hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-08-05 01:43:23 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
yoff/python-shared-cfg-dataflow-flip
codeql/python/ql/test/experimental/query-tests/Security/CWE-022-TarSlip/TarSlip.expected
yoff 265a31dc1d Python: switch dataflow library to new (shared) CFG + SSA 
Flips the Python dataflow trunk from the legacy CFG (semmle/python/Flow.qll)
and legacy ESSA SSA (semmle/python/essa/*) to the new shared CFG facade
(semmle.python.controlflow.internal.Cfg) and the new SSA adapter
(semmle.python.dataflow.new.internal.SsaImpl), both introduced
additively in the preceding PRs in this stack.

This is the trunk-flip equivalent of the original draft PR #21894 (kept
around as documentation), rebased on top of the four preparatory PRs:

  P1: Remove AstNode.getAFlowNode() and rewrite callers (#21919).
  P2: Qualify Flow.qll's AST references with Py:: prefix (#21920).
  P3: Add new shared-CFG-backed control flow graph (#21921).
  P4: Add new shared-SSA-backed SSA adapter (#21923).

The Python dataflow library (semmle/python/dataflow/new/) now imports
the new CFG facade and SSA adapter. All CFG-typed predicates
(ControlFlowNode, CallNode, BasicBlock, NameNode, AttrNode, ...) are
qualified with the Cfg:: prefix; SSA references switch from
EssaVariable/EssaDefinition to SsaImpl::Definition/SourceVariable.

GuardNode is redesigned to use the new CFG's outcome-node model
(isAfterTrue / isAfterFalse) instead of the legacy ConditionBlock +
flipped indirection. Only BarrierGuard<...> is preserved as public
API.

Framework files (Bottle, FastApi, Django, Tornado, Pyramid, Stdlib,
...) are updated to take CFG nodes from the new facade.

A handful of dataflow consistency tweaks for the new CFG:
- Augmented-assignment targets are treated as both load and store.
- 'from X import *' produces uncertain SSA writes for unknown names.
- CFG nodes are canonicalised so dataflow does not see equivalent
  pre/post-order pairs as distinct nodes.

Two AST tweaks for the new CFG:
- AstNodeImpl: omit PEP 695 type-parameter names from
  FunctionDefExpr / ClassDefExpr children.
- ImportResolution: drop the legacy essa import.

Test churn (~175 files): reblessed library- and query-test .expected
files reflect slightly different CFG granularity, different toString
output, and a handful of true alert deltas in security queries.

Verification: all 367 lib + src + consistency-queries compile clean.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-07-30 15:30:47 +00:00

256 lines
27 KiB
Plaintext
Raw Permalink Blame History

#select
| TarSlipImprov.py:22:35:22:40 | result | TarSlipImprov.py:15:7:15:39 | Attribute() | TarSlipImprov.py:22:35:22:40 | result | Extraction of tarfile from $@ to a potentially untrusted source $@. | TarSlipImprov.py:15:7:15:39 | Attribute() | Attribute() | TarSlipImprov.py:22:35:22:40 | result | result |
| TarSlipImprov.py:39:49:39:68 | members_filter1() | TarSlipImprov.py:38:7:38:39 | Attribute() | TarSlipImprov.py:39:49:39:68 | members_filter1() | Extraction of tarfile from $@ to a potentially untrusted source $@. | TarSlipImprov.py:38:7:38:39 | Attribute() | Attribute() | TarSlipImprov.py:39:49:39:68 | members_filter1() | members_filter1() |
| TarSlipImprov.py:47:21:47:25 | entry | TarSlipImprov.py:43:6:43:38 | Attribute() | TarSlipImprov.py:47:21:47:25 | entry | Extraction of tarfile from $@ to a potentially untrusted source $@. | TarSlipImprov.py:43:6:43:38 | Attribute() | Attribute() | TarSlipImprov.py:47:21:47:25 | entry | entry |
| TarSlipImprov.py:58:21:58:25 | entry | TarSlipImprov.py:54:6:54:38 | Attribute() | TarSlipImprov.py:58:21:58:25 | entry | Extraction of tarfile from $@ to a potentially untrusted source $@. | TarSlipImprov.py:54:6:54:38 | Attribute() | Attribute() | TarSlipImprov.py:58:21:58:25 | entry | entry |
