codeql
codeql copied to clipboard
Improve data flow in the `async` package
trafficstars
This PR makes these changes:
- In
FlowSummaryPrivate.qll: Added support foranyPropertycontent set in flow summaries:- Please confirm this is the correct way to support this. I needed this to find the
async_.map({a: source()}, call_sink)case. Let me know if there's a better way to do it - As a note, I was also unable to use
Element, which, according to the documentation, should select "an element of an array, iterator, or set object."
- Please confirm this is the correct way to support this. I needed this to find the
- In
AsyncPackage.qll: Improve taint tracking through functions from theasyncpackage:- Improve tracking of the callback arguments
- Implemented flow summaries for more robust taint tracking
- Updated tests