node, _, _, ap, config) and
|
||||
localFlowBigStepExt(node, mid, false, config) and
|
||||
localFlowBigStepExt(node, mid, false, _, config) and
|
||||
flow(mid, toReturn, nil, config) and
|
||||
ap instanceof AccessPathNil
|
||||
)
|
||||
@@ -2164,7 +2136,7 @@ private newtype TPathNode =
|
||||
config.isSource(node) and
|
||||
cc instanceof CallContextAny and
|
||||
sc instanceof SummaryCtxNone and
|
||||
ap = any(AccessPathNilNode nil | nil.getNode() = node).getAp()
|
||||
ap = TNil(getErasedNodeTypeBound(node))
|
||||
or
|
||||
// ... or a step from an existing PathNode to another node.
|
||||
exists(PathNodeMid mid |
|
||||
@@ -2357,12 +2329,11 @@ private predicate pathStep(PathNodeMid mid, Node node, CallContext cc, SummaryCt
|
||||
pathIntoLocalStep(mid, midnode, cc, enclosing, sc, ap0, conf) and
|
||||
localCC = getLocalCallContext(cc, enclosing)
|
||||
|
|
||||
localFlowBigStep(midnode, node, true, conf, localCC) and
|
||||
localFlowBigStep(midnode, node, true, _, conf, localCC) and
|
||||
ap = ap0
|
||||
or
|
||||
localFlowBigStep(midnode, node, false, conf, localCC) and
|
||||
ap0 instanceof AccessPathNil and
|
||||
ap = any(AccessPathNilNode nil | nil.getNode() = node).getAp()
|
||||
localFlowBigStep(midnode, node, false, ap.(AccessPathNil).getType(), conf, localCC) and
|
||||
ap0 instanceof AccessPathNil
|
||||
)
|
||||
or
|
||||
jumpStep(mid.getNode(), node, mid.getConfiguration()) and
|
||||
@@ -2374,7 +2345,7 @@ private predicate pathStep(PathNodeMid mid, Node node, CallContext cc, SummaryCt
|
||||
cc instanceof CallContextAny and
|
||||
sc instanceof SummaryCtxNone and
|
||||
mid.getAp() instanceof AccessPathNil and
|
||||
ap = any(AccessPathNilNode nil | nil.getNode() = node).getAp()
|
||||
ap = TNil(getErasedNodeTypeBound(node))
|
||||
or
|
||||
exists(Content f, AccessPath ap0 | pathReadStep(mid, node, ap0, f, cc) and ap = pop(f, ap0)) and
|
||||
sc = mid.getSummaryCtx()
|
||||
@@ -2397,7 +2368,7 @@ private predicate pathIntoLocalStep(
|
||||
midnode = mid.getNode() and
|
||||
cc = mid.getCallContext() and
|
||||
conf = mid.getConfiguration() and
|
||||
localFlowBigStep(midnode, _, _, conf, _) and
|
||||
localFlowBigStep(midnode, _, _, _, conf, _) and
|
||||
enclosing = midnode.getEnclosingCallable() and
|
||||
sc = mid.getSummaryCtx() and
|
||||
ap0 = mid.getAp()
|
||||
|
||||
@@ -1307,15 +1307,20 @@ private predicate localFlowExit(Node node, Configuration config) {
|
||||
*/
|
||||
pragma[nomagic]
|
||||
private predicate localFlowStepPlus(
|
||||
Node node1, Node node2, boolean preservesValue, Configuration config, LocalCallContext cc
|
||||
Node node1, Node node2, boolean preservesValue, DataFlowType t, Configuration config,
|
||||
LocalCallContext cc
|
||||
) {
|
||||
not isUnreachableInCall(node2, cc.(LocalCallContextSpecificCall).getCall()) and
|
||||
(
|
||||
localFlowEntry(node1, config) and
|
||||
(
|
||||
localFlowStep(node1, node2, config) and preservesValue = true
|
||||
localFlowStep(node1, node2, config) and
|
||||
preservesValue = true and
|
||||
t = getErasedNodeTypeBound(node1)
|
||||
or
|
||||
additionalLocalFlowStep(node1, node2, config) and preservesValue = false
|
||||
additionalLocalFlowStep(node1, node2, config) and
|
||||
preservesValue = false and
|
||||
t = getErasedNodeTypeBound(node2)
|
||||
) and
|
||||
node1 != node2 and
|
||||
cc.relevantFor(node1.getEnclosingCallable()) and
|
||||
@@ -1323,17 +1328,18 @@ private predicate localFlowStepPlus(
|
||||
nodeCand(TNormalNode(node2), unbind(config))
|
||||
or
|
||||
exists(Node mid |
|
||||
localFlowStepPlus(node1, mid, preservesValue, config, cc) and
|
||||
localFlowStepPlus(node1, mid, preservesValue, t, config, cc) and
|
||||
localFlowStep(mid, node2, config) and
|
||||
not mid instanceof CastNode and
|
||||
nodeCand(TNormalNode(node2), unbind(config))
|
||||
)
|
||||
or
|
||||
exists(Node mid |
|
||||
localFlowStepPlus(node1, mid, _, config, cc) and
|
||||
localFlowStepPlus(node1, mid, _, _, config, cc) and
|
||||
additionalLocalFlowStep(mid, node2, config) and
|
||||
not mid instanceof CastNode and
|
||||
preservesValue = false and
|
||||
t = getErasedNodeTypeBound(node2) and
|
||||
nodeCand(TNormalNode(node2), unbind(config))
|
||||
)
|
||||
)
|
||||
@@ -1345,17 +1351,18 @@ private predicate localFlowStepPlus(
|
||||
*/
|
||||
pragma[nomagic]
|
||||
private predicate localFlowBigStep(
|
||||
Node node1, Node node2, boolean preservesValue, Configuration config, LocalCallContext callContext
|
||||
Node node1, Node node2, boolean preservesValue, DataFlowType t, Configuration config,
|
||||
LocalCallContext callContext
|
||||
) {
|
||||
localFlowStepPlus(node1, node2, preservesValue, config, callContext) and
|
||||
localFlowStepPlus(node1, node2, preservesValue, t, config, callContext) and
|
||||
localFlowExit(node2, config)
|
||||
}
|
||||
|
||||
pragma[nomagic]
|
||||
private predicate localFlowBigStepExt(
|
||||
NodeExt node1, NodeExt node2, boolean preservesValue, Configuration config
|
||||
NodeExt node1, NodeExt node2, boolean preservesValue, AccessPathFrontNil apf, Configuration config
|
||||
) {
|
||||
localFlowBigStep(node1.getNode(), node2.getNode(), preservesValue, config, _)
|
||||
localFlowBigStep(node1.getNode(), node2.getNode(), preservesValue, apf.getType(), config, _)
|
||||
}
|
||||
|
||||
private newtype TAccessPathFront =
|
||||
@@ -1395,46 +1402,24 @@ private predicate flowCandFwd(
|
||||
else any()
|
||||
}
|
||||
|
||||
/**
|
||||
* A node that requires an empty access path and should have its tracked type
|
||||
* (re-)computed. This is either a source or a node reached through an
|
||||
* additional step.
|
||||
*/
|
||||
private class AccessPathFrontNilNode extends NormalNodeExt {
|
||||
AccessPathFrontNilNode() {
|
||||
nodeCand(this, _) and
|
||||
(
|
||||
any(Configuration c).isSource(this.getNode())
|
||||
or
|
||||
localFlowBigStepExt(_, this, false, _)
|
||||
or
|
||||
additionalJumpStepExt(_, this, _)
|
||||
)
|
||||
}
|
||||
|
||||
/** Gets the `nil` path front for this node. */
|
||||
AccessPathFrontNil getApf() { result = TFrontNil(this.getErasedNodeTypeBound()) }
|
||||
}
|
||||
|
||||
private predicate flowCandFwd0(
|
||||
NodeExt node, boolean fromArg, AccessPathFront apf, Configuration config
|
||||
) {
|
||||
nodeCand2(node, _, false, config) and
|
||||
config.isSource(node.getNode()) and
|
||||
fromArg = false and
|
||||
apf = node.(AccessPathFrontNilNode).getApf()
|
||||
apf = TFrontNil(node.getErasedNodeTypeBound())
|
||||
or
|
||||
nodeCand(node, unbind(config)) and
|
||||
(
|
||||
exists(NodeExt mid |
|
||||
flowCandFwd(mid, fromArg, apf, config) and
|
||||
localFlowBigStepExt(mid, node, true, config)
|
||||
localFlowBigStepExt(mid, node, true, _, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathFrontNil nil |
|
||||
flowCandFwd(mid, fromArg, nil, config) and
|
||||
localFlowBigStepExt(mid, node, false, config) and
|
||||
apf = node.(AccessPathFrontNilNode).getApf()
|
||||
localFlowBigStepExt(mid, node, false, apf, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid |
|
||||
@@ -1447,7 +1432,7 @@ private predicate flowCandFwd0(
|
||||
flowCandFwd(mid, _, nil, config) and
|
||||
additionalJumpStepExt(mid, node, config) and
|
||||
fromArg = false and
|
||||
apf = node.(AccessPathFrontNilNode).getApf()
|
||||
apf = TFrontNil(node.getErasedNodeTypeBound())
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, boolean allowsFieldFlow |
|
||||
@@ -1589,13 +1574,13 @@ private predicate flowCand0(
|
||||
apf instanceof AccessPathFrontNil
|
||||
or
|
||||
exists(NodeExt mid |
|
||||
localFlowBigStepExt(node, mid, true, config) and
|
||||
localFlowBigStepExt(node, mid, true, _, config) and
|
||||
flowCand(mid, toReturn, apf, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathFrontNil nil |
|
||||
flowCandFwd(node, _, apf, config) and
|
||||
localFlowBigStepExt(node, mid, false, config) and
|
||||
localFlowBigStepExt(node, mid, false, _, config) and
|
||||
flowCand(mid, toReturn, nil, config) and
|
||||
apf instanceof AccessPathFrontNil
|
||||
)
|
||||
@@ -1810,18 +1795,6 @@ private predicate popWithFront(AccessPath ap0, Content f, AccessPathFront apf, A
|
||||
/** Gets the access path obtained by pushing `f` onto `ap`. */
|
||||
private AccessPath push(Content f, AccessPath ap) { ap = pop(f, result) }
|
||||
|
||||
/**
|
||||
* A node that requires an empty access path and should have its tracked type
|
||||
* (re-)computed. This is either a source or a node reached through an
|
||||
* additional step.
|
||||
*/
|
||||
private class AccessPathNilNode extends NormalNodeExt {
|
||||
AccessPathNilNode() { flowCand(this.(AccessPathFrontNilNode), _, _, _) }
|
||||
|
||||
/** Gets the `nil` path for this node. */
|
||||
AccessPathNil getAp() { result = TNil(this.getErasedNodeTypeBound()) }
|
||||
}
|
||||
|
||||
/**
|
||||
* Holds if data can flow from a source to `node` with the given `ap`.
|
||||
*/
|
||||
@@ -1838,20 +1811,19 @@ private predicate flowFwd0(
|
||||
flowCand(node, _, _, config) and
|
||||
config.isSource(node.getNode()) and
|
||||
fromArg = false and
|
||||
ap = node.(AccessPathNilNode).getAp() and
|
||||
ap = TNil(node.getErasedNodeTypeBound()) and
|
||||
apf = ap.(AccessPathNil).getFront()
|
||||
or
|
||||
flowCand(node, _, _, unbind(config)) and
|
||||
(
|
||||
exists(NodeExt mid |
|
||||
flowFwd(mid, fromArg, apf, ap, config) and
|
||||
localFlowBigStepExt(mid, node, true, config)
|
||||
localFlowBigStepExt(mid, node, true, _, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathNil nil |
|
||||
flowFwd(mid, fromArg, _, nil, config) and
|
||||
localFlowBigStepExt(mid, node, false, config) and
|
||||
ap = node.(AccessPathNilNode).getAp() and
|
||||
localFlowBigStepExt(mid, node, false, apf, config) and
|
||||
apf = ap.(AccessPathNil).getFront()
|
||||
)
|
||||
or
|
||||
@@ -1865,7 +1837,7 @@ private predicate flowFwd0(
|
||||
flowFwd(mid, _, _, nil, config) and
|
||||
additionalJumpStepExt(mid, node, config) and
|
||||
fromArg = false and
|
||||
ap = node.(AccessPathNilNode).getAp() and
|
||||
ap = TNil(node.getErasedNodeTypeBound()) and
|
||||
apf = ap.(AccessPathNil).getFront()
|
||||
)
|
||||
or
|
||||
@@ -1982,13 +1954,13 @@ private predicate flow0(NodeExt node, boolean toReturn, AccessPath ap, Configura
|
||||
ap instanceof AccessPathNil
|
||||
or
|
||||
exists(NodeExt mid |
|
||||
localFlowBigStepExt(node, mid, true, config) and
|
||||
localFlowBigStepExt(node, mid, true, _, config) and
|
||||
flow(mid, toReturn, ap, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathNil nil |
|
||||
flowFwd(node, _, _, ap, config) and
|
||||
localFlowBigStepExt(node, mid, false, config) and
|
||||
localFlowBigStepExt(node, mid, false, _, config) and
|
||||
flow(mid, toReturn, nil, config) and
|
||||
ap instanceof AccessPathNil
|
||||
)
|
||||
@@ -2164,7 +2136,7 @@ private newtype TPathNode =
|
||||
config.isSource(node) and
|
||||
cc instanceof CallContextAny and
|
||||
sc instanceof SummaryCtxNone and
|
||||
ap = any(AccessPathNilNode nil | nil.getNode() = node).getAp()
|
||||
ap = TNil(getErasedNodeTypeBound(node))
|
||||
or
|
||||
// ... or a step from an existing PathNode to another node.
|
||||
exists(PathNodeMid mid |
|
||||
@@ -2357,12 +2329,11 @@ private predicate pathStep(PathNodeMid mid, Node node, CallContext cc, SummaryCt
|
||||
pathIntoLocalStep(mid, midnode, cc, enclosing, sc, ap0, conf) and
|
||||
localCC = getLocalCallContext(cc, enclosing)
|
||||
|
|
||||
localFlowBigStep(midnode, node, true, conf, localCC) and
|
||||
localFlowBigStep(midnode, node, true, _, conf, localCC) and
|
||||
ap = ap0
|
||||
or
|
||||
localFlowBigStep(midnode, node, false, conf, localCC) and
|
||||
ap0 instanceof AccessPathNil and
|
||||
ap = any(AccessPathNilNode nil | nil.getNode() = node).getAp()
|
||||
localFlowBigStep(midnode, node, false, ap.(AccessPathNil).getType(), conf, localCC) and
|
||||
ap0 instanceof AccessPathNil
|
||||
)
|
||||
or
|
||||
jumpStep(mid.getNode(), node, mid.getConfiguration()) and
|
||||
@@ -2374,7 +2345,7 @@ private predicate pathStep(PathNodeMid mid, Node node, CallContext cc, SummaryCt
|
||||
cc instanceof CallContextAny and
|
||||
sc instanceof SummaryCtxNone and
|
||||
mid.getAp() instanceof AccessPathNil and
|
||||
ap = any(AccessPathNilNode nil | nil.getNode() = node).getAp()
|
||||
ap = TNil(getErasedNodeTypeBound(node))
|
||||
or
|
||||
exists(Content f, AccessPath ap0 | pathReadStep(mid, node, ap0, f, cc) and ap = pop(f, ap0)) and
|
||||
sc = mid.getSummaryCtx()
|
||||
@@ -2397,7 +2368,7 @@ private predicate pathIntoLocalStep(
|
||||
midnode = mid.getNode() and
|
||||
cc = mid.getCallContext() and
|
||||
conf = mid.getConfiguration() and
|
||||
localFlowBigStep(midnode, _, _, conf, _) and
|
||||
localFlowBigStep(midnode, _, _, _, conf, _) and
|
||||
enclosing = midnode.getEnclosingCallable() and
|
||||
sc = mid.getSummaryCtx() and
|
||||
ap0 = mid.getAp()
|
||||
|
||||
@@ -1307,15 +1307,20 @@ private predicate localFlowExit(Node node, Configuration config) {
|
||||
*/
|
||||
pragma[nomagic]
|
||||
private predicate localFlowStepPlus(
|
||||
Node node1, Node node2, boolean preservesValue, Configuration config, LocalCallContext cc
|
||||
Node node1, Node node2, boolean preservesValue, DataFlowType t, Configuration config,
|
||||
LocalCallContext cc
|
||||
) {
|
||||
not isUnreachableInCall(node2, cc.(LocalCallContextSpecificCall).getCall()) and
|
||||
(
|
||||
localFlowEntry(node1, config) and
|
||||
(
|
||||
localFlowStep(node1, node2, config) and preservesValue = true
|
||||
localFlowStep(node1, node2, config) and
|
||||
preservesValue = true and
|
||||
t = getErasedNodeTypeBound(node1)
|
||||
or
|
||||
additionalLocalFlowStep(node1, node2, config) and preservesValue = false
|
||||
additionalLocalFlowStep(node1, node2, config) and
|
||||
preservesValue = false and
|
||||
t = getErasedNodeTypeBound(node2)
|
||||
) and
|
||||
node1 != node2 and
|
||||
cc.relevantFor(node1.getEnclosingCallable()) and
|
||||
@@ -1323,17 +1328,18 @@ private predicate localFlowStepPlus(
|
||||
nodeCand(TNormalNode(node2), unbind(config))
|
||||
or
|
||||
exists(Node mid |
|
||||
localFlowStepPlus(node1, mid, preservesValue, config, cc) and
|
||||
localFlowStepPlus(node1, mid, preservesValue, t, config, cc) and
|
||||
localFlowStep(mid, node2, config) and
|
||||
not mid instanceof CastNode and
|
||||
nodeCand(TNormalNode(node2), unbind(config))
|
||||
)
|
||||
or
|
||||
exists(Node mid |
|
||||
localFlowStepPlus(node1, mid, _, config, cc) and
|
||||
localFlowStepPlus(node1, mid, _, _, config, cc) and
|
||||
additionalLocalFlowStep(mid, node2, config) and
|
||||
not mid instanceof CastNode and
|
||||
preservesValue = false and
|
||||
t = getErasedNodeTypeBound(node2) and
|
||||
nodeCand(TNormalNode(node2), unbind(config))
|
||||
)
|
||||
)
|
||||
@@ -1345,17 +1351,18 @@ private predicate localFlowStepPlus(
|
||||
*/
|
||||
pragma[nomagic]
|
||||
private predicate localFlowBigStep(
|
||||
Node node1, Node node2, boolean preservesValue, Configuration config, LocalCallContext callContext
|
||||
Node node1, Node node2, boolean preservesValue, DataFlowType t, Configuration config,
|
||||
LocalCallContext callContext
|
||||
) {
|
||||
localFlowStepPlus(node1, node2, preservesValue, config, callContext) and
|
||||
localFlowStepPlus(node1, node2, preservesValue, t, config, callContext) and
|
||||
localFlowExit(node2, config)
|
||||
}
|
||||
|
||||
pragma[nomagic]
|
||||
private predicate localFlowBigStepExt(
|
||||
NodeExt node1, NodeExt node2, boolean preservesValue, Configuration config
|
||||
NodeExt node1, NodeExt node2, boolean preservesValue, AccessPathFrontNil apf, Configuration config
|
||||
) {
|
||||
localFlowBigStep(node1.getNode(), node2.getNode(), preservesValue, config, _)
|
||||
localFlowBigStep(node1.getNode(), node2.getNode(), preservesValue, apf.getType(), config, _)
|
||||
}
|
||||
|
||||
private newtype TAccessPathFront =
|
||||
@@ -1395,46 +1402,24 @@ private predicate flowCandFwd(
|
||||
else any()
|
||||
}
|
||||
|
||||
/**
|
||||
* A node that requires an empty access path and should have its tracked type
|
||||
* (re-)computed. This is either a source or a node reached through an
|
||||
* additional step.
|
||||
*/
|
||||
private class AccessPathFrontNilNode extends NormalNodeExt {
|
||||
AccessPathFrontNilNode() {
|
||||
nodeCand(this, _) and
|
||||
(
|
||||
any(Configuration c).isSource(this.getNode())
|
||||
or
|
||||
localFlowBigStepExt(_, this, false, _)
|
||||
or
|
||||
additionalJumpStepExt(_, this, _)
|
||||
)
|
||||
}
|
||||
|
||||
/** Gets the `nil` path front for this node. */
|
||||
AccessPathFrontNil getApf() { result = TFrontNil(this.getErasedNodeTypeBound()) }
|
||||
}
|
||||
|
||||
private predicate flowCandFwd0(
|
||||
NodeExt node, boolean fromArg, AccessPathFront apf, Configuration config
|
||||
) {
|
||||
nodeCand2(node, _, false, config) and
|
||||
config.isSource(node.getNode()) and
|
||||
fromArg = false and
|
||||
apf = node.(AccessPathFrontNilNode).getApf()
|
||||
apf = TFrontNil(node.getErasedNodeTypeBound())
|
||||
or
|
||||
nodeCand(node, unbind(config)) and
|
||||
(
|
||||
exists(NodeExt mid |
|
||||
flowCandFwd(mid, fromArg, apf, config) and
|
||||
localFlowBigStepExt(mid, node, true, config)
|
||||
localFlowBigStepExt(mid, node, true, _, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathFrontNil nil |
|
||||
flowCandFwd(mid, fromArg, nil, config) and
|
||||
localFlowBigStepExt(mid, node, false, config) and
|
||||
apf = node.(AccessPathFrontNilNode).getApf()
|
||||
localFlowBigStepExt(mid, node, false, apf, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid |
|
||||
@@ -1447,7 +1432,7 @@ private predicate flowCandFwd0(
|
||||
flowCandFwd(mid, _, nil, config) and
|
||||
additionalJumpStepExt(mid, node, config) and
|
||||
fromArg = false and
|
||||
apf = node.(AccessPathFrontNilNode).getApf()
|
||||
apf = TFrontNil(node.getErasedNodeTypeBound())
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, boolean allowsFieldFlow |
|
||||
@@ -1589,13 +1574,13 @@ private predicate flowCand0(
|
||||
apf instanceof AccessPathFrontNil
|
||||
or
|
||||
exists(NodeExt mid |
|
||||
localFlowBigStepExt(node, mid, true, config) and
|
||||
localFlowBigStepExt(node, mid, true, _, config) and
|
||||
flowCand(mid, toReturn, apf, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathFrontNil nil |
|
||||
flowCandFwd(node, _, apf, config) and
|
||||
localFlowBigStepExt(node, mid, false, config) and
|
||||
localFlowBigStepExt(node, mid, false, _, config) and
|
||||
flowCand(mid, toReturn, nil, config) and
|
||||
apf instanceof AccessPathFrontNil
|
||||
)
|
||||
@@ -1810,18 +1795,6 @@ private predicate popWithFront(AccessPath ap0, Content f, AccessPathFront apf, A
|
||||
/** Gets the access path obtained by pushing `f` onto `ap`. */
|
||||
private AccessPath push(Content f, AccessPath ap) { ap = pop(f, result) }
|
||||
|
||||
/**
|
||||
* A node that requires an empty access path and should have its tracked type
|
||||
* (re-)computed. This is either a source or a node reached through an
|
||||
* additional step.
|
||||
*/
|
||||
private class AccessPathNilNode extends NormalNodeExt {
|
||||
AccessPathNilNode() { flowCand(this.(AccessPathFrontNilNode), _, _, _) }
|
||||
|
||||
/** Gets the `nil` path for this node. */
|
||||
AccessPathNil getAp() { result = TNil(this.getErasedNodeTypeBound()) }
|
||||
}
|
||||
|
||||
/**
|
||||
* Holds if data can flow from a source to `node` with the given `ap`.
