hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-27 01:35:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

Ruby: Prevent positional matching when preceded by a splat

Browse Source
This commit is contained in:
Tom Hvitved
2024-08-20 14:19:29 +02:00
parent 20dc242830
commit c4b0f81883
4 changed files with 22 additions and 236 deletions
Download Patch File Download Diff File Expand all files Collapse all files

21
ruby/ql/lib/codeql/ruby/dataflow/internal/DataFlowPrivate.qll
View File

@@ -195,7 +195,9 @@ private class Argument extends CfgNodes::ExprCfgNode {
not this.getExpr().(Pair).getKey().getConstantValue().isSymbol(_) and
not this.getExpr() instanceof HashSplatExpr and
not this.getExpr() instanceof SplatExpr and
arg.isPositional(i)
arg.isPositional(i) and
// There are no splat arguments before the positional argument
not splatArgumentAt(call, any(int j | j < i))
)
or
exists(CfgNodes::ExprNodes::PairCfgNode p |
@@ -217,7 +219,9 @@ private class Argument extends CfgNodes::ExprCfgNode {
exists(int pos |
this = call.getArgument(pos) and
this.getExpr() instanceof SplatExpr and
arg.isSplat(pos)
arg.isSplat(pos) and
// There are no earlier splat arguments
not splatArgumentAt(call, any(int j | j < pos))
)
or
this = call.getAnArgument() and
@@ -432,7 +436,7 @@ private predicate splatParameterAt(Callable c, int pos) {
}
private predicate splatArgumentAt(CfgNodes::ExprNodes::CallCfgNode c, int pos) {
exists(Argument arg, ArgumentPosition apos | arg.isArgumentOf(c, apos) and apos.isSplat(pos))
c.getArgument(pos).getExpr() instanceof SplatExpr
}
/** A collection of cached types and predicates to be evaluated in the same stage. */
@@ -920,7 +924,12 @@ private module ParameterNodes {
override predicate isParameterOf(DataFlowCallable c, ParameterPosition pos) {
exists(Callable callable | callable = c.asCfgScope() |
exists(int i | pos.isPositional(i) and callable.getParameter(i) = parameter |
exists(int i |
pos.isPositional(i) and
callable.getParameter(i) = parameter and
// There are no splat parameters before the positional parameter
not splatParameterAt(callable, any(int m | m < i))
|
parameter instanceof SimpleParameter
or
parameter instanceof OptionalParameter
@@ -939,7 +948,9 @@ private module ParameterNodes {
parameter = callable.getParameter(n).(SplatParameter) and
pos.isSplat(n) and
// There are no positional parameters after the splat
not exists(SimpleParameter p, int m | m > n | p = callable.getParameter(m))
not exists(SimpleParameter p, int m | m > n | p = callable.getParameter(m)) and
// There are no earlier splat parameters
not splatParameterAt(callable, any(int m | m < n))
)
or
parameter = callable.getAParameter().(BlockParameter) and

195
ruby/ql/test/library-tests/dataflow/params/TypeTracker.expected
View File

@@ -36,8 +36,6 @@ track
| params_flow.rb:1:11:1:11 | x | type tracker with call steps | params_flow.rb:65:10:65:13 | ...[...] |
| params_flow.rb:1:11:1:11 | x | type tracker with call steps | params_flow.rb:69:14:69:14 | x |
| params_flow.rb:1:11:1:11 | x | type tracker with call steps | params_flow.rb:69:17:69:17 | y |
| params_flow.rb:1:11:1:11 | x | type tracker with call steps | params_flow.rb:69:24:69:24 | w |
| params_flow.rb:1:11:1:11 | x | type tracker with call steps | params_flow.rb:69:27:69:27 | r |
| params_flow.rb:1:11:1:11 | x | type tracker with call steps | params_flow.rb:83:14:83:14 | t |
| params_flow.rb:1:11:1:11 | x | type tracker with call steps | params_flow.rb:83:17:83:17 | u |
| params_flow.rb:1:11:1:11 | x | type tracker with call steps | params_flow.rb:83:20:83:20 | v |
@@ -45,7 +43,6 @@ track
| params_flow.rb:1:11:1:11 | x | type tracker with call steps | params_flow.rb:83:26:83:26 | x |
| params_flow.rb:1:11:1:11 | x | type tracker with call steps | params_flow.rb:83:29:83:29 | y |
| params_flow.rb:1:11:1:11 | x | type tracker with call steps | params_flow.rb:98:19:98:19 | a |
| params_flow.rb:1:11:1:11 | x | type tracker with call steps | params_flow.rb:98:31:98:31 | b |
| params_flow.rb:1:11:1:11 | x | type tracker with call steps | params_flow.rb:108:37:108:37 | a |
| params_flow.rb:1:11:1:11 | x | type tracker with call steps | params_flow.rb:108:44:108:44 | c |
| params_flow.rb:1:11:1:11 | x | type tracker with call steps | params_flow.rb:110:10:110:13 | ...[...] |
@@ -74,8 +71,6 @@ track
| params_flow.rb:1:11:1:11 | x | type tracker with call steps with content element 0 | params_flow.rb:69:1:76:3 | synthetic splat parameter |
| params_flow.rb:1:11:1:11 | x | type tracker with call steps with content element 0 | params_flow.rb:70:5:70:10 | synthetic splat argument |
| params_flow.rb:1:11:1:11 | x | type tracker with call steps with content element 0 | params_flow.rb:71:5:71:10 | synthetic splat argument |
| params_flow.rb:1:11:1:11 | x | type tracker with call steps with content element 0 | params_flow.rb:74:5:74:10 | synthetic splat argument |
| params_flow.rb:1:11:1:11 | x | type tracker with call steps with content element 0 | params_flow.rb:75:5:75:10 | synthetic splat argument |
| params_flow.rb:1:11:1:11 | x | type tracker with call steps with content element 0 | params_flow.rb:83:1:91:3 | synthetic splat parameter |
| params_flow.rb:1:11:1:11 | x | type tracker with call steps with content element 0 | params_flow.rb:84:5:84:10 | synthetic splat argument |
| params_flow.rb:1:11:1:11 | x | type tracker with call steps with content element 0 | params_flow.rb:85:5:85:10 | synthetic splat argument |
@@ -85,7 +80,6 @@ track
| params_flow.rb:1:11:1:11 | x | type tracker with call steps with content element 0 | params_flow.rb:89:5:89:10 | synthetic splat argument |
| params_flow.rb:1:11:1:11 | x | type tracker with call steps with content element 0 | params_flow.rb:98:1:103:3 | synthetic splat parameter |
| params_flow.rb:1:11:1:11 | x | type tracker with call steps with content element 0 | params_flow.rb:99:5:99:10 | synthetic splat argument |
| params_flow.rb:1:11:1:11 | x | type tracker with call steps with content element 0 | params_flow.rb:102:5:102:10 | synthetic splat argument |
| params_flow.rb:1:11:1:11 | x | type tracker with call steps with content element 0 | params_flow.rb:108:1:112:3 | synthetic splat parameter |
| params_flow.rb:1:11:1:11 | x | type tracker with call steps with content element 0 | params_flow.rb:108:40:108:41 | *b |
| params_flow.rb:1:11:1:11 | x | type tracker with call steps with content element 0 | params_flow.rb:109:5:109:10 | synthetic splat argument |
@@ -1475,37 +1469,21 @@ track
| params_flow.rb:78:38:78:39 | 29 | type tracker without call steps | params_flow.rb:78:38:78:39 | 29 |
