codeql

mirror of https://github.com/github/codeql.git synced 2026-04-25 08:45:14 +02:00

Files

Harry Maclean 72356d1515 Ruby: track flow from *args to positional params

This models flow in the following case:

    def foo(x, y)
      sink x # 1
      sink y # 2
    end

    args = [source 1, source 2]
    foo(*args)

We do this by introducing a SynthSplatParameterNode which accepts
content from the splat argument, if one is given at the callsite.
From this node we add read steps to each positional parameter.

2023-08-09 15:01:40 +01:00

api-graphs

Ruby: support Proc.new alongside 'proc' and 'lambda'

2023-07-13 11:53:16 +02:00

array-flow

Ruby: Update remaining inline expectation tests to use the paramterized module

2023-06-20 10:16:01 +02:00

barrier-guards

Ruby: Rewrite inline expectation tests to use parameterized module

2023-06-09 10:43:05 +02:00

call-sensitivity

Ruby: Rewrite InlineFlowTest as a parameterized module