|
||||
*/
|
||||
@@ -1838,20 +1811,19 @@ private predicate flowFwd0(
|
||||
flowCand(node, _, _, config) and
|
||||
config.isSource(node.getNode()) and
|
||||
fromArg = false and
|
||||
ap = node.(AccessPathNilNode).getAp() and
|
||||
ap = TNil(node.getErasedNodeTypeBound()) and
|
||||
apf = ap.(AccessPathNil).getFront()
|
||||
or
|
||||
flowCand(node, _, _, unbind(config)) and
|
||||
(
|
||||
exists(NodeExt mid |
|
||||
flowFwd(mid, fromArg, apf, ap, config) and
|
||||
localFlowBigStepExt(mid, node, true, config)
|
||||
localFlowBigStepExt(mid, node, true, _, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathNil nil |
|
||||
flowFwd(mid, fromArg, _, nil, config) and
|
||||
localFlowBigStepExt(mid, node, false, config) and
|
||||
ap = node.(AccessPathNilNode).getAp() and
|
||||
localFlowBigStepExt(mid, node, false, apf, config) and
|
||||
apf = ap.(AccessPathNil).getFront()
|
||||
)
|
||||
or
|
||||
@@ -1865,7 +1837,7 @@ private predicate flowFwd0(
|
||||
flowFwd(mid, _, _, nil, config) and
|
||||
additionalJumpStepExt(mid, node, config) and
|
||||
fromArg = false and
|
||||
ap = node.(AccessPathNilNode).getAp() and
|
||||
ap = TNil(node.getErasedNodeTypeBound()) and
|
||||
apf = ap.(AccessPathNil).getFront()
|
||||
)
|
||||
or
|
||||
@@ -1982,13 +1954,13 @@ private predicate flow0(NodeExt node, boolean toReturn, AccessPath ap, Configura
|
||||
ap instanceof AccessPathNil
|
||||
or
|
||||
exists(NodeExt mid |
|
||||
localFlowBigStepExt(node, mid, true, config) and
|
||||
localFlowBigStepExt(node, mid, true, _, config) and
|
||||
flow(mid, toReturn, ap, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathNil nil |
|
||||
flowFwd(node, _, _, ap, config) and
|
||||
localFlowBigStepExt(node, mid, false, config) and
|
||||
localFlowBigStepExt(node, mid, false, _, config) and
|
||||
flow(mid, toReturn, nil, config) and
|
||||
ap instanceof AccessPathNil
|
||||
)
|
||||
@@ -2164,7 +2136,7 @@ private newtype TPathNode =
|
||||
config.isSource(node) and
|
||||
cc instanceof CallContextAny and
|
||||
sc instanceof SummaryCtxNone and
|
||||
ap = any(AccessPathNilNode nil | nil.getNode() = node).getAp()
|
||||
ap = TNil(getErasedNodeTypeBound(node))
|
||||
or
|
||||
// ... or a step from an existing PathNode to another node.
|
||||
exists(PathNodeMid mid |
|
||||
@@ -2357,12 +2329,11 @@ private predicate pathStep(PathNodeMid mid, Node node, CallContext cc, SummaryCt
|
||||
pathIntoLocalStep(mid, midnode, cc, enclosing, sc, ap0, conf) and
|
||||
localCC = getLocalCallContext(cc, enclosing)
|
||||
|
|
||||
localFlowBigStep(midnode, node, true, conf, localCC) and
|
||||
localFlowBigStep(midnode, node, true, _, conf, localCC) and
|
||||
ap = ap0
|
||||
or
|
||||
localFlowBigStep(midnode, node, false, conf, localCC) and
|
||||
ap0 instanceof AccessPathNil and
|
||||
ap = any(AccessPathNilNode nil | nil.getNode() = node).getAp()
|
||||
localFlowBigStep(midnode, node, false, ap.(AccessPathNil).getType(), conf, localCC) and
|
||||
ap0 instanceof AccessPathNil
|
||||
)
|
||||
or
|
||||
jumpStep(mid.getNode(), node, mid.getConfiguration()) and
|
||||
@@ -2374,7 +2345,7 @@ private predicate pathStep(PathNodeMid mid, Node node, CallContext cc, SummaryCt
|
||||
cc instanceof CallContextAny and
|
||||
sc instanceof SummaryCtxNone and
|
||||
mid.getAp() instanceof AccessPathNil and
|
||||
ap = any(AccessPathNilNode nil | nil.getNode() = node).getAp()
|
||||
ap = TNil(getErasedNodeTypeBound(node))
|
||||
or
|
||||
exists(Content f, AccessPath ap0 | pathReadStep(mid, node, ap0, f, cc) and ap = pop(f, ap0)) and
|
||||
sc = mid.getSummaryCtx()
|
||||
@@ -2397,7 +2368,7 @@ private predicate pathIntoLocalStep(
|
||||
midnode = mid.getNode() and
|
||||
cc = mid.getCallContext() and
|
||||
conf = mid.getConfiguration() and
|
||||
localFlowBigStep(midnode, _, _, conf, _) and
|
||||
localFlowBigStep(midnode, _, _, _, conf, _) and
|
||||
enclosing = midnode.getEnclosingCallable() and
|
||||
sc = mid.getSummaryCtx() and
|
||||
ap0 = mid.getAp()
|
||||
|
||||
@@ -50,7 +50,7 @@ module JsonNET {
|
||||
) {
|
||||
// ToString methods
|
||||
c = getAToStringMethod() and
|
||||
preservesValue = true and
|
||||
preservesValue = false and
|
||||
source = any(CallableFlowSourceArg arg | arg.getArgumentIndex() = 0) and
|
||||
sink instanceof CallableFlowSinkReturn
|
||||
or
|
||||
|
||||
@@ -1381,7 +1381,7 @@
|
||||
| GlobalDataFlow.cs:78:30:78:34 | SSA def(sink3) : Object | GlobalDataFlow.cs:79:15:79:19 | access to local variable sink3 |
|
||||
| GlobalDataFlow.cs:78:30:78:34 | SSA def(sink3) : Object | GlobalDataFlow.cs:79:15:79:19 | access to local variable sink3 : Object |
|
||||
| GlobalDataFlow.cs:78:30:78:34 | SSA def(sink3) : Object | GlobalDataFlow.cs:80:23:80:65 | (...) ... |
|
||||
| GlobalDataFlow.cs:78:30:78:34 | SSA def(sink3) : Object | GlobalDataFlow.cs:80:23:80:65 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:78:30:78:34 | SSA def(sink3) : Object | GlobalDataFlow.cs:80:23:80:65 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:78:30:78:34 | SSA def(sink3) : Object | GlobalDataFlow.cs:80:44:80:65 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:78:30:78:34 | SSA def(sink3) : Object | GlobalDataFlow.cs:80:44:80:65 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:78:30:78:34 | SSA def(sink3) : Object | GlobalDataFlow.cs:80:59:80:63 | access to local variable sink3 |
|
||||
@@ -1391,7 +1391,7 @@
|
||||
| GlobalDataFlow.cs:78:30:78:34 | SSA def(sink3) : String | GlobalDataFlow.cs:79:15:79:19 | access to local variable sink3 |
|
||||
| GlobalDataFlow.cs:78:30:78:34 | SSA def(sink3) : String | GlobalDataFlow.cs:79:15:79:19 | access to local variable sink3 : String |
|
||||
| GlobalDataFlow.cs:78:30:78:34 | SSA def(sink3) : String | GlobalDataFlow.cs:80:23:80:65 | (...) ... |
|
||||
| GlobalDataFlow.cs:78:30:78:34 | SSA def(sink3) : String | GlobalDataFlow.cs:80:23:80:65 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:78:30:78:34 | SSA def(sink3) : String | GlobalDataFlow.cs:80:23:80:65 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:78:30:78:34 | SSA def(sink3) : String | GlobalDataFlow.cs:80:44:80:65 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:78:30:78:34 | SSA def(sink3) : String | GlobalDataFlow.cs:80:44:80:65 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:78:30:78:34 | SSA def(sink3) : String | GlobalDataFlow.cs:80:59:80:63 | access to local variable sink3 |
|
||||
@@ -1401,7 +1401,7 @@
|
||||
| GlobalDataFlow.cs:78:30:78:34 | SSA def(sink3) : T | GlobalDataFlow.cs:79:15:79:19 | access to local variable sink3 |
|
||||
| GlobalDataFlow.cs:78:30:78:34 | SSA def(sink3) : T | GlobalDataFlow.cs:79:15:79:19 | access to local variable sink3 : T |
|
||||
| GlobalDataFlow.cs:78:30:78:34 | SSA def(sink3) : T | GlobalDataFlow.cs:80:23:80:65 | (...) ... |
|
||||
| GlobalDataFlow.cs:78:30:78:34 | SSA def(sink3) : T | GlobalDataFlow.cs:80:23:80:65 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:78:30:78:34 | SSA def(sink3) : T | GlobalDataFlow.cs:80:23:80:65 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:78:30:78:34 | SSA def(sink3) : T | GlobalDataFlow.cs:80:44:80:65 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:78:30:78:34 | SSA def(sink3) : T | GlobalDataFlow.cs:80:44:80:65 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:78:30:78:34 | SSA def(sink3) : T | GlobalDataFlow.cs:80:59:80:63 | access to local variable sink3 |
|
||||
@@ -1413,7 +1413,7 @@
|
||||
| GlobalDataFlow.cs:78:41:78:45 | access to local variable sink3 : String | GlobalDataFlow.cs:287:50:287:50 | z |
|
||||
| GlobalDataFlow.cs:78:41:78:45 | access to local variable sink3 : String | GlobalDataFlow.cs:287:50:287:50 | z : String |
|
||||
| GlobalDataFlow.cs:79:15:79:19 | access to local variable sink3 : Object | GlobalDataFlow.cs:80:23:80:65 | (...) ... |
|
||||
| GlobalDataFlow.cs:79:15:79:19 | access to local variable sink3 : Object | GlobalDataFlow.cs:80:23:80:65 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:79:15:79:19 | access to local variable sink3 : Object | GlobalDataFlow.cs:80:23:80:65 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:79:15:79:19 | access to local variable sink3 : Object | GlobalDataFlow.cs:80:44:80:65 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:79:15:79:19 | access to local variable sink3 : Object | GlobalDataFlow.cs:80:44:80:65 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:79:15:79:19 | access to local variable sink3 : Object | GlobalDataFlow.cs:80:59:80:63 | access to local variable sink3 |
|
||||
@@ -1421,7 +1421,7 @@
|
||||
| GlobalDataFlow.cs:79:15:79:19 | access to local variable sink3 : Object | GlobalDataFlow.cs:135:29:135:33 | access to local variable sink3 |
|
||||
| GlobalDataFlow.cs:79:15:79:19 | access to local variable sink3 : Object | GlobalDataFlow.cs:135:29:135:33 | access to local variable sink3 : Object |
|
||||
| GlobalDataFlow.cs:79:15:79:19 | access to local variable sink3 : String | GlobalDataFlow.cs:80:23:80:65 | (...) ... |
|
||||
| GlobalDataFlow.cs:79:15:79:19 | access to local variable sink3 : String | GlobalDataFlow.cs:80:23:80:65 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:79:15:79:19 | access to local variable sink3 : String | GlobalDataFlow.cs:80:23:80:65 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:79:15:79:19 | access to local variable sink3 : String | GlobalDataFlow.cs:80:44:80:65 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:79:15:79:19 | access to local variable sink3 : String | GlobalDataFlow.cs:80:44:80:65 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:79:15:79:19 | access to local variable sink3 : String | GlobalDataFlow.cs:80:59:80:63 | access to local variable sink3 |
|
||||
@@ -1429,7 +1429,7 @@
|
||||
| GlobalDataFlow.cs:79:15:79:19 | access to local variable sink3 : String | GlobalDataFlow.cs:135:29:135:33 | access to local variable sink3 |
|
||||
| GlobalDataFlow.cs:79:15:79:19 | access to local variable sink3 : String | GlobalDataFlow.cs:135:29:135:33 | access to local variable sink3 : String |
|
||||
| GlobalDataFlow.cs:79:15:79:19 | access to local variable sink3 : T | GlobalDataFlow.cs:80:23:80:65 | (...) ... |
|
||||
| GlobalDataFlow.cs:79:15:79:19 | access to local variable sink3 : T | GlobalDataFlow.cs:80:23:80:65 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:79:15:79:19 | access to local variable sink3 : T | GlobalDataFlow.cs:80:23:80:65 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:79:15:79:19 | access to local variable sink3 : T | GlobalDataFlow.cs:80:44:80:65 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:79:15:79:19 | access to local variable sink3 : T | GlobalDataFlow.cs:80:44:80:65 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:79:15:79:19 | access to local variable sink3 : T | GlobalDataFlow.cs:80:59:80:63 | access to local variable sink3 |
|
||||
@@ -1439,7 +1439,7 @@
|
||||
| GlobalDataFlow.cs:80:13:80:85 | SSA def(sink13) : IEnumerable<String> | GlobalDataFlow.cs:81:15:81:20 | access to local variable sink13 |
|
||||
| GlobalDataFlow.cs:80:13:80:85 | SSA def(sink13) : IEnumerable<String> | GlobalDataFlow.cs:81:15:81:20 | access to local variable sink13 : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:80:13:80:85 | SSA def(sink13) : IEnumerable<String> | GlobalDataFlow.cs:82:23:82:74 | (...) ... |
|
||||
| GlobalDataFlow.cs:80:13:80:85 | SSA def(sink13) : IEnumerable<String> | GlobalDataFlow.cs:82:23:82:74 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:80:13:80:85 | SSA def(sink13) : IEnumerable<String> | GlobalDataFlow.cs:82:23:82:74 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:80:13:80:85 | SSA def(sink13) : IEnumerable<String> | GlobalDataFlow.cs:82:44:82:74 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:80:13:80:85 | SSA def(sink13) : IEnumerable<String> | GlobalDataFlow.cs:82:44:82:74 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:80:13:80:85 | SSA def(sink13) : IEnumerable<String> | GlobalDataFlow.cs:82:59:82:64 | access to local variable sink13 |
|
||||
@@ -1449,7 +1449,7 @@
|
||||
| GlobalDataFlow.cs:80:13:80:85 | SSA def(sink13) : IEnumerable<T> | GlobalDataFlow.cs:81:15:81:20 | access to local variable sink13 |
|
||||
| GlobalDataFlow.cs:80:13:80:85 | SSA def(sink13) : IEnumerable<T> | GlobalDataFlow.cs:81:15:81:20 | access to local variable sink13 : IEnumerable<T> |
|
||||
| GlobalDataFlow.cs:80:13:80:85 | SSA def(sink13) : IEnumerable<T> | GlobalDataFlow.cs:82:23:82:74 | (...) ... |
|
||||
| GlobalDataFlow.cs:80:13:80:85 | SSA def(sink13) : IEnumerable<T> | GlobalDataFlow.cs:82:23:82:74 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:80:13:80:85 | SSA def(sink13) : IEnumerable<T> | GlobalDataFlow.cs:82:23:82:74 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:80:13:80:85 | SSA def(sink13) : IEnumerable<T> | GlobalDataFlow.cs:82:44:82:74 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:80:13:80:85 | SSA def(sink13) : IEnumerable<T> | GlobalDataFlow.cs:82:44:82:74 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:80:13:80:85 | SSA def(sink13) : IEnumerable<T> | GlobalDataFlow.cs:82:59:82:64 | access to local variable sink13 |
|
||||
@@ -1461,7 +1461,7 @@
|
||||
| GlobalDataFlow.cs:80:22:80:85 | call to method SelectEven : IEnumerable<String> | GlobalDataFlow.cs:81:15:81:20 | access to local variable sink13 |
|
||||
| GlobalDataFlow.cs:80:22:80:85 | call to method SelectEven : IEnumerable<String> | GlobalDataFlow.cs:81:15:81:20 | access to local variable sink13 : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:80:22:80:85 | call to method SelectEven : IEnumerable<String> | GlobalDataFlow.cs:82:23:82:74 | (...) ... |
|
||||
| GlobalDataFlow.cs:80:22:80:85 | call to method SelectEven : IEnumerable<String> | GlobalDataFlow.cs:82:23:82:74 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:80:22:80:85 | call to method SelectEven : IEnumerable<String> | GlobalDataFlow.cs:82:23:82:74 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:80:22:80:85 | call to method SelectEven : IEnumerable<String> | GlobalDataFlow.cs:82:44:82:74 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:80:22:80:85 | call to method SelectEven : IEnumerable<String> | GlobalDataFlow.cs:82:44:82:74 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:80:22:80:85 | call to method SelectEven : IEnumerable<String> | GlobalDataFlow.cs:82:59:82:64 | access to local variable sink13 |
|
||||
@@ -1473,7 +1473,7 @@
|
||||
| GlobalDataFlow.cs:80:22:80:85 | call to method SelectEven : IEnumerable<T> | GlobalDataFlow.cs:81:15:81:20 | access to local variable sink13 |
|
||||
| GlobalDataFlow.cs:80:22:80:85 | call to method SelectEven : IEnumerable<T> | GlobalDataFlow.cs:81:15:81:20 | access to local variable sink13 : IEnumerable<T> |
|
||||
| GlobalDataFlow.cs:80:22:80:85 | call to method SelectEven : IEnumerable<T> | GlobalDataFlow.cs:82:23:82:74 | (...) ... |
|
||||
| GlobalDataFlow.cs:80:22:80:85 | call to method SelectEven : IEnumerable<T> | GlobalDataFlow.cs:82:23:82:74 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:80:22:80:85 | call to method SelectEven : IEnumerable<T> | GlobalDataFlow.cs:82:23:82:74 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:80:22:80:85 | call to method SelectEven : IEnumerable<T> | GlobalDataFlow.cs:82:44:82:74 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:80:22:80:85 | call to method SelectEven : IEnumerable<T> | GlobalDataFlow.cs:82:44:82:74 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:80:22:80:85 | call to method SelectEven : IEnumerable<T> | GlobalDataFlow.cs:82:59:82:64 | access to local variable sink13 |
|
||||
@@ -1491,19 +1491,19 @@
|
||||
| GlobalDataFlow.cs:80:44:80:65 | array creation of type String[] : String[] | GlobalDataFlow.cs:80:23:80:65 | (...) ... |
|
||||
| GlobalDataFlow.cs:80:44:80:65 | array creation of type String[] : String[] | GlobalDataFlow.cs:80:23:80:65 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:80:59:80:63 | access to local variable sink3 : Object | GlobalDataFlow.cs:80:23:80:65 | (...) ... |
|
||||
| GlobalDataFlow.cs:80:59:80:63 | access to local variable sink3 : Object | GlobalDataFlow.cs:80:23:80:65 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:80:59:80:63 | access to local variable sink3 : Object | GlobalDataFlow.cs:80:23:80:65 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:80:59:80:63 | access to local variable sink3 : Object | GlobalDataFlow.cs:80:44:80:65 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:80:59:80:63 | access to local variable sink3 : Object | GlobalDataFlow.cs:80:44:80:65 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:80:59:80:63 | access to local variable sink3 : Object | GlobalDataFlow.cs:135:29:135:33 | access to local variable sink3 |
|
||||
| GlobalDataFlow.cs:80:59:80:63 | access to local variable sink3 : Object | GlobalDataFlow.cs:135:29:135:33 | access to local variable sink3 : Object |
|
||||
| GlobalDataFlow.cs:80:59:80:63 | access to local variable sink3 : String | GlobalDataFlow.cs:80:23:80:65 | (...) ... |
|
||||
| GlobalDataFlow.cs:80:59:80:63 | access to local variable sink3 : String | GlobalDataFlow.cs:80:23:80:65 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:80:59:80:63 | access to local variable sink3 : String | GlobalDataFlow.cs:80:23:80:65 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:80:59:80:63 | access to local variable sink3 : String | GlobalDataFlow.cs:80:44:80:65 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:80:59:80:63 | access to local variable sink3 : String | GlobalDataFlow.cs:80:44:80:65 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:80:59:80:63 | access to local variable sink3 : String | GlobalDataFlow.cs:135:29:135:33 | access to local variable sink3 |
|
||||
| GlobalDataFlow.cs:80:59:80:63 | access to local variable sink3 : String | GlobalDataFlow.cs:135:29:135:33 | access to local variable sink3 : String |
|
||||
| GlobalDataFlow.cs:80:59:80:63 | access to local variable sink3 : T | GlobalDataFlow.cs:80:23:80:65 | (...) ... |
|
||||
| GlobalDataFlow.cs:80:59:80:63 | access to local variable sink3 : T | GlobalDataFlow.cs:80:23:80:65 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:80:59:80:63 | access to local variable sink3 : T | GlobalDataFlow.cs:80:23:80:65 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:80:59:80:63 | access to local variable sink3 : T | GlobalDataFlow.cs:80:44:80:65 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:80:59:80:63 | access to local variable sink3 : T | GlobalDataFlow.cs:80:44:80:65 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:80:59:80:63 | access to local variable sink3 : T | GlobalDataFlow.cs:135:29:135:33 | access to local variable sink3 |
|
||||
@@ -1521,7 +1521,7 @@
|
||||
| GlobalDataFlow.cs:80:84:80:84 | access to parameter x : String | GlobalDataFlow.cs:431:44:431:47 | delegate call |
|
||||
| GlobalDataFlow.cs:80:84:80:84 | access to parameter x : String | GlobalDataFlow.cs:431:44:431:47 | delegate call : String |
|
||||
| GlobalDataFlow.cs:81:15:81:20 | access to local variable sink13 : IEnumerable<String> | GlobalDataFlow.cs:82:23:82:74 | (...) ... |
|
||||
| GlobalDataFlow.cs:81:15:81:20 | access to local variable sink13 : IEnumerable<String> | GlobalDataFlow.cs:82:23:82:74 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:81:15:81:20 | access to local variable sink13 : IEnumerable<String> | GlobalDataFlow.cs:82:23:82:74 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:81:15:81:20 | access to local variable sink13 : IEnumerable<String> | GlobalDataFlow.cs:82:44:82:74 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:81:15:81:20 | access to local variable sink13 : IEnumerable<String> | GlobalDataFlow.cs:82:44:82:74 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:81:15:81:20 | access to local variable sink13 : IEnumerable<String> | GlobalDataFlow.cs:82:59:82:64 | access to local variable sink13 |
|
||||
@@ -1529,7 +1529,7 @@
|
||||
| GlobalDataFlow.cs:81:15:81:20 | access to local variable sink13 : IEnumerable<String> | GlobalDataFlow.cs:82:59:82:72 | call to method First |
|
||||
| GlobalDataFlow.cs:81:15:81:20 | access to local variable sink13 : IEnumerable<String> | GlobalDataFlow.cs:82:59:82:72 | call to method First : String |
|
||||
| GlobalDataFlow.cs:81:15:81:20 | access to local variable sink13 : IEnumerable<T> | GlobalDataFlow.cs:82:23:82:74 | (...) ... |
|
||||
| GlobalDataFlow.cs:81:15:81:20 | access to local variable sink13 : IEnumerable<T> | GlobalDataFlow.cs:82:23:82:74 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:81:15:81:20 | access to local variable sink13 : IEnumerable<T> | GlobalDataFlow.cs:82:23:82:74 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:81:15:81:20 | access to local variable sink13 : IEnumerable<T> | GlobalDataFlow.cs:82:44:82:74 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:81:15:81:20 | access to local variable sink13 : IEnumerable<T> | GlobalDataFlow.cs:82:44:82:74 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:81:15:81:20 | access to local variable sink13 : IEnumerable<T> | GlobalDataFlow.cs:82:59:82:64 | access to local variable sink13 |
|
||||
@@ -1539,7 +1539,7 @@
|
||||
| GlobalDataFlow.cs:82:13:82:95 | SSA def(sink14) : IEnumerable<String> | GlobalDataFlow.cs:83:15:83:20 | access to local variable sink14 |
|
||||
| GlobalDataFlow.cs:82:13:82:95 | SSA def(sink14) : IEnumerable<String> | GlobalDataFlow.cs:83:15:83:20 | access to local variable sink14 : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:82:13:82:95 | SSA def(sink14) : IEnumerable<String> | GlobalDataFlow.cs:84:23:84:74 | (...) ... |
|
||||
| GlobalDataFlow.cs:82:13:82:95 | SSA def(sink14) : IEnumerable<String> | GlobalDataFlow.cs:84:23:84:74 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:82:13:82:95 | SSA def(sink14) : IEnumerable<String> | GlobalDataFlow.cs:84:23:84:74 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:82:13:82:95 | SSA def(sink14) : IEnumerable<String> | GlobalDataFlow.cs:84:44:84:74 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:82:13:82:95 | SSA def(sink14) : IEnumerable<String> | GlobalDataFlow.cs:84:44:84:74 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:82:13:82:95 | SSA def(sink14) : IEnumerable<String> | GlobalDataFlow.cs:84:59:84:64 | access to local variable sink14 |
|
||||
@@ -1553,7 +1553,7 @@
|
||||
| GlobalDataFlow.cs:82:13:82:95 | SSA def(sink14) : IEnumerable<String> | GlobalDataFlow.cs:90:75:90:88 | call to method First |
|
||||
| GlobalDataFlow.cs:82:13:82:95 | SSA def(sink14) : IEnumerable<String> | GlobalDataFlow.cs:90:75:90:88 | call to method First : String |
|
||||
| GlobalDataFlow.cs:82:13:82:95 | SSA def(sink14) : IEnumerable<String> | GlobalDataFlow.cs:116:21:116:72 | (...) ... |
|
||||
| GlobalDataFlow.cs:82:13:82:95 | SSA def(sink14) : IEnumerable<String> | GlobalDataFlow.cs:116:21:116:72 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:82:13:82:95 | SSA def(sink14) : IEnumerable<String> | GlobalDataFlow.cs:116:21:116:72 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:82:13:82:95 | SSA def(sink14) : IEnumerable<String> | GlobalDataFlow.cs:116:42:116:72 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:82:13:82:95 | SSA def(sink14) : IEnumerable<String> | GlobalDataFlow.cs:116:42:116:72 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:82:13:82:95 | SSA def(sink14) : IEnumerable<String> | GlobalDataFlow.cs:116:57:116:62 | access to local variable sink14 |
|
||||
@@ -1569,7 +1569,7 @@
|
||||
| GlobalDataFlow.cs:82:22:82:95 | call to method Select : IEnumerable<String> | GlobalDataFlow.cs:83:15:83:20 | access to local variable sink14 |