| params_flow.rb:78:38:78:39 | 29 | type tracker without call steps with content element 0 | params_flow.rb:78:32:78:40 | synthetic splat argument |
| params_flow.rb:78:38:78:39 | 29 | type tracker without call steps with content element 2 | params_flow.rb:78:1:78:63 | synthetic splat argument |
| params_flow.rb:78:43:78:51 | call to taint | type tracker with call steps | params_flow.rb:5:10:5:10 | x |
| params_flow.rb:78:43:78:51 | call to taint | type tracker with call steps | params_flow.rb:69:24:69:24 | w |
| params_flow.rb:78:43:78:51 | call to taint | type tracker with call steps with content element 0 | params_flow.rb:6:5:6:10 | synthetic splat argument |
| params_flow.rb:78:43:78:51 | call to taint | type tracker with call steps with content element 0 | params_flow.rb:74:5:74:10 | synthetic splat argument |
| params_flow.rb:78:43:78:51 | call to taint | type tracker with call steps with content element 3 | params_flow.rb:69:1:76:3 | synthetic splat parameter |
| params_flow.rb:78:43:78:51 | call to taint | type tracker without call steps | params_flow.rb:78:43:78:51 | call to taint |
| params_flow.rb:78:43:78:51 | call to taint | type tracker without call steps with content element 3 | params_flow.rb:78:1:78:63 | synthetic splat argument |
| params_flow.rb:78:43:78:51 | synthetic splat argument | type tracker without call steps | params_flow.rb:78:43:78:51 | synthetic splat argument |
| params_flow.rb:78:49:78:50 | 30 | type tracker with call steps | params_flow.rb:1:11:1:11 | x |
| params_flow.rb:78:49:78:50 | 30 | type tracker with call steps | params_flow.rb:5:10:5:10 | x |
| params_flow.rb:78:49:78:50 | 30 | type tracker with call steps | params_flow.rb:69:24:69:24 | w |
| params_flow.rb:78:49:78:50 | 30 | type tracker with call steps with content element 0 | params_flow.rb:6:5:6:10 | synthetic splat argument |
| params_flow.rb:78:49:78:50 | 30 | type tracker with call steps with content element 0 | params_flow.rb:74:5:74:10 | synthetic splat argument |
| params_flow.rb:78:49:78:50 | 30 | type tracker with call steps with content element 3 | params_flow.rb:69:1:76:3 | synthetic splat parameter |
| params_flow.rb:78:49:78:50 | 30 | type tracker without call steps | params_flow.rb:78:43:78:51 | call to taint |
| params_flow.rb:78:49:78:50 | 30 | type tracker without call steps | params_flow.rb:78:49:78:50 | 30 |
| params_flow.rb:78:49:78:50 | 30 | type tracker without call steps with content element 0 | params_flow.rb:78:43:78:51 | synthetic splat argument |
| params_flow.rb:78:49:78:50 | 30 | type tracker without call steps with content element 3 | params_flow.rb:78:1:78:63 | synthetic splat argument |
| params_flow.rb:78:54:78:62 | call to taint | type tracker with call steps | params_flow.rb:5:10:5:10 | x |
| params_flow.rb:78:54:78:62 | call to taint | type tracker with call steps | params_flow.rb:69:27:69:27 | r |
| params_flow.rb:78:54:78:62 | call to taint | type tracker with call steps with content element 0 | params_flow.rb:6:5:6:10 | synthetic splat argument |
| params_flow.rb:78:54:78:62 | call to taint | type tracker with call steps with content element 0 | params_flow.rb:75:5:75:10 | synthetic splat argument |
| params_flow.rb:78:54:78:62 | call to taint | type tracker with call steps with content element 4 | params_flow.rb:69:1:76:3 | synthetic splat parameter |
| params_flow.rb:78:54:78:62 | call to taint | type tracker without call steps | params_flow.rb:78:54:78:62 | call to taint |
| params_flow.rb:78:54:78:62 | call to taint | type tracker without call steps with content element 4 | params_flow.rb:78:1:78:63 | synthetic splat argument |
| params_flow.rb:78:54:78:62 | synthetic splat argument | type tracker without call steps | params_flow.rb:78:54:78:62 | synthetic splat argument |
| params_flow.rb:78:60:78:61 | 31 | type tracker with call steps | params_flow.rb:1:11:1:11 | x |
| params_flow.rb:78:60:78:61 | 31 | type tracker with call steps | params_flow.rb:5:10:5:10 | x |
| params_flow.rb:78:60:78:61 | 31 | type tracker with call steps | params_flow.rb:69:27:69:27 | r |
| params_flow.rb:78:60:78:61 | 31 | type tracker with call steps with content element 0 | params_flow.rb:6:5:6:10 | synthetic splat argument |
| params_flow.rb:78:60:78:61 | 31 | type tracker with call steps with content element 0 | params_flow.rb:75:5:75:10 | synthetic splat argument |
| params_flow.rb:78:60:78:61 | 31 | type tracker with call steps with content element 4 | params_flow.rb:69:1:76:3 | synthetic splat parameter |
| params_flow.rb:78:60:78:61 | 31 | type tracker without call steps | params_flow.rb:78:54:78:62 | call to taint |
| params_flow.rb:78:60:78:61 | 31 | type tracker without call steps | params_flow.rb:78:60:78:61 | 31 |
@@ -1841,17 +1819,9 @@ track
| params_flow.rb:94:27:94:28 | 39 | type tracker without call steps with content element 0 | params_flow.rb:94:21:94:29 | synthetic splat argument |
| params_flow.rb:94:27:94:28 | 39 | type tracker without call steps with content element 1 | params_flow.rb:94:1:94:48 | synthetic splat argument |
| params_flow.rb:94:32:94:36 | * ... | type tracker without call steps | params_flow.rb:94:32:94:36 | * ... |
| params_flow.rb:94:39:94:47 | call to taint | type tracker with call steps | params_flow.rb:5:10:5:10 | x |
| params_flow.rb:94:39:94:47 | call to taint | type tracker with call steps | params_flow.rb:83:23:83:23 | w |
| params_flow.rb:94:39:94:47 | call to taint | type tracker with call steps with content element 0 | params_flow.rb:6:5:6:10 | synthetic splat argument |
| params_flow.rb:94:39:94:47 | call to taint | type tracker with call steps with content element 0 | params_flow.rb:87:5:87:10 | synthetic splat argument |
| params_flow.rb:94:39:94:47 | call to taint | type tracker without call steps | params_flow.rb:94:39:94:47 | call to taint |
| params_flow.rb:94:39:94:47 | synthetic splat argument | type tracker without call steps | params_flow.rb:94:39:94:47 | synthetic splat argument |
| params_flow.rb:94:45:94:46 | 44 | type tracker with call steps | params_flow.rb:1:11:1:11 | x |
| params_flow.rb:94:45:94:46 | 44 | type tracker with call steps | params_flow.rb:5:10:5:10 | x |
| params_flow.rb:94:45:94:46 | 44 | type tracker with call steps | params_flow.rb:83:23:83:23 | w |
| params_flow.rb:94:45:94:46 | 44 | type tracker with call steps with content element 0 | params_flow.rb:6:5:6:10 | synthetic splat argument |
| params_flow.rb:94:45:94:46 | 44 | type tracker with call steps with content element 0 | params_flow.rb:87:5:87:10 | synthetic splat argument |
| params_flow.rb:94:45:94:46 | 44 | type tracker without call steps | params_flow.rb:94:39:94:47 | call to taint |
