codeql/python/ql/lib/semmle/python/dataflow/old/Legacy.qll

import semmle.python.dataflow.TaintTracking
private import semmle.python.objects.ObjectInternal
import semmle.python.dataflow.Implementation

/* For backwards compatibility -- Use `TaintTrackingContext` instead. */
deprecated class CallContext extends TaintTrackingContext {
  TaintTrackingContext getCallee(CallNode call) { result.getCaller(call) = this }

  predicate appliesToScope(Scope s) {
    exists(PythonFunctionObjectInternal func, TaintKind param, AttributePath path, int n |
      this = TParamContext(param, path, n) and
      exists(TaintTrackingImplementation impl |
        impl.callWithTaintedArgument(_, _, _, func, n, path, param) and
        s = func.getScope()
      )
    )
    or
    this.isTop()
  }
}

/* Backwards compatibility with config-less taint-tracking */
private class LegacyConfiguration extends TaintTracking::Configuration {
  LegacyConfiguration() {
    /* A name that won't be accidentally chosen by users */
    this = "Semmle: Internal legacy configuration"
  }

  override predicate isSource(TaintSource src) { src = src }

  override predicate isSink(TaintSink sink) { sink = sink }

  override predicate isSanitizer(Sanitizer sanitizer) { sanitizer = sanitizer }

  override predicate isAdditionalFlowStep(DataFlow::Node src, DataFlow::Node dest) {
    exists(DataFlowExtension::DataFlowNode legacyExtension | src.asCfgNode() = legacyExtension |
      dest.asCfgNode() = legacyExtension.getASuccessorNode()
      or
      dest.asVariable() = legacyExtension.getASuccessorVariable()
      or
      dest.asCfgNode() = legacyExtension.getAReturnSuccessorNode(_)
      or
      dest.asCfgNode() = legacyExtension.getACalleeSuccessorNode(_)
    )
  }

  override predicate isAdditionalFlowStep(
    DataFlow::Node src, DataFlow::Node dest, TaintKind srckind, TaintKind destkind
  ) {
    exists(DataFlowExtension::DataFlowNode legacyExtension | src.asCfgNode() = legacyExtension |
      dest.asCfgNode() = legacyExtension.getASuccessorNode(srckind, destkind)
    )
  }

  override predicate isBarrierEdge(DataFlow::Node src, DataFlow::Node dest) {
    (
      exists(DataFlowExtension::DataFlowVariable legacyExtension |
        src.asVariable() = legacyExtension and
        legacyExtension.prunedSuccessor(dest.asVariable())
      )
      or
      exists(DataFlowExtension::DataFlowNode legacyExtension |
        src.asCfgNode() = legacyExtension and
        legacyExtension.prunedSuccessor(dest.asCfgNode())
      )
    )
  }
}