|
||||
| GlobalDataFlow.cs:82:22:82:95 | call to method Select : IEnumerable<String> | GlobalDataFlow.cs:83:15:83:20 | access to local variable sink14 : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:82:22:82:95 | call to method Select : IEnumerable<String> | GlobalDataFlow.cs:84:23:84:74 | (...) ... |
|
||||
| GlobalDataFlow.cs:82:22:82:95 | call to method Select : IEnumerable<String> | GlobalDataFlow.cs:84:23:84:74 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:82:22:82:95 | call to method Select : IEnumerable<String> | GlobalDataFlow.cs:84:23:84:74 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:82:22:82:95 | call to method Select : IEnumerable<String> | GlobalDataFlow.cs:84:44:84:74 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:82:22:82:95 | call to method Select : IEnumerable<String> | GlobalDataFlow.cs:84:44:84:74 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:82:22:82:95 | call to method Select : IEnumerable<String> | GlobalDataFlow.cs:84:59:84:64 | access to local variable sink14 |
|
||||
@@ -1583,7 +1583,7 @@
|
||||
| GlobalDataFlow.cs:82:22:82:95 | call to method Select : IEnumerable<String> | GlobalDataFlow.cs:90:75:90:88 | call to method First |
|
||||
| GlobalDataFlow.cs:82:22:82:95 | call to method Select : IEnumerable<String> | GlobalDataFlow.cs:90:75:90:88 | call to method First : String |
|
||||
| GlobalDataFlow.cs:82:22:82:95 | call to method Select : IEnumerable<String> | GlobalDataFlow.cs:116:21:116:72 | (...) ... |
|
||||
| GlobalDataFlow.cs:82:22:82:95 | call to method Select : IEnumerable<String> | GlobalDataFlow.cs:116:21:116:72 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:82:22:82:95 | call to method Select : IEnumerable<String> | GlobalDataFlow.cs:116:21:116:72 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:82:22:82:95 | call to method Select : IEnumerable<String> | GlobalDataFlow.cs:116:42:116:72 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:82:22:82:95 | call to method Select : IEnumerable<String> | GlobalDataFlow.cs:116:42:116:72 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:82:22:82:95 | call to method Select : IEnumerable<String> | GlobalDataFlow.cs:116:57:116:62 | access to local variable sink14 |
|
||||
@@ -1605,19 +1605,19 @@
|
||||
| GlobalDataFlow.cs:82:44:82:74 | array creation of type String[] : String[] | GlobalDataFlow.cs:82:23:82:74 | (...) ... |
|
||||
| GlobalDataFlow.cs:82:44:82:74 | array creation of type String[] : String[] | GlobalDataFlow.cs:82:23:82:74 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:82:59:82:64 | access to local variable sink13 : IEnumerable<String> | GlobalDataFlow.cs:82:23:82:74 | (...) ... |
|
||||
| GlobalDataFlow.cs:82:59:82:64 | access to local variable sink13 : IEnumerable<String> | GlobalDataFlow.cs:82:23:82:74 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:82:59:82:64 | access to local variable sink13 : IEnumerable<String> | GlobalDataFlow.cs:82:23:82:74 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:82:59:82:64 | access to local variable sink13 : IEnumerable<String> | GlobalDataFlow.cs:82:44:82:74 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:82:59:82:64 | access to local variable sink13 : IEnumerable<String> | GlobalDataFlow.cs:82:44:82:74 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:82:59:82:64 | access to local variable sink13 : IEnumerable<String> | GlobalDataFlow.cs:82:59:82:72 | call to method First |
|
||||
| GlobalDataFlow.cs:82:59:82:64 | access to local variable sink13 : IEnumerable<String> | GlobalDataFlow.cs:82:59:82:72 | call to method First : String |
|
||||
| GlobalDataFlow.cs:82:59:82:64 | access to local variable sink13 : IEnumerable<T> | GlobalDataFlow.cs:82:23:82:74 | (...) ... |
|
||||
| GlobalDataFlow.cs:82:59:82:64 | access to local variable sink13 : IEnumerable<T> | GlobalDataFlow.cs:82:23:82:74 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:82:59:82:64 | access to local variable sink13 : IEnumerable<T> | GlobalDataFlow.cs:82:23:82:74 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:82:59:82:64 | access to local variable sink13 : IEnumerable<T> | GlobalDataFlow.cs:82:44:82:74 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:82:59:82:64 | access to local variable sink13 : IEnumerable<T> | GlobalDataFlow.cs:82:44:82:74 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:82:59:82:64 | access to local variable sink13 : IEnumerable<T> | GlobalDataFlow.cs:82:59:82:72 | call to method First |
|
||||
| GlobalDataFlow.cs:82:59:82:64 | access to local variable sink13 : IEnumerable<T> | GlobalDataFlow.cs:82:59:82:72 | call to method First : String |
|
||||
| GlobalDataFlow.cs:82:59:82:72 | call to method First : String | GlobalDataFlow.cs:82:23:82:74 | (...) ... |
|
||||
| GlobalDataFlow.cs:82:59:82:72 | call to method First : String | GlobalDataFlow.cs:82:23:82:74 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:82:59:82:72 | call to method First : String | GlobalDataFlow.cs:82:23:82:74 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:82:59:82:72 | call to method First : String | GlobalDataFlow.cs:82:44:82:74 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:82:59:82:72 | call to method First : String | GlobalDataFlow.cs:82:44:82:74 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:82:84:82:94 | [output] delegate creation of type Func<String,String> : String | GlobalDataFlow.cs:82:13:82:95 | SSA def(sink14) |
|
||||
@@ -1627,7 +1627,7 @@
|
||||
| GlobalDataFlow.cs:82:84:82:94 | [output] delegate creation of type Func<String,String> : String | GlobalDataFlow.cs:83:15:83:20 | access to local variable sink14 |
|
||||
| GlobalDataFlow.cs:82:84:82:94 | [output] delegate creation of type Func<String,String> : String | GlobalDataFlow.cs:83:15:83:20 | access to local variable sink14 : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:82:84:82:94 | [output] delegate creation of type Func<String,String> : String | GlobalDataFlow.cs:84:23:84:74 | (...) ... |
|
||||
| GlobalDataFlow.cs:82:84:82:94 | [output] delegate creation of type Func<String,String> : String | GlobalDataFlow.cs:84:23:84:74 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:82:84:82:94 | [output] delegate creation of type Func<String,String> : String | GlobalDataFlow.cs:84:23:84:74 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:82:84:82:94 | [output] delegate creation of type Func<String,String> : String | GlobalDataFlow.cs:84:44:84:74 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:82:84:82:94 | [output] delegate creation of type Func<String,String> : String | GlobalDataFlow.cs:84:44:84:74 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:82:84:82:94 | [output] delegate creation of type Func<String,String> : String | GlobalDataFlow.cs:84:59:84:64 | access to local variable sink14 |
|
||||
@@ -1641,7 +1641,7 @@
|
||||
| GlobalDataFlow.cs:82:84:82:94 | [output] delegate creation of type Func<String,String> : String | GlobalDataFlow.cs:90:75:90:88 | call to method First |
|
||||
| GlobalDataFlow.cs:82:84:82:94 | [output] delegate creation of type Func<String,String> : String | GlobalDataFlow.cs:90:75:90:88 | call to method First : String |
|
||||
| GlobalDataFlow.cs:82:84:82:94 | [output] delegate creation of type Func<String,String> : String | GlobalDataFlow.cs:116:21:116:72 | (...) ... |
|
||||
| GlobalDataFlow.cs:82:84:82:94 | [output] delegate creation of type Func<String,String> : String | GlobalDataFlow.cs:116:21:116:72 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:82:84:82:94 | [output] delegate creation of type Func<String,String> : String | GlobalDataFlow.cs:116:21:116:72 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:82:84:82:94 | [output] delegate creation of type Func<String,String> : String | GlobalDataFlow.cs:116:42:116:72 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:82:84:82:94 | [output] delegate creation of type Func<String,String> : String | GlobalDataFlow.cs:116:42:116:72 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:82:84:82:94 | [output] delegate creation of type Func<String,String> : String | GlobalDataFlow.cs:116:57:116:62 | access to local variable sink14 |
|
||||
@@ -1659,7 +1659,7 @@
|
||||
| GlobalDataFlow.cs:82:84:82:94 | [output] delegate creation of type Func<String,String> : T | GlobalDataFlow.cs:83:15:83:20 | access to local variable sink14 |
|
||||
| GlobalDataFlow.cs:82:84:82:94 | [output] delegate creation of type Func<String,String> : T | GlobalDataFlow.cs:83:15:83:20 | access to local variable sink14 : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:82:84:82:94 | [output] delegate creation of type Func<String,String> : T | GlobalDataFlow.cs:84:23:84:74 | (...) ... |
|
||||
| GlobalDataFlow.cs:82:84:82:94 | [output] delegate creation of type Func<String,String> : T | GlobalDataFlow.cs:84:23:84:74 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:82:84:82:94 | [output] delegate creation of type Func<String,String> : T | GlobalDataFlow.cs:84:23:84:74 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:82:84:82:94 | [output] delegate creation of type Func<String,String> : T | GlobalDataFlow.cs:84:44:84:74 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:82:84:82:94 | [output] delegate creation of type Func<String,String> : T | GlobalDataFlow.cs:84:44:84:74 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:82:84:82:94 | [output] delegate creation of type Func<String,String> : T | GlobalDataFlow.cs:84:59:84:64 | access to local variable sink14 |
|
||||
@@ -1673,7 +1673,7 @@
|
||||
| GlobalDataFlow.cs:82:84:82:94 | [output] delegate creation of type Func<String,String> : T | GlobalDataFlow.cs:90:75:90:88 | call to method First |
|
||||
| GlobalDataFlow.cs:82:84:82:94 | [output] delegate creation of type Func<String,String> : T | GlobalDataFlow.cs:90:75:90:88 | call to method First : String |
|
||||
| GlobalDataFlow.cs:82:84:82:94 | [output] delegate creation of type Func<String,String> : T | GlobalDataFlow.cs:116:21:116:72 | (...) ... |
|
||||
| GlobalDataFlow.cs:82:84:82:94 | [output] delegate creation of type Func<String,String> : T | GlobalDataFlow.cs:116:21:116:72 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:82:84:82:94 | [output] delegate creation of type Func<String,String> : T | GlobalDataFlow.cs:116:21:116:72 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:82:84:82:94 | [output] delegate creation of type Func<String,String> : T | GlobalDataFlow.cs:116:42:116:72 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:82:84:82:94 | [output] delegate creation of type Func<String,String> : T | GlobalDataFlow.cs:116:42:116:72 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:82:84:82:94 | [output] delegate creation of type Func<String,String> : T | GlobalDataFlow.cs:116:57:116:62 | access to local variable sink14 |
|
||||
@@ -1685,7 +1685,7 @@
|
||||
| GlobalDataFlow.cs:82:84:82:94 | [output] delegate creation of type Func<String,String> : T | GlobalDataFlow.cs:122:20:122:25 | access to local variable sink14 |
|
||||
| GlobalDataFlow.cs:82:84:82:94 | [output] delegate creation of type Func<String,String> : T | GlobalDataFlow.cs:122:20:122:25 | access to local variable sink14 : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:83:15:83:20 | access to local variable sink14 : IEnumerable<String> | GlobalDataFlow.cs:84:23:84:74 | (...) ... |
|
||||
| GlobalDataFlow.cs:83:15:83:20 | access to local variable sink14 : IEnumerable<String> | GlobalDataFlow.cs:84:23:84:74 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:83:15:83:20 | access to local variable sink14 : IEnumerable<String> | GlobalDataFlow.cs:84:23:84:74 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:83:15:83:20 | access to local variable sink14 : IEnumerable<String> | GlobalDataFlow.cs:84:44:84:74 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:83:15:83:20 | access to local variable sink14 : IEnumerable<String> | GlobalDataFlow.cs:84:44:84:74 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:83:15:83:20 | access to local variable sink14 : IEnumerable<String> | GlobalDataFlow.cs:84:59:84:64 | access to local variable sink14 |
|
||||
@@ -1699,7 +1699,7 @@
|
||||
| GlobalDataFlow.cs:83:15:83:20 | access to local variable sink14 : IEnumerable<String> | GlobalDataFlow.cs:90:75:90:88 | call to method First |
|
||||
| GlobalDataFlow.cs:83:15:83:20 | access to local variable sink14 : IEnumerable<String> | GlobalDataFlow.cs:90:75:90:88 | call to method First : String |
|
||||
| GlobalDataFlow.cs:83:15:83:20 | access to local variable sink14 : IEnumerable<String> | GlobalDataFlow.cs:116:21:116:72 | (...) ... |
|
||||
| GlobalDataFlow.cs:83:15:83:20 | access to local variable sink14 : IEnumerable<String> | GlobalDataFlow.cs:116:21:116:72 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:83:15:83:20 | access to local variable sink14 : IEnumerable<String> | GlobalDataFlow.cs:116:21:116:72 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:83:15:83:20 | access to local variable sink14 : IEnumerable<String> | GlobalDataFlow.cs:116:42:116:72 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:83:15:83:20 | access to local variable sink14 : IEnumerable<String> | GlobalDataFlow.cs:116:42:116:72 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:83:15:83:20 | access to local variable sink14 : IEnumerable<String> | GlobalDataFlow.cs:116:57:116:62 | access to local variable sink14 |
|
||||
@@ -1713,7 +1713,7 @@
|
||||
| GlobalDataFlow.cs:84:13:84:136 | SSA def(sink15) : IEnumerable<String> | GlobalDataFlow.cs:85:15:85:20 | access to local variable sink15 |
|
||||
| GlobalDataFlow.cs:84:13:84:136 | SSA def(sink15) : IEnumerable<String> | GlobalDataFlow.cs:85:15:85:20 | access to local variable sink15 : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:84:13:84:136 | SSA def(sink15) : IEnumerable<String> | GlobalDataFlow.cs:86:70:86:121 | (...) ... |
|
||||
| GlobalDataFlow.cs:84:13:84:136 | SSA def(sink15) : IEnumerable<String> | GlobalDataFlow.cs:86:70:86:121 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:84:13:84:136 | SSA def(sink15) : IEnumerable<String> | GlobalDataFlow.cs:86:70:86:121 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:84:13:84:136 | SSA def(sink15) : IEnumerable<String> | GlobalDataFlow.cs:86:91:86:121 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:84:13:84:136 | SSA def(sink15) : IEnumerable<String> | GlobalDataFlow.cs:86:91:86:121 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:84:13:84:136 | SSA def(sink15) : IEnumerable<String> | GlobalDataFlow.cs:86:106:86:111 | access to local variable sink15 |
|
||||
@@ -1721,7 +1721,7 @@
|
||||
| GlobalDataFlow.cs:84:13:84:136 | SSA def(sink15) : IEnumerable<String> | GlobalDataFlow.cs:86:106:86:119 | call to method First |
|
||||
| GlobalDataFlow.cs:84:13:84:136 | SSA def(sink15) : IEnumerable<String> | GlobalDataFlow.cs:86:106:86:119 | call to method First : String |
|
||||
| GlobalDataFlow.cs:84:13:84:136 | SSA def(sink15) : IEnumerable<String> | GlobalDataFlow.cs:118:68:118:119 | (...) ... |
|
||||
| GlobalDataFlow.cs:84:13:84:136 | SSA def(sink15) : IEnumerable<String> | GlobalDataFlow.cs:118:68:118:119 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:84:13:84:136 | SSA def(sink15) : IEnumerable<String> | GlobalDataFlow.cs:118:68:118:119 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:84:13:84:136 | SSA def(sink15) : IEnumerable<String> | GlobalDataFlow.cs:118:89:118:119 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:84:13:84:136 | SSA def(sink15) : IEnumerable<String> | GlobalDataFlow.cs:118:89:118:119 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:84:13:84:136 | SSA def(sink15) : IEnumerable<String> | GlobalDataFlow.cs:118:104:118:109 | access to local variable sink15 |
|
||||
@@ -1733,7 +1733,7 @@
|
||||
| GlobalDataFlow.cs:84:22:84:136 | call to method Zip : IEnumerable<String> | GlobalDataFlow.cs:85:15:85:20 | access to local variable sink15 |
|
||||
| GlobalDataFlow.cs:84:22:84:136 | call to method Zip : IEnumerable<String> | GlobalDataFlow.cs:85:15:85:20 | access to local variable sink15 : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:84:22:84:136 | call to method Zip : IEnumerable<String> | GlobalDataFlow.cs:86:70:86:121 | (...) ... |
|
||||
| GlobalDataFlow.cs:84:22:84:136 | call to method Zip : IEnumerable<String> | GlobalDataFlow.cs:86:70:86:121 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:84:22:84:136 | call to method Zip : IEnumerable<String> | GlobalDataFlow.cs:86:70:86:121 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:84:22:84:136 | call to method Zip : IEnumerable<String> | GlobalDataFlow.cs:86:91:86:121 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:84:22:84:136 | call to method Zip : IEnumerable<String> | GlobalDataFlow.cs:86:91:86:121 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:84:22:84:136 | call to method Zip : IEnumerable<String> | GlobalDataFlow.cs:86:106:86:111 | access to local variable sink15 |
|
||||
@@ -1741,7 +1741,7 @@
|
||||
| GlobalDataFlow.cs:84:22:84:136 | call to method Zip : IEnumerable<String> | GlobalDataFlow.cs:86:106:86:119 | call to method First |
|
||||
| GlobalDataFlow.cs:84:22:84:136 | call to method Zip : IEnumerable<String> | GlobalDataFlow.cs:86:106:86:119 | call to method First : String |
|
||||
| GlobalDataFlow.cs:84:22:84:136 | call to method Zip : IEnumerable<String> | GlobalDataFlow.cs:118:68:118:119 | (...) ... |
|
||||
| GlobalDataFlow.cs:84:22:84:136 | call to method Zip : IEnumerable<String> | GlobalDataFlow.cs:118:68:118:119 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:84:22:84:136 | call to method Zip : IEnumerable<String> | GlobalDataFlow.cs:118:68:118:119 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:84:22:84:136 | call to method Zip : IEnumerable<String> | GlobalDataFlow.cs:118:89:118:119 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:84:22:84:136 | call to method Zip : IEnumerable<String> | GlobalDataFlow.cs:118:89:118:119 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:84:22:84:136 | call to method Zip : IEnumerable<String> | GlobalDataFlow.cs:118:104:118:109 | access to local variable sink15 |
|
||||
@@ -1759,7 +1759,7 @@
|
||||
| GlobalDataFlow.cs:84:44:84:74 | array creation of type String[] : String[] | GlobalDataFlow.cs:84:23:84:74 | (...) ... |
|
||||
| GlobalDataFlow.cs:84:44:84:74 | array creation of type String[] : String[] | GlobalDataFlow.cs:84:23:84:74 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:84:59:84:64 | access to local variable sink14 : IEnumerable<String> | GlobalDataFlow.cs:84:23:84:74 | (...) ... |
|
||||
| GlobalDataFlow.cs:84:59:84:64 | access to local variable sink14 : IEnumerable<String> | GlobalDataFlow.cs:84:23:84:74 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:84:59:84:64 | access to local variable sink14 : IEnumerable<String> | GlobalDataFlow.cs:84:23:84:74 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:84:59:84:64 | access to local variable sink14 : IEnumerable<String> | GlobalDataFlow.cs:84:44:84:74 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:84:59:84:64 | access to local variable sink14 : IEnumerable<String> | GlobalDataFlow.cs:84:44:84:74 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:84:59:84:64 | access to local variable sink14 : IEnumerable<String> | GlobalDataFlow.cs:84:59:84:72 | call to method First |
|
||||
@@ -1771,7 +1771,7 @@
|
||||
| GlobalDataFlow.cs:84:59:84:64 | access to local variable sink14 : IEnumerable<String> | GlobalDataFlow.cs:90:75:90:88 | call to method First |
|
||||
| GlobalDataFlow.cs:84:59:84:64 | access to local variable sink14 : IEnumerable<String> | GlobalDataFlow.cs:90:75:90:88 | call to method First : String |
|
||||
| GlobalDataFlow.cs:84:59:84:64 | access to local variable sink14 : IEnumerable<String> | GlobalDataFlow.cs:116:21:116:72 | (...) ... |
|
||||
| GlobalDataFlow.cs:84:59:84:64 | access to local variable sink14 : IEnumerable<String> | GlobalDataFlow.cs:116:21:116:72 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:84:59:84:64 | access to local variable sink14 : IEnumerable<String> | GlobalDataFlow.cs:116:21:116:72 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:84:59:84:64 | access to local variable sink14 : IEnumerable<String> | GlobalDataFlow.cs:116:42:116:72 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:84:59:84:64 | access to local variable sink14 : IEnumerable<String> | GlobalDataFlow.cs:116:42:116:72 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:84:59:84:64 | access to local variable sink14 : IEnumerable<String> | GlobalDataFlow.cs:116:57:116:62 | access to local variable sink14 |
|
||||
@@ -1783,13 +1783,13 @@
|
||||
| GlobalDataFlow.cs:84:59:84:64 | access to local variable sink14 : IEnumerable<String> | GlobalDataFlow.cs:122:20:122:25 | access to local variable sink14 |
|
||||
| GlobalDataFlow.cs:84:59:84:64 | access to local variable sink14 : IEnumerable<String> | GlobalDataFlow.cs:122:20:122:25 | access to local variable sink14 : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:84:59:84:72 | call to method First : String | GlobalDataFlow.cs:84:23:84:74 | (...) ... |
|
||||
| GlobalDataFlow.cs:84:59:84:72 | call to method First : String | GlobalDataFlow.cs:84:23:84:74 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:84:59:84:72 | call to method First : String | GlobalDataFlow.cs:84:23:84:74 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:84:59:84:72 | call to method First : String | GlobalDataFlow.cs:84:44:84:74 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:84:59:84:72 | call to method First : String | GlobalDataFlow.cs:84:44:84:74 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:84:103:84:121 | array creation of type String[] : String[] | GlobalDataFlow.cs:84:82:84:121 | (...) ... |
|
||||
| GlobalDataFlow.cs:84:103:84:121 | array creation of type String[] : String[] | GlobalDataFlow.cs:84:82:84:121 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:84:118:84:119 | "" : String | GlobalDataFlow.cs:84:82:84:121 | (...) ... |
|
||||
| GlobalDataFlow.cs:84:118:84:119 | "" : String | GlobalDataFlow.cs:84:82:84:121 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:84:118:84:119 | "" : String | GlobalDataFlow.cs:84:82:84:121 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:84:118:84:119 | "" : String | GlobalDataFlow.cs:84:103:84:121 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:84:118:84:119 | "" : String | GlobalDataFlow.cs:84:103:84:121 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:84:125:84:135 | [output] (...) => ... : String | GlobalDataFlow.cs:84:13:84:136 | SSA def(sink15) |
|
||||
@@ -1799,7 +1799,7 @@
|
||||
| GlobalDataFlow.cs:84:125:84:135 | [output] (...) => ... : String | GlobalDataFlow.cs:85:15:85:20 | access to local variable sink15 |
|
||||
| GlobalDataFlow.cs:84:125:84:135 | [output] (...) => ... : String | GlobalDataFlow.cs:85:15:85:20 | access to local variable sink15 : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:84:125:84:135 | [output] (...) => ... : String | GlobalDataFlow.cs:86:70:86:121 | (...) ... |
|
||||
| GlobalDataFlow.cs:84:125:84:135 | [output] (...) => ... : String | GlobalDataFlow.cs:86:70:86:121 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:84:125:84:135 | [output] (...) => ... : String | GlobalDataFlow.cs:86:70:86:121 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:84:125:84:135 | [output] (...) => ... : String | GlobalDataFlow.cs:86:91:86:121 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:84:125:84:135 | [output] (...) => ... : String | GlobalDataFlow.cs:86:91:86:121 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:84:125:84:135 | [output] (...) => ... : String | GlobalDataFlow.cs:86:106:86:111 | access to local variable sink15 |
