hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-02-12 05:01:06 +01:00
Code Issues Packages Projects Releases Wiki Activity

JS: Also track additional use-steps crossing the overlay boundary

Browse Source
This commit is contained in:
Asger F
2026-01-13 10:53:59 +01:00
parent cf0b77074f
commit da9aafc3b0
1 changed files with 9 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
javascript/ql/lib/semmle/javascript/ApiGraphs.qll
View File

@@ -1650,10 +1650,17 @@ module API {
isInOverlayChangedFile(node)
}
pragma[nomagic]
private predicate step(DataFlow::SourceNode node1, DataFlow::SourceNode node2) {
StepSummary::step(node1, node2, _)
or
AdditionalUseStep::step(node1, node2)
}
/** Holds if there is a step `node1 -> node2` from an unchanged file into a changed file. */
pragma[nomagic]
private predicate stepIntoOverlay(DataFlow::Node node1, DataFlow::Node node2) {
StepSummary::step(node1, node2, _) and
step(node1, node2) and
isInOverlayChangedFile(node2) and
not isInOverlayChangedFileLate(node1) and
hasSemanticsLate(node1)
@@ -1680,7 +1687,7 @@ module API {
/** Holds if there is a step `node1 -> node2` from a changed file into an unchanged file. */
pragma[nomagic]
private predicate stepOutOfOverlay(DataFlow::Node node1, DataFlow::Node node2) {
StepSummary::step(node1, node2, _) and
step(node1, node2) and
isInOverlayChangedFile(node1) and
not isInOverlayChangedFileLate(node2) and
hasSemanticsLate(node2)