Python: Properly handle invoke.task decorator

2025-12-20 10:46:30 +01:00 · 2020-10-07 12:29:19 +02:00
parent 67c5c590d2
commit c09695af7d
2 changed files with 1 additions and 3 deletions
--- a/python/ql/src/experimental/semmle/python/frameworks/Invoke.qll
+++ b/python/ql/src/experimental/semmle/python/frameworks/Invoke.qll
@@ -100,7 +100,7 @@ private module Invoke {
          t.start() and
          exists(Function func |
            func.getADecorator() = invoke_attr("task").asExpr() and
-            result.asExpr() = func.getArg(0)
+            result.(DataFlow::ParameterNode).getParameter() = func.getArg(0)
          )
          or
          exists(DataFlow::TypeTracker t2 | result = instance(t2).track(t2, t))