import csharp private import semmle.code.csharp.controlflow.internal.ControlFlowGraphImpl as ControlFlowGraphImpl private import semmle.code.csharp.dataflow.internal.DataFlowImplSpecific private import semmle.code.csharp.dataflow.internal.TaintTrackingImplSpecific private import codeql.dataflow.internal.DataFlowImplConsistency private module Input implements InputSig { private import CsharpDataFlow private predicate isStaticAssignable(Assignable a) { a.(Modifiable).isStatic() } predicate uniqueEnclosingCallableExclude(Node node) { // TODO: Remove once static initializers are folded into the // static constructors isStaticAssignable(ControlFlowGraphImpl::getNodeCfgScope(node.getControlFlowNode())) } predicate uniqueCallEnclosingCallableExclude(DataFlowCall call) { // TODO: Remove once static initializers are folded into the // static constructors isStaticAssignable(ControlFlowGraphImpl::getNodeCfgScope(call.getControlFlowNode())) } predicate uniqueNodeLocationExclude(Node n) { // Methods with multiple implementations n instanceof ParameterNode or missingLocationExclude(n) or n instanceof FlowInsensitiveFieldNode } predicate postWithInFlowExclude(Node n) { n instanceof FlowSummaryNode or n.asExpr().(ObjectCreation).hasInitializer() or exists( n.(PostUpdateNode).getPreUpdateNode().asExprAtNode(LocalFlow::getPostUpdateReverseStep(_)) ) } predicate argHasPostUpdateExclude(ArgumentNode n) { n instanceof FlowSummaryNode or n instanceof ParamsArgumentNode or n.asExpr() = any(Expr e | not exprMayHavePostUpdateNode(e)) } predicate reverseReadExclude(Node n) { n.asExpr() = any(AwaitExpr ae).getExpr() } predicate missingArgumentCallExclude(ArgumentNode arg) { // TODO: Remove once object initializers are modeled properly arg.(Private::PostUpdateNodes::ObjectInitializerNode).getInitializer() instanceof ObjectInitializer or // TODO: Remove once underlying issue is fixed exists(QualifiableExpr qe | qe.isConditional() and qe.getQualifier() = arg.asExpr() ) } predicate multipleArgumentCallExclude(ArgumentNode arg, DataFlowCall call) { isArgumentNode(arg, call, _) and ( // TODO: Remove once object initializers are modeled properly arg = any(Private::PostUpdateNodes::ObjectInitializerNode init | init.argumentOf(call, _) and init.getInitializer().getNumberOfChildren() > 1 ) or exists(ControlFlow::Nodes::ElementNode cfn, ControlFlow::Nodes::Split split | exists(arg.asExprAtNode(cfn)) | split = cfn.getASplit() and not split = call.getControlFlowNode().getASplit() or split = call.getControlFlowNode().getASplit() and not split = cfn.getASplit() ) or call.(NonDelegateDataFlowCall).getDispatchCall().isReflection() ) } } import MakeConsistency