| params_flow.rb:94:45:94:46 | 44 | type tracker without call steps | params_flow.rb:94:45:94:46 | 44 |
| params_flow.rb:94:45:94:46 | 44 | type tracker without call steps with content element 0 | params_flow.rb:94:39:94:47 | synthetic splat argument |
@@ -1953,31 +1923,15 @@ track
| params_flow.rb:96:62:96:63 | 49 | type tracker without call steps with content element 2 | params_flow.rb:96:33:96:65 | call to [] |
| params_flow.rb:96:62:96:63 | 49 | type tracker without call steps with content element 2 | params_flow.rb:96:33:96:65 | synthetic splat argument |
| params_flow.rb:96:62:96:63 | 49 | type tracker without call steps with content element 4 | params_flow.rb:96:1:96:88 | synthetic splat argument |
| params_flow.rb:96:68:96:76 | call to taint | type tracker with call steps | params_flow.rb:5:10:5:10 | x |
| params_flow.rb:96:68:96:76 | call to taint | type tracker with call steps | params_flow.rb:69:24:69:24 | w |
| params_flow.rb:96:68:96:76 | call to taint | type tracker with call steps with content element 0 | params_flow.rb:6:5:6:10 | synthetic splat argument |
| params_flow.rb:96:68:96:76 | call to taint | type tracker with call steps with content element 0 | params_flow.rb:74:5:74:10 | synthetic splat argument |
| params_flow.rb:96:68:96:76 | call to taint | type tracker without call steps | params_flow.rb:96:68:96:76 | call to taint |
| params_flow.rb:96:68:96:76 | synthetic splat argument | type tracker without call steps | params_flow.rb:96:68:96:76 | synthetic splat argument |
| params_flow.rb:96:74:96:75 | 50 | type tracker with call steps | params_flow.rb:1:11:1:11 | x |
| params_flow.rb:96:74:96:75 | 50 | type tracker with call steps | params_flow.rb:5:10:5:10 | x |
| params_flow.rb:96:74:96:75 | 50 | type tracker with call steps | params_flow.rb:69:24:69:24 | w |
| params_flow.rb:96:74:96:75 | 50 | type tracker with call steps with content element 0 | params_flow.rb:6:5:6:10 | synthetic splat argument |
| params_flow.rb:96:74:96:75 | 50 | type tracker with call steps with content element 0 | params_flow.rb:74:5:74:10 | synthetic splat argument |
| params_flow.rb:96:74:96:75 | 50 | type tracker without call steps | params_flow.rb:96:68:96:76 | call to taint |
| params_flow.rb:96:74:96:75 | 50 | type tracker without call steps | params_flow.rb:96:74:96:75 | 50 |
| params_flow.rb:96:74:96:75 | 50 | type tracker without call steps with content element 0 | params_flow.rb:96:68:96:76 | synthetic splat argument |
| params_flow.rb:96:79:96:87 | call to taint | type tracker with call steps | params_flow.rb:5:10:5:10 | x |
| params_flow.rb:96:79:96:87 | call to taint | type tracker with call steps | params_flow.rb:69:27:69:27 | r |
| params_flow.rb:96:79:96:87 | call to taint | type tracker with call steps with content element 0 | params_flow.rb:6:5:6:10 | synthetic splat argument |
| params_flow.rb:96:79:96:87 | call to taint | type tracker with call steps with content element 0 | params_flow.rb:75:5:75:10 | synthetic splat argument |
| params_flow.rb:96:79:96:87 | call to taint | type tracker without call steps | params_flow.rb:96:79:96:87 | call to taint |
| params_flow.rb:96:79:96:87 | synthetic splat argument | type tracker without call steps | params_flow.rb:96:79:96:87 | synthetic splat argument |
| params_flow.rb:96:85:96:86 | 51 | type tracker with call steps | params_flow.rb:1:11:1:11 | x |
| params_flow.rb:96:85:96:86 | 51 | type tracker with call steps | params_flow.rb:5:10:5:10 | x |
| params_flow.rb:96:85:96:86 | 51 | type tracker with call steps | params_flow.rb:69:27:69:27 | r |
| params_flow.rb:96:85:96:86 | 51 | type tracker with call steps with content element 0 | params_flow.rb:6:5:6:10 | synthetic splat argument |
| params_flow.rb:96:85:96:86 | 51 | type tracker with call steps with content element 0 | params_flow.rb:75:5:75:10 | synthetic splat argument |
| params_flow.rb:96:85:96:86 | 51 | type tracker without call steps | params_flow.rb:96:79:96:87 | call to taint |
| params_flow.rb:96:85:96:86 | 51 | type tracker without call steps | params_flow.rb:96:85:96:86 | 51 |
| params_flow.rb:96:85:96:86 | 51 | type tracker without call steps with content element 0 | params_flow.rb:96:79:96:87 | synthetic splat argument |
@@ -2117,19 +2071,11 @@ track
| params_flow.rb:106:32:106:33 | 56 | type tracker without call steps | params_flow.rb:106:32:106:33 | 56 |
| params_flow.rb:106:32:106:33 | 56 | type tracker without call steps with content element 0 | params_flow.rb:106:26:106:34 | synthetic splat argument |
| params_flow.rb:106:32:106:33 | 56 | type tracker without call steps with content element 1 | params_flow.rb:106:1:106:46 | synthetic splat argument |
| params_flow.rb:106:37:106:45 | call to taint | type tracker with call steps | params_flow.rb:5:10:5:10 | x |
| params_flow.rb:106:37:106:45 | call to taint | type tracker with call steps | params_flow.rb:98:31:98:31 | b |
| params_flow.rb:106:37:106:45 | call to taint | type tracker with call steps with content element 0 | params_flow.rb:6:5:6:10 | synthetic splat argument |
| params_flow.rb:106:37:106:45 | call to taint | type tracker with call steps with content element 0 | params_flow.rb:102:5:102:10 | synthetic splat argument |
| params_flow.rb:106:37:106:45 | call to taint | type tracker with call steps with content element 2 | params_flow.rb:98:1:103:3 | synthetic splat parameter |
| params_flow.rb:106:37:106:45 | call to taint | type tracker without call steps | params_flow.rb:106:37:106:45 | call to taint |
| params_flow.rb:106:37:106:45 | call to taint | type tracker without call steps with content element 2 | params_flow.rb:106:1:106:46 | synthetic splat argument |
| params_flow.rb:106:37:106:45 | synthetic splat argument | type tracker without call steps | params_flow.rb:106:37:106:45 | synthetic splat argument |
| params_flow.rb:106:43:106:44 | 57 | type tracker with call steps | params_flow.rb:1:11:1:11 | x |
| params_flow.rb:106:43:106:44 | 57 | type tracker with call steps | params_flow.rb:5:10:5:10 | x |
| params_flow.rb:106:43:106:44 | 57 | type tracker with call steps | params_flow.rb:98:31:98:31 | b |
| params_flow.rb:106:43:106:44 | 57 | type tracker with call steps with content element 0 | params_flow.rb:6:5:6:10 | synthetic splat argument |
| params_flow.rb:106:43:106:44 | 57 | type tracker with call steps with content element 0 | params_flow.rb:102:5:102:10 | synthetic splat argument |
| params_flow.rb:106:43:106:44 | 57 | type tracker with call steps with content element 2 | params_flow.rb:98:1:103:3 | synthetic splat parameter |
| params_flow.rb:106:43:106:44 | 57 | type tracker without call steps | params_flow.rb:106:37:106:45 | call to taint |
