mirror of
https://github.com/github/codeql.git
synced 2025-12-22 11:46:32 +01:00
0778d90ac1
- still identifying summarized callables by name. I think ther shoudl perhaps be a `getAUse` next to `getACall`. - also fix tests, adding a standard taint configuration
22 lines
711 B
Plaintext
22 lines
711 B
Plaintext
/**
|
|
* @kind path-problem
|
|
*/
|
|
|
|
import python
|
|
import semmle.python.dataflow.new.FlowSummary
|
|
import DataFlow::PathGraph
|
|
import semmle.python.dataflow.new.TaintTracking
|
|
import semmle.python.dataflow.new.internal.FlowSummaryImpl
|
|
import semmle.python.ApiGraphs
|
|
import experimental.dataflow.testTaintConfig
|
|
private import TestSummaries
|
|
|
|
query predicate invalidSpecComponent(SummarizedCallable sc, string s, string c) {
|
|
(sc.propagatesFlowExt(s, _, _) or sc.propagatesFlowExt(_, s, _)) and
|
|
Private::External::invalidSpecComponent(s, c)
|
|
}
|
|
|
|
from DataFlow::PathNode source, DataFlow::PathNode sink, TestConfiguration conf
|
|
where conf.hasFlowPath(source, sink)
|
|
select sink, source, sink, "$@", source, source.toString()
|