3 Commits

Author	SHA1	Message	Date
Rasmus Wriedt Larsen	b2ce0fcb72	Python: Add post-update nodes to args of unresolved calls ... Besides solving the problem with `setattr`, it also solved some old problems with json library modeling (yay).	2022-02-04 11:51:53 +01:00
Rasmus Wriedt Larsen	51a25e45fe	Python: Use shared prettyExpr in ConceptsTest.qll ... This required quite some changes in the expected output. I think it's much more clear what the selected nodes are now 👍 (but it was a bit boring work to fix this up)	2021-05-19 17:10:33 +02:00
Rasmus Wriedt Larsen	c2a6b811fc	Python: Add modeling of ujson PyPI package ... The problem with `tainted_filelike` not having taint, is that in the call `ujson.dump(tainted_obj, tainted_filelike)` there is no PostUpdateNote for `tainted_filelike` :( The reason is that points-to is not able to resolve the call, so none of the clauses in `argumentPreUpdateNode` matches See 08731fc6cf/python/ql/src/semmle/python/dataflow/new/internal/DataFlowPrivate.qll (L101-L111) Let's deal with that issue in an other PR though	2021-05-10 15:10:31 +02:00