mirror of
https://github.com/github/codeql.git
synced 2025-12-31 08:06:36 +01:00
70 lines
2.1 KiB
Plaintext
70 lines
2.1 KiB
Plaintext
import csharp
|
|
import semmle.code.csharp.commons.Strings
|
|
import semmle.code.csharp.frameworks.System
|
|
|
|
/**
|
|
* Holds if expression `e`, of type `t`, invokes `ToString()` either explicitly
|
|
* or implicitly.
|
|
*/
|
|
pragma[nomagic]
|
|
predicate invokesToString(Expr e, ValueOrRefType t) {
|
|
// Explicit invocation
|
|
exists(MethodCall mc | mc.getQualifier() = e |
|
|
mc.getTarget() instanceof ToStringMethod and
|
|
t = mc.getQualifier().getType()
|
|
)
|
|
or
|
|
// Explicit or implicit invocation
|
|
e instanceof ImplicitToStringExpr and
|
|
t = e.stripCasts().getType()
|
|
or
|
|
// Implicit invocation via forwarder method
|
|
t = e.stripCasts().getType() and
|
|
not t instanceof StringType and
|
|
exists(AssignableDefinitions::ImplicitParameterDefinition def, Parameter p |
|
|
def.getParameter() = p and
|
|
alwaysInvokesToString(def.getAFirstRead()) and
|
|
e = p.getAnAssignedArgument()
|
|
)
|
|
}
|
|
|
|
pragma[nomagic]
|
|
private predicate parameterReadPostDominatesEntry(ParameterRead pr) {
|
|
pr.getAControlFlowNode().postDominates(pr.getEnclosingCallable().getEntryPoint())
|
|
}
|
|
|
|
pragma[nomagic]
|
|
private predicate alwaysInvokesToString(ParameterRead pr) {
|
|
parameterReadPostDominatesEntry(pr) and
|
|
invokesToString(pr, _)
|
|
or
|
|
alwaysInvokesToString(pr.getANextRead())
|
|
}
|
|
|
|
/**
|
|
* Holds if `t`, or any sub type of `t`, inherits the default `ToString()`
|
|
* method from `System.Object` or `System.ValueType`.
|
|
*/
|
|
predicate alwaysDefaultToString(ValueOrRefType t) {
|
|
exists(ToStringMethod m | t.hasMethod(m) |
|
|
m.getDeclaringType() instanceof SystemObjectClass or
|
|
m.getDeclaringType() instanceof SystemValueTypeClass
|
|
) and
|
|
not exists(RefType overriding |
|
|
overriding.getAMethod() instanceof ToStringMethod and
|
|
overriding.getABaseType+() = t
|
|
) and
|
|
((t.isAbstract() or t instanceof Interface) implies not t.isEffectivelyPublic())
|
|
}
|
|
|
|
class DefaultToStringType extends ValueOrRefType {
|
|
DefaultToStringType() { alwaysDefaultToString(this) }
|
|
}
|
|
|
|
query predicate problems(Expr e, string s, DefaultToStringType t, string name) {
|
|
invokesToString(e, t) and
|
|
s =
|
|
"Default 'ToString()': $@ inherits 'ToString()' from 'Object', and so is not suitable for printing." and
|
|
name = t.getName()
|
|
}
|