mirror of
https://github.com/github/codeql.git
synced 2026-05-30 11:01:24 +02:00
26 lines
873 B
Plaintext
26 lines
873 B
Plaintext
/**
|
|
* @name Capture Summary Models Path
|
|
* @description Capture Summary Models Path
|
|
* @kind path-problem
|
|
* @precision low
|
|
* @id csharp/utils/modelgenerator/summary-models-path
|
|
* @severity warning
|
|
* @tags debugmodelgenerator
|
|
*/
|
|
|
|
import csharp
|
|
import utils.modelgenerator.internal.CaptureModels
|
|
import SummaryModels
|
|
import Heuristic::PropagateTaintFlow::PathGraph
|
|
|
|
from
|
|
Heuristic::PropagateTaintFlow::PathNode source, Heuristic::PropagateTaintFlow::PathNode sink,
|
|
DataFlowSummaryTargetApi api, DataFlow::Node p, DataFlow::Node returnNodeExt
|
|
where
|
|
Heuristic::PropagateTaintFlow::flowPath(source, sink) and
|
|
p = source.getNode() and
|
|
returnNodeExt = sink.getNode() and
|
|
Heuristic::captureThroughFlow0(api, p, returnNodeExt)
|
|
select sink.getNode(), source, sink, "There is flow from $@ to the $@.", source.getNode(),
|
|
"parameter", sink.getNode(), "return value"
|