mirror of
https://github.com/github/codeql.git
synced 2026-05-24 16:17:07 +02:00
24 lines
977 B
Plaintext
24 lines
977 B
Plaintext
import experimental.adaptivethreatmodeling.TaintedPathATM
|
|
import experimental.adaptivethreatmodeling.EndpointFeatures
|
|
import experimental.adaptivethreatmodeling.EndpointScoring
|
|
|
|
string getValueOrNone(EndpointFeature feature, DataFlow::Node endpoint) {
|
|
if exists(feature.getValue(endpoint)) then feature.getValue(endpoint) = result else isNone(result)
|
|
}
|
|
|
|
predicate isNone(string value) { value = "" }
|
|
|
|
// query for comparing feature values
|
|
from
|
|
DataFlow::Node endpoint, EndpointFeature feature1, EndpointFeature feature2, string featureValue1,
|
|
string featureValue2
|
|
where
|
|
feature1 instanceof Input_ArgumentIndex and
|
|
feature2 instanceof ArgumentIndex and
|
|
featureValue1 = getValueOrNone(feature1, endpoint) and
|
|
featureValue2 = getValueOrNone(feature2, endpoint) and
|
|
featureValue1 != featureValue2 and
|
|
isNone([featureValue1, featureValue2])
|
|
select endpoint, endpoint.getFile().getBaseName() as file, endpoint.getStartLine() as line,
|
|
featureValue1, featureValue2
|