Fabian Yamaguchi

We need a tutorial that explains how to program CPG passes and when that makes sense.

We have recently introduced the concept of node tuples: a node can contain other nodes, and we represent this in the graph via edges. There is currently no documentation on...

Enums

1

I noticed that some of the enums used only in the backend are referred to in `generateJava.py`. For example, https://github.com/ShiftLeftSecurity/codepropertygraph/blob/master/codepropertygraph/codegen/src/main/python/generateJava.py#L31 refers to "Frameworks". We need to, instead, look for arbitrary...

There are currently outgoing `REF` edges from `CALL` to members in case of member accesses, but information about this is not in the documentation. This also seems a bit non-standard,...

Inheritance

1

The linker creates `INHERITS_FROM` edges here: https://github.com/ShiftLeftSecurity/codepropertygraph/blob/10e16ba5d3cd9ed3896c70997fa9f0fd209b6f08/semanticcpg/src/main/scala/io/shiftleft/semanticcpg/passes/linking/linker/Linker.scala#L84 This seems to not work for the fuzzy C frontend. I created a failing test to highlight the issue: https://github.com/ShiftLeftSecurity/codepropertygraph/compare/fabs/inher My guess would...

Check for AssignmentExpr uses

2

Some AST nodes (AssignmentExpr in particular) have been renamed during the development of the php support for joern (see https://github.com/fabsx00/joern/pull/86). Before we merge the php-support, we need to ensure that...