| TarSlipImprov.py:91:5:91:7 | tar | TarSlipImprov.py:88:6:88:43 | Attribute() | TarSlipImprov.py:91:5:91:7 | tar | Extraction of tarfile from $@ to a potentially untrusted source $@. | TarSlipImprov.py:88:6:88:43 | Attribute() | Attribute() | TarSlipImprov.py:91:5:91:7 | tar | tar |
| TarSlipImprov.py:115:9:115:11 | tar | TarSlipImprov.py:111:7:111:39 | Attribute() | TarSlipImprov.py:115:9:115:11 | tar | Extraction of tarfile from $@ to a potentially untrusted source $@. | TarSlipImprov.py:111:7:111:39 | Attribute() | Attribute() | TarSlipImprov.py:115:9:115:11 | tar | tar |
| TarSlipImprov.py:125:36:125:40 | entry | TarSlipImprov.py:123:6:123:29 | Attribute() | TarSlipImprov.py:125:36:125:40 | entry | Extraction of tarfile from $@ to a potentially untrusted source $@. | TarSlipImprov.py:123:6:123:29 | Attribute() | Attribute() | TarSlipImprov.py:125:36:125:40 | entry | entry |
| TarSlipImprov.py:130:5:130:7 | tar | TarSlipImprov.py:129:6:129:26 | Attribute() | TarSlipImprov.py:130:5:130:7 | tar | Extraction of tarfile from $@ to a potentially untrusted source $@. | TarSlipImprov.py:129:6:129:26 | Attribute() | Attribute() | TarSlipImprov.py:130:5:130:7 | tar | tar |
| TarSlipImprov.py:134:1:134:3 | tar | TarSlipImprov.py:133:7:133:39 | Attribute() | TarSlipImprov.py:134:1:134:3 | tar | Extraction of tarfile from $@ to a potentially untrusted source $@. | TarSlipImprov.py:133:7:133:39 | Attribute() | Attribute() | TarSlipImprov.py:134:1:134:3 | tar | tar |
| TarSlipImprov.py:143:36:143:40 | entry | TarSlipImprov.py:141:6:141:29 | Attribute() | TarSlipImprov.py:143:36:143:40 | entry | Extraction of tarfile from $@ to a potentially untrusted source $@. | TarSlipImprov.py:141:6:141:29 | Attribute() | Attribute() | TarSlipImprov.py:143:36:143:40 | entry | entry |
| TarSlipImprov.py:169:9:169:12 | tarc | TarSlipImprov.py:151:22:151:49 | Attribute() | TarSlipImprov.py:169:9:169:12 | tarc | Extraction of tarfile from $@ to a potentially untrusted source $@. | TarSlipImprov.py:151:22:151:49 | Attribute() | Attribute() | TarSlipImprov.py:169:9:169:12 | tarc | tarc |
| TarSlipImprov.py:169:9:169:12 | tarc | TarSlipImprov.py:159:26:159:51 | Attribute() | TarSlipImprov.py:169:9:169:12 | tarc | Extraction of tarfile from $@ to a potentially untrusted source $@. | TarSlipImprov.py:159:26:159:51 | Attribute() | Attribute() | TarSlipImprov.py:169:9:169:12 | tarc | tarc |
| TarSlipImprov.py:178:36:178:40 | entry | TarSlipImprov.py:176:6:176:31 | Attribute() | TarSlipImprov.py:178:36:178:40 | entry | Extraction of tarfile from $@ to a potentially untrusted source $@. | TarSlipImprov.py:176:6:176:31 | Attribute() | Attribute() | TarSlipImprov.py:178:36:178:40 | entry | entry |
| TarSlipImprov.py:184:21:184:25 | entry | TarSlipImprov.py:182:6:182:31 | Attribute() | TarSlipImprov.py:184:21:184:25 | entry | Extraction of tarfile from $@ to a potentially untrusted source $@. | TarSlipImprov.py:182:6:182:31 | Attribute() | Attribute() | TarSlipImprov.py:184:21:184:25 | entry | entry |
| TarSlipImprov.py:189:1:189:3 | tar | TarSlipImprov.py:188:7:188:27 | Attribute() | TarSlipImprov.py:189:1:189:3 | tar | Extraction of tarfile from $@ to a potentially untrusted source $@. | TarSlipImprov.py:188:7:188:27 | Attribute() | Attribute() | TarSlipImprov.py:189:1:189:3 | tar | tar |
| TarSlipImprov.py:194:49:194:51 | tar | TarSlipImprov.py:193:6:193:31 | Attribute() | TarSlipImprov.py:194:49:194:51 | tar | Extraction of tarfile from $@ to a potentially untrusted source $@. | TarSlipImprov.py:193:6:193:31 | Attribute() | Attribute() | TarSlipImprov.py:194:49:194:51 | tar | tar |
| TarSlipImprov.py:211:5:211:7 | tar | TarSlipImprov.py:210:6:210:43 | Attribute() | TarSlipImprov.py:211:5:211:7 | tar | Extraction of tarfile from $@ to a potentially untrusted source $@. | TarSlipImprov.py:210:6:210:43 | Attribute() | Attribute() | TarSlipImprov.py:211:5:211:7 | tar | tar |