|
||||
@@ -1807,7 +1807,7 @@
|
||||
| GlobalDataFlow.cs:84:125:84:135 | [output] (...) => ... : String | GlobalDataFlow.cs:86:106:86:119 | call to method First |
|
||||
| GlobalDataFlow.cs:84:125:84:135 | [output] (...) => ... : String | GlobalDataFlow.cs:86:106:86:119 | call to method First : String |
|
||||
| GlobalDataFlow.cs:84:125:84:135 | [output] (...) => ... : String | GlobalDataFlow.cs:118:68:118:119 | (...) ... |
|
||||
| GlobalDataFlow.cs:84:125:84:135 | [output] (...) => ... : String | GlobalDataFlow.cs:118:68:118:119 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:84:125:84:135 | [output] (...) => ... : String | GlobalDataFlow.cs:118:68:118:119 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:84:125:84:135 | [output] (...) => ... : String | GlobalDataFlow.cs:118:89:118:119 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:84:125:84:135 | [output] (...) => ... : String | GlobalDataFlow.cs:118:89:118:119 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:84:125:84:135 | [output] (...) => ... : String | GlobalDataFlow.cs:118:104:118:109 | access to local variable sink15 |
|
||||
@@ -1835,7 +1835,7 @@
|
||||
| GlobalDataFlow.cs:84:135:84:135 | access to parameter x : String | GlobalDataFlow.cs:84:125:84:135 | [output] (...) => ... |
|
||||
| GlobalDataFlow.cs:84:135:84:135 | access to parameter x : String | GlobalDataFlow.cs:84:125:84:135 | [output] (...) => ... : String |
|
||||
| GlobalDataFlow.cs:85:15:85:20 | access to local variable sink15 : IEnumerable<String> | GlobalDataFlow.cs:86:70:86:121 | (...) ... |
|
||||
| GlobalDataFlow.cs:85:15:85:20 | access to local variable sink15 : IEnumerable<String> | GlobalDataFlow.cs:86:70:86:121 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:85:15:85:20 | access to local variable sink15 : IEnumerable<String> | GlobalDataFlow.cs:86:70:86:121 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:85:15:85:20 | access to local variable sink15 : IEnumerable<String> | GlobalDataFlow.cs:86:91:86:121 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:85:15:85:20 | access to local variable sink15 : IEnumerable<String> | GlobalDataFlow.cs:86:91:86:121 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:85:15:85:20 | access to local variable sink15 : IEnumerable<String> | GlobalDataFlow.cs:86:106:86:111 | access to local variable sink15 |
|
||||
@@ -1843,7 +1843,7 @@
|
||||
| GlobalDataFlow.cs:85:15:85:20 | access to local variable sink15 : IEnumerable<String> | GlobalDataFlow.cs:86:106:86:119 | call to method First |
|
||||
| GlobalDataFlow.cs:85:15:85:20 | access to local variable sink15 : IEnumerable<String> | GlobalDataFlow.cs:86:106:86:119 | call to method First : String |
|
||||
| GlobalDataFlow.cs:85:15:85:20 | access to local variable sink15 : IEnumerable<String> | GlobalDataFlow.cs:118:68:118:119 | (...) ... |
|
||||
| GlobalDataFlow.cs:85:15:85:20 | access to local variable sink15 : IEnumerable<String> | GlobalDataFlow.cs:118:68:118:119 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:85:15:85:20 | access to local variable sink15 : IEnumerable<String> | GlobalDataFlow.cs:118:68:118:119 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:85:15:85:20 | access to local variable sink15 : IEnumerable<String> | GlobalDataFlow.cs:118:89:118:119 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:85:15:85:20 | access to local variable sink15 : IEnumerable<String> | GlobalDataFlow.cs:118:89:118:119 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:85:15:85:20 | access to local variable sink15 : IEnumerable<String> | GlobalDataFlow.cs:118:104:118:109 | access to local variable sink15 |
|
||||
@@ -1859,7 +1859,7 @@
|
||||
| GlobalDataFlow.cs:86:44:86:62 | array creation of type String[] : String[] | GlobalDataFlow.cs:86:23:86:62 | (...) ... |
|
||||
| GlobalDataFlow.cs:86:44:86:62 | array creation of type String[] : String[] | GlobalDataFlow.cs:86:23:86:62 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:86:59:86:60 | "" : String | GlobalDataFlow.cs:86:23:86:62 | (...) ... |
|
||||
| GlobalDataFlow.cs:86:59:86:60 | "" : String | GlobalDataFlow.cs:86:23:86:62 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:86:59:86:60 | "" : String | GlobalDataFlow.cs:86:23:86:62 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:86:59:86:60 | "" : String | GlobalDataFlow.cs:86:44:86:62 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:86:59:86:60 | "" : String | GlobalDataFlow.cs:86:44:86:62 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:86:70:86:121 | (...) ... : IEnumerable<String> | GlobalDataFlow.cs:86:125:86:135 | [output] (...) => ... |
|
||||
@@ -1873,13 +1873,13 @@
|
||||
| GlobalDataFlow.cs:86:91:86:121 | array creation of type String[] : String[] | GlobalDataFlow.cs:86:70:86:121 | (...) ... |
|
||||
| GlobalDataFlow.cs:86:91:86:121 | array creation of type String[] : String[] | GlobalDataFlow.cs:86:70:86:121 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:86:106:86:111 | access to local variable sink15 : IEnumerable<String> | GlobalDataFlow.cs:86:70:86:121 | (...) ... |
|
||||
| GlobalDataFlow.cs:86:106:86:111 | access to local variable sink15 : IEnumerable<String> | GlobalDataFlow.cs:86:70:86:121 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:86:106:86:111 | access to local variable sink15 : IEnumerable<String> | GlobalDataFlow.cs:86:70:86:121 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:86:106:86:111 | access to local variable sink15 : IEnumerable<String> | GlobalDataFlow.cs:86:91:86:121 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:86:106:86:111 | access to local variable sink15 : IEnumerable<String> | GlobalDataFlow.cs:86:91:86:121 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:86:106:86:111 | access to local variable sink15 : IEnumerable<String> | GlobalDataFlow.cs:86:106:86:119 | call to method First |
|
||||
| GlobalDataFlow.cs:86:106:86:111 | access to local variable sink15 : IEnumerable<String> | GlobalDataFlow.cs:86:106:86:119 | call to method First : String |
|
||||
| GlobalDataFlow.cs:86:106:86:111 | access to local variable sink15 : IEnumerable<String> | GlobalDataFlow.cs:118:68:118:119 | (...) ... |
|
||||
| GlobalDataFlow.cs:86:106:86:111 | access to local variable sink15 : IEnumerable<String> | GlobalDataFlow.cs:118:68:118:119 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:86:106:86:111 | access to local variable sink15 : IEnumerable<String> | GlobalDataFlow.cs:118:68:118:119 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:86:106:86:111 | access to local variable sink15 : IEnumerable<String> | GlobalDataFlow.cs:118:89:118:119 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:86:106:86:111 | access to local variable sink15 : IEnumerable<String> | GlobalDataFlow.cs:118:89:118:119 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:86:106:86:111 | access to local variable sink15 : IEnumerable<String> | GlobalDataFlow.cs:118:104:118:109 | access to local variable sink15 |
|
||||
@@ -1887,7 +1887,7 @@
|
||||
| GlobalDataFlow.cs:86:106:86:111 | access to local variable sink15 : IEnumerable<String> | GlobalDataFlow.cs:118:104:118:117 | call to method First |
|
||||
| GlobalDataFlow.cs:86:106:86:111 | access to local variable sink15 : IEnumerable<String> | GlobalDataFlow.cs:118:104:118:117 | call to method First : String |
|
||||
| GlobalDataFlow.cs:86:106:86:119 | call to method First : String | GlobalDataFlow.cs:86:70:86:121 | (...) ... |
|
||||
| GlobalDataFlow.cs:86:106:86:119 | call to method First : String | GlobalDataFlow.cs:86:70:86:121 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:86:106:86:119 | call to method First : String | GlobalDataFlow.cs:86:70:86:121 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:86:106:86:119 | call to method First : String | GlobalDataFlow.cs:86:91:86:121 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:86:106:86:119 | call to method First : String | GlobalDataFlow.cs:86:91:86:121 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:86:125:86:135 | [output] (...) => ... : String | GlobalDataFlow.cs:86:13:86:136 | SSA def(sink16) |
|
||||
@@ -1927,7 +1927,7 @@
|
||||
| GlobalDataFlow.cs:88:22:88:27 | access to local variable sink14 : IEnumerable<String> | GlobalDataFlow.cs:90:75:90:88 | call to method First |
|
||||
| GlobalDataFlow.cs:88:22:88:27 | access to local variable sink14 : IEnumerable<String> | GlobalDataFlow.cs:90:75:90:88 | call to method First : String |
|
||||
| GlobalDataFlow.cs:88:22:88:27 | access to local variable sink14 : IEnumerable<String> | GlobalDataFlow.cs:116:21:116:72 | (...) ... |
|
||||
| GlobalDataFlow.cs:88:22:88:27 | access to local variable sink14 : IEnumerable<String> | GlobalDataFlow.cs:116:21:116:72 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:88:22:88:27 | access to local variable sink14 : IEnumerable<String> | GlobalDataFlow.cs:116:21:116:72 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:88:22:88:27 | access to local variable sink14 : IEnumerable<String> | GlobalDataFlow.cs:116:42:116:72 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:88:22:88:27 | access to local variable sink14 : IEnumerable<String> | GlobalDataFlow.cs:116:42:116:72 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:88:22:88:27 | access to local variable sink14 : IEnumerable<String> | GlobalDataFlow.cs:116:57:116:62 | access to local variable sink14 |
|
||||
@@ -2069,13 +2069,13 @@
|
||||
| GlobalDataFlow.cs:90:44:90:62 | array creation of type String[] : String[] | GlobalDataFlow.cs:90:23:90:62 | (...) ... |
|
||||
| GlobalDataFlow.cs:90:44:90:62 | array creation of type String[] : String[] | GlobalDataFlow.cs:90:23:90:62 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:90:59:90:60 | "" : String | GlobalDataFlow.cs:90:23:90:62 | (...) ... |
|
||||
| GlobalDataFlow.cs:90:59:90:60 | "" : String | GlobalDataFlow.cs:90:23:90:62 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:90:59:90:60 | "" : String | GlobalDataFlow.cs:90:23:90:62 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:90:59:90:60 | "" : String | GlobalDataFlow.cs:90:44:90:62 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:90:59:90:60 | "" : String | GlobalDataFlow.cs:90:44:90:62 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:90:75:90:80 | access to local variable sink14 : IEnumerable<String> | GlobalDataFlow.cs:90:75:90:88 | call to method First |
|
||||
| GlobalDataFlow.cs:90:75:90:80 | access to local variable sink14 : IEnumerable<String> | GlobalDataFlow.cs:90:75:90:88 | call to method First : String |
|
||||
| GlobalDataFlow.cs:90:75:90:80 | access to local variable sink14 : IEnumerable<String> | GlobalDataFlow.cs:116:21:116:72 | (...) ... |
|
||||
| GlobalDataFlow.cs:90:75:90:80 | access to local variable sink14 : IEnumerable<String> | GlobalDataFlow.cs:116:21:116:72 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:90:75:90:80 | access to local variable sink14 : IEnumerable<String> | GlobalDataFlow.cs:116:21:116:72 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:90:75:90:80 | access to local variable sink14 : IEnumerable<String> | GlobalDataFlow.cs:116:42:116:72 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:90:75:90:80 | access to local variable sink14 : IEnumerable<String> | GlobalDataFlow.cs:116:42:116:72 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:90:75:90:80 | access to local variable sink14 : IEnumerable<String> | GlobalDataFlow.cs:116:57:116:62 | access to local variable sink14 |
|
||||
@@ -2365,13 +2365,13 @@
|
||||
| GlobalDataFlow.cs:108:27:108:34 | SSA def(nonSink0) : String | GlobalDataFlow.cs:111:15:111:22 | access to local variable nonSink0 |
|
||||
| GlobalDataFlow.cs:108:27:108:34 | SSA def(nonSink0) : String | GlobalDataFlow.cs:111:15:111:22 | access to local variable nonSink0 : String |
|
||||
| GlobalDataFlow.cs:108:27:108:34 | SSA def(nonSink0) : String | GlobalDataFlow.cs:112:25:112:70 | (...) ... |
|
||||
| GlobalDataFlow.cs:108:27:108:34 | SSA def(nonSink0) : String | GlobalDataFlow.cs:112:25:112:70 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:108:27:108:34 | SSA def(nonSink0) : String | GlobalDataFlow.cs:112:25:112:70 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:108:27:108:34 | SSA def(nonSink0) : String | GlobalDataFlow.cs:112:46:112:70 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:108:27:108:34 | SSA def(nonSink0) : String | GlobalDataFlow.cs:112:46:112:70 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:108:27:108:34 | SSA def(nonSink0) : String | GlobalDataFlow.cs:112:61:112:68 | access to local variable nonSink0 |
|
||||
| GlobalDataFlow.cs:108:27:108:34 | SSA def(nonSink0) : String | GlobalDataFlow.cs:112:61:112:68 | access to local variable nonSink0 : String |
|
||||
| GlobalDataFlow.cs:108:27:108:34 | SSA def(nonSink0) : String | GlobalDataFlow.cs:114:21:114:66 | (...) ... |
|
||||
| GlobalDataFlow.cs:108:27:108:34 | SSA def(nonSink0) : String | GlobalDataFlow.cs:114:21:114:66 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:108:27:108:34 | SSA def(nonSink0) : String | GlobalDataFlow.cs:114:21:114:66 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:108:27:108:34 | SSA def(nonSink0) : String | GlobalDataFlow.cs:114:42:114:66 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:108:27:108:34 | SSA def(nonSink0) : String | GlobalDataFlow.cs:114:42:114:66 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:108:27:108:34 | SSA def(nonSink0) : String | GlobalDataFlow.cs:114:57:114:64 | access to local variable nonSink0 |
|
||||
@@ -2383,13 +2383,13 @@
|
||||
| GlobalDataFlow.cs:108:27:108:34 | SSA def(nonSink0) : T | GlobalDataFlow.cs:111:15:111:22 | access to local variable nonSink0 |
|
||||
| GlobalDataFlow.cs:108:27:108:34 | SSA def(nonSink0) : T | GlobalDataFlow.cs:111:15:111:22 | access to local variable nonSink0 : T |
|
||||
| GlobalDataFlow.cs:108:27:108:34 | SSA def(nonSink0) : T | GlobalDataFlow.cs:112:25:112:70 | (...) ... |
|
||||
| GlobalDataFlow.cs:108:27:108:34 | SSA def(nonSink0) : T | GlobalDataFlow.cs:112:25:112:70 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:108:27:108:34 | SSA def(nonSink0) : T | GlobalDataFlow.cs:112:25:112:70 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:108:27:108:34 | SSA def(nonSink0) : T | GlobalDataFlow.cs:112:46:112:70 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:108:27:108:34 | SSA def(nonSink0) : T | GlobalDataFlow.cs:112:46:112:70 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:108:27:108:34 | SSA def(nonSink0) : T | GlobalDataFlow.cs:112:61:112:68 | access to local variable nonSink0 |
|
||||
| GlobalDataFlow.cs:108:27:108:34 | SSA def(nonSink0) : T | GlobalDataFlow.cs:112:61:112:68 | access to local variable nonSink0 : T |
|
||||
| GlobalDataFlow.cs:108:27:108:34 | SSA def(nonSink0) : T | GlobalDataFlow.cs:114:21:114:66 | (...) ... |
|
||||
| GlobalDataFlow.cs:108:27:108:34 | SSA def(nonSink0) : T | GlobalDataFlow.cs:114:21:114:66 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:108:27:108:34 | SSA def(nonSink0) : T | GlobalDataFlow.cs:114:21:114:66 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:108:27:108:34 | SSA def(nonSink0) : T | GlobalDataFlow.cs:114:42:114:66 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:108:27:108:34 | SSA def(nonSink0) : T | GlobalDataFlow.cs:114:42:114:66 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:108:27:108:34 | SSA def(nonSink0) : T | GlobalDataFlow.cs:114:57:114:64 | access to local variable nonSink0 |
|
||||
@@ -2407,13 +2407,13 @@
|
||||
| GlobalDataFlow.cs:109:15:109:22 | access to local variable nonSink0 : String | GlobalDataFlow.cs:111:15:111:22 | access to local variable nonSink0 |
|
||||
| GlobalDataFlow.cs:109:15:109:22 | access to local variable nonSink0 : String | GlobalDataFlow.cs:111:15:111:22 | access to local variable nonSink0 : String |
|
||||
| GlobalDataFlow.cs:109:15:109:22 | access to local variable nonSink0 : String | GlobalDataFlow.cs:112:25:112:70 | (...) ... |
|
||||
| GlobalDataFlow.cs:109:15:109:22 | access to local variable nonSink0 : String | GlobalDataFlow.cs:112:25:112:70 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:109:15:109:22 | access to local variable nonSink0 : String | GlobalDataFlow.cs:112:25:112:70 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:109:15:109:22 | access to local variable nonSink0 : String | GlobalDataFlow.cs:112:46:112:70 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:109:15:109:22 | access to local variable nonSink0 : String | GlobalDataFlow.cs:112:46:112:70 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:109:15:109:22 | access to local variable nonSink0 : String | GlobalDataFlow.cs:112:61:112:68 | access to local variable nonSink0 |
|
||||
| GlobalDataFlow.cs:109:15:109:22 | access to local variable nonSink0 : String | GlobalDataFlow.cs:112:61:112:68 | access to local variable nonSink0 : String |
|
||||
| GlobalDataFlow.cs:109:15:109:22 | access to local variable nonSink0 : String | GlobalDataFlow.cs:114:21:114:66 | (...) ... |
|
||||
| GlobalDataFlow.cs:109:15:109:22 | access to local variable nonSink0 : String | GlobalDataFlow.cs:114:21:114:66 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:109:15:109:22 | access to local variable nonSink0 : String | GlobalDataFlow.cs:114:21:114:66 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:109:15:109:22 | access to local variable nonSink0 : String | GlobalDataFlow.cs:114:42:114:66 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:109:15:109:22 | access to local variable nonSink0 : String | GlobalDataFlow.cs:114:42:114:66 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:109:15:109:22 | access to local variable nonSink0 : String | GlobalDataFlow.cs:114:57:114:64 | access to local variable nonSink0 |
|
||||
@@ -2423,13 +2423,13 @@
|
||||
| GlobalDataFlow.cs:109:15:109:22 | access to local variable nonSink0 : T | GlobalDataFlow.cs:111:15:111:22 | access to local variable nonSink0 |
|
||||
| GlobalDataFlow.cs:109:15:109:22 | access to local variable nonSink0 : T | GlobalDataFlow.cs:111:15:111:22 | access to local variable nonSink0 : T |
|
||||
| GlobalDataFlow.cs:109:15:109:22 | access to local variable nonSink0 : T | GlobalDataFlow.cs:112:25:112:70 | (...) ... |
|
||||
| GlobalDataFlow.cs:109:15:109:22 | access to local variable nonSink0 : T | GlobalDataFlow.cs:112:25:112:70 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:109:15:109:22 | access to local variable nonSink0 : T | GlobalDataFlow.cs:112:25:112:70 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:109:15:109:22 | access to local variable nonSink0 : T | GlobalDataFlow.cs:112:46:112:70 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:109:15:109:22 | access to local variable nonSink0 : T | GlobalDataFlow.cs:112:46:112:70 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:109:15:109:22 | access to local variable nonSink0 : T | GlobalDataFlow.cs:112:61:112:68 | access to local variable nonSink0 |
|
||||
| GlobalDataFlow.cs:109:15:109:22 | access to local variable nonSink0 : T | GlobalDataFlow.cs:112:61:112:68 | access to local variable nonSink0 : T |
|
||||
| GlobalDataFlow.cs:109:15:109:22 | access to local variable nonSink0 : T | GlobalDataFlow.cs:114:21:114:66 | (...) ... |
|
||||
| GlobalDataFlow.cs:109:15:109:22 | access to local variable nonSink0 : T | GlobalDataFlow.cs:114:21:114:66 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:109:15:109:22 | access to local variable nonSink0 : T | GlobalDataFlow.cs:114:21:114:66 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:109:15:109:22 | access to local variable nonSink0 : T | GlobalDataFlow.cs:114:42:114:66 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:109:15:109:22 | access to local variable nonSink0 : T | GlobalDataFlow.cs:114:42:114:66 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:109:15:109:22 | access to local variable nonSink0 : T | GlobalDataFlow.cs:114:57:114:64 | access to local variable nonSink0 |
|
||||
@@ -2461,13 +2461,13 @@
|
||||
| GlobalDataFlow.cs:110:41:110:48 | access to local variable nonSink0 : String | GlobalDataFlow.cs:111:15:111:22 | access to local variable nonSink0 |
|
||||
| GlobalDataFlow.cs:110:41:110:48 | access to local variable nonSink0 : String | GlobalDataFlow.cs:111:15:111:22 | access to local variable nonSink0 : String |
|
||||
| GlobalDataFlow.cs:110:41:110:48 | access to local variable nonSink0 : String | GlobalDataFlow.cs:112:25:112:70 | (...) ... |
|
||||
| GlobalDataFlow.cs:110:41:110:48 | access to local variable nonSink0 : String | GlobalDataFlow.cs:112:25:112:70 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:110:41:110:48 | access to local variable nonSink0 : String | GlobalDataFlow.cs:112:25:112:70 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:110:41:110:48 | access to local variable nonSink0 : String | GlobalDataFlow.cs:112:46:112:70 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:110:41:110:48 | access to local variable nonSink0 : String | GlobalDataFlow.cs:112:46:112:70 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:110:41:110:48 | access to local variable nonSink0 : String | GlobalDataFlow.cs:112:61:112:68 | access to local variable nonSink0 |
|
||||
| GlobalDataFlow.cs:110:41:110:48 | access to local variable nonSink0 : String | GlobalDataFlow.cs:112:61:112:68 | access to local variable nonSink0 : String |
|
||||
| GlobalDataFlow.cs:110:41:110:48 | access to local variable nonSink0 : String | GlobalDataFlow.cs:114:21:114:66 | (...) ... |
|
||||
| GlobalDataFlow.cs:110:41:110:48 | access to local variable nonSink0 : String | GlobalDataFlow.cs:114:21:114:66 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:110:41:110:48 | access to local variable nonSink0 : String | GlobalDataFlow.cs:114:21:114:66 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:110:41:110:48 | access to local variable nonSink0 : String | GlobalDataFlow.cs:114:42:114:66 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:110:41:110:48 | access to local variable nonSink0 : String | GlobalDataFlow.cs:114:42:114:66 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:110:41:110:48 | access to local variable nonSink0 : String | GlobalDataFlow.cs:114:57:114:64 | access to local variable nonSink0 |
|
||||
@@ -2477,13 +2477,13 @@
|
||||
| GlobalDataFlow.cs:110:41:110:48 | access to local variable nonSink0 : T | GlobalDataFlow.cs:111:15:111:22 | access to local variable nonSink0 |
|
||||
| GlobalDataFlow.cs:110:41:110:48 | access to local variable nonSink0 : T | GlobalDataFlow.cs:111:15:111:22 | access to local variable nonSink0 : T |
|
||||
| GlobalDataFlow.cs:110:41:110:48 | access to local variable nonSink0 : T | GlobalDataFlow.cs:112:25:112:70 | (...) ... |
|
||||
| GlobalDataFlow.cs:110:41:110:48 | access to local variable nonSink0 : T | GlobalDataFlow.cs:112:25:112:70 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:110:41:110:48 | access to local variable nonSink0 : T | GlobalDataFlow.cs:112:25:112:70 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:110:41:110:48 | access to local variable nonSink0 : T | GlobalDataFlow.cs:112:46:112:70 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:110:41:110:48 | access to local variable nonSink0 : T | GlobalDataFlow.cs:112:46:112:70 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:110:41:110:48 | access to local variable nonSink0 : T | GlobalDataFlow.cs:112:61:112:68 | access to local variable nonSink0 |
