mirror of
https://github.com/github/codeql.git
synced 2026-02-27 04:13:51 +01:00
26 lines
859 B
Plaintext
26 lines
859 B
Plaintext
import semmle.code.csharp.ir.rangeanalysis.RangeAnalysis
|
|
import semmle.code.csharp.ir.IR
|
|
import semmle.code.csharp.ir.internal.IRGuards
|
|
import semmle.code.csharp.ir.ValueNumbering
|
|
|
|
query predicate instructionBounds(
|
|
Instruction i, Bound b, int delta, boolean upper, Reason reason, Location reasonLoc
|
|
) {
|
|
(
|
|
i.getAUse() instanceof ArgumentOperand
|
|
or
|
|
exists(ReturnValueInstruction retInstr | retInstr.getReturnValueOperand() = i.getAUse())
|
|
) and
|
|
(
|
|
upper = true and
|
|
delta = min(int d | boundedInstruction(i, b, d, upper, reason))
|
|
or
|
|
upper = false and
|
|
delta = max(int d | boundedInstruction(i, b, d, upper, reason))
|
|
) and
|
|
not valueNumber(b.getInstruction()) = valueNumber(i) and
|
|
if reason instanceof CondReason
|
|
then reasonLoc = reason.(CondReason).getCond().getLocation()
|
|
else reasonLoc instanceof EmptyLocation
|
|
}
|