hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-18 13:34:02 +02:00
Code Issues Packages Projects Releases Wiki Activity

Document elementAppliesToQualifier

Browse Source
This commit is contained in:
Chris Smowton
2024-10-23 22:53:02 +01:00
committed by Owen Mansel-Chan
parent 7ffff43424
commit f61251cc24
1 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
go/ql/lib/semmle/go/dataflow/internal/FlowSummaryImpl.qll
View File

@@ -271,6 +271,14 @@ module SourceSinkInterpretationInput implements
}
}
/**
* Holds if method or field spec `sse` applies in the context of qualifier `qual`.
*
* Note that naively checking `sse.asEntity()`'s qualified name is not correct, because
* `Method`s and `Field`s may have multiple qualified names due to embedding. We must instead
* check that the specific name given be `sse.hasTypeInfo` refers to either `qual`'s type
* or to a type it embeds.
*/
private predicate elementAppliesToQualifier(SourceOrSinkElement sse, DataFlow::Node qual) {
(
exists(DataFlow::CallNode cn | cn.getReceiver() = qual and cn.getTarget() = sse.asEntity())