|
||||
| GlobalDataFlow.cs:110:41:110:48 | access to local variable nonSink0 : T | GlobalDataFlow.cs:112:61:112:68 | access to local variable nonSink0 : T |
|
||||
| GlobalDataFlow.cs:110:41:110:48 | access to local variable nonSink0 : T | GlobalDataFlow.cs:114:21:114:66 | (...) ... |
|
||||
| GlobalDataFlow.cs:110:41:110:48 | access to local variable nonSink0 : T | GlobalDataFlow.cs:114:21:114:66 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:110:41:110:48 | access to local variable nonSink0 : T | GlobalDataFlow.cs:114:21:114:66 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:110:41:110:48 | access to local variable nonSink0 : T | GlobalDataFlow.cs:114:42:114:66 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:110:41:110:48 | access to local variable nonSink0 : T | GlobalDataFlow.cs:114:42:114:66 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:110:41:110:48 | access to local variable nonSink0 : T | GlobalDataFlow.cs:114:57:114:64 | access to local variable nonSink0 |
|
||||
@@ -2491,25 +2491,25 @@
|
||||
| GlobalDataFlow.cs:110:41:110:48 | access to local variable nonSink0 : T | GlobalDataFlow.cs:287:50:287:50 | z |
|
||||
| GlobalDataFlow.cs:110:41:110:48 | access to local variable nonSink0 : T | GlobalDataFlow.cs:287:50:287:50 | z : T |
|
||||
| GlobalDataFlow.cs:111:15:111:22 | access to local variable nonSink0 : String | GlobalDataFlow.cs:112:25:112:70 | (...) ... |
|
||||
| GlobalDataFlow.cs:111:15:111:22 | access to local variable nonSink0 : String | GlobalDataFlow.cs:112:25:112:70 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:111:15:111:22 | access to local variable nonSink0 : String | GlobalDataFlow.cs:112:25:112:70 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:111:15:111:22 | access to local variable nonSink0 : String | GlobalDataFlow.cs:112:46:112:70 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:111:15:111:22 | access to local variable nonSink0 : String | GlobalDataFlow.cs:112:46:112:70 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:111:15:111:22 | access to local variable nonSink0 : String | GlobalDataFlow.cs:112:61:112:68 | access to local variable nonSink0 |
|
||||
| GlobalDataFlow.cs:111:15:111:22 | access to local variable nonSink0 : String | GlobalDataFlow.cs:112:61:112:68 | access to local variable nonSink0 : String |
|
||||
| GlobalDataFlow.cs:111:15:111:22 | access to local variable nonSink0 : String | GlobalDataFlow.cs:114:21:114:66 | (...) ... |
|
||||
| GlobalDataFlow.cs:111:15:111:22 | access to local variable nonSink0 : String | GlobalDataFlow.cs:114:21:114:66 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:111:15:111:22 | access to local variable nonSink0 : String | GlobalDataFlow.cs:114:21:114:66 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:111:15:111:22 | access to local variable nonSink0 : String | GlobalDataFlow.cs:114:42:114:66 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:111:15:111:22 | access to local variable nonSink0 : String | GlobalDataFlow.cs:114:42:114:66 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:111:15:111:22 | access to local variable nonSink0 : String | GlobalDataFlow.cs:114:57:114:64 | access to local variable nonSink0 |
|
||||
| GlobalDataFlow.cs:111:15:111:22 | access to local variable nonSink0 : String | GlobalDataFlow.cs:114:57:114:64 | access to local variable nonSink0 : String |
|
||||
| GlobalDataFlow.cs:111:15:111:22 | access to local variable nonSink0 : T | GlobalDataFlow.cs:112:25:112:70 | (...) ... |
|
||||
| GlobalDataFlow.cs:111:15:111:22 | access to local variable nonSink0 : T | GlobalDataFlow.cs:112:25:112:70 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:111:15:111:22 | access to local variable nonSink0 : T | GlobalDataFlow.cs:112:25:112:70 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:111:15:111:22 | access to local variable nonSink0 : T | GlobalDataFlow.cs:112:46:112:70 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:111:15:111:22 | access to local variable nonSink0 : T | GlobalDataFlow.cs:112:46:112:70 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:111:15:111:22 | access to local variable nonSink0 : T | GlobalDataFlow.cs:112:61:112:68 | access to local variable nonSink0 |
|
||||
| GlobalDataFlow.cs:111:15:111:22 | access to local variable nonSink0 : T | GlobalDataFlow.cs:112:61:112:68 | access to local variable nonSink0 : T |
|
||||
| GlobalDataFlow.cs:111:15:111:22 | access to local variable nonSink0 : T | GlobalDataFlow.cs:114:21:114:66 | (...) ... |
|
||||
| GlobalDataFlow.cs:111:15:111:22 | access to local variable nonSink0 : T | GlobalDataFlow.cs:114:21:114:66 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:111:15:111:22 | access to local variable nonSink0 : T | GlobalDataFlow.cs:114:21:114:66 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:111:15:111:22 | access to local variable nonSink0 : T | GlobalDataFlow.cs:114:42:114:66 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:111:15:111:22 | access to local variable nonSink0 : T | GlobalDataFlow.cs:114:42:114:66 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:111:15:111:22 | access to local variable nonSink0 : T | GlobalDataFlow.cs:114:57:114:64 | access to local variable nonSink0 |
|
||||
@@ -2537,21 +2537,21 @@
|
||||
| GlobalDataFlow.cs:112:46:112:70 | array creation of type String[] : String[] | GlobalDataFlow.cs:112:25:112:70 | (...) ... |
|
||||
| GlobalDataFlow.cs:112:46:112:70 | array creation of type String[] : String[] | GlobalDataFlow.cs:112:25:112:70 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:112:61:112:68 | access to local variable nonSink0 : String | GlobalDataFlow.cs:112:25:112:70 | (...) ... |
|
||||
| GlobalDataFlow.cs:112:61:112:68 | access to local variable nonSink0 : String | GlobalDataFlow.cs:112:25:112:70 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:112:61:112:68 | access to local variable nonSink0 : String | GlobalDataFlow.cs:112:25:112:70 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:112:61:112:68 | access to local variable nonSink0 : String | GlobalDataFlow.cs:112:46:112:70 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:112:61:112:68 | access to local variable nonSink0 : String | GlobalDataFlow.cs:112:46:112:70 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:112:61:112:68 | access to local variable nonSink0 : String | GlobalDataFlow.cs:114:21:114:66 | (...) ... |
|
||||
| GlobalDataFlow.cs:112:61:112:68 | access to local variable nonSink0 : String | GlobalDataFlow.cs:114:21:114:66 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:112:61:112:68 | access to local variable nonSink0 : String | GlobalDataFlow.cs:114:21:114:66 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:112:61:112:68 | access to local variable nonSink0 : String | GlobalDataFlow.cs:114:42:114:66 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:112:61:112:68 | access to local variable nonSink0 : String | GlobalDataFlow.cs:114:42:114:66 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:112:61:112:68 | access to local variable nonSink0 : String | GlobalDataFlow.cs:114:57:114:64 | access to local variable nonSink0 |
|
||||
| GlobalDataFlow.cs:112:61:112:68 | access to local variable nonSink0 : String | GlobalDataFlow.cs:114:57:114:64 | access to local variable nonSink0 : String |
|
||||
| GlobalDataFlow.cs:112:61:112:68 | access to local variable nonSink0 : T | GlobalDataFlow.cs:112:25:112:70 | (...) ... |
|
||||
| GlobalDataFlow.cs:112:61:112:68 | access to local variable nonSink0 : T | GlobalDataFlow.cs:112:25:112:70 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:112:61:112:68 | access to local variable nonSink0 : T | GlobalDataFlow.cs:112:25:112:70 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:112:61:112:68 | access to local variable nonSink0 : T | GlobalDataFlow.cs:112:46:112:70 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:112:61:112:68 | access to local variable nonSink0 : T | GlobalDataFlow.cs:112:46:112:70 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:112:61:112:68 | access to local variable nonSink0 : T | GlobalDataFlow.cs:114:21:114:66 | (...) ... |
|
||||
| GlobalDataFlow.cs:112:61:112:68 | access to local variable nonSink0 : T | GlobalDataFlow.cs:114:21:114:66 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:112:61:112:68 | access to local variable nonSink0 : T | GlobalDataFlow.cs:114:21:114:66 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:112:61:112:68 | access to local variable nonSink0 : T | GlobalDataFlow.cs:114:42:114:66 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:112:61:112:68 | access to local variable nonSink0 : T | GlobalDataFlow.cs:114:42:114:66 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:112:61:112:68 | access to local variable nonSink0 : T | GlobalDataFlow.cs:114:57:114:64 | access to local variable nonSink0 |
|
||||
@@ -2585,11 +2585,11 @@
|
||||
| GlobalDataFlow.cs:114:42:114:66 | array creation of type String[] : String[] | GlobalDataFlow.cs:114:21:114:66 | (...) ... |
|
||||
| GlobalDataFlow.cs:114:42:114:66 | array creation of type String[] : String[] | GlobalDataFlow.cs:114:21:114:66 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:114:57:114:64 | access to local variable nonSink0 : String | GlobalDataFlow.cs:114:21:114:66 | (...) ... |
|
||||
| GlobalDataFlow.cs:114:57:114:64 | access to local variable nonSink0 : String | GlobalDataFlow.cs:114:21:114:66 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:114:57:114:64 | access to local variable nonSink0 : String | GlobalDataFlow.cs:114:21:114:66 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:114:57:114:64 | access to local variable nonSink0 : String | GlobalDataFlow.cs:114:42:114:66 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:114:57:114:64 | access to local variable nonSink0 : String | GlobalDataFlow.cs:114:42:114:66 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:114:57:114:64 | access to local variable nonSink0 : T | GlobalDataFlow.cs:114:21:114:66 | (...) ... |
|
||||
| GlobalDataFlow.cs:114:57:114:64 | access to local variable nonSink0 : T | GlobalDataFlow.cs:114:21:114:66 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:114:57:114:64 | access to local variable nonSink0 : T | GlobalDataFlow.cs:114:21:114:66 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:114:57:114:64 | access to local variable nonSink0 : T | GlobalDataFlow.cs:114:42:114:66 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:114:57:114:64 | access to local variable nonSink0 : T | GlobalDataFlow.cs:114:42:114:66 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:114:76:114:76 | x : IEnumerable<String> | GlobalDataFlow.cs:114:76:114:76 | x |
|
||||
@@ -2627,7 +2627,7 @@
|
||||
| GlobalDataFlow.cs:116:42:116:72 | array creation of type String[] : String[] | GlobalDataFlow.cs:116:21:116:72 | (...) ... |
|
||||
| GlobalDataFlow.cs:116:42:116:72 | array creation of type String[] : String[] | GlobalDataFlow.cs:116:21:116:72 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:116:57:116:62 | access to local variable sink14 : IEnumerable<String> | GlobalDataFlow.cs:116:21:116:72 | (...) ... |
|
||||
| GlobalDataFlow.cs:116:57:116:62 | access to local variable sink14 : IEnumerable<String> | GlobalDataFlow.cs:116:21:116:72 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:116:57:116:62 | access to local variable sink14 : IEnumerable<String> | GlobalDataFlow.cs:116:21:116:72 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:116:57:116:62 | access to local variable sink14 : IEnumerable<String> | GlobalDataFlow.cs:116:42:116:72 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:116:57:116:62 | access to local variable sink14 : IEnumerable<String> | GlobalDataFlow.cs:116:42:116:72 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:116:57:116:62 | access to local variable sink14 : IEnumerable<String> | GlobalDataFlow.cs:116:57:116:70 | call to method First |
|
||||
@@ -2637,7 +2637,7 @@
|
||||
| GlobalDataFlow.cs:116:57:116:62 | access to local variable sink14 : IEnumerable<String> | GlobalDataFlow.cs:122:20:122:25 | access to local variable sink14 |
|
||||
| GlobalDataFlow.cs:116:57:116:62 | access to local variable sink14 : IEnumerable<String> | GlobalDataFlow.cs:122:20:122:25 | access to local variable sink14 : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:116:57:116:70 | call to method First : String | GlobalDataFlow.cs:116:21:116:72 | (...) ... |
|
||||
| GlobalDataFlow.cs:116:57:116:70 | call to method First : String | GlobalDataFlow.cs:116:21:116:72 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:116:57:116:70 | call to method First : String | GlobalDataFlow.cs:116:21:116:72 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:116:57:116:70 | call to method First : String | GlobalDataFlow.cs:116:42:116:72 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:116:57:116:70 | call to method First : String | GlobalDataFlow.cs:116:42:116:72 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:116:80:116:119 | (...) ... : IEnumerable<String> | GlobalDataFlow.cs:116:123:116:133 | [output] (...) => ... |
|
||||
@@ -2651,7 +2651,7 @@
|
||||
| GlobalDataFlow.cs:116:101:116:119 | array creation of type String[] : String[] | GlobalDataFlow.cs:116:80:116:119 | (...) ... |
|
||||
| GlobalDataFlow.cs:116:101:116:119 | array creation of type String[] : String[] | GlobalDataFlow.cs:116:80:116:119 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:116:116:116:117 | "" : String | GlobalDataFlow.cs:116:80:116:119 | (...) ... |
|
||||
| GlobalDataFlow.cs:116:116:116:117 | "" : String | GlobalDataFlow.cs:116:80:116:119 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:116:116:116:117 | "" : String | GlobalDataFlow.cs:116:80:116:119 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:116:116:116:117 | "" : String | GlobalDataFlow.cs:116:101:116:119 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:116:116:116:117 | "" : String | GlobalDataFlow.cs:116:101:116:119 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:116:123:116:133 | [output] (...) => ... : String | GlobalDataFlow.cs:116:9:116:134 | SSA def(nonSink1) |
|
||||
@@ -2701,19 +2701,19 @@
|
||||
| GlobalDataFlow.cs:118:42:118:60 | array creation of type String[] : String[] | GlobalDataFlow.cs:118:21:118:60 | (...) ... |
|
||||
| GlobalDataFlow.cs:118:42:118:60 | array creation of type String[] : String[] | GlobalDataFlow.cs:118:21:118:60 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:118:57:118:58 | "" : String | GlobalDataFlow.cs:118:21:118:60 | (...) ... |
|
||||
| GlobalDataFlow.cs:118:57:118:58 | "" : String | GlobalDataFlow.cs:118:21:118:60 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:118:57:118:58 | "" : String | GlobalDataFlow.cs:118:21:118:60 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:118:57:118:58 | "" : String | GlobalDataFlow.cs:118:42:118:60 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:118:57:118:58 | "" : String | GlobalDataFlow.cs:118:42:118:60 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:118:89:118:119 | array creation of type String[] : String[] | GlobalDataFlow.cs:118:68:118:119 | (...) ... |
|
||||
| GlobalDataFlow.cs:118:89:118:119 | array creation of type String[] : String[] | GlobalDataFlow.cs:118:68:118:119 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:118:104:118:109 | access to local variable sink15 : IEnumerable<String> | GlobalDataFlow.cs:118:68:118:119 | (...) ... |
|
||||
| GlobalDataFlow.cs:118:104:118:109 | access to local variable sink15 : IEnumerable<String> | GlobalDataFlow.cs:118:68:118:119 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:118:104:118:109 | access to local variable sink15 : IEnumerable<String> | GlobalDataFlow.cs:118:68:118:119 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:118:104:118:109 | access to local variable sink15 : IEnumerable<String> | GlobalDataFlow.cs:118:89:118:119 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:118:104:118:109 | access to local variable sink15 : IEnumerable<String> | GlobalDataFlow.cs:118:89:118:119 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:118:104:118:109 | access to local variable sink15 : IEnumerable<String> | GlobalDataFlow.cs:118:104:118:117 | call to method First |
|
||||
| GlobalDataFlow.cs:118:104:118:109 | access to local variable sink15 : IEnumerable<String> | GlobalDataFlow.cs:118:104:118:117 | call to method First : String |
|
||||
| GlobalDataFlow.cs:118:104:118:117 | call to method First : String | GlobalDataFlow.cs:118:68:118:119 | (...) ... |
|
||||
| GlobalDataFlow.cs:118:104:118:117 | call to method First : String | GlobalDataFlow.cs:118:68:118:119 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:118:104:118:117 | call to method First : String | GlobalDataFlow.cs:118:68:118:119 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:118:104:118:117 | call to method First : String | GlobalDataFlow.cs:118:89:118:119 | array creation of type String[] |
|
||||
| GlobalDataFlow.cs:118:104:118:117 | call to method First : String | GlobalDataFlow.cs:118:89:118:119 | array creation of type String[] : String[] |
|
||||
| GlobalDataFlow.cs:118:123:118:133 | [output] (...) => ... : String | GlobalDataFlow.cs:118:9:118:134 | SSA def(nonSink1) |
|
||||
@@ -3833,17 +3833,17 @@
|
||||
| GlobalDataFlow.cs:222:19:222:39 | call to method Select : IQueryable<String> | GlobalDataFlow.cs:223:15:223:21 | access to local variable nonSink |
|
||||
| GlobalDataFlow.cs:222:19:222:39 | call to method Select : IQueryable<String> | GlobalDataFlow.cs:223:15:223:21 | access to local variable nonSink : IQueryable<String> |
|
||||
| GlobalDataFlow.cs:222:37:222:38 | [output] access to local variable f2 : String | GlobalDataFlow.cs:222:9:222:39 | SSA def(nonSink) |
|
||||
| GlobalDataFlow.cs:222:37:222:38 | [output] access to local variable f2 : String | GlobalDataFlow.cs:222:9:222:39 | SSA def(nonSink) : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:222:37:222:38 | [output] access to local variable f2 : String | GlobalDataFlow.cs:222:9:222:39 | SSA def(nonSink) : IQueryable<String> |
|
||||
| GlobalDataFlow.cs:222:37:222:38 | [output] access to local variable f2 : String | GlobalDataFlow.cs:222:19:222:39 | call to method Select |
|
||||
| GlobalDataFlow.cs:222:37:222:38 | [output] access to local variable f2 : String | GlobalDataFlow.cs:222:19:222:39 | call to method Select : IQueryable<String> |
|
||||
| GlobalDataFlow.cs:222:37:222:38 | [output] access to local variable f2 : String | GlobalDataFlow.cs:223:15:223:21 | access to local variable nonSink |
|
||||
| GlobalDataFlow.cs:222:37:222:38 | [output] access to local variable f2 : String | GlobalDataFlow.cs:223:15:223:21 | access to local variable nonSink : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:222:37:222:38 | [output] access to local variable f2 : String | GlobalDataFlow.cs:223:15:223:21 | access to local variable nonSink : IQueryable<String> |
|
||||
| GlobalDataFlow.cs:222:37:222:38 | [output] access to local variable f2 : T | GlobalDataFlow.cs:222:9:222:39 | SSA def(nonSink) |
|
||||
| GlobalDataFlow.cs:222:37:222:38 | [output] access to local variable f2 : T | GlobalDataFlow.cs:222:9:222:39 | SSA def(nonSink) : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:222:37:222:38 | [output] access to local variable f2 : T | GlobalDataFlow.cs:222:9:222:39 | SSA def(nonSink) : IQueryable<String> |
|
||||
| GlobalDataFlow.cs:222:37:222:38 | [output] access to local variable f2 : T | GlobalDataFlow.cs:222:19:222:39 | call to method Select |
|
||||
| GlobalDataFlow.cs:222:37:222:38 | [output] access to local variable f2 : T | GlobalDataFlow.cs:222:19:222:39 | call to method Select : IQueryable<String> |
|
||||
| GlobalDataFlow.cs:222:37:222:38 | [output] access to local variable f2 : T | GlobalDataFlow.cs:223:15:223:21 | access to local variable nonSink |
|
||||
| GlobalDataFlow.cs:222:37:222:38 | [output] access to local variable f2 : T | GlobalDataFlow.cs:223:15:223:21 | access to local variable nonSink : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:222:37:222:38 | [output] access to local variable f2 : T | GlobalDataFlow.cs:223:15:223:21 | access to local variable nonSink : IQueryable<String> |
|
||||
| GlobalDataFlow.cs:224:9:224:39 | SSA def(nonSink) : IEnumerable<String> | GlobalDataFlow.cs:225:15:225:21 | access to local variable nonSink |
|
||||
| GlobalDataFlow.cs:224:9:224:39 | SSA def(nonSink) : IEnumerable<String> | GlobalDataFlow.cs:225:15:225:21 | access to local variable nonSink : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:224:19:224:28 | access to parameter notTainted : IQueryable<String> | GlobalDataFlow.cs:218:35:218:46 | nonSinkParam |
|
||||
@@ -3879,17 +3879,17 @@
|
||||
| GlobalDataFlow.cs:226:19:226:39 | call to method Select : IQueryable<String> | GlobalDataFlow.cs:227:15:227:21 | access to local variable nonSink |
|
||||
| GlobalDataFlow.cs:226:19:226:39 | call to method Select : IQueryable<String> | GlobalDataFlow.cs:227:15:227:21 | access to local variable nonSink : IQueryable<String> |
|
||||
| GlobalDataFlow.cs:226:37:226:38 | [output] access to local variable f4 : String | GlobalDataFlow.cs:226:9:226:39 | SSA def(nonSink) |
|
||||
| GlobalDataFlow.cs:226:37:226:38 | [output] access to local variable f4 : String | GlobalDataFlow.cs:226:9:226:39 | SSA def(nonSink) : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:226:37:226:38 | [output] access to local variable f4 : String | GlobalDataFlow.cs:226:9:226:39 | SSA def(nonSink) : IQueryable<String> |
|
||||
| GlobalDataFlow.cs:226:37:226:38 | [output] access to local variable f4 : String | GlobalDataFlow.cs:226:19:226:39 | call to method Select |
|
||||
| GlobalDataFlow.cs:226:37:226:38 | [output] access to local variable f4 : String | GlobalDataFlow.cs:226:19:226:39 | call to method Select : IQueryable<String> |
|
||||
| GlobalDataFlow.cs:226:37:226:38 | [output] access to local variable f4 : String | GlobalDataFlow.cs:227:15:227:21 | access to local variable nonSink |
|
||||
| GlobalDataFlow.cs:226:37:226:38 | [output] access to local variable f4 : String | GlobalDataFlow.cs:227:15:227:21 | access to local variable nonSink : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:226:37:226:38 | [output] access to local variable f4 : String | GlobalDataFlow.cs:227:15:227:21 | access to local variable nonSink : IQueryable<String> |
|
||||
| GlobalDataFlow.cs:226:37:226:38 | [output] access to local variable f4 : T | GlobalDataFlow.cs:226:9:226:39 | SSA def(nonSink) |
|
||||
| GlobalDataFlow.cs:226:37:226:38 | [output] access to local variable f4 : T | GlobalDataFlow.cs:226:9:226:39 | SSA def(nonSink) : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:226:37:226:38 | [output] access to local variable f4 : T | GlobalDataFlow.cs:226:9:226:39 | SSA def(nonSink) : IQueryable<String> |
|
||||
| GlobalDataFlow.cs:226:37:226:38 | [output] access to local variable f4 : T | GlobalDataFlow.cs:226:19:226:39 | call to method Select |
|
||||
| GlobalDataFlow.cs:226:37:226:38 | [output] access to local variable f4 : T | GlobalDataFlow.cs:226:19:226:39 | call to method Select : IQueryable<String> |
|
||||
| GlobalDataFlow.cs:226:37:226:38 | [output] access to local variable f4 : T | GlobalDataFlow.cs:227:15:227:21 | access to local variable nonSink |
|
||||