| params_flow.rb:106:43:106:44 | 57 | type tracker without call steps | params_flow.rb:106:43:106:44 | 57 |
@@ -2448,39 +2394,15 @@ track
| params_flow.rb:131:1:131:46 | call to pos_many | type tracker without call steps | params_flow.rb:131:1:131:46 | call to pos_many |
| params_flow.rb:131:10:131:14 | * ... | type tracker with call steps | params_flow.rb:83:1:91:3 | synthetic splat parameter |
| params_flow.rb:131:10:131:14 | * ... | type tracker without call steps | params_flow.rb:131:10:131:14 | * ... |
| params_flow.rb:131:17:131:25 | call to taint | type tracker with call steps | params_flow.rb:5:10:5:10 | x |
| params_flow.rb:131:17:131:25 | call to taint | type tracker with call steps | params_flow.rb:83:17:83:17 | u |
| params_flow.rb:131:17:131:25 | call to taint | type tracker with call steps with content element 0 | params_flow.rb:6:5:6:10 | synthetic splat argument |
| params_flow.rb:131:17:131:25 | call to taint | type tracker with call steps with content element 0 | params_flow.rb:85:5:85:10 | synthetic splat argument |
| params_flow.rb:131:17:131:25 | call to taint | type tracker without call steps | params_flow.rb:131:17:131:25 | call to taint |
| params_flow.rb:131:17:131:25 | synthetic splat argument | type tracker without call steps | params_flow.rb:131:17:131:25 | synthetic splat argument |
| params_flow.rb:131:23:131:24 | 68 | type tracker with call steps | params_flow.rb:1:11:1:11 | x |
| params_flow.rb:131:23:131:24 | 68 | type tracker with call steps | params_flow.rb:5:10:5:10 | x |
| params_flow.rb:131:23:131:24 | 68 | type tracker with call steps | params_flow.rb:83:17:83:17 | u |
| params_flow.rb:131:23:131:24 | 68 | type tracker with call steps with content element 0 | params_flow.rb:6:5:6:10 | synthetic splat argument |
| params_flow.rb:131:23:131:24 | 68 | type tracker with call steps with content element 0 | params_flow.rb:85:5:85:10 | synthetic splat argument |
| params_flow.rb:131:23:131:24 | 68 | type tracker without call steps | params_flow.rb:131:17:131:25 | call to taint |
| params_flow.rb:131:23:131:24 | 68 | type tracker without call steps | params_flow.rb:131:23:131:24 | 68 |
| params_flow.rb:131:23:131:24 | 68 | type tracker without call steps with content element 0 | params_flow.rb:131:17:131:25 | synthetic splat argument |
| params_flow.rb:131:28:131:30 | nil | type tracker with call steps | params_flow.rb:5:10:5:10 | x |
| params_flow.rb:131:28:131:30 | nil | type tracker with call steps | params_flow.rb:83:20:83:20 | v |
| params_flow.rb:131:28:131:30 | nil | type tracker with call steps with content element 0 | params_flow.rb:6:5:6:10 | synthetic splat argument |
| params_flow.rb:131:28:131:30 | nil | type tracker with call steps with content element 0 | params_flow.rb:86:5:86:10 | synthetic splat argument |
| params_flow.rb:131:28:131:30 | nil | type tracker without call steps | params_flow.rb:131:28:131:30 | nil |
| params_flow.rb:131:33:131:35 | nil | type tracker with call steps | params_flow.rb:5:10:5:10 | x |
| params_flow.rb:131:33:131:35 | nil | type tracker with call steps | params_flow.rb:83:23:83:23 | w |
| params_flow.rb:131:33:131:35 | nil | type tracker with call steps with content element 0 | params_flow.rb:6:5:6:10 | synthetic splat argument |
| params_flow.rb:131:33:131:35 | nil | type tracker with call steps with content element 0 | params_flow.rb:87:5:87:10 | synthetic splat argument |
| params_flow.rb:131:33:131:35 | nil | type tracker without call steps | params_flow.rb:131:33:131:35 | nil |
| params_flow.rb:131:38:131:40 | nil | type tracker with call steps | params_flow.rb:5:10:5:10 | x |
| params_flow.rb:131:38:131:40 | nil | type tracker with call steps | params_flow.rb:83:26:83:26 | x |
| params_flow.rb:131:38:131:40 | nil | type tracker with call steps with content element 0 | params_flow.rb:6:5:6:10 | synthetic splat argument |
| params_flow.rb:131:38:131:40 | nil | type tracker with call steps with content element 0 | params_flow.rb:88:5:88:10 | synthetic splat argument |
| params_flow.rb:131:38:131:40 | nil | type tracker without call steps | params_flow.rb:131:38:131:40 | nil |
| params_flow.rb:131:43:131:45 | nil | type tracker with call steps | params_flow.rb:5:10:5:10 | x |
| params_flow.rb:131:43:131:45 | nil | type tracker with call steps | params_flow.rb:83:29:83:29 | y |
| params_flow.rb:131:43:131:45 | nil | type tracker with call steps with content element 0 | params_flow.rb:6:5:6:10 | synthetic splat argument |
| params_flow.rb:131:43:131:45 | nil | type tracker with call steps with content element 0 | params_flow.rb:89:5:89:10 | synthetic splat argument |
| params_flow.rb:131:43:131:45 | nil | type tracker without call steps | params_flow.rb:131:43:131:45 | nil |
| params_flow.rb:133:1:135:3 | &block | type tracker without call steps | params_flow.rb:133:1:135:3 | &block |
| params_flow.rb:133:1:135:3 | self in splatall | type tracker with call steps | params_flow.rb:5:1:7:3 | self in sink |
@@ -3482,14 +3404,8 @@ trackEnd
| params_flow.rb:1:11:1:11 | x | params_flow.rb:69:14:69:14 | x |
| params_flow.rb:1:11:1:11 | x | params_flow.rb:69:17:69:17 | y |
| params_flow.rb:1:11:1:11 | x | params_flow.rb:69:17:69:17 | y |
| params_flow.rb:1:11:1:11 | x | params_flow.rb:69:24:69:24 | w |
| params_flow.rb:1:11:1:11 | x | params_flow.rb:69:24:69:24 | w |
| params_flow.rb:1:11:1:11 | x | params_flow.rb:69:27:69:27 | r |
| params_flow.rb:1:11:1:11 | x | params_flow.rb:69:27:69:27 | r |
| params_flow.rb:1:11:1:11 | x | params_flow.rb:70:10:70:10 | x |
| params_flow.rb:1:11:1:11 | x | params_flow.rb:71:10:71:10 | y |
| params_flow.rb:1:11:1:11 | x | params_flow.rb:74:10:74:10 | w |
| params_flow.rb:1:11:1:11 | x | params_flow.rb:75:10:75:10 | r |
| params_flow.rb:1:11:1:11 | x | params_flow.rb:78:10:78:18 | call to taint |
| params_flow.rb:1:11:1:11 | x | params_flow.rb:78:21:78:29 | call to taint |
| params_flow.rb:1:11:1:11 | x | params_flow.rb:78:32:78:40 | call to taint |
@@ -3535,10 +3451,7 @@ trackEnd
| params_flow.rb:1:11:1:11 | x | params_flow.rb:96:79:96:87 | call to taint |
| params_flow.rb:1:11:1:11 | x | params_flow.rb:98:19:98:19 | a |
| params_flow.rb:1:11:1:11 | x | params_flow.rb:98:19:98:19 | a |
| params_flow.rb:1:11:1:11 | x | params_flow.rb:98:31:98:31 | b |
| params_flow.rb:1:11:1:11 | x | params_flow.rb:98:31:98:31 | b |
| params_flow.rb:1:11:1:11 | x | params_flow.rb:99:10:99:10 | a |
| params_flow.rb:1:11:1:11 | x | params_flow.rb:102:10:102:10 | b |
| params_flow.rb:1:11:1:11 | x | params_flow.rb:105:15:105:23 | call to taint |
| params_flow.rb:1:11:1:11 | x | params_flow.rb:105:28:105:36 | call to taint |