| TarSlipImprov.py:236:44:236:50 | members | TarSlipImprov.py:231:6:231:38 | Attribute() | TarSlipImprov.py:236:44:236:50 | members | Extraction of tarfile from $@ to a potentially untrusted source $@. | TarSlipImprov.py:231:6:231:38 | Attribute() | Attribute() | TarSlipImprov.py:236:44:236:50 | members | members |
| TarSlipImprov.py:254:1:254:31 | Attribute() | TarSlipImprov.py:254:1:254:31 | Attribute() | TarSlipImprov.py:254:1:254:31 | Attribute() | Extraction of tarfile from $@ to a potentially untrusted source $@. | TarSlipImprov.py:254:1:254:31 | Attribute() | Attribute() | TarSlipImprov.py:254:1:254:31 | Attribute() | Attribute() |
| TarSlipImprov.py:261:25:261:29 | entry | TarSlipImprov.py:258:6:258:26 | Attribute() | TarSlipImprov.py:261:25:261:29 | entry | Extraction of tarfile from $@ to a potentially untrusted source $@. | TarSlipImprov.py:258:6:258:26 | Attribute() | Attribute() | TarSlipImprov.py:261:25:261:29 | entry | entry |
| TarSlipImprov.py:268:21:268:25 | entry | TarSlipImprov.py:264:6:264:38 | Attribute() | TarSlipImprov.py:268:21:268:25 | entry | Extraction of tarfile from $@ to a potentially untrusted source $@. | TarSlipImprov.py:264:6:264:38 | Attribute() | Attribute() | TarSlipImprov.py:268:21:268:25 | entry | entry |
| TarSlipImprov.py:274:25:274:29 | entry | TarSlipImprov.py:271:6:271:39 | Attribute() | TarSlipImprov.py:274:25:274:29 | entry | Extraction of tarfile from $@ to a potentially untrusted source $@. | TarSlipImprov.py:271:6:271:39 | Attribute() | Attribute() | TarSlipImprov.py:274:25:274:29 | entry | entry |
| TarSlipImprov.py:280:21:280:25 | entry | TarSlipImprov.py:276:6:276:38 | Attribute() | TarSlipImprov.py:280:21:280:25 | entry | Extraction of tarfile from $@ to a potentially untrusted source $@. | TarSlipImprov.py:276:6:276:38 | Attribute() | Attribute() | TarSlipImprov.py:280:21:280:25 | entry | entry |
| TarSlipImprov.py:284:5:284:7 | tar | TarSlipImprov.py:283:6:283:51 | Attribute() | TarSlipImprov.py:284:5:284:7 | tar | Extraction of tarfile from $@ to a potentially untrusted source $@. | TarSlipImprov.py:283:6:283:51 | Attribute() | Attribute() | TarSlipImprov.py:284:5:284:7 | tar | tar |
| TarSlipImprov.py:288:49:288:51 | tar | TarSlipImprov.py:287:7:287:28 | Attribute() | TarSlipImprov.py:288:49:288:51 | tar | Extraction of tarfile from $@ to a potentially untrusted source $@. | TarSlipImprov.py:287:7:287:28 | Attribute() | Attribute() | TarSlipImprov.py:288:49:288:51 | tar | tar |
| TarSlipImprov.py:293:1:293:3 | tar | TarSlipImprov.py:292:7:292:39 | Attribute() | TarSlipImprov.py:293:1:293:3 | tar | Extraction of tarfile from $@ to a potentially untrusted source $@. | TarSlipImprov.py:292:7:292:39 | Attribute() | Attribute() | TarSlipImprov.py:293:1:293:3 | tar | tar |
| TarSlipImprov.py:301:49:301:51 | tar | TarSlipImprov.py:300:6:300:51 | Attribute() | TarSlipImprov.py:301:49:301:51 | tar | Extraction of tarfile from $@ to a potentially untrusted source $@. | TarSlipImprov.py:300:6:300:51 | Attribute() | Attribute() | TarSlipImprov.py:301:49:301:51 | tar | tar |
| TarSlipImprov.py:310:49:310:54 | result | TarSlipImprov.py:304:7:304:39 | Attribute() | TarSlipImprov.py:310:49:310:54 | result | Extraction of tarfile from $@ to a potentially untrusted source $@. | TarSlipImprov.py:304:7:304:39 | Attribute() | Attribute() | TarSlipImprov.py:310:49:310:54 | result | result |
| TarSlipImprov.py:316:1:316:46 | Attribute() | TarSlipImprov.py:316:1:316:46 | Attribute() | TarSlipImprov.py:316:1:316:46 | Attribute() | Extraction of tarfile from $@ to a potentially untrusted source $@. | TarSlipImprov.py:316:1:316:46 | Attribute() | Attribute() | TarSlipImprov.py:316:1:316:46 | Attribute() | Attribute() |