| GlobalDataFlow.cs:226:37:226:38 | [output] access to local variable f4 : T | GlobalDataFlow.cs:227:15:227:21 | access to local variable nonSink : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:226:37:226:38 | [output] access to local variable f4 : T | GlobalDataFlow.cs:227:15:227:21 | access to local variable nonSink : IQueryable<String> |
|
||||
| GlobalDataFlow.cs:228:9:228:49 | SSA def(nonSink) : IEnumerable<String> | GlobalDataFlow.cs:229:15:229:21 | access to local variable nonSink |
|
||||
| GlobalDataFlow.cs:228:9:228:49 | SSA def(nonSink) : IEnumerable<String> | GlobalDataFlow.cs:229:15:229:21 | access to local variable nonSink : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:228:19:228:28 | access to parameter notTainted : IQueryable<String> | GlobalDataFlow.cs:228:37:228:48 | [output] delegate creation of type Func<String,String> |
|
||||
|
||||
@@ -137,21 +137,21 @@ edges
|
||||
| GlobalDataFlow.cs:75:30:75:34 | SSA def(sink2) : String | GlobalDataFlow.cs:78:19:78:23 | access to local variable sink2 : String |
|
||||
| GlobalDataFlow.cs:78:19:78:23 | access to local variable sink2 : String | GlobalDataFlow.cs:78:30:78:34 | SSA def(sink3) : String |
|
||||
| GlobalDataFlow.cs:78:30:78:34 | SSA def(sink3) : String | GlobalDataFlow.cs:79:15:79:19 | access to local variable sink3 |
|
||||
| GlobalDataFlow.cs:78:30:78:34 | SSA def(sink3) : String | GlobalDataFlow.cs:80:23:80:65 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:78:30:78:34 | SSA def(sink3) : String | GlobalDataFlow.cs:80:23:80:65 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:78:30:78:34 | SSA def(sink3) : String | GlobalDataFlow.cs:135:29:135:33 | access to local variable sink3 : String |
|
||||
| GlobalDataFlow.cs:80:22:80:85 | call to method SelectEven : IEnumerable<T> | GlobalDataFlow.cs:81:15:81:20 | access to local variable sink13 |
|
||||
| GlobalDataFlow.cs:80:22:80:85 | call to method SelectEven : IEnumerable<T> | GlobalDataFlow.cs:82:23:82:74 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:80:23:80:65 | (...) ... : IEnumerable<String> | GlobalDataFlow.cs:80:22:80:85 | call to method SelectEven : IEnumerable<T> |
|
||||
| GlobalDataFlow.cs:82:23:82:74 | (...) ... : IEnumerable<String> | GlobalDataFlow.cs:82:84:82:94 | [output] delegate creation of type Func<String,String> : T |
|
||||
| GlobalDataFlow.cs:82:23:82:74 | (...) ... : IEnumerable<String> | GlobalDataFlow.cs:292:31:292:40 | sinkParam8 : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:80:22:80:85 | call to method SelectEven : IEnumerable<T> | GlobalDataFlow.cs:82:23:82:74 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:80:23:80:65 | (...) ... : String[] | GlobalDataFlow.cs:80:22:80:85 | call to method SelectEven : IEnumerable<T> |
|
||||
| GlobalDataFlow.cs:82:23:82:74 | (...) ... : String[] | GlobalDataFlow.cs:82:84:82:94 | [output] delegate creation of type Func<String,String> : T |
|
||||
| GlobalDataFlow.cs:82:23:82:74 | (...) ... : String[] | GlobalDataFlow.cs:292:31:292:40 | sinkParam8 : String[] |
|
||||
| GlobalDataFlow.cs:82:84:82:94 | [output] delegate creation of type Func<String,String> : T | GlobalDataFlow.cs:83:15:83:20 | access to local variable sink14 |
|
||||
| GlobalDataFlow.cs:82:84:82:94 | [output] delegate creation of type Func<String,String> : T | GlobalDataFlow.cs:84:23:84:74 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:82:84:82:94 | [output] delegate creation of type Func<String,String> : T | GlobalDataFlow.cs:84:23:84:74 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:82:84:82:94 | [output] delegate creation of type Func<String,String> : T | GlobalDataFlow.cs:88:22:88:27 | access to local variable sink14 : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:82:84:82:94 | [output] delegate creation of type Func<String,String> : T | GlobalDataFlow.cs:90:75:90:88 | call to method First : String |
|
||||
| GlobalDataFlow.cs:84:23:84:74 | (...) ... : IEnumerable<String> | GlobalDataFlow.cs:84:125:84:135 | [output] (...) => ... : String |
|
||||
| GlobalDataFlow.cs:84:23:84:74 | (...) ... : String[] | GlobalDataFlow.cs:84:125:84:135 | [output] (...) => ... : String |
|
||||
| GlobalDataFlow.cs:84:125:84:135 | [output] (...) => ... : String | GlobalDataFlow.cs:85:15:85:20 | access to local variable sink15 |
|
||||
| GlobalDataFlow.cs:84:125:84:135 | [output] (...) => ... : String | GlobalDataFlow.cs:86:70:86:121 | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:86:70:86:121 | (...) ... : IEnumerable<String> | GlobalDataFlow.cs:86:125:86:135 | [output] (...) => ... : String |
|
||||
| GlobalDataFlow.cs:84:125:84:135 | [output] (...) => ... : String | GlobalDataFlow.cs:86:70:86:121 | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:86:70:86:121 | (...) ... : String[] | GlobalDataFlow.cs:86:125:86:135 | [output] (...) => ... : String |
|
||||
| GlobalDataFlow.cs:86:125:86:135 | [output] (...) => ... : String | GlobalDataFlow.cs:87:15:87:20 | access to local variable sink16 |
|
||||
| GlobalDataFlow.cs:88:22:88:27 | access to local variable sink14 : IEnumerable<String> | GlobalDataFlow.cs:88:43:88:61 | [output] (...) => ... : String |
|
||||
| GlobalDataFlow.cs:88:43:88:61 | [output] (...) => ... : String | GlobalDataFlow.cs:88:64:88:69 | [output] (...) => ... : String |
|
||||
@@ -199,7 +199,7 @@ edges
|
||||
| GlobalDataFlow.cs:255:26:255:35 | sinkParam5 : String | GlobalDataFlow.cs:257:15:257:24 | access to parameter sinkParam5 |
|
||||
| GlobalDataFlow.cs:260:26:260:35 | sinkParam6 : String | GlobalDataFlow.cs:262:15:262:24 | access to parameter sinkParam6 |
|
||||
| GlobalDataFlow.cs:265:26:265:35 | sinkParam7 : String | GlobalDataFlow.cs:267:15:267:24 | access to parameter sinkParam7 |
|
||||
| GlobalDataFlow.cs:292:31:292:40 | sinkParam8 : IEnumerable<String> | GlobalDataFlow.cs:294:15:294:24 | access to parameter sinkParam8 |
|
||||
| GlobalDataFlow.cs:292:31:292:40 | sinkParam8 : String[] | GlobalDataFlow.cs:294:15:294:24 | access to parameter sinkParam8 |
|
||||
| GlobalDataFlow.cs:298:32:298:41 | sinkParam9 : String | GlobalDataFlow.cs:300:15:300:24 | access to parameter sinkParam9 |
|
||||
| GlobalDataFlow.cs:304:32:304:42 | sinkParam11 : IQueryable<String> | GlobalDataFlow.cs:306:15:306:25 | access to parameter sinkParam11 |
|
||||
| GlobalDataFlow.cs:318:16:318:29 | "taint source" : String | GlobalDataFlow.cs:153:21:153:25 | call to method Out : String |
|
||||
@@ -331,15 +331,15 @@ nodes
|
||||
| GlobalDataFlow.cs:78:30:78:34 | SSA def(sink3) : String | semmle.label | SSA def(sink3) : String |
|
||||
| GlobalDataFlow.cs:79:15:79:19 | access to local variable sink3 | semmle.label | access to local variable sink3 |
|
||||
| GlobalDataFlow.cs:80:22:80:85 | call to method SelectEven : IEnumerable<T> | semmle.label | call to method SelectEven : IEnumerable<T> |
|
||||
| GlobalDataFlow.cs:80:23:80:65 | (...) ... : IEnumerable<String> | semmle.label | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:80:23:80:65 | (...) ... : String[] | semmle.label | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:81:15:81:20 | access to local variable sink13 | semmle.label | access to local variable sink13 |
|
||||
| GlobalDataFlow.cs:82:23:82:74 | (...) ... : IEnumerable<String> | semmle.label | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:82:23:82:74 | (...) ... : String[] | semmle.label | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:82:84:82:94 | [output] delegate creation of type Func<String,String> : T | semmle.label | [output] delegate creation of type Func<String,String> : T |
|
||||
| GlobalDataFlow.cs:83:15:83:20 | access to local variable sink14 | semmle.label | access to local variable sink14 |
|
||||
| GlobalDataFlow.cs:84:23:84:74 | (...) ... : IEnumerable<String> | semmle.label | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:84:23:84:74 | (...) ... : String[] | semmle.label | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:84:125:84:135 | [output] (...) => ... : String | semmle.label | [output] (...) => ... : String |
|
||||
| GlobalDataFlow.cs:85:15:85:20 | access to local variable sink15 | semmle.label | access to local variable sink15 |
|
||||
| GlobalDataFlow.cs:86:70:86:121 | (...) ... : IEnumerable<String> | semmle.label | (...) ... : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:86:70:86:121 | (...) ... : String[] | semmle.label | (...) ... : String[] |
|
||||
| GlobalDataFlow.cs:86:125:86:135 | [output] (...) => ... : String | semmle.label | [output] (...) => ... : String |
|
||||
| GlobalDataFlow.cs:87:15:87:20 | access to local variable sink16 | semmle.label | access to local variable sink16 |
|
||||
| GlobalDataFlow.cs:88:22:88:27 | access to local variable sink14 : IEnumerable<String> | semmle.label | access to local variable sink14 : IEnumerable<String> |
|
||||
@@ -404,7 +404,7 @@ nodes
|
||||
| GlobalDataFlow.cs:262:15:262:24 | access to parameter sinkParam6 | semmle.label | access to parameter sinkParam6 |
|
||||
| GlobalDataFlow.cs:265:26:265:35 | sinkParam7 : String | semmle.label | sinkParam7 : String |
|
||||
| GlobalDataFlow.cs:267:15:267:24 | access to parameter sinkParam7 | semmle.label | access to parameter sinkParam7 |
|
||||
| GlobalDataFlow.cs:292:31:292:40 | sinkParam8 : IEnumerable<String> | semmle.label | sinkParam8 : IEnumerable<String> |
|
||||
| GlobalDataFlow.cs:292:31:292:40 | sinkParam8 : String[] | semmle.label | sinkParam8 : String[] |
|
||||
| GlobalDataFlow.cs:294:15:294:24 | access to parameter sinkParam8 | semmle.label | access to parameter sinkParam8 |
|
||||
| GlobalDataFlow.cs:298:32:298:41 | sinkParam9 : String | semmle.label | sinkParam9 : String |
|
||||
| GlobalDataFlow.cs:300:15:300:24 | access to parameter sinkParam9 | semmle.label | access to parameter sinkParam9 |
|
||||
|
||||
@@ -1307,15 +1307,20 @@ private predicate localFlowExit(Node node, Configuration config) {
|
||||
*/
|
||||
pragma[nomagic]
|
||||
private predicate localFlowStepPlus(
|
||||
Node node1, Node node2, boolean preservesValue, Configuration config, LocalCallContext cc
|
||||
Node node1, Node node2, boolean preservesValue, DataFlowType t, Configuration config,
|
||||
LocalCallContext cc
|
||||
) {
|
||||
not isUnreachableInCall(node2, cc.(LocalCallContextSpecificCall).getCall()) and
|
||||
(
|
||||
localFlowEntry(node1, config) and
|
||||
(
|
||||
localFlowStep(node1, node2, config) and preservesValue = true
|
||||
localFlowStep(node1, node2, config) and
|
||||
preservesValue = true and
|
||||
t = getErasedNodeTypeBound(node1)
|
||||
or
|
||||
additionalLocalFlowStep(node1, node2, config) and preservesValue = false
|
||||
additionalLocalFlowStep(node1, node2, config) and
|
||||
preservesValue = false and
|
||||
t = getErasedNodeTypeBound(node2)
|
||||
) and
|
||||
node1 != node2 and
|
||||
cc.relevantFor(node1.getEnclosingCallable()) and
|
||||
@@ -1323,17 +1328,18 @@ private predicate localFlowStepPlus(
|
||||
nodeCand(TNormalNode(node2), unbind(config))
|
||||
or
|
||||
exists(Node mid |
|
||||
localFlowStepPlus(node1, mid, preservesValue, config, cc) and
|
||||
localFlowStepPlus(node1, mid, preservesValue, t, config, cc) and
|
||||
localFlowStep(mid, node2, config) and
|
||||
not mid instanceof CastNode and
|
||||
nodeCand(TNormalNode(node2), unbind(config))
|
||||
)
|
||||
or
|
||||
exists(Node mid |
|
||||
localFlowStepPlus(node1, mid, _, config, cc) and
|
||||
localFlowStepPlus(node1, mid, _, _, config, cc) and
|
||||
additionalLocalFlowStep(mid, node2, config) and
|
||||
not mid instanceof CastNode and
|
||||
preservesValue = false and
|
||||
t = getErasedNodeTypeBound(node2) and
|
||||
nodeCand(TNormalNode(node2), unbind(config))
|
||||
)
|
||||
)
|
||||
@@ -1345,17 +1351,18 @@ private predicate localFlowStepPlus(
|
||||
*/
|
||||
pragma[nomagic]
|
||||
private predicate localFlowBigStep(
|
||||
Node node1, Node node2, boolean preservesValue, Configuration config, LocalCallContext callContext
|
||||
Node node1, Node node2, boolean preservesValue, DataFlowType t, Configuration config,
|
||||
LocalCallContext callContext
|
||||
) {
|
||||
localFlowStepPlus(node1, node2, preservesValue, config, callContext) and
|
||||
localFlowStepPlus(node1, node2, preservesValue, t, config, callContext) and
|
||||
localFlowExit(node2, config)
|
||||
}
|
||||
|
||||
pragma[nomagic]
|
||||
private predicate localFlowBigStepExt(
|
||||
NodeExt node1, NodeExt node2, boolean preservesValue, Configuration config
|
||||
NodeExt node1, NodeExt node2, boolean preservesValue, AccessPathFrontNil apf, Configuration config
|
||||
) {
|
||||
localFlowBigStep(node1.getNode(), node2.getNode(), preservesValue, config, _)
|
||||
localFlowBigStep(node1.getNode(), node2.getNode(), preservesValue, apf.getType(), config, _)
|
||||
}
|
||||
|
||||
private newtype TAccessPathFront =
|
||||
@@ -1395,46 +1402,24 @@ private predicate flowCandFwd(
|
||||
else any()
|
||||
}
|
||||
|
||||
/**
|
||||
* A node that requires an empty access path and should have its tracked type
|
||||
* (re-)computed. This is either a source or a node reached through an
|
||||
* additional step.
|
||||
*/
|
||||
private class AccessPathFrontNilNode extends NormalNodeExt {
|
||||
AccessPathFrontNilNode() {
|
||||
nodeCand(this, _) and
|
||||
(
|
||||
any(Configuration c).isSource(this.getNode())
|
||||
or
|
||||
localFlowBigStepExt(_, this, false, _)
|
||||
or
|
||||
additionalJumpStepExt(_, this, _)
|
||||
)
|
||||
}
|
||||
|
||||
/** Gets the `nil` path front for this node. */
|
||||
AccessPathFrontNil getApf() { result = TFrontNil(this.getErasedNodeTypeBound()) }
|
||||
}
|
||||
|
||||
private predicate flowCandFwd0(
|
||||
NodeExt node, boolean fromArg, AccessPathFront apf, Configuration config
|
||||
) {
|
||||
nodeCand2(node, _, false, config) and
|
||||
config.isSource(node.getNode()) and
|
||||
fromArg = false and
|
||||
apf = node.(AccessPathFrontNilNode).getApf()
|
||||
apf = TFrontNil(node.getErasedNodeTypeBound())
|
||||
or
|
||||
nodeCand(node, unbind(config)) and
|
||||
(
|
||||
exists(NodeExt mid |
|
||||
flowCandFwd(mid, fromArg, apf, config) and
|
||||
localFlowBigStepExt(mid, node, true, config)
|
||||
localFlowBigStepExt(mid, node, true, _, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathFrontNil nil |
|
||||
flowCandFwd(mid, fromArg, nil, config) and
|
||||
localFlowBigStepExt(mid, node, false, config) and
|
||||
apf = node.(AccessPathFrontNilNode).getApf()
|
||||
localFlowBigStepExt(mid, node, false, apf, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid |
|
||||
@@ -1447,7 +1432,7 @@ private predicate flowCandFwd0(
|
||||
flowCandFwd(mid, _, nil, config) and
|
||||
additionalJumpStepExt(mid, node, config) and
|
||||
fromArg = false and
|
||||
apf = node.(AccessPathFrontNilNode).getApf()
|
||||
apf = TFrontNil(node.getErasedNodeTypeBound())
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, boolean allowsFieldFlow |
|
||||
@@ -1589,13 +1574,13 @@ private predicate flowCand0(
|
||||
apf instanceof AccessPathFrontNil
|
||||
or
|
||||
exists(NodeExt mid |
|
||||
localFlowBigStepExt(node, mid, true, config) and
|
||||
localFlowBigStepExt(node, mid, true, _, config) and
|
||||
flowCand(mid, toReturn, apf, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathFrontNil nil |
|
||||
flowCandFwd(node, _, apf, config) and
|
||||
localFlowBigStepExt(node, mid, false, config) and
|
||||
localFlowBigStepExt(node, mid, false, _, config) and
|
||||
flowCand(mid, toReturn, nil, config) and
|
||||
apf instanceof AccessPathFrontNil
|
||||
)
|
||||
@@ -1810,18 +1795,6 @@ private predicate popWithFront(AccessPath ap0, Content f, AccessPathFront apf, A
|
||||
/** Gets the access path obtained by pushing `f` onto `ap`. */
|
||||
private AccessPath push(Content f, AccessPath ap) { ap = pop(f, result) }
|
||||
|
||||
/**
|
||||
* A node that requires an empty access path and should have its tracked type
|
||||
* (re-)computed. This is either a source or a node reached through an
|
||||
* additional step.
|
||||
*/
|
||||
private class AccessPathNilNode extends NormalNodeExt {
|
||||
AccessPathNilNode() { flowCand(this.(AccessPathFrontNilNode), _, _, _) }
|
||||
|
||||
/** Gets the `nil` path for this node. */
|
||||
AccessPathNil getAp() { result = TNil(this.getErasedNodeTypeBound()) }
|
||||
}
|
||||
|
||||
/**
|
||||
* Holds if data can flow from a source to `node` with the given `ap`.
|
||||
*/
|
||||
@@ -1838,20 +1811,19 @@ private predicate flowFwd0(
|
||||
flowCand(node, _, _, config) and
|
||||
config.isSource(node.getNode()) and
|
||||
fromArg = false and
|
||||
ap = node.(AccessPathNilNode).getAp() and
|
||||
ap = TNil(node.getErasedNodeTypeBound()) and
|
||||
apf = ap.(AccessPathNil).getFront()
|
||||
or
|
||||
flowCand(node, _, _, unbind(config)) and
|
||||
(
|
||||
exists(NodeExt mid |
|
||||
flowFwd(mid, fromArg, apf, ap, config) and
|
||||
localFlowBigStepExt(mid, node, true, config)
|
||||
localFlowBigStepExt(mid, node, true, _, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathNil nil |
|
||||
flowFwd(mid, fromArg, _, nil, config) and
|
||||
localFlowBigStepExt(mid, node, false, config) and
|
||||
ap = node.(AccessPathNilNode).getAp() and
|
||||
localFlowBigStepExt(mid, node, false, apf, config) and
|
||||
apf = ap.(AccessPathNil).getFront()
|
||||
)
|
||||
or
|
||||
@@ -1865,7 +1837,7 @@ private predicate flowFwd0(
|
||||
flowFwd(mid, _, _, nil, config) and
|
||||
additionalJumpStepExt(mid, node, config) and
|
||||
fromArg = false and
|
||||
ap = node.(AccessPathNilNode).getAp() and
|
||||
ap = TNil(node.getErasedNodeTypeBound()) and
|
||||
apf = ap.(AccessPathNil).getFront()
|
||||
)
|
||||
or
|
||||
@@ -1982,13 +1954,13 @@ private predicate flow0(NodeExt node, boolean toReturn, AccessPath ap, Configura
|
||||
ap instanceof AccessPathNil
|
||||
or
|
||||
exists(NodeExt mid |
|
||||
localFlowBigStepExt(node, mid, true, config) and
|
||||
localFlowBigStepExt(node, mid, true, _, config) and
|
||||
flow(mid, toReturn, ap, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathNil nil |
|
||||
flowFwd(node, _, _, ap, config) and
|
||||
localFlowBigStepExt(node, mid, false, config) and
|
||||
localFlowBigStepExt(node, mid, false, _, config) and
|
||||
flow(mid, toReturn, nil, config) and
|
||||
ap instanceof AccessPathNil
|
||||
)
|
||||
@@ -2164,7 +2136,7 @@ private newtype TPathNode =
|
||||
config.isSource(node) and
|
||||
cc instanceof CallContextAny and
|
||||
sc instanceof SummaryCtxNone and
|
||||
ap = any(AccessPathNilNode nil | nil.getNode() = node).getAp()
|
||||
ap = TNil(getErasedNodeTypeBound(node))
|
||||
or
|
||||
// ... or a step from an existing PathNode to another node.
|
||||
exists(PathNodeMid mid |
|
||||
@@ -2357,12 +2329,11 @@ private predicate pathStep(PathNodeMid mid, Node node, CallContext cc, SummaryCt
|
||||
pathIntoLocalStep(mid, midnode, cc, enclosing, sc, ap0, conf) and
|
||||
localCC = getLocalCallContext(cc, enclosing)
|
||||
|
|
||||
localFlowBigStep(midnode, node, true, conf, localCC) and
|
||||
localFlowBigStep(midnode, node, true, _, conf, localCC) and
|
||||
ap = ap0
|
||||
or
|
||||
localFlowBigStep(midnode, node, false, conf, localCC) and
|
||||
ap0 instanceof AccessPathNil and
|
||||
ap = any(AccessPathNilNode nil | nil.getNode() = node).getAp()
|
||||
localFlowBigStep(midnode, node, false, ap.(AccessPathNil).getType(), conf, localCC) and
|
||||
ap0 instanceof AccessPathNil
|
||||
)
|
||||
or
|
||||
jumpStep(mid.getNode(), node, mid.getConfiguration()) and
|
||||
@@ -2374,7 +2345,7 @@ private predicate pathStep(PathNodeMid mid, Node node, CallContext cc, SummaryCt
|
||||
cc instanceof CallContextAny and
|
||||
sc instanceof SummaryCtxNone and
|
||||
mid.getAp() instanceof AccessPathNil and
|
||||
ap = any(AccessPathNilNode nil | nil.getNode() = node).getAp()
|
||||
ap = TNil(getErasedNodeTypeBound(node))
|
||||
or
|
||||
exists(Content f, AccessPath ap0 | pathReadStep(mid, node, ap0, f, cc) and ap = pop(f, ap0)) and
|
||||
sc = mid.getSummaryCtx()
|
||||
@@ -2397,7 +2368,7 @@ private predicate pathIntoLocalStep(
|
||||
midnode = mid.getNode() and
|
||||
cc = mid.getCallContext() and
|
||||
conf = mid.getConfiguration() and
|
||||
localFlowBigStep(midnode, _, _, conf, _) and
|
||||
localFlowBigStep(midnode, _, _, _, conf, _) and
|
||||
enclosing = midnode.getEnclosingCallable() and
|
||||
sc = mid.getSummaryCtx() and
|
||||
ap0 = mid.getAp()
|
||||
|
||||
@@ -1307,15 +1307,20 @@ private predicate localFlowExit(Node node, Configuration config) {
|
||||
*/
|
||||
pragma[nomagic]
|
||||
private predicate localFlowStepPlus(
|
||||
Node node1, Node node2, boolean preservesValue, Configuration config, LocalCallContext cc
|
||||
Node node1, Node node2, boolean preservesValue, DataFlowType t, Configuration config,
|
||||
LocalCallContext cc
|
||||
) {
|
||||
not isUnreachableInCall(node2, cc.(LocalCallContextSpecificCall).getCall()) and
|
||||
(
|
||||
localFlowEntry(node1, config) and
|
||||
(
|
||||
localFlowStep(node1, node2, config) and preservesValue = true
|
||||
localFlowStep(node1, node2, config) and
|
||||
preservesValue = true and
|
||||
t = getErasedNodeTypeBound(node1)
|
||||
or
|
||||
additionalLocalFlowStep(node1, node2, config) and preservesValue = false
|
||||
additionalLocalFlowStep(node1, node2, config) and
|
||||
preservesValue = false and
|
||||
t = getErasedNodeTypeBound(node2)
|
||||
) and
|
||||
node1 != node2 and
|
||||
cc.relevantFor(node1.getEnclosingCallable()) and
|
||||
@@ -1323,17 +1328,18 @@ private predicate localFlowStepPlus(
|
||||
nodeCand(TNormalNode(node2), unbind(config))
|
||||
or
|
||||
exists(Node mid |
|
||||
localFlowStepPlus(node1, mid, preservesValue, config, cc) and
|
||||
localFlowStepPlus(node1, mid, preservesValue, t, config, cc) and
|
||||
localFlowStep(mid, node2, config) and
|
||||
not mid instanceof CastNode and
|
||||
nodeCand(TNormalNode(node2), unbind(config))
|
||||
)
|
||||
or
|
||||
exists(Node mid |
|
||||
localFlowStepPlus(node1, mid, _, config, cc) and
|
||||
localFlowStepPlus(node1, mid, _, _, config, cc) and
|
||||
additionalLocalFlowStep(mid, node2, config) and
|
||||
not mid instanceof CastNode and
|
||||
preservesValue = false and
|
||||
t = getErasedNodeTypeBound(node2) and
|
||||
nodeCand(TNormalNode(node2), unbind(config))
|
||||
)
|
||||
)
|
||||
@@ -1345,17 +1351,18 @@ private predicate localFlowStepPlus(
|
||||
*/
|
||||
pragma[nomagic]
|
||||
private predicate localFlowBigStep(
|
||||
Node node1, Node node2, boolean preservesValue, Configuration config, LocalCallContext callContext
|
||||
Node node1, Node node2, boolean preservesValue, DataFlowType t, Configuration config,
|
||||
LocalCallContext callContext
|
||||
) {
|
||||
localFlowStepPlus(node1, node2, preservesValue, config, callContext) and
|
||||
localFlowStepPlus(node1, node2, preservesValue, t, config, callContext) and
|
||||
localFlowExit(node2, config)
|
||||
}
|
||||
|
||||
pragma[nomagic]
|
||||
private predicate localFlowBigStepExt(
|
||||
NodeExt node1, NodeExt node2, boolean preservesValue, Configuration config
|
||||
NodeExt node1, NodeExt node2, boolean preservesValue, AccessPathFrontNil apf, Configuration config
|
||||
) {
|
||||
localFlowBigStep(node1.getNode(), node2.getNode(), preservesValue, config, _)
|
||||
localFlowBigStep(node1.getNode(), node2.getNode(), preservesValue, apf.getType(), config, _)
|
||||
}
|
||||
|
||||
private newtype TAccessPathFront =
|
||||
@@ -1395,46 +1402,24 @@ private predicate flowCandFwd(
|
||||
else any()
|
||||
}
|
||||
|
||||
/**
|
||||
* A node that requires an empty access path and should have its tracked type
|
||||
* (re-)computed. This is either a source or a node reached through an
|
||||
* additional step.
