codepropertygraph

codepropertygraph copied to clipboard

I am not sure whether this is already possible. I'm specifying ASTs and am creating CPGs from them. I had some trouble finding out how return values need to be...

m1cm1c

The readme contains an image link to `img/method-header.jpg`. However, this image does not exist.

m1cm1c

The [documentation](https://readthedocs.org/projects/joern/downloads/pdf/dev/) says: > Variable declaration nodes (type: DeclStmt). Finally, declarations of global variables are saved in declaration statement nodes and connected to the source file they are contained in...

m1cm1c

Hi, I am curious about the implementation of AST parser. Is it based on antlr4 and is there any optimization on native antlr4 parser? Thanks!

jumormt

``` cpg.call.codeExact("...").head match { case (call : nodes.Call) :: Nil => println(call.argument.l.length) } ``` leads to compiler error: ``` missing argument list for method argument in class CallMethods [error] Unapplied...

simkoc

Hi, I really admire your works to create this tool and am interested. I would like to use this tool to find some vulnerabilities. I read your paper Modeling and...

bxie9

The corresponding classes extend from Noderef. This means that they create a second Noderef referencing the same underlying Node. However, overflowdb cannot deal with that: The entire logic (e.g. https://github.com/ShiftLeftSecurity/overflowdb/blob/5bf234034dc7b58edf0983753adb253ce340578a/core/src/main/java/overflowdb/NodeRef.java#L91)...

bbrehm

Parsing this code: ``` 1 class MyClass 2 { 3 public: 4 int bar() 5 { 6 return 1; 7 } 8 }; 9 10 void myfunc() 11 { 12...

kzsnow

Argument level granularity in data-flow tracking to calls

2

I was trying to get data-flow to a specific argument to a function call. For example, considering the following snippet of code: ```cpp #include #include #include #include int main() {...

jaiverma

I want to use joern-plot-proggraph to get cfg On the first, it run well, but then i got java.lang.OutOfMemoryError as below `2020-04-17 07:30:30.219+0000 INFO [API] Remote interface ready and available...

siru-yang