mirror of
https://github.com/github/codeql.git
synced 2025-12-18 09:43:15 +01:00
4138296ec6
TL;DR: We were missing out on flow in the following situation: `mod1.py`: ```python foo = SOURCE ``` `mod2.py`: ```python from mod1 import * ``` `test.py`: ```python from mod2 import foo SINK(foo) ``` This is because there's no node at which a read of `foo` takes place within `test.py`, and so the added reads make no difference. Unfortunately, this means the previous test was a bit too simplistic, since it only looks for module variable reads and writes. Because of this, we change the test to be a more traditional "all flow" style (though restricted to `CfgNode`s).
3 lines
31 B
Python
3 lines
31 B
Python
from one import foo
|
|
print(foo)
|