|
||||
*/
|
||||
private class AccessPathFrontNilNode extends NormalNodeExt {
|
||||
AccessPathFrontNilNode() {
|
||||
nodeCand(this, _) and
|
||||
(
|
||||
any(Configuration c).isSource(this.getNode())
|
||||
or
|
||||
localFlowBigStepExt(_, this, false, _)
|
||||
or
|
||||
additionalJumpStepExt(_, this, _)
|
||||
)
|
||||
}
|
||||
|
||||
/** Gets the `nil` path front for this node. */
|
||||
AccessPathFrontNil getApf() { result = TFrontNil(this.getErasedNodeTypeBound()) }
|
||||
}
|
||||
|
||||
private predicate flowCandFwd0(
|
||||
NodeExt node, boolean fromArg, AccessPathFront apf, Configuration config
|
||||
) {
|
||||
nodeCand2(node, _, false, config) and
|
||||
config.isSource(node.getNode()) and
|
||||
fromArg = false and
|
||||
apf = node.(AccessPathFrontNilNode).getApf()
|
||||
apf = TFrontNil(node.getErasedNodeTypeBound())
|
||||
or
|
||||
nodeCand(node, unbind(config)) and
|
||||
(
|
||||
exists(NodeExt mid |
|
||||
flowCandFwd(mid, fromArg, apf, config) and
|
||||
localFlowBigStepExt(mid, node, true, config)
|
||||
localFlowBigStepExt(mid, node, true, _, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathFrontNil nil |
|
||||
flowCandFwd(mid, fromArg, nil, config) and
|
||||
localFlowBigStepExt(mid, node, false, config) and
|
||||
apf = node.(AccessPathFrontNilNode).getApf()
|
||||
localFlowBigStepExt(mid, node, false, apf, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid |
|
||||
@@ -1447,7 +1432,7 @@ private predicate flowCandFwd0(
|
||||
flowCandFwd(mid, _, nil, config) and
|
||||
additionalJumpStepExt(mid, node, config) and
|
||||
fromArg = false and
|
||||
apf = node.(AccessPathFrontNilNode).getApf()
|
||||
apf = TFrontNil(node.getErasedNodeTypeBound())
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, boolean allowsFieldFlow |
|
||||
@@ -1589,13 +1574,13 @@ private predicate flowCand0(
|
||||
apf instanceof AccessPathFrontNil
|
||||
or
|
||||
exists(NodeExt mid |
|
||||
localFlowBigStepExt(node, mid, true, config) and
|
||||
localFlowBigStepExt(node, mid, true, _, config) and
|
||||
flowCand(mid, toReturn, apf, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathFrontNil nil |
|
||||
flowCandFwd(node, _, apf, config) and
|
||||
localFlowBigStepExt(node, mid, false, config) and
|
||||
localFlowBigStepExt(node, mid, false, _, config) and
|
||||
flowCand(mid, toReturn, nil, config) and
|
||||
apf instanceof AccessPathFrontNil
|
||||
)
|
||||
@@ -1810,18 +1795,6 @@ private predicate popWithFront(AccessPath ap0, Content f, AccessPathFront apf, A
|
||||
/** Gets the access path obtained by pushing `f` onto `ap`. */
|
||||
private AccessPath push(Content f, AccessPath ap) { ap = pop(f, result) }
|
||||
|
||||
/**
|
||||
* A node that requires an empty access path and should have its tracked type
|
||||
* (re-)computed. This is either a source or a node reached through an
|
||||
* additional step.
|
||||
*/
|
||||
private class AccessPathNilNode extends NormalNodeExt {
|
||||
AccessPathNilNode() { flowCand(this.(AccessPathFrontNilNode), _, _, _) }
|
||||
|
||||
/** Gets the `nil` path for this node. */
|
||||
AccessPathNil getAp() { result = TNil(this.getErasedNodeTypeBound()) }
|
||||
}
|
||||
|
||||
/**
|
||||
* Holds if data can flow from a source to `node` with the given `ap`.
|
||||
*/
|
||||
@@ -1838,20 +1811,19 @@ private predicate flowFwd0(
|
||||
flowCand(node, _, _, config) and
|
||||
config.isSource(node.getNode()) and
|
||||
fromArg = false and
|
||||
ap = node.(AccessPathNilNode).getAp() and
|
||||
ap = TNil(node.getErasedNodeTypeBound()) and
|
||||
apf = ap.(AccessPathNil).getFront()
|
||||
or
|
||||
flowCand(node, _, _, unbind(config)) and
|
||||
(
|
||||
exists(NodeExt mid |
|
||||
flowFwd(mid, fromArg, apf, ap, config) and
|
||||
localFlowBigStepExt(mid, node, true, config)
|
||||
localFlowBigStepExt(mid, node, true, _, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathNil nil |
|
||||
flowFwd(mid, fromArg, _, nil, config) and
|
||||
localFlowBigStepExt(mid, node, false, config) and
|
||||
ap = node.(AccessPathNilNode).getAp() and
|
||||
localFlowBigStepExt(mid, node, false, apf, config) and
|
||||
apf = ap.(AccessPathNil).getFront()
|
||||
)
|
||||
or
|
||||
@@ -1865,7 +1837,7 @@ private predicate flowFwd0(
|
||||
flowFwd(mid, _, _, nil, config) and
|
||||
additionalJumpStepExt(mid, node, config) and
|
||||
fromArg = false and
|
||||
ap = node.(AccessPathNilNode).getAp() and
|
||||
ap = TNil(node.getErasedNodeTypeBound()) and
|
||||
apf = ap.(AccessPathNil).getFront()
|
||||
)
|
||||
or
|
||||
@@ -1982,13 +1954,13 @@ private predicate flow0(NodeExt node, boolean toReturn, AccessPath ap, Configura
|
||||
ap instanceof AccessPathNil
|
||||
or
|
||||
exists(NodeExt mid |
|
||||
localFlowBigStepExt(node, mid, true, config) and
|
||||
localFlowBigStepExt(node, mid, true, _, config) and
|
||||
flow(mid, toReturn, ap, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathNil nil |
|
||||
flowFwd(node, _, _, ap, config) and
|
||||
localFlowBigStepExt(node, mid, false, config) and
|
||||
localFlowBigStepExt(node, mid, false, _, config) and
|
||||
flow(mid, toReturn, nil, config) and
|
||||
ap instanceof AccessPathNil
|
||||
)
|
||||
@@ -2164,7 +2136,7 @@ private newtype TPathNode =
|
||||
config.isSource(node) and
|
||||
cc instanceof CallContextAny and
|
||||
sc instanceof SummaryCtxNone and
|
||||
ap = any(AccessPathNilNode nil | nil.getNode() = node).getAp()
|
||||
ap = TNil(getErasedNodeTypeBound(node))
|
||||
or
|
||||
// ... or a step from an existing PathNode to another node.
|
||||
exists(PathNodeMid mid |
|
||||
@@ -2357,12 +2329,11 @@ private predicate pathStep(PathNodeMid mid, Node node, CallContext cc, SummaryCt
|
||||
pathIntoLocalStep(mid, midnode, cc, enclosing, sc, ap0, conf) and
|
||||
localCC = getLocalCallContext(cc, enclosing)
|
||||
|
|
||||
localFlowBigStep(midnode, node, true, conf, localCC) and
|
||||
localFlowBigStep(midnode, node, true, _, conf, localCC) and
|
||||
ap = ap0
|
||||
or
|
||||
localFlowBigStep(midnode, node, false, conf, localCC) and
|
||||
ap0 instanceof AccessPathNil and
|
||||
ap = any(AccessPathNilNode nil | nil.getNode() = node).getAp()
|
||||
localFlowBigStep(midnode, node, false, ap.(AccessPathNil).getType(), conf, localCC) and
|
||||
ap0 instanceof AccessPathNil
|
||||
)
|
||||
or
|
||||
jumpStep(mid.getNode(), node, mid.getConfiguration()) and
|
||||
@@ -2374,7 +2345,7 @@ private predicate pathStep(PathNodeMid mid, Node node, CallContext cc, SummaryCt
|
||||
cc instanceof CallContextAny and
|
||||
sc instanceof SummaryCtxNone and
|
||||
mid.getAp() instanceof AccessPathNil and
|
||||
ap = any(AccessPathNilNode nil | nil.getNode() = node).getAp()
|
||||
ap = TNil(getErasedNodeTypeBound(node))
|
||||
or
|
||||
exists(Content f, AccessPath ap0 | pathReadStep(mid, node, ap0, f, cc) and ap = pop(f, ap0)) and
|
||||
sc = mid.getSummaryCtx()
|
||||
@@ -2397,7 +2368,7 @@ private predicate pathIntoLocalStep(
|
||||
midnode = mid.getNode() and
|
||||
cc = mid.getCallContext() and
|
||||
conf = mid.getConfiguration() and
|
||||
localFlowBigStep(midnode, _, _, conf, _) and
|
||||
localFlowBigStep(midnode, _, _, _, conf, _) and
|
||||
enclosing = midnode.getEnclosingCallable() and
|
||||
sc = mid.getSummaryCtx() and
|
||||
ap0 = mid.getAp()
|
||||
|
||||
@@ -1307,15 +1307,20 @@ private predicate localFlowExit(Node node, Configuration config) {
|
||||
*/
|
||||
pragma[nomagic]
|
||||
private predicate localFlowStepPlus(
|
||||
Node node1, Node node2, boolean preservesValue, Configuration config, LocalCallContext cc
|
||||
Node node1, Node node2, boolean preservesValue, DataFlowType t, Configuration config,
|
||||
LocalCallContext cc
|
||||
) {
|
||||
not isUnreachableInCall(node2, cc.(LocalCallContextSpecificCall).getCall()) and
|
||||
(
|
||||
localFlowEntry(node1, config) and
|
||||
(
|
||||
localFlowStep(node1, node2, config) and preservesValue = true
|
||||
localFlowStep(node1, node2, config) and
|
||||
preservesValue = true and
|
||||
t = getErasedNodeTypeBound(node1)
|
||||
or
|
||||
additionalLocalFlowStep(node1, node2, config) and preservesValue = false
|
||||
additionalLocalFlowStep(node1, node2, config) and
|
||||
preservesValue = false and
|
||||
t = getErasedNodeTypeBound(node2)
|
||||
) and
|
||||
node1 != node2 and
|
||||
cc.relevantFor(node1.getEnclosingCallable()) and
|
||||
@@ -1323,17 +1328,18 @@ private predicate localFlowStepPlus(
|
||||
nodeCand(TNormalNode(node2), unbind(config))
|
||||
or
|
||||
exists(Node mid |
|
||||
localFlowStepPlus(node1, mid, preservesValue, config, cc) and
|
||||
localFlowStepPlus(node1, mid, preservesValue, t, config, cc) and
|
||||
localFlowStep(mid, node2, config) and
|
||||
not mid instanceof CastNode and
|
||||
nodeCand(TNormalNode(node2), unbind(config))
|
||||
)
|
||||
or
|
||||
exists(Node mid |
|
||||
localFlowStepPlus(node1, mid, _, config, cc) and
|
||||
localFlowStepPlus(node1, mid, _, _, config, cc) and
|
||||
additionalLocalFlowStep(mid, node2, config) and
|
||||
not mid instanceof CastNode and
|
||||
preservesValue = false and
|
||||
t = getErasedNodeTypeBound(node2) and
|
||||
nodeCand(TNormalNode(node2), unbind(config))
|
||||
)
|
||||
)
|
||||
@@ -1345,17 +1351,18 @@ private predicate localFlowStepPlus(
|
||||
*/
|
||||
pragma[nomagic]
|
||||
private predicate localFlowBigStep(
|
||||
Node node1, Node node2, boolean preservesValue, Configuration config, LocalCallContext callContext
|
||||
Node node1, Node node2, boolean preservesValue, DataFlowType t, Configuration config,
|
||||
LocalCallContext callContext
|
||||
) {
|
||||
localFlowStepPlus(node1, node2, preservesValue, config, callContext) and
|
||||
localFlowStepPlus(node1, node2, preservesValue, t, config, callContext) and
|
||||
localFlowExit(node2, config)
|
||||
}
|
||||
|
||||
pragma[nomagic]
|
||||
private predicate localFlowBigStepExt(
|
||||
NodeExt node1, NodeExt node2, boolean preservesValue, Configuration config
|
||||
NodeExt node1, NodeExt node2, boolean preservesValue, AccessPathFrontNil apf, Configuration config
|
||||
) {
|
||||
localFlowBigStep(node1.getNode(), node2.getNode(), preservesValue, config, _)
|
||||
localFlowBigStep(node1.getNode(), node2.getNode(), preservesValue, apf.getType(), config, _)
|
||||
}
|
||||
|
||||
private newtype TAccessPathFront =
|
||||
@@ -1395,46 +1402,24 @@ private predicate flowCandFwd(
|
||||
else any()
|
||||
}
|
||||
|
||||
/**
|
||||
* A node that requires an empty access path and should have its tracked type
|
||||
* (re-)computed. This is either a source or a node reached through an
|
||||
* additional step.
|
||||
*/
|
||||
private class AccessPathFrontNilNode extends NormalNodeExt {
|
||||
AccessPathFrontNilNode() {
|
||||
nodeCand(this, _) and
|
||||
(
|
||||
any(Configuration c).isSource(this.getNode())
|
||||
or
|
||||
localFlowBigStepExt(_, this, false, _)
|
||||
or
|
||||
additionalJumpStepExt(_, this, _)
|
||||
)
|
||||
}
|
||||
|
||||
/** Gets the `nil` path front for this node. */
|
||||
AccessPathFrontNil getApf() { result = TFrontNil(this.getErasedNodeTypeBound()) }
|
||||
}
|
||||
|
||||
private predicate flowCandFwd0(
|
||||
NodeExt node, boolean fromArg, AccessPathFront apf, Configuration config
|
||||
) {
|
||||
nodeCand2(node, _, false, config) and
|
||||
config.isSource(node.getNode()) and
|
||||
fromArg = false and
|
||||
apf = node.(AccessPathFrontNilNode).getApf()
|
||||
apf = TFrontNil(node.getErasedNodeTypeBound())
|
||||
or
|
||||
nodeCand(node, unbind(config)) and
|
||||
(
|
||||
exists(NodeExt mid |
|
||||
flowCandFwd(mid, fromArg, apf, config) and
|
||||
localFlowBigStepExt(mid, node, true, config)
|
||||
localFlowBigStepExt(mid, node, true, _, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathFrontNil nil |
|
||||
flowCandFwd(mid, fromArg, nil, config) and
|
||||
localFlowBigStepExt(mid, node, false, config) and
|
||||
apf = node.(AccessPathFrontNilNode).getApf()
|
||||
localFlowBigStepExt(mid, node, false, apf, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid |
|
||||
@@ -1447,7 +1432,7 @@ private predicate flowCandFwd0(
|
||||
flowCandFwd(mid, _, nil, config) and
|
||||
additionalJumpStepExt(mid, node, config) and
|
||||
fromArg = false and
|
||||
apf = node.(AccessPathFrontNilNode).getApf()
|
||||
apf = TFrontNil(node.getErasedNodeTypeBound())
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, boolean allowsFieldFlow |
|
||||
@@ -1589,13 +1574,13 @@ private predicate flowCand0(
|
||||
apf instanceof AccessPathFrontNil
|
||||
or
|
||||
exists(NodeExt mid |
|
||||
localFlowBigStepExt(node, mid, true, config) and
|
||||
localFlowBigStepExt(node, mid, true, _, config) and
|
||||
flowCand(mid, toReturn, apf, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathFrontNil nil |
|
||||
flowCandFwd(node, _, apf, config) and
|
||||
localFlowBigStepExt(node, mid, false, config) and
|
||||
localFlowBigStepExt(node, mid, false, _, config) and
|
||||
flowCand(mid, toReturn, nil, config) and
|
||||
apf instanceof AccessPathFrontNil
|
||||
)
|
||||
@@ -1810,18 +1795,6 @@ private predicate popWithFront(AccessPath ap0, Content f, AccessPathFront apf, A
|
||||
/** Gets the access path obtained by pushing `f` onto `ap`. */
|
||||
private AccessPath push(Content f, AccessPath ap) { ap = pop(f, result) }
|
||||
|
||||
/**
|
||||
* A node that requires an empty access path and should have its tracked type
|
||||
* (re-)computed. This is either a source or a node reached through an
|
||||
* additional step.
|
||||
*/
|
||||
private class AccessPathNilNode extends NormalNodeExt {
|
||||
AccessPathNilNode() { flowCand(this.(AccessPathFrontNilNode), _, _, _) }
|
||||
|
||||
/** Gets the `nil` path for this node. */
|
||||
AccessPathNil getAp() { result = TNil(this.getErasedNodeTypeBound()) }
|
||||
}
|
||||
|
||||
/**
|
||||
* Holds if data can flow from a source to `node` with the given `ap`.
|
||||
*/
|
||||
@@ -1838,20 +1811,19 @@ private predicate flowFwd0(
|
||||
flowCand(node, _, _, config) and
|
||||
config.isSource(node.getNode()) and
|
||||
fromArg = false and
|
||||
ap = node.(AccessPathNilNode).getAp() and
|
||||
ap = TNil(node.getErasedNodeTypeBound()) and
|
||||
apf = ap.(AccessPathNil).getFront()
|
||||
or
|
||||
flowCand(node, _, _, unbind(config)) and
|
||||
(
|
||||
exists(NodeExt mid |
|
||||
flowFwd(mid, fromArg, apf, ap, config) and
|
||||
localFlowBigStepExt(mid, node, true, config)
|
||||
localFlowBigStepExt(mid, node, true, _, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathNil nil |
|
||||
flowFwd(mid, fromArg, _, nil, config) and
|
||||
localFlowBigStepExt(mid, node, false, config) and
|
||||
ap = node.(AccessPathNilNode).getAp() and
|
||||
localFlowBigStepExt(mid, node, false, apf, config) and
|
||||
apf = ap.(AccessPathNil).getFront()
|
||||
)
|
||||
or
|
||||
@@ -1865,7 +1837,7 @@ private predicate flowFwd0(
|
||||
flowFwd(mid, _, _, nil, config) and
|
||||
additionalJumpStepExt(mid, node, config) and
|
||||
fromArg = false and
|
||||
ap = node.(AccessPathNilNode).getAp() and
|
||||
ap = TNil(node.getErasedNodeTypeBound()) and
|
||||
apf = ap.(AccessPathNil).getFront()
|
||||
)
|
||||
or
|
||||
@@ -1982,13 +1954,13 @@ private predicate flow0(NodeExt node, boolean toReturn, AccessPath ap, Configura
|
||||
ap instanceof AccessPathNil
|
||||
or
|
||||
exists(NodeExt mid |
|
||||
localFlowBigStepExt(node, mid, true, config) and
|
||||
localFlowBigStepExt(node, mid, true, _, config) and
|
||||
flow(mid, toReturn, ap, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathNil nil |
|
||||
flowFwd(node, _, _, ap, config) and
|
||||
localFlowBigStepExt(node, mid, false, config) and
|
||||
localFlowBigStepExt(node, mid, false, _, config) and
|
||||
flow(mid, toReturn, nil, config) and
|
||||
ap instanceof AccessPathNil
|
||||
)
|
||||
@@ -2164,7 +2136,7 @@ private newtype TPathNode =
|
||||
config.isSource(node) and
|
||||
cc instanceof CallContextAny and
|
||||
sc instanceof SummaryCtxNone and
|
||||
ap = any(AccessPathNilNode nil | nil.getNode() = node).getAp()
|
||||
ap = TNil(getErasedNodeTypeBound(node))
|
||||
or
|
||||
// ... or a step from an existing PathNode to another node.
|
||||
exists(PathNodeMid mid |
|
||||
@@ -2357,12 +2329,11 @@ private predicate pathStep(PathNodeMid mid, Node node, CallContext cc, SummaryCt
|
||||
pathIntoLocalStep(mid, midnode, cc, enclosing, sc, ap0, conf) and
|
||||
localCC = getLocalCallContext(cc, enclosing)
|
||||
|
|
||||
localFlowBigStep(midnode, node, true, conf, localCC) and
|
||||
localFlowBigStep(midnode, node, true, _, conf, localCC) and
|
||||
ap = ap0
|
||||
or
|
||||
localFlowBigStep(midnode, node, false, conf, localCC) and
|
||||
ap0 instanceof AccessPathNil and
|
||||
ap = any(AccessPathNilNode nil | nil.getNode() = node).getAp()
|
||||
localFlowBigStep(midnode, node, false, ap.(AccessPathNil).getType(), conf, localCC) and
|
||||
ap0 instanceof AccessPathNil
|
||||
)
|
||||
or
|
||||
jumpStep(mid.getNode(), node, mid.getConfiguration()) and
|
||||
@@ -2374,7 +2345,7 @@ private predicate pathStep(PathNodeMid mid, Node node, CallContext cc, SummaryCt
|
||||
cc instanceof CallContextAny and
|
||||
sc instanceof SummaryCtxNone and
|
||||
mid.getAp() instanceof AccessPathNil and
|
||||
ap = any(AccessPathNilNode nil | nil.getNode() = node).getAp()
|
||||
ap = TNil(getErasedNodeTypeBound(node))
|
||||
or
|
||||
exists(Content f, AccessPath ap0 | pathReadStep(mid, node, ap0, f, cc) and ap = pop(f, ap0)) and
|
||||
sc = mid.getSummaryCtx()
|
||||
@@ -2397,7 +2368,7 @@ private predicate pathIntoLocalStep(
|
||||
midnode = mid.getNode() and
|
||||
cc = mid.getCallContext() and
|
||||
conf = mid.getConfiguration() and
|
||||
localFlowBigStep(midnode, _, _, conf, _) and
|
||||
localFlowBigStep(midnode, _, _, _, conf, _) and
|
||||
enclosing = midnode.getEnclosingCallable() and
|
||||
sc = mid.getSummaryCtx() and
|
||||
ap0 = mid.getAp()
|
||||
|
||||
@@ -1307,15 +1307,20 @@ private predicate localFlowExit(Node node, Configuration config) {
|
||||
*/
|
||||
pragma[nomagic]
|
||||
private predicate localFlowStepPlus(
|
||||
Node node1, Node node2, boolean preservesValue, Configuration config, LocalCallContext cc
|
||||
Node node1, Node node2, boolean preservesValue, DataFlowType t, Configuration config,
|
||||
LocalCallContext cc
|
||||
) {
|
||||
not isUnreachableInCall(node2, cc.(LocalCallContextSpecificCall).getCall()) and
|
||||
(
|
||||
localFlowEntry(node1, config) and
|
||||
(
|
||||
localFlowStep(node1, node2, config) and preservesValue = true
|
||||
localFlowStep(node1, node2, config) and
|
||||
preservesValue = true and
|
||||
t = getErasedNodeTypeBound(node1)
|
||||
or
|
||||
additionalLocalFlowStep(node1, node2, config) and preservesValue = false
|
||||
additionalLocalFlowStep(node1, node2, config) and
|
||||
preservesValue = false and
|
||||
t = getErasedNodeTypeBound(node2)
|
||||
) and
|
||||
node1 != node2 and
|
||||
cc.relevantFor(node1.getEnclosingCallable()) and
|
||||
@@ -1323,17 +1328,18 @@ private predicate localFlowStepPlus(
|
||||
nodeCand(TNormalNode(node2), unbind(config))
|
||||
or
|
||||
exists(Node mid |
|
||||
localFlowStepPlus(node1, mid, preservesValue, config, cc) and
|
||||
localFlowStepPlus(node1, mid, preservesValue, t, config, cc) and
|
||||
localFlowStep(mid, node2, config) and
|
||||
not mid instanceof CastNode and
|
||||
nodeCand(TNormalNode(node2), unbind(config))
|
||||
)
|
||||
or
|
||||
exists(Node mid |
|
||||
localFlowStepPlus(node1, mid, _, config, cc) and
|
||||
localFlowStepPlus(node1, mid, _, _, config, cc) and
|
||||
additionalLocalFlowStep(mid, node2, config) and
|
||||
not mid instanceof CastNode and
|
||||
preservesValue = false and
|
||||
t = getErasedNodeTypeBound(node2) and
|
||||
nodeCand(TNormalNode(node2), unbind(config))
|
||||
)
|
||||
)
|
||||
@@ -1345,17 +1351,18 @@ private predicate localFlowStepPlus(
|
||||
*/
|
||||
pragma[nomagic]
|
||||
private predicate localFlowBigStep(
|
||||
Node node1, Node node2, boolean preservesValue, Configuration config, LocalCallContext callContext
|
||||
Node node1, Node node2, boolean preservesValue, DataFlowType t, Configuration config,
|
||||
LocalCallContext callContext
|
||||
) {
|
||||
localFlowStepPlus(node1, node2, preservesValue, config, callContext) and
|
||||
localFlowStepPlus(node1, node2, preservesValue, t, config, callContext) and
|
||||
localFlowExit(node2, config)
|
||||
}
|
||||
|
||||
pragma[nomagic]
|
||||
private predicate localFlowBigStepExt(
|
||||
NodeExt node1, NodeExt node2, boolean preservesValue, Configuration config
|
||||
NodeExt node1, NodeExt node2, boolean preservesValue, AccessPathFrontNil apf, Configuration config
|
||||
) {
|
||||
localFlowBigStep(node1.getNode(), node2.getNode(), preservesValue, config, _)
|
||||
localFlowBigStep(node1.getNode(), node2.getNode(), preservesValue, apf.getType(), config, _)
|
||||
}
|
||||
|
||||
private newtype TAccessPathFront =
|
||||
@@ -1395,46 +1402,24 @@ private predicate flowCandFwd(
|
||||
else any()
|
||||
}
|
||||
|
||||
/**
|
||||
* A node that requires an empty access path and should have its tracked type
|
||||
* (re-)computed. This is either a source or a node reached through an
|
||||
* additional step.