| params_flow.rb:1:11:1:11 | x | params_flow.rb:105:39:105:47 | call to taint |
@@ -4783,42 +4696,18 @@ trackEnd
| params_flow.rb:78:38:78:39 | 29 | params_flow.rb:2:5:2:5 | x |
| params_flow.rb:78:38:78:39 | 29 | params_flow.rb:78:32:78:40 | call to taint |
| params_flow.rb:78:38:78:39 | 29 | params_flow.rb:78:38:78:39 | 29 |
| params_flow.rb:78:43:78:51 | call to taint | params_flow.rb:5:10:5:10 | x |
| params_flow.rb:78:43:78:51 | call to taint | params_flow.rb:5:10:5:10 | x |
| params_flow.rb:78:43:78:51 | call to taint | params_flow.rb:6:10:6:10 | x |
| params_flow.rb:78:43:78:51 | call to taint | params_flow.rb:69:24:69:24 | w |
| params_flow.rb:78:43:78:51 | call to taint | params_flow.rb:69:24:69:24 | w |
| params_flow.rb:78:43:78:51 | call to taint | params_flow.rb:74:10:74:10 | w |
| params_flow.rb:78:43:78:51 | call to taint | params_flow.rb:78:43:78:51 | call to taint |
| params_flow.rb:78:43:78:51 | synthetic splat argument | params_flow.rb:78:43:78:51 | synthetic splat argument |
| params_flow.rb:78:49:78:50 | 30 | params_flow.rb:1:11:1:11 | x |
| params_flow.rb:78:49:78:50 | 30 | params_flow.rb:1:11:1:11 | x |
| params_flow.rb:78:49:78:50 | 30 | params_flow.rb:2:5:2:5 | x |
| params_flow.rb:78:49:78:50 | 30 | params_flow.rb:5:10:5:10 | x |
| params_flow.rb:78:49:78:50 | 30 | params_flow.rb:5:10:5:10 | x |
| params_flow.rb:78:49:78:50 | 30 | params_flow.rb:6:10:6:10 | x |
| params_flow.rb:78:49:78:50 | 30 | params_flow.rb:69:24:69:24 | w |
| params_flow.rb:78:49:78:50 | 30 | params_flow.rb:69:24:69:24 | w |
| params_flow.rb:78:49:78:50 | 30 | params_flow.rb:74:10:74:10 | w |
| params_flow.rb:78:49:78:50 | 30 | params_flow.rb:78:43:78:51 | call to taint |
| params_flow.rb:78:49:78:50 | 30 | params_flow.rb:78:49:78:50 | 30 |
| params_flow.rb:78:54:78:62 | call to taint | params_flow.rb:5:10:5:10 | x |
| params_flow.rb:78:54:78:62 | call to taint | params_flow.rb:5:10:5:10 | x |
| params_flow.rb:78:54:78:62 | call to taint | params_flow.rb:6:10:6:10 | x |
| params_flow.rb:78:54:78:62 | call to taint | params_flow.rb:69:27:69:27 | r |
| params_flow.rb:78:54:78:62 | call to taint | params_flow.rb:69:27:69:27 | r |
| params_flow.rb:78:54:78:62 | call to taint | params_flow.rb:75:10:75:10 | r |
| params_flow.rb:78:54:78:62 | call to taint | params_flow.rb:78:54:78:62 | call to taint |
| params_flow.rb:78:54:78:62 | synthetic splat argument | params_flow.rb:78:54:78:62 | synthetic splat argument |
| params_flow.rb:78:60:78:61 | 31 | params_flow.rb:1:11:1:11 | x |
| params_flow.rb:78:60:78:61 | 31 | params_flow.rb:1:11:1:11 | x |
| params_flow.rb:78:60:78:61 | 31 | params_flow.rb:2:5:2:5 | x |
| params_flow.rb:78:60:78:61 | 31 | params_flow.rb:5:10:5:10 | x |
| params_flow.rb:78:60:78:61 | 31 | params_flow.rb:5:10:5:10 | x |
| params_flow.rb:78:60:78:61 | 31 | params_flow.rb:6:10:6:10 | x |
| params_flow.rb:78:60:78:61 | 31 | params_flow.rb:69:27:69:27 | r |
| params_flow.rb:78:60:78:61 | 31 | params_flow.rb:69:27:69:27 | r |
| params_flow.rb:78:60:78:61 | 31 | params_flow.rb:75:10:75:10 | r |
| params_flow.rb:78:60:78:61 | 31 | params_flow.rb:78:54:78:62 | call to taint |
| params_flow.rb:78:60:78:61 | 31 | params_flow.rb:78:60:78:61 | 31 |
| params_flow.rb:80:1:80:4 | args | params_flow.rb:80:1:80:4 | args |
@@ -5135,23 +5024,11 @@ trackEnd
| params_flow.rb:94:27:94:28 | 39 | params_flow.rb:94:21:94:29 | call to taint |
| params_flow.rb:94:27:94:28 | 39 | params_flow.rb:94:27:94:28 | 39 |
| params_flow.rb:94:32:94:36 | * ... | params_flow.rb:94:32:94:36 | * ... |
| params_flow.rb:94:39:94:47 | call to taint | params_flow.rb:5:10:5:10 | x |
| params_flow.rb:94:39:94:47 | call to taint | params_flow.rb:5:10:5:10 | x |
| params_flow.rb:94:39:94:47 | call to taint | params_flow.rb:6:10:6:10 | x |
| params_flow.rb:94:39:94:47 | call to taint | params_flow.rb:83:23:83:23 | w |
| params_flow.rb:94:39:94:47 | call to taint | params_flow.rb:83:23:83:23 | w |
| params_flow.rb:94:39:94:47 | call to taint | params_flow.rb:87:10:87:10 | w |
| params_flow.rb:94:39:94:47 | call to taint | params_flow.rb:94:39:94:47 | call to taint |
| params_flow.rb:94:39:94:47 | synthetic splat argument | params_flow.rb:94:39:94:47 | synthetic splat argument |
| params_flow.rb:94:45:94:46 | 44 | params_flow.rb:1:11:1:11 | x |
| params_flow.rb:94:45:94:46 | 44 | params_flow.rb:1:11:1:11 | x |
| params_flow.rb:94:45:94:46 | 44 | params_flow.rb:2:5:2:5 | x |
| params_flow.rb:94:45:94:46 | 44 | params_flow.rb:5:10:5:10 | x |
| params_flow.rb:94:45:94:46 | 44 | params_flow.rb:5:10:5:10 | x |
| params_flow.rb:94:45:94:46 | 44 | params_flow.rb:6:10:6:10 | x |
| params_flow.rb:94:45:94:46 | 44 | params_flow.rb:83:23:83:23 | w |
| params_flow.rb:94:45:94:46 | 44 | params_flow.rb:83:23:83:23 | w |
| params_flow.rb:94:45:94:46 | 44 | params_flow.rb:87:10:87:10 | w |
| params_flow.rb:94:45:94:46 | 44 | params_flow.rb:94:39:94:47 | call to taint |
| params_flow.rb:94:45:94:46 | 44 | params_flow.rb:94:45:94:46 | 44 |
| params_flow.rb:96:1:96:88 | call to splatmid | params_flow.rb:96:1:96:88 | call to splatmid |
@@ -5221,42 +5098,18 @@ trackEnd
| params_flow.rb:96:62:96:63 | 49 | params_flow.rb:2:5:2:5 | x |
| params_flow.rb:96:62:96:63 | 49 | params_flow.rb:96:56:96:64 | call to taint |
| params_flow.rb:96:62:96:63 | 49 | params_flow.rb:96:62:96:63 | 49 |
| params_flow.rb:96:68:96:76 | call to taint | params_flow.rb:5:10:5:10 | x |
| params_flow.rb:96:68:96:76 | call to taint | params_flow.rb:5:10:5:10 | x |
| params_flow.rb:96:68:96:76 | call to taint | params_flow.rb:6:10:6:10 | x |
| params_flow.rb:96:68:96:76 | call to taint | params_flow.rb:69:24:69:24 | w |
| params_flow.rb:96:68:96:76 | call to taint | params_flow.rb:69:24:69:24 | w |
| params_flow.rb:96:68:96:76 | call to taint | params_flow.rb:74:10:74:10 | w |
| params_flow.rb:96:68:96:76 | call to taint | params_flow.rb:96:68:96:76 | call to taint |
| params_flow.rb:96:68:96:76 | synthetic splat argument | params_flow.rb:96:68:96:76 | synthetic splat argument |
| params_flow.rb:96:74:96:75 | 50 | params_flow.rb:1:11:1:11 | x |
| params_flow.rb:96:74:96:75 | 50 | params_flow.rb:1:11:1:11 | x |
| params_flow.rb:96:74:96:75 | 50 | params_flow.rb:2:5:2:5 | x |
| params_flow.rb:96:74:96:75 | 50 | params_flow.rb:5:10:5:10 | x |
| params_flow.rb:96:74:96:75 | 50 | params_flow.rb:5:10:5:10 | x |
| params_flow.rb:96:74:96:75 | 50 | params_flow.rb:6:10:6:10 | x |
| params_flow.rb:96:74:96:75 | 50 | params_flow.rb:69:24:69:24 | w |
| params_flow.rb:96:74:96:75 | 50 | params_flow.rb:69:24:69:24 | w |
| params_flow.rb:96:74:96:75 | 50 | params_flow.rb:74:10:74:10 | w |
