joern
joern copied to clipboard
Open-source code analysis platform for C/C++/Java/Binary/Javascript/Python/Kotlin based on code property graphs. Discord https://discord.gg/vv4MH284Hc
The goal of this is to re-use as much of the query DB mechanisms as possible, while only having `reachableByFlows` run once for this subset. Right now, queries define some...
**Describe the bug** I have Ghidra decompiled C source code where running a reachableBy operation and getting random exceptions. Sometimes there are no warnings and everything works fine, sometimes I...
HereDoc in a function argument is interesting, as in this case, the heredoc only starts from the next line onwards, and is meant to be inserted in the argument index...
**Describe the bug** Type information of class attributes does not propagate from nested field accesses. In the below snippet of code, the `name` member of `ClassA` is inferred to have...
**Describe the bug** After generating a cpg for the following repo [Pygoat](https://github.com/adeyosemanputra/pygoat) and generating a DDG for the method `a9_lab`, on GraphViz it shows a node that is not rooted...
**Describe the bug** When trying to generate a cpg of the following repo [Pygoat](https://github.com/adeyosemanputra/pygoat), the python parser shows two warnings for lines of code it considers Invalid.  These relate...
Language: javascript Testcase: https://gitee.com/y_project/RuoYi-Vue/tree/master/ruoyi-ui Tool: Joern -> importCode("./ruoyi-ui") -> gen cpg.bin exec command: joern-export --repr=all --format=neo4jcsv  ``` CPG does not have dataflow overlay. Calculating. 2024-05-17 18:17:45.398 ERROR CpgPassBase: Pass...
I'm now writing an application on top of Joern. I want to get intermediate representations including CFG, CDG, DDG. Part of the application code is: ```scala import io.joern.c2cpg.{C2Cpg, Config} import...
Is the code below correct ? ```scala val cpg = importCode.c.fromString( """ |int nested(int a) { | int x; | int z = 0x37; | if(a < 10) { |...