hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-24 16:25:15 +02:00
Code Issues Packages Projects Releases Wiki Activity

Fixing cross product in getPropertyAsGraphString (parameter root not bound in all cases, fixing using a bindingetset)

Browse Source
This commit is contained in:
REDMOND\brodes
2025-03-07 12:11:12 -05:00
parent 32d29ffde3
commit cf72fde911
1 changed files with 6 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
shared/cryptography/codeql/cryptography/Model.qll
View File

@@ -32,13 +32,16 @@ module CryptographyBase<LocationSig Location, InputSig<Location> Input> {
UnknownPropertyValue() { this = "<unknown>" }
}
bindingset[root]
private string getPropertyAsGraphString(NodeBase node, string key, Location root) {
result =
strictconcat(any(string value, Location location, string parsed |
node.properties(key, value, location) and
if location = root or location instanceof UnknownLocation
then parsed = value
else parsed = "(" + value + "," + location.toString() + ")"
(
if location = root or location instanceof UnknownLocation
then parsed = value
else parsed = "(" + value + "," + location.toString() + ")"
)
|
parsed
), ","