| params_flow.rb:96:74:96:75 | 50 | params_flow.rb:96:68:96:76 | call to taint |
| params_flow.rb:96:74:96:75 | 50 | params_flow.rb:96:74:96:75 | 50 |
| params_flow.rb:96:79:96:87 | call to taint | params_flow.rb:5:10:5:10 | x |
| params_flow.rb:96:79:96:87 | call to taint | params_flow.rb:5:10:5:10 | x |
| params_flow.rb:96:79:96:87 | call to taint | params_flow.rb:6:10:6:10 | x |
| params_flow.rb:96:79:96:87 | call to taint | params_flow.rb:69:27:69:27 | r |
| params_flow.rb:96:79:96:87 | call to taint | params_flow.rb:69:27:69:27 | r |
| params_flow.rb:96:79:96:87 | call to taint | params_flow.rb:75:10:75:10 | r |
| params_flow.rb:96:79:96:87 | call to taint | params_flow.rb:96:79:96:87 | call to taint |
| params_flow.rb:96:79:96:87 | synthetic splat argument | params_flow.rb:96:79:96:87 | synthetic splat argument |
| params_flow.rb:96:85:96:86 | 51 | params_flow.rb:1:11:1:11 | x |
| params_flow.rb:96:85:96:86 | 51 | params_flow.rb:1:11:1:11 | x |
| params_flow.rb:96:85:96:86 | 51 | params_flow.rb:2:5:2:5 | x |
| params_flow.rb:96:85:96:86 | 51 | params_flow.rb:5:10:5:10 | x |
| params_flow.rb:96:85:96:86 | 51 | params_flow.rb:5:10:5:10 | x |
| params_flow.rb:96:85:96:86 | 51 | params_flow.rb:6:10:6:10 | x |
| params_flow.rb:96:85:96:86 | 51 | params_flow.rb:69:27:69:27 | r |
| params_flow.rb:96:85:96:86 | 51 | params_flow.rb:69:27:69:27 | r |
| params_flow.rb:96:85:96:86 | 51 | params_flow.rb:75:10:75:10 | r |
| params_flow.rb:96:85:96:86 | 51 | params_flow.rb:96:79:96:87 | call to taint |
| params_flow.rb:96:85:96:86 | 51 | params_flow.rb:96:85:96:86 | 51 |
| params_flow.rb:98:1:103:3 | &block | params_flow.rb:98:1:103:3 | &block |
@@ -5382,23 +5235,11 @@ trackEnd
| params_flow.rb:106:32:106:33 | 56 | params_flow.rb:2:5:2:5 | x |
| params_flow.rb:106:32:106:33 | 56 | params_flow.rb:106:26:106:34 | call to taint |
| params_flow.rb:106:32:106:33 | 56 | params_flow.rb:106:32:106:33 | 56 |
| params_flow.rb:106:37:106:45 | call to taint | params_flow.rb:5:10:5:10 | x |
| params_flow.rb:106:37:106:45 | call to taint | params_flow.rb:5:10:5:10 | x |
| params_flow.rb:106:37:106:45 | call to taint | params_flow.rb:6:10:6:10 | x |
| params_flow.rb:106:37:106:45 | call to taint | params_flow.rb:98:31:98:31 | b |
| params_flow.rb:106:37:106:45 | call to taint | params_flow.rb:98:31:98:31 | b |
| params_flow.rb:106:37:106:45 | call to taint | params_flow.rb:102:10:102:10 | b |
| params_flow.rb:106:37:106:45 | call to taint | params_flow.rb:106:37:106:45 | call to taint |
| params_flow.rb:106:37:106:45 | synthetic splat argument | params_flow.rb:106:37:106:45 | synthetic splat argument |
| params_flow.rb:106:43:106:44 | 57 | params_flow.rb:1:11:1:11 | x |
| params_flow.rb:106:43:106:44 | 57 | params_flow.rb:1:11:1:11 | x |
| params_flow.rb:106:43:106:44 | 57 | params_flow.rb:2:5:2:5 | x |
| params_flow.rb:106:43:106:44 | 57 | params_flow.rb:5:10:5:10 | x |
| params_flow.rb:106:43:106:44 | 57 | params_flow.rb:5:10:5:10 | x |
| params_flow.rb:106:43:106:44 | 57 | params_flow.rb:6:10:6:10 | x |
| params_flow.rb:106:43:106:44 | 57 | params_flow.rb:98:31:98:31 | b |
| params_flow.rb:106:43:106:44 | 57 | params_flow.rb:98:31:98:31 | b |
| params_flow.rb:106:43:106:44 | 57 | params_flow.rb:102:10:102:10 | b |
| params_flow.rb:106:43:106:44 | 57 | params_flow.rb:106:37:106:45 | call to taint |
| params_flow.rb:106:43:106:44 | 57 | params_flow.rb:106:43:106:44 | 57 |
| params_flow.rb:108:1:112:3 | &block | params_flow.rb:108:1:112:3 | &block |
@@ -5724,52 +5565,16 @@ trackEnd
| params_flow.rb:131:1:131:46 | call to pos_many | params_flow.rb:131:1:131:46 | call to pos_many |
| params_flow.rb:131:10:131:14 | * ... | params_flow.rb:83:1:91:3 | synthetic splat parameter |
| params_flow.rb:131:10:131:14 | * ... | params_flow.rb:131:10:131:14 | * ... |
| params_flow.rb:131:17:131:25 | call to taint | params_flow.rb:5:10:5:10 | x |
| params_flow.rb:131:17:131:25 | call to taint | params_flow.rb:5:10:5:10 | x |
| params_flow.rb:131:17:131:25 | call to taint | params_flow.rb:6:10:6:10 | x |
| params_flow.rb:131:17:131:25 | call to taint | params_flow.rb:83:17:83:17 | u |
| params_flow.rb:131:17:131:25 | call to taint | params_flow.rb:83:17:83:17 | u |
| params_flow.rb:131:17:131:25 | call to taint | params_flow.rb:85:10:85:10 | u |
| params_flow.rb:131:17:131:25 | call to taint | params_flow.rb:131:17:131:25 | call to taint |
| params_flow.rb:131:17:131:25 | synthetic splat argument | params_flow.rb:131:17:131:25 | synthetic splat argument |
| params_flow.rb:131:23:131:24 | 68 | params_flow.rb:1:11:1:11 | x |
| params_flow.rb:131:23:131:24 | 68 | params_flow.rb:1:11:1:11 | x |
| params_flow.rb:131:23:131:24 | 68 | params_flow.rb:2:5:2:5 | x |
| params_flow.rb:131:23:131:24 | 68 | params_flow.rb:5:10:5:10 | x |
| params_flow.rb:131:23:131:24 | 68 | params_flow.rb:5:10:5:10 | x |
| params_flow.rb:131:23:131:24 | 68 | params_flow.rb:6:10:6:10 | x |
| params_flow.rb:131:23:131:24 | 68 | params_flow.rb:83:17:83:17 | u |
| params_flow.rb:131:23:131:24 | 68 | params_flow.rb:83:17:83:17 | u |
| params_flow.rb:131:23:131:24 | 68 | params_flow.rb:85:10:85:10 | u |
| params_flow.rb:131:23:131:24 | 68 | params_flow.rb:131:17:131:25 | call to taint |
| params_flow.rb:131:23:131:24 | 68 | params_flow.rb:131:23:131:24 | 68 |
| params_flow.rb:131:28:131:30 | nil | params_flow.rb:5:10:5:10 | x |
| params_flow.rb:131:28:131:30 | nil | params_flow.rb:5:10:5:10 | x |
| params_flow.rb:131:28:131:30 | nil | params_flow.rb:6:10:6:10 | x |
| params_flow.rb:131:28:131:30 | nil | params_flow.rb:83:20:83:20 | v |
| params_flow.rb:131:28:131:30 | nil | params_flow.rb:83:20:83:20 | v |
| params_flow.rb:131:28:131:30 | nil | params_flow.rb:86:10:86:10 | v |
| params_flow.rb:131:28:131:30 | nil | params_flow.rb:131:28:131:30 | nil |
| params_flow.rb:131:33:131:35 | nil | params_flow.rb:5:10:5:10 | x |
| params_flow.rb:131:33:131:35 | nil | params_flow.rb:5:10:5:10 | x |
| params_flow.rb:131:33:131:35 | nil | params_flow.rb:6:10:6:10 | x |
| params_flow.rb:131:33:131:35 | nil | params_flow.rb:83:23:83:23 | w |
| params_flow.rb:131:33:131:35 | nil | params_flow.rb:83:23:83:23 | w |
| params_flow.rb:131:33:131:35 | nil | params_flow.rb:87:10:87:10 | w |
| params_flow.rb:131:33:131:35 | nil | params_flow.rb:131:33:131:35 | nil |
| params_flow.rb:131:38:131:40 | nil | params_flow.rb:5:10:5:10 | x |
| params_flow.rb:131:38:131:40 | nil | params_flow.rb:5:10:5:10 | x |
| params_flow.rb:131:38:131:40 | nil | params_flow.rb:6:10:6:10 | x |
| params_flow.rb:131:38:131:40 | nil | params_flow.rb:83:26:83:26 | x |
| params_flow.rb:131:38:131:40 | nil | params_flow.rb:83:26:83:26 | x |
