hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-28 02:05:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

JS: Make barrier guards work with use-use flow

Browse Source
This commit is contained in:
Asger F
2024-10-08 16:26:03 +02:00
parent 67fdd864c9
commit e784813c3b
5 changed files with 113 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

31
javascript/ql/test/library-tests/TripleDot/useuse.js
View File

@@ -111,3 +111,34 @@ function t7() {
const c = new Sub(source('t7.1'));
sink(c.field); // $ hasTaintFlow=t7.1
}
function t8() {
function foo(x) {
const obj = {};
obj.field = x;
sink(obj.field); // $ hasTaintFlow=t8.1
if (obj) {
sink(obj.field); // $ hasTaintFlow=t8.1
} else {
sink(obj.field);
}
if (!obj) {
sink(obj.field);
} else {
sink(obj.field); // $ hasTaintFlow=t8.1
}
if (!obj || !obj) {
sink(obj.field);
} else {
sink(obj.field); // $ hasTaintFlow=t8.1
}
}
// The guards used above are specific to taint-tracking, to ensure only taint flows in
const taint = source('t8.1') + ' taint';
foo(taint);
}