|
||||
*/
|
||||
private class AccessPathFrontNilNode extends NormalNodeExt {
|
||||
AccessPathFrontNilNode() {
|
||||
nodeCand(this, _) and
|
||||
(
|
||||
any(Configuration c).isSource(this.getNode())
|
||||
or
|
||||
localFlowBigStepExt(_, this, false, _)
|
||||
or
|
||||
additionalJumpStepExt(_, this, _)
|
||||
)
|
||||
}
|
||||
|
||||
/** Gets the `nil` path front for this node. */
|
||||
AccessPathFrontNil getApf() { result = TFrontNil(this.getErasedNodeTypeBound()) }
|
||||
}
|
||||
|
||||
private predicate flowCandFwd0(
|
||||
NodeExt node, boolean fromArg, AccessPathFront apf, Configuration config
|
||||
) {
|
||||
nodeCand2(node, _, false, config) and
|
||||
config.isSource(node.getNode()) and
|
||||
fromArg = false and
|
||||
apf = node.(AccessPathFrontNilNode).getApf()
|
||||
apf = TFrontNil(node.getErasedNodeTypeBound())
|
||||
or
|
||||
nodeCand(node, unbind(config)) and
|
||||
(
|
||||
exists(NodeExt mid |
|
||||
flowCandFwd(mid, fromArg, apf, config) and
|
||||
localFlowBigStepExt(mid, node, true, config)
|
||||
localFlowBigStepExt(mid, node, true, _, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathFrontNil nil |
|
||||
flowCandFwd(mid, fromArg, nil, config) and
|
||||
localFlowBigStepExt(mid, node, false, config) and
|
||||
apf = node.(AccessPathFrontNilNode).getApf()
|
||||
localFlowBigStepExt(mid, node, false, apf, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid |
|
||||
@@ -1447,7 +1432,7 @@ private predicate flowCandFwd0(
|
||||
flowCandFwd(mid, _, nil, config) and
|
||||
additionalJumpStepExt(mid, node, config) and
|
||||
fromArg = false and
|
||||
apf = node.(AccessPathFrontNilNode).getApf()
|
||||
apf = TFrontNil(node.getErasedNodeTypeBound())
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, boolean allowsFieldFlow |
|
||||
@@ -1589,13 +1574,13 @@ private predicate flowCand0(
|
||||
apf instanceof AccessPathFrontNil
|
||||
or
|
||||
exists(NodeExt mid |
|
||||
localFlowBigStepExt(node, mid, true, config) and
|
||||
localFlowBigStepExt(node, mid, true, _, config) and
|
||||
flowCand(mid, toReturn, apf, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathFrontNil nil |
|
||||
flowCandFwd(node, _, apf, config) and
|
||||
localFlowBigStepExt(node, mid, false, config) and
|
||||
localFlowBigStepExt(node, mid, false, _, config) and
|
||||
flowCand(mid, toReturn, nil, config) and
|
||||
apf instanceof AccessPathFrontNil
|
||||
)
|
||||
@@ -1810,18 +1795,6 @@ private predicate popWithFront(AccessPath ap0, Content f, AccessPathFront apf, A
|
||||
/** Gets the access path obtained by pushing `f` onto `ap`. */
|
||||
private AccessPath push(Content f, AccessPath ap) { ap = pop(f, result) }
|
||||
|
||||
/**
|
||||
* A node that requires an empty access path and should have its tracked type
|
||||
* (re-)computed. This is either a source or a node reached through an
|
||||
* additional step.
|
||||
*/
|
||||
private class AccessPathNilNode extends NormalNodeExt {
|
||||
AccessPathNilNode() { flowCand(this.(AccessPathFrontNilNode), _, _, _) }
|
||||
|
||||
/** Gets the `nil` path for this node. */
|
||||
AccessPathNil getAp() { result = TNil(this.getErasedNodeTypeBound()) }
|
||||
}
|
||||
|
||||
/**
|
||||
* Holds if data can flow from a source to `node` with the given `ap`.
|
||||
*/
|
||||
@@ -1838,20 +1811,19 @@ private predicate flowFwd0(
|
||||
flowCand(node, _, _, config) and
|
||||
config.isSource(node.getNode()) and
|
||||
fromArg = false and
|
||||
ap = node.(AccessPathNilNode).getAp() and
|
||||
ap = TNil(node.getErasedNodeTypeBound()) and
|
||||
apf = ap.(AccessPathNil).getFront()
|
||||
or
|
||||
flowCand(node, _, _, unbind(config)) and
|
||||
(
|
||||
exists(NodeExt mid |
|
||||
flowFwd(mid, fromArg, apf, ap, config) and
|
||||
localFlowBigStepExt(mid, node, true, config)
|
||||
localFlowBigStepExt(mid, node, true, _, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathNil nil |
|
||||
flowFwd(mid, fromArg, _, nil, config) and
|
||||
localFlowBigStepExt(mid, node, false, config) and
|
||||
ap = node.(AccessPathNilNode).getAp() and
|
||||
localFlowBigStepExt(mid, node, false, apf, config) and
|
||||
apf = ap.(AccessPathNil).getFront()
|
||||
)
|
||||
or
|
||||
@@ -1865,7 +1837,7 @@ private predicate flowFwd0(
|
||||
flowFwd(mid, _, _, nil, config) and
|
||||
additionalJumpStepExt(mid, node, config) and
|
||||
fromArg = false and
|
||||
ap = node.(AccessPathNilNode).getAp() and
|
||||
ap = TNil(node.getErasedNodeTypeBound()) and
|
||||
apf = ap.(AccessPathNil).getFront()
|
||||
)
|
||||
or
|
||||
@@ -1982,13 +1954,13 @@ private predicate flow0(NodeExt node, boolean toReturn, AccessPath ap, Configura
|
||||
ap instanceof AccessPathNil
|
||||
or
|
||||
exists(NodeExt mid |
|
||||
localFlowBigStepExt(node, mid, true, config) and
|
||||
localFlowBigStepExt(node, mid, true, _, config) and
|
||||
flow(mid, toReturn, ap, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathNil nil |
|
||||
flowFwd(node, _, _, ap, config) and
|
||||
localFlowBigStepExt(node, mid, false, config) and
|
||||
localFlowBigStepExt(node, mid, false, _, config) and
|
||||
flow(mid, toReturn, nil, config) and
|
||||
ap instanceof AccessPathNil
|
||||
)
|
||||
@@ -2164,7 +2136,7 @@ private newtype TPathNode =
|
||||
config.isSource(node) and
|
||||
cc instanceof CallContextAny and
|
||||
sc instanceof SummaryCtxNone and
|
||||
ap = any(AccessPathNilNode nil | nil.getNode() = node).getAp()
|
||||
ap = TNil(getErasedNodeTypeBound(node))
|
||||
or
|
||||
// ... or a step from an existing PathNode to another node.
|
||||
exists(PathNodeMid mid |
|
||||
@@ -2357,12 +2329,11 @@ private predicate pathStep(PathNodeMid mid, Node node, CallContext cc, SummaryCt
|
||||
pathIntoLocalStep(mid, midnode, cc, enclosing, sc, ap0, conf) and
|
||||
localCC = getLocalCallContext(cc, enclosing)
|
||||
|
|
||||
localFlowBigStep(midnode, node, true, conf, localCC) and
|
||||
localFlowBigStep(midnode, node, true, _, conf, localCC) and
|
||||
ap = ap0
|
||||
or
|
||||
localFlowBigStep(midnode, node, false, conf, localCC) and
|
||||
ap0 instanceof AccessPathNil and
|
||||
ap = any(AccessPathNilNode nil | nil.getNode() = node).getAp()
|
||||
localFlowBigStep(midnode, node, false, ap.(AccessPathNil).getType(), conf, localCC) and
|
||||
ap0 instanceof AccessPathNil
|
||||
)
|
||||
or
|
||||
jumpStep(mid.getNode(), node, mid.getConfiguration()) and
|
||||
@@ -2374,7 +2345,7 @@ private predicate pathStep(PathNodeMid mid, Node node, CallContext cc, SummaryCt
|
||||
cc instanceof CallContextAny and
|
||||
sc instanceof SummaryCtxNone and
|
||||
mid.getAp() instanceof AccessPathNil and
|
||||
ap = any(AccessPathNilNode nil | nil.getNode() = node).getAp()
|
||||
ap = TNil(getErasedNodeTypeBound(node))
|
||||
or
|
||||
exists(Content f, AccessPath ap0 | pathReadStep(mid, node, ap0, f, cc) and ap = pop(f, ap0)) and
|
||||
sc = mid.getSummaryCtx()
|
||||
@@ -2397,7 +2368,7 @@ private predicate pathIntoLocalStep(
|
||||
midnode = mid.getNode() and
|
||||
cc = mid.getCallContext() and
|
||||
conf = mid.getConfiguration() and
|
||||
localFlowBigStep(midnode, _, _, conf, _) and
|
||||
localFlowBigStep(midnode, _, _, _, conf, _) and
|
||||
enclosing = midnode.getEnclosingCallable() and
|
||||
sc = mid.getSummaryCtx() and
|
||||
ap0 = mid.getAp()
|
||||
|
||||
@@ -1307,15 +1307,20 @@ private predicate localFlowExit(Node node, Configuration config) {
|
||||
*/
|
||||
pragma[nomagic]
|
||||
private predicate localFlowStepPlus(
|
||||
Node node1, Node node2, boolean preservesValue, Configuration config, LocalCallContext cc
|
||||
Node node1, Node node2, boolean preservesValue, DataFlowType t, Configuration config,
|
||||
LocalCallContext cc
|
||||
) {
|
||||
not isUnreachableInCall(node2, cc.(LocalCallContextSpecificCall).getCall()) and
|
||||
(
|
||||
localFlowEntry(node1, config) and
|
||||
(
|
||||
localFlowStep(node1, node2, config) and preservesValue = true
|
||||
localFlowStep(node1, node2, config) and
|
||||
preservesValue = true and
|
||||
t = getErasedNodeTypeBound(node1)
|
||||
or
|
||||
additionalLocalFlowStep(node1, node2, config) and preservesValue = false
|
||||
additionalLocalFlowStep(node1, node2, config) and
|
||||
preservesValue = false and
|
||||
t = getErasedNodeTypeBound(node2)
|
||||
) and
|
||||
node1 != node2 and
|
||||
cc.relevantFor(node1.getEnclosingCallable()) and
|
||||
@@ -1323,17 +1328,18 @@ private predicate localFlowStepPlus(
|
||||
nodeCand(TNormalNode(node2), unbind(config))
|
||||
or
|
||||
exists(Node mid |
|
||||
localFlowStepPlus(node1, mid, preservesValue, config, cc) and
|
||||
localFlowStepPlus(node1, mid, preservesValue, t, config, cc) and
|
||||
localFlowStep(mid, node2, config) and
|
||||
not mid instanceof CastNode and
|
||||
nodeCand(TNormalNode(node2), unbind(config))
|
||||
)
|
||||
or
|
||||
exists(Node mid |
|
||||
localFlowStepPlus(node1, mid, _, config, cc) and
|
||||
localFlowStepPlus(node1, mid, _, _, config, cc) and
|
||||
additionalLocalFlowStep(mid, node2, config) and
|
||||
not mid instanceof CastNode and
|
||||
preservesValue = false and
|
||||
t = getErasedNodeTypeBound(node2) and
|
||||
nodeCand(TNormalNode(node2), unbind(config))
|
||||
)
|
||||
)
|
||||
@@ -1345,17 +1351,18 @@ private predicate localFlowStepPlus(
|
||||
*/
|
||||
pragma[nomagic]
|
||||
private predicate localFlowBigStep(
|
||||
Node node1, Node node2, boolean preservesValue, Configuration config, LocalCallContext callContext
|
||||
Node node1, Node node2, boolean preservesValue, DataFlowType t, Configuration config,
|
||||
LocalCallContext callContext
|
||||
) {
|
||||
localFlowStepPlus(node1, node2, preservesValue, config, callContext) and
|
||||
localFlowStepPlus(node1, node2, preservesValue, t, config, callContext) and
|
||||
localFlowExit(node2, config)
|
||||
}
|
||||
|
||||
pragma[nomagic]
|
||||
private predicate localFlowBigStepExt(
|
||||
NodeExt node1, NodeExt node2, boolean preservesValue, Configuration config
|
||||
NodeExt node1, NodeExt node2, boolean preservesValue, AccessPathFrontNil apf, Configuration config
|
||||
) {
|
||||
localFlowBigStep(node1.getNode(), node2.getNode(), preservesValue, config, _)
|
||||
localFlowBigStep(node1.getNode(), node2.getNode(), preservesValue, apf.getType(), config, _)
|
||||
}
|
||||
|
||||
private newtype TAccessPathFront =
|
||||
@@ -1395,46 +1402,24 @@ private predicate flowCandFwd(
|
||||
else any()
|
||||
}
|
||||
|
||||
/**
|
||||
* A node that requires an empty access path and should have its tracked type
|
||||
* (re-)computed. This is either a source or a node reached through an
|
||||
* additional step.
|
||||
*/
|
||||
private class AccessPathFrontNilNode extends NormalNodeExt {
|
||||
AccessPathFrontNilNode() {
|
||||
nodeCand(this, _) and
|
||||
(
|
||||
any(Configuration c).isSource(this.getNode())
|
||||
or
|
||||
localFlowBigStepExt(_, this, false, _)
|
||||
or
|
||||
additionalJumpStepExt(_, this, _)
|
||||
)
|
||||
}
|
||||
|
||||
/** Gets the `nil` path front for this node. */
|
||||
AccessPathFrontNil getApf() { result = TFrontNil(this.getErasedNodeTypeBound()) }
|
||||
}
|
||||
|
||||
private predicate flowCandFwd0(
|
||||
NodeExt node, boolean fromArg, AccessPathFront apf, Configuration config
|
||||
) {
|
||||
nodeCand2(node, _, false, config) and
|
||||
config.isSource(node.getNode()) and
|
||||
fromArg = false and
|
||||
apf = node.(AccessPathFrontNilNode).getApf()
|
||||
apf = TFrontNil(node.getErasedNodeTypeBound())
|
||||
or
|
||||
nodeCand(node, unbind(config)) and
|
||||
(
|
||||
exists(NodeExt mid |
|
||||
flowCandFwd(mid, fromArg, apf, config) and
|
||||
localFlowBigStepExt(mid, node, true, config)
|
||||
localFlowBigStepExt(mid, node, true, _, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathFrontNil nil |
|
||||
flowCandFwd(mid, fromArg, nil, config) and
|
||||
localFlowBigStepExt(mid, node, false, config) and
|
||||
apf = node.(AccessPathFrontNilNode).getApf()
|
||||
localFlowBigStepExt(mid, node, false, apf, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid |
|
||||
@@ -1447,7 +1432,7 @@ private predicate flowCandFwd0(
|
||||
flowCandFwd(mid, _, nil, config) and
|
||||
additionalJumpStepExt(mid, node, config) and
|
||||
fromArg = false and
|
||||
apf = node.(AccessPathFrontNilNode).getApf()
|
||||
apf = TFrontNil(node.getErasedNodeTypeBound())
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, boolean allowsFieldFlow |
|
||||
@@ -1589,13 +1574,13 @@ private predicate flowCand0(
|
||||
apf instanceof AccessPathFrontNil
|
||||
or
|
||||
exists(NodeExt mid |
|
||||
localFlowBigStepExt(node, mid, true, config) and
|
||||
localFlowBigStepExt(node, mid, true, _, config) and
|
||||
flowCand(mid, toReturn, apf, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathFrontNil nil |
|
||||
flowCandFwd(node, _, apf, config) and
|
||||
localFlowBigStepExt(node, mid, false, config) and
|
||||
localFlowBigStepExt(node, mid, false, _, config) and
|
||||
flowCand(mid, toReturn, nil, config) and
|
||||
apf instanceof AccessPathFrontNil
|
||||
)
|
||||
@@ -1810,18 +1795,6 @@ private predicate popWithFront(AccessPath ap0, Content f, AccessPathFront apf, A
|
||||
/** Gets the access path obtained by pushing `f` onto `ap`. */
|
||||
private AccessPath push(Content f, AccessPath ap) { ap = pop(f, result) }
|
||||
|
||||
/**
|
||||
* A node that requires an empty access path and should have its tracked type
|
||||
* (re-)computed. This is either a source or a node reached through an
|
||||
* additional step.
|
||||
*/
|
||||
private class AccessPathNilNode extends NormalNodeExt {
|
||||
AccessPathNilNode() { flowCand(this.(AccessPathFrontNilNode), _, _, _) }
|
||||
|
||||
/** Gets the `nil` path for this node. */
|
||||
AccessPathNil getAp() { result = TNil(this.getErasedNodeTypeBound()) }
|
||||
}
|
||||
|
||||
/**
|
||||
* Holds if data can flow from a source to `node` with the given `ap`.
|
||||
*/
|
||||
@@ -1838,20 +1811,19 @@ private predicate flowFwd0(
|
||||
flowCand(node, _, _, config) and
|
||||
config.isSource(node.getNode()) and
|
||||
fromArg = false and
|
||||
ap = node.(AccessPathNilNode).getAp() and
|
||||
ap = TNil(node.getErasedNodeTypeBound()) and
|
||||
apf = ap.(AccessPathNil).getFront()
|
||||
or
|
||||
flowCand(node, _, _, unbind(config)) and
|
||||
(
|
||||
exists(NodeExt mid |
|
||||
flowFwd(mid, fromArg, apf, ap, config) and
|
||||
localFlowBigStepExt(mid, node, true, config)
|
||||
localFlowBigStepExt(mid, node, true, _, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathNil nil |
|
||||
flowFwd(mid, fromArg, _, nil, config) and
|
||||
localFlowBigStepExt(mid, node, false, config) and
|
||||
ap = node.(AccessPathNilNode).getAp() and
|
||||
localFlowBigStepExt(mid, node, false, apf, config) and
|
||||
apf = ap.(AccessPathNil).getFront()
|
||||
)
|
||||
or
|
||||
@@ -1865,7 +1837,7 @@ private predicate flowFwd0(
|
||||
flowFwd(mid, _, _, nil, config) and
|
||||
additionalJumpStepExt(mid, node, config) and
|
||||
fromArg = false and
|
||||
ap = node.(AccessPathNilNode).getAp() and
|
||||
ap = TNil(node.getErasedNodeTypeBound()) and
|
||||
apf = ap.(AccessPathNil).getFront()
|
||||
)
|
||||
or
|
||||
@@ -1982,13 +1954,13 @@ private predicate flow0(NodeExt node, boolean toReturn, AccessPath ap, Configura
|
||||
ap instanceof AccessPathNil
|
||||
or
|
||||
exists(NodeExt mid |
|
||||
localFlowBigStepExt(node, mid, true, config) and
|
||||
localFlowBigStepExt(node, mid, true, _, config) and
|
||||
flow(mid, toReturn, ap, config)
|
||||
)
|
||||
or
|
||||
exists(NodeExt mid, AccessPathNil nil |
|
||||
flowFwd(node, _, _, ap, config) and
|
||||
localFlowBigStepExt(node, mid, false, config) and
|
||||
localFlowBigStepExt(node, mid, false, _, config) and
|
||||
flow(mid, toReturn, nil, config) and
|
||||
ap instanceof AccessPathNil
|
||||
)
|
||||
@@ -2164,7 +2136,7 @@ private newtype TPathNode =
|
||||
config.isSource(node) and
|
||||
cc instanceof CallContextAny and
|
||||
sc instanceof SummaryCtxNone and
|
||||
ap = any(AccessPathNilNode nil | nil.getNode() = node).getAp()
|
||||
ap = TNil(getErasedNodeTypeBound(node))
|
||||
or
|
||||
// ... or a step from an existing PathNode to another node.
|
||||
exists(PathNodeMid mid |
|
||||
@@ -2357,12 +2329,11 @@ private predicate pathStep(PathNodeMid mid, Node node, CallContext cc, SummaryCt
|
||||
pathIntoLocalStep(mid, midnode, cc, enclosing, sc, ap0, conf) and
|
||||
localCC = getLocalCallContext(cc, enclosing)
|
||||
|
|
||||
localFlowBigStep(midnode, node, true, conf, localCC) and
|
||||
localFlowBigStep(midnode, node, true, _, conf, localCC) and
|
||||
ap = ap0
|
||||
or
|
||||
localFlowBigStep(midnode, node, false, conf, localCC) and
|
||||
ap0 instanceof AccessPathNil and
|
||||
ap = any(AccessPathNilNode nil | nil.getNode() = node).getAp()
|
||||
localFlowBigStep(midnode, node, false, ap.(AccessPathNil).getType(), conf, localCC) and
|
||||
ap0 instanceof AccessPathNil
|
||||
)
|
||||
or
|
||||
jumpStep(mid.getNode(), node, mid.getConfiguration()) and
|
||||
@@ -2374,7 +2345,7 @@ private predicate pathStep(PathNodeMid mid, Node node, CallContext cc, SummaryCt
|
||||
cc instanceof CallContextAny and
|
||||
sc instanceof SummaryCtxNone and
|
||||
mid.getAp() instanceof AccessPathNil and
|
||||
ap = any(AccessPathNilNode nil | nil.getNode() = node).getAp()
|
||||
ap = TNil(getErasedNodeTypeBound(node))
|
||||
or
|
||||
exists(Content f, AccessPath ap0 | pathReadStep(mid, node, ap0, f, cc) and ap = pop(f, ap0)) and
|
||||
sc = mid.getSummaryCtx()
|
||||
@@ -2397,7 +2368,7 @@ private predicate pathIntoLocalStep(
|
||||
midnode = mid.getNode() and
|
||||
cc = mid.getCallContext() and
|
||||
conf = mid.getConfiguration() and
|
||||
localFlowBigStep(midnode, _, _, conf, _) and
|
||||
localFlowBigStep(midnode, _, _, _, conf, _) and
|
||||
enclosing = midnode.getEnclosingCallable() and
|
||||
sc = mid.getSummaryCtx() and
|
||||
ap0 = mid.getAp()
|
||||
|
||||
18
java/ql/test/library-tests/dataflow/typepruning/A.java
Normal file
18
java/ql/test/library-tests/dataflow/typepruning/A.java
Normal file
@@ -0,0 +1,18 @@
|
||||
public class A {
|
||||
Object customStep(Object o) { return null; }
|
||||
|
||||
Object source() { return null; }
|
||||
|
||||
void sink(Object o) { }
|
||||
|
||||
Object through1(Object o) {
|
||||
Object o2 = customStep(o);
|
||||
String s = (String)o2;
|
||||
return s;
|
||||
}
|
||||
|
||||
void foo() {
|
||||
Object x = through1(source());
|
||||
sink(x);
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1 @@
|
||||
| A.java:15:25:15:32 | source(...) | A.java:16:10:16:10 | x | A.java:14:8:14:10 | foo |
|
||||
27
java/ql/test/library-tests/dataflow/typepruning/test.ql
Normal file
27
java/ql/test/library-tests/dataflow/typepruning/test.ql
Normal file
@@ -0,0 +1,27 @@
|
||||
import java
|
||||
import semmle.code.java.dataflow.DataFlow
|
||||
import DataFlow
|
||||
|
||||
class Conf extends Configuration {
|
||||
Conf() { this = "test types" }
|
||||
|
||||
override predicate isSource(Node n) { n.asExpr().(MethodAccess).getMethod().hasName("source") }
|
||||
|
||||
override predicate isSink(Node n) {
|
||||
exists(MethodAccess sink |
|
||||
sink.getAnArgument() = n.asExpr() and sink.getMethod().hasName("sink")
|
||||
)
|
||||
}
|
||||
|
||||
override predicate isAdditionalFlowStep(Node n1, Node n2) {
|
||||
exists(MethodAccess ma |
|
||||
ma.getMethod().hasName("customStep") and
|
||||
ma.getAnArgument() = n1.asExpr() and
|
||||
ma = n2.asExpr()
|
||||
)
|
||||
}
|
||||
}
|
||||
|
||||
from Node src, Node sink, Conf conf
|
||||
where conf.hasFlow(src, sink)
|
||||
select src, sink, sink.getEnclosingCallable()
|
||||
Reference in New Issue
Block a user