| params_flow.rb:131:38:131:40 | nil | params_flow.rb:88:10:88:10 | x |
| params_flow.rb:131:38:131:40 | nil | params_flow.rb:131:38:131:40 | nil |
| params_flow.rb:131:43:131:45 | nil | params_flow.rb:5:10:5:10 | x |
| params_flow.rb:131:43:131:45 | nil | params_flow.rb:5:10:5:10 | x |
| params_flow.rb:131:43:131:45 | nil | params_flow.rb:6:10:6:10 | x |
| params_flow.rb:131:43:131:45 | nil | params_flow.rb:83:29:83:29 | y |
| params_flow.rb:131:43:131:45 | nil | params_flow.rb:83:29:83:29 | y |
| params_flow.rb:131:43:131:45 | nil | params_flow.rb:89:10:89:10 | y |
| params_flow.rb:131:43:131:45 | nil | params_flow.rb:131:43:131:45 | nil |
| params_flow.rb:133:1:135:3 | &block | params_flow.rb:133:1:135:3 | &block |
| params_flow.rb:133:1:135:3 | self in splatall | params_flow.rb:5:1:7:3 | self (sink) |

30
ruby/ql/test/library-tests/dataflow/params/params-flow.expected
View File

@@ -90,12 +90,8 @@ edges
| params_flow.rb:67:13:67:16 | args | params_flow.rb:67:12:67:16 | * ... [element 0] | provenance | |
| params_flow.rb:69:14:69:14 | x | params_flow.rb:70:10:70:10 | x | provenance | |
| params_flow.rb:69:17:69:17 | y | params_flow.rb:71:10:71:10 | y | provenance | |
| params_flow.rb:69:24:69:24 | w | params_flow.rb:74:10:74:10 | w | provenance | |
| params_flow.rb:69:27:69:27 | r | params_flow.rb:75:10:75:10 | r | provenance | |
| params_flow.rb:78:10:78:18 | call to taint | params_flow.rb:69:14:69:14 | x | provenance | |
| params_flow.rb:78:21:78:29 | call to taint | params_flow.rb:69:17:69:17 | y | provenance | |
| params_flow.rb:78:43:78:51 | call to taint | params_flow.rb:69:24:69:24 | w | provenance | |
| params_flow.rb:78:54:78:62 | call to taint | params_flow.rb:69:27:69:27 | r | provenance | |
| params_flow.rb:80:1:80:4 | args [element 0] | params_flow.rb:81:22:81:25 | args [element 0] | provenance | |
| params_flow.rb:80:8:80:51 | call to [] [element 0] | params_flow.rb:80:1:80:4 | args [element 0] | provenance | |
| params_flow.rb:80:9:80:17 | call to taint | params_flow.rb:80:8:80:51 | call to [] [element 0] | provenance | |
@@ -130,16 +126,11 @@ edges
| params_flow.rb:94:33:94:36 | args [element 1] | params_flow.rb:94:32:94:36 | * ... [element 1] | provenance | |
| params_flow.rb:94:33:94:36 | args [element 2] | params_flow.rb:94:32:94:36 | * ... [element 2] | provenance | |
| params_flow.rb:94:33:94:36 | args [element 3] | params_flow.rb:94:32:94:36 | * ... [element 3] | provenance | |
| params_flow.rb:94:39:94:47 | call to taint | params_flow.rb:83:23:83:23 | w | provenance | |
| params_flow.rb:96:10:96:18 | call to taint | params_flow.rb:69:14:69:14 | x | provenance | |
| params_flow.rb:96:21:96:29 | call to taint | params_flow.rb:69:17:69:17 | y | provenance | |
| params_flow.rb:96:68:96:76 | call to taint | params_flow.rb:69:24:69:24 | w | provenance | |
| params_flow.rb:96:79:96:87 | call to taint | params_flow.rb:69:27:69:27 | r | provenance | |
| params_flow.rb:98:19:98:19 | a | params_flow.rb:99:10:99:10 | a | provenance | |
| params_flow.rb:98:31:98:31 | b | params_flow.rb:102:10:102:10 | b | provenance | |
| params_flow.rb:105:15:105:23 | call to taint | params_flow.rb:98:19:98:19 | a | provenance | |
| params_flow.rb:106:15:106:23 | call to taint | params_flow.rb:98:19:98:19 | a | provenance | |
| params_flow.rb:106:37:106:45 | call to taint | params_flow.rb:98:31:98:31 | b | provenance | |
| params_flow.rb:108:37:108:37 | a | params_flow.rb:109:10:109:10 | a | provenance | |
| params_flow.rb:108:40:108:41 | *b [element 0] | params_flow.rb:110:10:110:10 | b [element 0] | provenance | |
| params_flow.rb:108:44:108:44 | c | params_flow.rb:111:10:111:10 | c | provenance | |
@@ -162,7 +153,6 @@ edges
| params_flow.rb:131:10:131:14 | * ... [element 1] | params_flow.rb:83:17:83:17 | u | provenance | |
| params_flow.rb:131:11:131:14 | args [element 0] | params_flow.rb:131:10:131:14 | * ... [element 0] | provenance | |
| params_flow.rb:131:11:131:14 | args [element 1] | params_flow.rb:131:10:131:14 | * ... [element 1] | provenance | |
| params_flow.rb:131:17:131:25 | call to taint | params_flow.rb:83:17:83:17 | u | provenance | |
| params_flow.rb:133:14:133:18 | *args [element 1] | params_flow.rb:134:10:134:13 | args [element 1] | provenance | |
| params_flow.rb:134:10:134:13 | args [element 1] | params_flow.rb:134:10:134:16 | ...[...] | provenance | |
| params_flow.rb:137:10:137:43 | * ... [element 1] | params_flow.rb:133:14:133:18 | *args [element 1] | provenance | |
@@ -283,16 +273,10 @@ nodes
| params_flow.rb:67:13:67:16 | args | semmle.label | args |
| params_flow.rb:69:14:69:14 | x | semmle.label | x |
| params_flow.rb:69:17:69:17 | y | semmle.label | y |
| params_flow.rb:69:24:69:24 | w | semmle.label | w |
| params_flow.rb:69:27:69:27 | r | semmle.label | r |
| params_flow.rb:70:10:70:10 | x | semmle.label | x |
| params_flow.rb:71:10:71:10 | y | semmle.label | y |
| params_flow.rb:74:10:74:10 | w | semmle.label | w |
| params_flow.rb:75:10:75:10 | r | semmle.label | r |
| params_flow.rb:78:10:78:18 | call to taint | semmle.label | call to taint |
| params_flow.rb:78:21:78:29 | call to taint | semmle.label | call to taint |
| params_flow.rb:78:43:78:51 | call to taint | semmle.label | call to taint |
| params_flow.rb:78:54:78:62 | call to taint | semmle.label | call to taint |
| params_flow.rb:80:1:80:4 | args [element 0] | semmle.label | args [element 0] |
| params_flow.rb:80:8:80:51 | call to [] [element 0] | semmle.label | call to [] [element 0] |
| params_flow.rb:80:9:80:17 | call to taint | semmle.label | call to taint |
@@ -333,18 +317,12 @@ nodes
| params_flow.rb:94:33:94:36 | args [element 1] | semmle.label | args [element 1] |
| params_flow.rb:94:33:94:36 | args [element 2] | semmle.label | args [element 2] |
| params_flow.rb:94:33:94:36 | args [element 3] | semmle.label | args [element 3] |
| params_flow.rb:94:39:94:47 | call to taint | semmle.label | call to taint |
| params_flow.rb:96:10:96:18 | call to taint | semmle.label | call to taint |
| params_flow.rb:96:21:96:29 | call to taint | semmle.label | call to taint |
| params_flow.rb:96:68:96:76 | call to taint | semmle.label | call to taint |
| params_flow.rb:96:79:96:87 | call to taint | semmle.label | call to taint |
| params_flow.rb:98:19:98:19 | a | semmle.label | a |
| params_flow.rb:98:31:98:31 | b | semmle.label | b |
| params_flow.rb:99:10:99:10 | a | semmle.label | a |
| params_flow.rb:102:10:102:10 | b | semmle.label | b |
| params_flow.rb:105:15:105:23 | call to taint | semmle.label | call to taint |
| params_flow.rb:106:15:106:23 | call to taint | semmle.label | call to taint |
| params_flow.rb:106:37:106:45 | call to taint | semmle.label | call to taint |