edges
| TarSlipImprov.py:15:1:15:3 | tar | TarSlipImprov.py:17:5:17:10 | member | provenance | |
| TarSlipImprov.py:15:7:15:39 | Attribute() | TarSlipImprov.py:15:1:15:3 | tar | provenance | |
| TarSlipImprov.py:17:5:17:10 | member | TarSlipImprov.py:20:19:20:24 | member | provenance | |
| TarSlipImprov.py:20:5:20:10 | [post] result | TarSlipImprov.py:22:35:22:40 | result | provenance | |
| TarSlipImprov.py:20:5:20:10 | [post] result [List element] | TarSlipImprov.py:22:35:22:40 | result | provenance | |
| TarSlipImprov.py:20:19:20:24 | member | TarSlipImprov.py:20:5:20:10 | [post] result | provenance | list.append |
| TarSlipImprov.py:20:19:20:24 | member | TarSlipImprov.py:20:5:20:10 | [post] result [List element] | provenance | list.append |
| TarSlipImprov.py:26:21:26:27 | tarfile | TarSlipImprov.py:28:9:28:14 | member | provenance | |
| TarSlipImprov.py:28:9:28:14 | member | TarSlipImprov.py:35:23:35:28 | member | provenance | |
| TarSlipImprov.py:35:9:35:14 | [post] result | TarSlipImprov.py:36:12:36:17 | result | provenance | |
| TarSlipImprov.py:35:9:35:14 | [post] result [List element] | TarSlipImprov.py:36:12:36:17 | result [List element] | provenance | |
| TarSlipImprov.py:35:23:35:28 | member | TarSlipImprov.py:35:9:35:14 | [post] result | provenance | list.append |
| TarSlipImprov.py:35:23:35:28 | member | TarSlipImprov.py:35:9:35:14 | [post] result [List element] | provenance | list.append |
| TarSlipImprov.py:38:1:38:3 | tar | TarSlipImprov.py:39:65:39:67 | tar | provenance | |
| TarSlipImprov.py:38:7:38:39 | Attribute() | TarSlipImprov.py:38:1:38:3 | tar | provenance | |
| TarSlipImprov.py:39:65:39:67 | tar | TarSlipImprov.py:26:21:26:27 | tarfile | provenance | |
| TarSlipImprov.py:39:65:39:67 | tar | TarSlipImprov.py:39:49:39:68 | members_filter1() | provenance | list.append |
| TarSlipImprov.py:43:6:43:38 | Attribute() | TarSlipImprov.py:43:43:43:45 | tar | provenance | |
| TarSlipImprov.py:43:43:43:45 | tar | TarSlipImprov.py:44:9:44:13 | entry | provenance | |
| TarSlipImprov.py:44:9:44:13 | entry | TarSlipImprov.py:47:21:47:25 | entry | provenance | |
| TarSlipImprov.py:54:6:54:38 | Attribute() | TarSlipImprov.py:54:43:54:45 | tar | provenance | |
| TarSlipImprov.py:54:43:54:45 | tar | TarSlipImprov.py:56:9:56:13 | entry | provenance | |
| TarSlipImprov.py:56:9:56:13 | entry | TarSlipImprov.py:58:21:58:25 | entry | provenance | |
| TarSlipImprov.py:88:6:88:43 | Attribute() | TarSlipImprov.py:88:48:88:50 | tar | provenance | |
| TarSlipImprov.py:88:48:88:50 | tar | TarSlipImprov.py:91:5:91:7 | tar | provenance | |
| TarSlipImprov.py:111:1:111:3 | tar | TarSlipImprov.py:115:9:115:11 | tar | provenance | |
| TarSlipImprov.py:111:7:111:39 | Attribute() | TarSlipImprov.py:111:1:111:3 | tar | provenance | |
| TarSlipImprov.py:123:6:123:29 | Attribute() | TarSlipImprov.py:123:34:123:36 | tar | provenance | |
| TarSlipImprov.py:123:34:123:36 | tar | TarSlipImprov.py:124:9:124:13 | entry | provenance | |
| TarSlipImprov.py:124:9:124:13 | entry | TarSlipImprov.py:125:36:125:40 | entry | provenance | |
| TarSlipImprov.py:129:6:129:26 | Attribute() | TarSlipImprov.py:129:31:129:33 | tar | provenance | |
| TarSlipImprov.py:129:31:129:33 | tar | TarSlipImprov.py:130:5:130:7 | tar | provenance | |
| TarSlipImprov.py:133:1:133:3 | tar | TarSlipImprov.py:134:1:134:3 | tar | provenance | |
| TarSlipImprov.py:133:7:133:39 | Attribute() | TarSlipImprov.py:133:1:133:3 | tar | provenance | |
| TarSlipImprov.py:141:6:141:29 | Attribute() | TarSlipImprov.py:141:34:141:36 | tar | provenance | |
| TarSlipImprov.py:141:34:141:36 | tar | TarSlipImprov.py:142:9:142:13 | entry | provenance | |
| TarSlipImprov.py:142:9:142:13 | entry | TarSlipImprov.py:143:36:143:40 | entry | provenance | |
| TarSlipImprov.py:151:14:151:50 | closing() | TarSlipImprov.py:151:55:151:56 | tf | provenance | |
