hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-02-23 18:33:42 +01:00
Code Issues Packages Projects Releases Wiki Activity

Python: Fix bad join in returnStep

Browse Source
This commit is contained in:
Taus
2026-02-16 16:24:22 +00:00
parent 304cd12fff
commit cd62cdadff
1 changed files with 8 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
python/ql/lib/semmle/python/dataflow/new/internal/TypeTrackingImpl.qll
View File

@@ -202,11 +202,18 @@ module TypeTrackingInput implements Shared::TypeTrackingInput<Location> {
*/
predicate returnStep(Node nodeFrom, LocalSourceNode nodeTo) {
exists(DataFlowPrivate::ExtractedDataFlowCall call |
nodeFrom.(DataFlowPrivate::ReturnNode).getEnclosingCallable() = call.getCallable() and
returnNodeEnclosingCallable(nodeFrom) = call.getCallable() and
nodeTo.(DataFlowPublic::CfgNode).getNode() = call.getNode()
)
}
pragma[nomagic]
private DataFlowDispatch::DataFlowCallable returnNodeEnclosingCallable(
DataFlowPrivate::ReturnNode returnNode
) {
result = returnNode.getEnclosingCallable()
}
/**
* Holds if `nodeFrom` is being written to the `content` content of the object in `nodeTo`.
*/