| params_flow.rb:108:37:108:37 | a | semmle.label | a |
| params_flow.rb:108:40:108:41 | *b [element 0] | semmle.label | *b [element 0] |
| params_flow.rb:108:44:108:44 | c | semmle.label | c |
@@ -369,7 +347,6 @@ nodes
| params_flow.rb:131:10:131:14 | * ... [element 1] | semmle.label | * ... [element 1] |
| params_flow.rb:131:11:131:14 | args [element 0] | semmle.label | args [element 0] |
| params_flow.rb:131:11:131:14 | args [element 1] | semmle.label | args [element 1] |
| params_flow.rb:131:17:131:25 | call to taint | semmle.label | call to taint |
| params_flow.rb:133:14:133:18 | *args [element 1] | semmle.label | *args [element 1] |
| params_flow.rb:134:10:134:13 | args [element 1] | semmle.label | args [element 1] |
| params_flow.rb:134:10:134:16 | ...[...] | semmle.label | ...[...] |
@@ -433,23 +410,16 @@ testFailures
| params_flow.rb:71:10:71:10 | y | params_flow.rb:78:21:78:29 | call to taint | params_flow.rb:71:10:71:10 | y | $@ | params_flow.rb:78:21:78:29 | call to taint | call to taint |
| params_flow.rb:71:10:71:10 | y | params_flow.rb:80:9:80:17 | call to taint | params_flow.rb:71:10:71:10 | y | $@ | params_flow.rb:80:9:80:17 | call to taint | call to taint |
| params_flow.rb:71:10:71:10 | y | params_flow.rb:96:21:96:29 | call to taint | params_flow.rb:71:10:71:10 | y | $@ | params_flow.rb:96:21:96:29 | call to taint | call to taint |
| params_flow.rb:74:10:74:10 | w | params_flow.rb:78:43:78:51 | call to taint | params_flow.rb:74:10:74:10 | w | $@ | params_flow.rb:78:43:78:51 | call to taint | call to taint |
| params_flow.rb:74:10:74:10 | w | params_flow.rb:96:68:96:76 | call to taint | params_flow.rb:74:10:74:10 | w | $@ | params_flow.rb:96:68:96:76 | call to taint | call to taint |
| params_flow.rb:75:10:75:10 | r | params_flow.rb:78:54:78:62 | call to taint | params_flow.rb:75:10:75:10 | r | $@ | params_flow.rb:78:54:78:62 | call to taint | call to taint |
| params_flow.rb:75:10:75:10 | r | params_flow.rb:96:79:96:87 | call to taint | params_flow.rb:75:10:75:10 | r | $@ | params_flow.rb:96:79:96:87 | call to taint | call to taint |
| params_flow.rb:84:10:84:10 | t | params_flow.rb:94:10:94:18 | call to taint | params_flow.rb:84:10:84:10 | t | $@ | params_flow.rb:94:10:94:18 | call to taint | call to taint |
| params_flow.rb:84:10:84:10 | t | params_flow.rb:130:9:130:17 | call to taint | params_flow.rb:84:10:84:10 | t | $@ | params_flow.rb:130:9:130:17 | call to taint | call to taint |
| params_flow.rb:85:10:85:10 | u | params_flow.rb:94:21:94:29 | call to taint | params_flow.rb:85:10:85:10 | u | $@ | params_flow.rb:94:21:94:29 | call to taint | call to taint |
| params_flow.rb:85:10:85:10 | u | params_flow.rb:130:20:130:28 | call to taint | params_flow.rb:85:10:85:10 | u | $@ | params_flow.rb:130:20:130:28 | call to taint | call to taint |
| params_flow.rb:85:10:85:10 | u | params_flow.rb:131:17:131:25 | call to taint | params_flow.rb:85:10:85:10 | u | $@ | params_flow.rb:131:17:131:25 | call to taint | call to taint |
| params_flow.rb:86:10:86:10 | v | params_flow.rb:93:9:93:17 | call to taint | params_flow.rb:86:10:86:10 | v | $@ | params_flow.rb:93:9:93:17 | call to taint | call to taint |
| params_flow.rb:87:10:87:10 | w | params_flow.rb:93:20:93:28 | call to taint | params_flow.rb:87:10:87:10 | w | $@ | params_flow.rb:93:20:93:28 | call to taint | call to taint |
| params_flow.rb:87:10:87:10 | w | params_flow.rb:94:39:94:47 | call to taint | params_flow.rb:87:10:87:10 | w | $@ | params_flow.rb:94:39:94:47 | call to taint | call to taint |
| params_flow.rb:88:10:88:10 | x | params_flow.rb:93:31:93:39 | call to taint | params_flow.rb:88:10:88:10 | x | $@ | params_flow.rb:93:31:93:39 | call to taint | call to taint |
| params_flow.rb:89:10:89:10 | y | params_flow.rb:93:42:93:50 | call to taint | params_flow.rb:89:10:89:10 | y | $@ | params_flow.rb:93:42:93:50 | call to taint | call to taint |
| params_flow.rb:99:10:99:10 | a | params_flow.rb:105:15:105:23 | call to taint | params_flow.rb:99:10:99:10 | a | $@ | params_flow.rb:105:15:105:23 | call to taint | call to taint |
| params_flow.rb:99:10:99:10 | a | params_flow.rb:106:15:106:23 | call to taint | params_flow.rb:99:10:99:10 | a | $@ | params_flow.rb:106:15:106:23 | call to taint | call to taint |
| params_flow.rb:102:10:102:10 | b | params_flow.rb:106:37:106:45 | call to taint | params_flow.rb:102:10:102:10 | b | $@ | params_flow.rb:106:37:106:45 | call to taint | call to taint |
| params_flow.rb:109:10:109:10 | a | params_flow.rb:114:33:114:41 | call to taint | params_flow.rb:109:10:109:10 | a | $@ | params_flow.rb:114:33:114:41 | call to taint | call to taint |
| params_flow.rb:110:10:110:13 | ...[...] | params_flow.rb:114:44:114:52 | call to taint | params_flow.rb:110:10:110:13 | ...[...] | $@ | params_flow.rb:114:44:114:52 | call to taint | call to taint |
| params_flow.rb:111:10:111:10 | c | params_flow.rb:114:58:114:66 | call to taint | params_flow.rb:111:10:111:10 | c | $@ | params_flow.rb:114:58:114:66 | call to taint | call to taint |

12
ruby/ql/test/library-tests/dataflow/params/params_flow.rb
View File

@@ -69,10 +69,10 @@ splatstuff(*args)
def splatmid(x, y, *z, w, r)
sink x # $ hasValueFlow=27 $ hasValueFlow=32 $ hasValueFlow=45
sink y # $ hasValueFlow=28 $ hasValueFlow=46 $ hasValueFlow=33
sink z[0] # MISSING: $ hasValueFlow=47 $ hasValueFlow=29 $ hasValueFlow=34
sink z[0] # $ MISSING: hasValueFlow=47 $ hasValueFlow=29 $ hasValueFlow=34
sink z[1] # $ MISSING: hasValueFlow=48 $ hasValueFlow=35
sink w # $ hasValueFlow=30 $ hasValueFlow=50 $ MISSING: hasValueFlow=36
sink r # $ hasValueFlow=31 $ hasValueFlow=51 $ MISSING: hasValueFlow=37
sink w # $ MISSING: hasValueFlow=30 $ hasValueFlow=50 $ hasValueFlow=36
sink r # $ MISSING: hasValueFlow=31 $ hasValueFlow=51 $ hasValueFlow=37
end
splatmid(taint(27), taint(28), taint(29), taint(30), taint(31))
@@ -82,9 +82,9 @@ splatmid(taint(32), *args, taint(37))
def pos_many(t, u, v, w, x, y, z)
sink t # $ hasValueFlow=38 $ hasValueFlow=66
sink u # $ hasValueFlow=39 $ hasValueFlow=67 $ SPURIOUS: hasValueFlow=68
sink u # $ hasValueFlow=39 $ hasValueFlow=67
sink v # $ hasValueFlow=40
sink w # $ hasValueFlow=41 $ SPURIOUS: hasValueFlow=44
sink w # $ hasValueFlow=41
sink x # $ hasValueFlow=42
sink y # $ hasValueFlow=43
sink z # $ MISSING: hasValueFlow=44
@@ -99,7 +99,7 @@ def splatmidsmall(a, *splats, b)
sink a # $ hasValueFlow=52 $ hasValueFlow=55
sink splats[0] # $ MISSING: hasValueFlow=53
sink splats[1]
sink b # $ hasValueFlow=57 $ MISSING: hasValueFlow=54
sink b # $ MISSING: hasValueFlow=57 $ hasValueFlow=54
end
splatmidsmall(taint(52), *[taint(53), taint(54)])