| TarSlipImprov.py:151:22:151:49 | Attribute() | TarSlipImprov.py:151:14:151:50 | closing() | provenance | Config |
| TarSlipImprov.py:151:55:151:56 | tf | TarSlipImprov.py:152:19:152:20 | tf | provenance | |
| TarSlipImprov.py:152:13:152:20 | Yield [List element] | TarSlipImprov.py:157:18:157:40 | py2_tarxz() [List element] | provenance | |
| TarSlipImprov.py:152:19:152:20 | tf | TarSlipImprov.py:152:13:152:20 | Yield [List element] | provenance | |
| TarSlipImprov.py:152:19:152:20 | tf | TarSlipImprov.py:157:18:157:40 | py2_tarxz() | provenance | |
| TarSlipImprov.py:157:9:157:14 | tar_cm | TarSlipImprov.py:162:20:162:23 | tarc | provenance | |
| TarSlipImprov.py:157:9:157:14 | tar_cm [List element] | TarSlipImprov.py:162:20:162:23 | tarc [List element] | provenance | |
| TarSlipImprov.py:157:18:157:40 | py2_tarxz() | TarSlipImprov.py:157:9:157:14 | tar_cm | provenance | |
| TarSlipImprov.py:157:18:157:40 | py2_tarxz() [List element] | TarSlipImprov.py:157:9:157:14 | tar_cm [List element] | provenance | |
| TarSlipImprov.py:159:9:159:14 | tar_cm | TarSlipImprov.py:162:20:162:23 | tarc | provenance | |
| TarSlipImprov.py:159:18:159:52 | closing() | TarSlipImprov.py:159:9:159:14 | tar_cm | provenance | |
| TarSlipImprov.py:159:26:159:51 | Attribute() | TarSlipImprov.py:159:18:159:52 | closing() | provenance | Config |
| TarSlipImprov.py:162:20:162:23 | tarc | TarSlipImprov.py:169:9:169:12 | tarc | provenance | |
| TarSlipImprov.py:162:20:162:23 | tarc [List element] | TarSlipImprov.py:169:9:169:12 | tarc | provenance | |
| TarSlipImprov.py:176:6:176:31 | Attribute() | TarSlipImprov.py:176:36:176:38 | tar | provenance | |
| TarSlipImprov.py:176:36:176:38 | tar | TarSlipImprov.py:177:9:177:13 | entry | provenance | |
| TarSlipImprov.py:177:9:177:13 | entry | TarSlipImprov.py:178:36:178:40 | entry | provenance | |
| TarSlipImprov.py:182:6:182:31 | Attribute() | TarSlipImprov.py:182:36:182:38 | tar | provenance | |
| TarSlipImprov.py:182:36:182:38 | tar | TarSlipImprov.py:183:9:183:13 | entry | provenance | |
| TarSlipImprov.py:183:9:183:13 | entry | TarSlipImprov.py:184:21:184:25 | entry | provenance | |
| TarSlipImprov.py:188:1:188:3 | tar | TarSlipImprov.py:189:1:189:3 | tar | provenance | |
| TarSlipImprov.py:188:7:188:27 | Attribute() | TarSlipImprov.py:188:1:188:3 | tar | provenance | |
| TarSlipImprov.py:193:6:193:31 | Attribute() | TarSlipImprov.py:193:36:193:38 | tar | provenance | |
| TarSlipImprov.py:193:36:193:38 | tar | TarSlipImprov.py:194:49:194:51 | tar | provenance | |
| TarSlipImprov.py:210:6:210:43 | Attribute() | TarSlipImprov.py:210:48:210:50 | tar | provenance | |
| TarSlipImprov.py:210:48:210:50 | tar | TarSlipImprov.py:211:5:211:7 | tar | provenance | |
| TarSlipImprov.py:231:6:231:38 | Attribute() | TarSlipImprov.py:231:43:231:52 | corpus_tar | provenance | |
| TarSlipImprov.py:231:43:231:52 | corpus_tar | TarSlipImprov.py:233:9:233:9 | f | provenance | |
| TarSlipImprov.py:233:9:233:9 | f | TarSlipImprov.py:235:28:235:28 | f | provenance | |
| TarSlipImprov.py:235:13:235:19 | [post] members | TarSlipImprov.py:236:44:236:50 | members | provenance | |
| TarSlipImprov.py:235:13:235:19 | [post] members [List element] | TarSlipImprov.py:236:44:236:50 | members | provenance | |
| TarSlipImprov.py:235:28:235:28 | f | TarSlipImprov.py:235:13:235:19 | [post] members | provenance | list.append |
| TarSlipImprov.py:235:28:235:28 | f | TarSlipImprov.py:235:13:235:19 | [post] members [List element] | provenance | list.append |
| TarSlipImprov.py:258:6:258:26 | Attribute() | TarSlipImprov.py:258:31:258:33 | tar | provenance | |
| TarSlipImprov.py:258:31:258:33 | tar | TarSlipImprov.py:259:9:259:13 | entry | provenance | |
| TarSlipImprov.py:259:9:259:13 | entry | TarSlipImprov.py:261:25:261:29 | entry | provenance | |
