hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-28 02:05:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

Ruby: tweak pipeline a bit

Browse Source
This commit is contained in:
Asger F
2022-09-05 08:08:18 +02:00
parent b13b2ce319
commit cbf16579ed
1 changed files with 29 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files

46
ruby/ql/lib/codeql/ruby/typetracking/TypeTrackerSpecific.qll
View File

@@ -155,11 +155,12 @@ predicate returnStep(Node nodeFrom, Node nodeTo) {
predicate basicStoreStep(Node nodeFrom, Node nodeTo, TypeTrackerContentSet contents) {
postUpdateStoreStep(nodeFrom, nodeTo, contents)
or
exists(DataFlowPublic::CallNode call, SummaryComponent input, SummaryComponent output |
summarizableCall(call.asExpr().getExpr(), //
SummaryComponentStack::singleton(input),
SummaryComponentStack::push(SummaryComponent::content(contents),
SummaryComponentStack::singleton(output))) and
exists(
SummarizedCallable callable, DataFlowPublic::CallNode call, SummaryComponent input,
SummaryComponent output
|
hasStoreSummary(callable, contents, input, output) and
call.asExpr().getExpr() = callable.getACallSimple() and
nodeFrom = evaluateSummaryComponentLocal(call, input) and
nodeTo = evaluateSummaryComponentLocal(call, output)
)
@@ -194,11 +195,12 @@ predicate basicLoadStep(Node nodeFrom, Node nodeTo, TypeTrackerContentSet conten
nodeTo.asExpr() = call
)
or
exists(DataFlowPublic::CallNode call, SummaryComponent input, SummaryComponent output |
summarizableCall(call.asExpr().getExpr(), //
SummaryComponentStack::push(SummaryComponent::content(contents),
SummaryComponentStack::singleton(input)), //
SummaryComponentStack::singleton(output)) and
exists(
SummarizedCallable callable, DataFlowPublic::CallNode call, SummaryComponent input,
SummaryComponent output
|
hasLoadSummary(callable, contents, input, output) and
call.asExpr().getExpr() = callable.getACallSimple() and
nodeFrom = evaluateSummaryComponentLocal(call, input) and
nodeTo = evaluateSummaryComponentLocal(call, output)
)
@@ -211,14 +213,24 @@ class Boolean extends boolean {
Boolean() { this = true or this = false }
}
/** Holds if `call` has a summary consisting of the given `input`/`output` pair. */
private predicate summarizableCall(
MethodCall call, SummaryComponentStack input, SummaryComponentStack output
private import SummaryComponentStack
private predicate hasStoreSummary(
SummarizedCallable callable, TypeTrackerContentSet contents, SummaryComponent input,
SummaryComponent output
) {
exists(SummarizedCallable callable |
call = callable.getACallSimple() and
callable.propagatesFlow(input, output, true)
)
callable
.propagatesFlow(singleton(input),
push(SummaryComponent::content(contents), singleton(output)), true)
}
private predicate hasLoadSummary(
SummarizedCallable callable, TypeTrackerContentSet contents, SummaryComponent input,
SummaryComponent output
) {
callable
.propagatesFlow(push(SummaryComponent::content(contents), singleton(input)),
singleton(output), true)
}
/**