mirror of
https://github.com/github/codeql.git
synced 2026-02-16 23:13:43 +01:00
36b635fb70
These queries were great when evaluating coverage of the new call-graph compared with the old. However, they are not useful to run as part of our DCA experiments.
19 lines
623 B
Plaintext
19 lines
623 B
Plaintext
/**
|
|
* @name New call graph edge from using type-tracking instead of points-to, that is ambiguous
|
|
* @kind problem
|
|
* @problem.severity recommendation
|
|
* @id py/meta/call-graph-new-ambiguous
|
|
* @precision very-low
|
|
*/
|
|
|
|
import python
|
|
import CallGraphQuality
|
|
|
|
from CallNode call, Target target
|
|
where
|
|
target.isRelevant() and
|
|
not call.(PointsToBasedCallGraph::ResolvableCall).getTarget() = target and
|
|
call.(TypeTrackingBasedCallGraph::ResolvableCall).getTarget() = target and
|
|
1 < count(call.(TypeTrackingBasedCallGraph::ResolvableCall).getTarget())
|
|
select call, "NEW: $@ to $@", call, "Call", target, target.toString()
|