| TarSlipImprov.py:264:6:264:38 | Attribute() | TarSlipImprov.py:264:43:264:45 | tar | provenance | |
| TarSlipImprov.py:264:43:264:45 | tar | TarSlipImprov.py:265:9:265:13 | entry | provenance | |
| TarSlipImprov.py:265:9:265:13 | entry | TarSlipImprov.py:268:21:268:25 | entry | provenance | |
| TarSlipImprov.py:271:6:271:39 | Attribute() | TarSlipImprov.py:271:44:271:46 | tar | provenance | |
| TarSlipImprov.py:271:44:271:46 | tar | TarSlipImprov.py:272:9:272:13 | entry | provenance | |
| TarSlipImprov.py:272:9:272:13 | entry | TarSlipImprov.py:274:25:274:29 | entry | provenance | |
| TarSlipImprov.py:276:6:276:38 | Attribute() | TarSlipImprov.py:276:43:276:45 | tar | provenance | |
| TarSlipImprov.py:276:43:276:45 | tar | TarSlipImprov.py:277:9:277:13 | entry | provenance | |
| TarSlipImprov.py:277:9:277:13 | entry | TarSlipImprov.py:280:21:280:25 | entry | provenance | |
| TarSlipImprov.py:283:6:283:51 | Attribute() | TarSlipImprov.py:283:56:283:58 | tar | provenance | |
| TarSlipImprov.py:283:56:283:58 | tar | TarSlipImprov.py:284:5:284:7 | tar | provenance | |
| TarSlipImprov.py:287:1:287:3 | tar | TarSlipImprov.py:288:49:288:51 | tar | provenance | |
| TarSlipImprov.py:287:7:287:28 | Attribute() | TarSlipImprov.py:287:1:287:3 | tar | provenance | |
| TarSlipImprov.py:292:1:292:3 | tar | TarSlipImprov.py:293:1:293:3 | tar | provenance | |
| TarSlipImprov.py:292:7:292:39 | Attribute() | TarSlipImprov.py:292:1:292:3 | tar | provenance | |
| TarSlipImprov.py:300:6:300:51 | Attribute() | TarSlipImprov.py:300:56:300:58 | tar | provenance | |
| TarSlipImprov.py:300:56:300:58 | tar | TarSlipImprov.py:301:49:301:51 | tar | provenance | |
| TarSlipImprov.py:304:1:304:3 | tar | TarSlipImprov.py:306:5:306:10 | member | provenance | |
| TarSlipImprov.py:304:7:304:39 | Attribute() | TarSlipImprov.py:304:1:304:3 | tar | provenance | |
| TarSlipImprov.py:306:5:306:10 | member | TarSlipImprov.py:309:19:309:24 | member | provenance | |
| TarSlipImprov.py:309:5:309:10 | [post] result | TarSlipImprov.py:310:49:310:54 | result | provenance | |
| TarSlipImprov.py:309:5:309:10 | [post] result [List element] | TarSlipImprov.py:310:49:310:54 | result | provenance | |
| TarSlipImprov.py:309:19:309:24 | member | TarSlipImprov.py:309:5:309:10 | [post] result | provenance | list.append |
| TarSlipImprov.py:309:19:309:24 | member | TarSlipImprov.py:309:5:309:10 | [post] result [List element] | provenance | list.append |
nodes
| TarSlipImprov.py:15:1:15:3 | tar | semmle.label | tar |
| TarSlipImprov.py:15:7:15:39 | Attribute() | semmle.label | Attribute() |
| TarSlipImprov.py:17:5:17:10 | member | semmle.label | member |
| TarSlipImprov.py:20:5:20:10 | [post] result | semmle.label | [post] result |
| TarSlipImprov.py:20:5:20:10 | [post] result [List element] | semmle.label | [post] result [List element] |
| TarSlipImprov.py:20:19:20:24 | member | semmle.label | member |
| TarSlipImprov.py:22:35:22:40 | result | semmle.label | result |
| TarSlipImprov.py:26:21:26:27 | tarfile | semmle.label | tarfile |
| TarSlipImprov.py:28:9:28:14 | member | semmle.label | member |
| TarSlipImprov.py:35:9:35:14 | [post] result | semmle.label | [post] result |
| TarSlipImprov.py:35:9:35:14 | [post] result [List element] | semmle.label | [post] result [List element] |
| TarSlipImprov.py:35:23:35:28 | member | semmle.label | member |
| TarSlipImprov.py:36:12:36:17 | result | semmle.label | result |
| TarSlipImprov.py:36:12:36:17 | result [List element] | semmle.label | result [List element] |
| TarSlipImprov.py:38:1:38:3 | tar | semmle.label | tar |
| TarSlipImprov.py:38:7:38:39 | Attribute() | semmle.label | Attribute() |
| TarSlipImprov.py:39:49:39:68 | members_filter1() | semmle.label | members_filter1() |
| TarSlipImprov.py:39:65:39:67 | tar | semmle.label | tar |
