Python: Add .copy() as a copy step

2026-02-19 00:13:44 +01:00 · 2024-02-22 13:09:27 +00:00
parent 5125973f9b
commit f1392712ee
3 changed files with 3 additions and 11 deletions
--- a/python/ql/lib/semmle/python/dataflow/new/internal/TaintTrackingPrivate.qll
+++ b/python/ql/lib/semmle/python/dataflow/new/internal/TaintTrackingPrivate.qll
@@ -195,6 +195,8 @@ predicate copyStep(DataFlow::CfgNode nodeFrom, DataFlow::CfgNode nodeTo) {
    call = API::moduleImport("copy").getMember(["copy", "deepcopy"]).getACall() and
    call.getArg(0) = nodeFrom
  )
+  or
+  nodeTo.(DataFlow::MethodCallNode).calls(nodeFrom, "copy")
 }

 /**