hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-24 04:36:35 +01:00
Code Issues Packages Projects Releases Wiki Activity

Python: Sync on TypeTracker.qll changes

Browse Source
This commit is contained in:
Tom Hvitved
2022-10-10 13:58:31 +02:00
parent 2e8f46ddd9
commit f1c44f72b5
2 changed files with 9 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
python/ql/lib/semmle/python/dataflow/new/internal/TypeTracker.qll
View File

@@ -186,7 +186,7 @@ private module Cached {
jumpStep(nodeFrom, nodeTo) and jumpStep(nodeFrom, nodeTo) and
summary = JumpStep() summary = JumpStep()
or or
levelStep(nodeFrom, nodeTo) and levelStepNoCall(nodeFrom, nodeTo) and
summary = LevelStep() summary = LevelStep()
or or
exists(TypeTrackerContent content | exists(TypeTrackerContent content |
@@ -216,6 +216,9 @@ private module Cached {
or or
returnStep(nodeFrom, nodeTo) and returnStep(nodeFrom, nodeTo) and
summary = ReturnStep() summary = ReturnStep()
or
levelStepCall(nodeFrom, nodeTo) and
summary = LevelStep()
} }
} }

7
python/ql/lib/semmle/python/dataflow/new/internal/TypeTrackerSpecific.qll
View File

@@ -45,8 +45,11 @@ predicate simpleLocalFlowStep = DataFlowPrivate::simpleLocalFlowStepForTypetrack
predicate jumpStep = DataFlowPrivate::jumpStepSharedWithTypeTracker/2; predicate jumpStep = DataFlowPrivate::jumpStepSharedWithTypeTracker/2;
/** Holds if there is a level step from `pred` to `succ`. */ /** Holds if there is a level step from `nodeFrom` to `nodeTo`, which may depend on the call graph. */
predicate levelStep(Node pred, Node succ) { none() } predicate levelStepCall(Node pred, Node succ) { none() }
/** Holds if there is a level step from `nodeFrom` to `nodeTo`, which does not depend on the call graph. */
predicate levelStepNoCall(Node nodeFrom, Node nodeTo) { none() }
/** /**
* Gets the name of a possible piece of content. For Python, this is currently only attribute names, * Gets the name of a possible piece of content. For Python, this is currently only attribute names,