| TarSlipImprov.py:43:6:43:38 | Attribute() | semmle.label | Attribute() |
| TarSlipImprov.py:43:43:43:45 | tar | semmle.label | tar |
| TarSlipImprov.py:44:9:44:13 | entry | semmle.label | entry |
| TarSlipImprov.py:47:21:47:25 | entry | semmle.label | entry |
| TarSlipImprov.py:54:6:54:38 | Attribute() | semmle.label | Attribute() |
| TarSlipImprov.py:54:43:54:45 | tar | semmle.label | tar |
| TarSlipImprov.py:56:9:56:13 | entry | semmle.label | entry |
| TarSlipImprov.py:58:21:58:25 | entry | semmle.label | entry |
| TarSlipImprov.py:88:6:88:43 | Attribute() | semmle.label | Attribute() |
| TarSlipImprov.py:88:48:88:50 | tar | semmle.label | tar |
| TarSlipImprov.py:91:5:91:7 | tar | semmle.label | tar |
| TarSlipImprov.py:111:1:111:3 | tar | semmle.label | tar |
| TarSlipImprov.py:111:7:111:39 | Attribute() | semmle.label | Attribute() |
| TarSlipImprov.py:115:9:115:11 | tar | semmle.label | tar |
| TarSlipImprov.py:123:6:123:29 | Attribute() | semmle.label | Attribute() |
| TarSlipImprov.py:123:34:123:36 | tar | semmle.label | tar |
| TarSlipImprov.py:124:9:124:13 | entry | semmle.label | entry |
| TarSlipImprov.py:125:36:125:40 | entry | semmle.label | entry |
| TarSlipImprov.py:129:6:129:26 | Attribute() | semmle.label | Attribute() |
| TarSlipImprov.py:129:31:129:33 | tar | semmle.label | tar |
| TarSlipImprov.py:130:5:130:7 | tar | semmle.label | tar |
| TarSlipImprov.py:133:1:133:3 | tar | semmle.label | tar |
| TarSlipImprov.py:133:7:133:39 | Attribute() | semmle.label | Attribute() |
| TarSlipImprov.py:134:1:134:3 | tar | semmle.label | tar |
| TarSlipImprov.py:141:6:141:29 | Attribute() | semmle.label | Attribute() |
| TarSlipImprov.py:141:34:141:36 | tar | semmle.label | tar |
| TarSlipImprov.py:142:9:142:13 | entry | semmle.label | entry |
| TarSlipImprov.py:143:36:143:40 | entry | semmle.label | entry |
| TarSlipImprov.py:151:14:151:50 | closing() | semmle.label | closing() |
| TarSlipImprov.py:151:22:151:49 | Attribute() | semmle.label | Attribute() |
| TarSlipImprov.py:151:55:151:56 | tf | semmle.label | tf |
| TarSlipImprov.py:152:13:152:20 | Yield [List element] | semmle.label | Yield [List element] |
| TarSlipImprov.py:152:19:152:20 | tf | semmle.label | tf |
| TarSlipImprov.py:157:9:157:14 | tar_cm | semmle.label | tar_cm |
| TarSlipImprov.py:157:9:157:14 | tar_cm [List element] | semmle.label | tar_cm [List element] |
| TarSlipImprov.py:157:18:157:40 | py2_tarxz() | semmle.label | py2_tarxz() |
| TarSlipImprov.py:157:18:157:40 | py2_tarxz() [List element] | semmle.label | py2_tarxz() [List element] |
| TarSlipImprov.py:159:9:159:14 | tar_cm | semmle.label | tar_cm |
| TarSlipImprov.py:159:18:159:52 | closing() | semmle.label | closing() |
| TarSlipImprov.py:159:26:159:51 | Attribute() | semmle.label | Attribute() |
| TarSlipImprov.py:162:20:162:23 | tarc | semmle.label | tarc |
| TarSlipImprov.py:162:20:162:23 | tarc [List element] | semmle.label | tarc [List element] |
| TarSlipImprov.py:169:9:169:12 | tarc | semmle.label | tarc |
| TarSlipImprov.py:176:6:176:31 | Attribute() | semmle.label | Attribute() |
| TarSlipImprov.py:176:36:176:38 | tar | semmle.label | tar |
| TarSlipImprov.py:177:9:177:13 | entry | semmle.label | entry |
| TarSlipImprov.py:178:36:178:40 | entry | semmle.label | entry |
| TarSlipImprov.py:182:6:182:31 | Attribute() | semmle.label | Attribute() |
| TarSlipImprov.py:182:36:182:38 | tar | semmle.label | tar |
| TarSlipImprov.py:183:9:183:13 | entry | semmle.label | entry |
| TarSlipImprov.py:184:21:184:25 | entry | semmle.label | entry |
| TarSlipImprov.py:188:1:188:3 | tar | semmle.label | tar |
| TarSlipImprov.py:188:7:188:27 | Attribute() | semmle.label | Attribute() |
| TarSlipImprov.py:189:1:189:3 | tar | semmle.label | tar |
| TarSlipImprov.py:193:6:193:31 | Attribute() | semmle.label | Attribute() |
| TarSlipImprov.py:193:36:193:38 | tar | semmle.label | tar |
| TarSlipImprov.py:194:49:194:51 | tar | semmle.label | tar |
| TarSlipImprov.py:210:6:210:43 | Attribute() | semmle.label | Attribute() |
| TarSlipImprov.py:210:48:210:50 | tar | semmle.label | tar |
| TarSlipImprov.py:211:5:211:7 | tar | semmle.label | tar |
| TarSlipImprov.py:231:6:231:38 | Attribute() | semmle.label | Attribute() |
| TarSlipImprov.py:231:43:231:52 | corpus_tar | semmle.label | corpus_tar |
| TarSlipImprov.py:233:9:233:9 | f | semmle.label | f |
| TarSlipImprov.py:235:13:235:19 | [post] members | semmle.label | [post] members |
| TarSlipImprov.py:235:13:235:19 | [post] members [List element] | semmle.label | [post] members [List element] |
| TarSlipImprov.py:235:28:235:28 | f | semmle.label | f |
| TarSlipImprov.py:236:44:236:50 | members | semmle.label | members |
| TarSlipImprov.py:254:1:254:31 | Attribute() | semmle.label | Attribute() |
| TarSlipImprov.py:258:6:258:26 | Attribute() | semmle.label | Attribute() |
| TarSlipImprov.py:258:31:258:33 | tar | semmle.label | tar |
| TarSlipImprov.py:259:9:259:13 | entry | semmle.label | entry |
| TarSlipImprov.py:261:25:261:29 | entry | semmle.label | entry |
| TarSlipImprov.py:264:6:264:38 | Attribute() | semmle.label | Attribute() |
| TarSlipImprov.py:264:43:264:45 | tar | semmle.label | tar |
| TarSlipImprov.py:265:9:265:13 | entry | semmle.label | entry |
| TarSlipImprov.py:268:21:268:25 | entry | semmle.label | entry |
| TarSlipImprov.py:271:6:271:39 | Attribute() | semmle.label | Attribute() |
| TarSlipImprov.py:271:44:271:46 | tar | semmle.label | tar |
| TarSlipImprov.py:272:9:272:13 | entry | semmle.label | entry |
| TarSlipImprov.py:274:25:274:29 | entry | semmle.label | entry |
| TarSlipImprov.py:276:6:276:38 | Attribute() | semmle.label | Attribute() |
| TarSlipImprov.py:276:43:276:45 | tar | semmle.label | tar |
| TarSlipImprov.py:277:9:277:13 | entry | semmle.label | entry |
| TarSlipImprov.py:280:21:280:25 | entry | semmle.label | entry |
| TarSlipImprov.py:283:6:283:51 | Attribute() | semmle.label | Attribute() |
| TarSlipImprov.py:283:56:283:58 | tar | semmle.label | tar |
| TarSlipImprov.py:284:5:284:7 | tar | semmle.label | tar |
| TarSlipImprov.py:287:1:287:3 | tar | semmle.label | tar |
| TarSlipImprov.py:287:7:287:28 | Attribute() | semmle.label | Attribute() |
| TarSlipImprov.py:288:49:288:51 | tar | semmle.label | tar |
| TarSlipImprov.py:292:1:292:3 | tar | semmle.label | tar |
| TarSlipImprov.py:292:7:292:39 | Attribute() | semmle.label | Attribute() |
| TarSlipImprov.py:293:1:293:3 | tar | semmle.label | tar |
| TarSlipImprov.py:300:6:300:51 | Attribute() | semmle.label | Attribute() |
| TarSlipImprov.py:300:56:300:58 | tar | semmle.label | tar |
| TarSlipImprov.py:301:49:301:51 | tar | semmle.label | tar |
| TarSlipImprov.py:304:1:304:3 | tar | semmle.label | tar |
| TarSlipImprov.py:304:7:304:39 | Attribute() | semmle.label | Attribute() |
| TarSlipImprov.py:306:5:306:10 | member | semmle.label | member |
| TarSlipImprov.py:309:5:309:10 | [post] result | semmle.label | [post] result |
| TarSlipImprov.py:309:5:309:10 | [post] result [List element] | semmle.label | [post] result [List element] |
| TarSlipImprov.py:309:19:309:24 | member | semmle.label | member |
| TarSlipImprov.py:310:49:310:54 | result | semmle.label | result |
| TarSlipImprov.py:316:1:316:46 | Attribute() | semmle.label | Attribute() |
subpaths
| TarSlipImprov.py:39:65:39:67 | tar | TarSlipImprov.py:26:21:26:27 | tarfile | TarSlipImprov.py:36:12:36:17 | result | TarSlipImprov.py:39:49:39:68 | members_filter1() |
| TarSlipImprov.py:39:65:39:67 | tar | TarSlipImprov.py:26:21:26:27 | tarfile | TarSlipImprov.py:36:12:36:17 | result [List element] | TarSlipImprov.py:39:49:39:68 | members_filter1() |
Reference in New Issue View Git Blame Copy Permalink