joern

joern copied to clipboard

Method/type `BINDING` edges are missing. In Ruby, there is a helper method that looks as follows: ```scala protected def createMethodTypeBindings(method: NewMethod, typeDecl: NewTypeDecl): Unit = { val binding = bindingNode("",...

DavidBakerEffendi

val source = cpg.call.code("\$_.*") val sink = cpg.call("unlink").argument val flows = sink.reachableByFlows(source) flows.p How can I filter out the preg_match function in flows? 

fraudV

For the following code, I cannot accurately locate the callee of the test method. How should I solve it? Or can I manually connect through statements? ``` package main import...

l3yx

how to custom Data-Flow Semantics?

2

i want to add a custom data-flow sematic in joern shell with following code: ``` val parser = new io.joern.dataflowengineoss.semanticsloader.FullNameSemanticsParser() val flowtransfer = """"strncpy" 4 -> 4""" val rule =...

HeouDonkey

[Bug] [ghidra2cpg] signature does not match the code

1

**Describe the bug** The function signature does not match the prototype in the code (see below). **To Reproduce** Steps to reproduce the behavior: [vuln.zip](https://github.com/user-attachments/files/20094171/vuln.zip) 0. unzip the attached zip file...

gemesa

**Describe the bug** Project directory:  File content： **vis.py:**  **__init__.py:**  **inference_coco.py:**  The "methodFullName" attribute of the "run" call node in vis.py does not match the "fullName" attribute...

chengkenyong

[PHP Case Sensitivity] PHP is case-insensitive for namespaces, function names, class names, and keywords, but case-sensitive for variable names.

2

PHP APIs are case-insensitive, like `echo` is the same as `eCHo`. Add `(?i)` in the queries to realize this.

peng-hui

Multiple wildcard import

4

**Is your feature request related to a problem? Please describe.** I'm writing an import optimization script for java programs, yet when I have more than one wildcard import in java...

Arash444

I've been using joern-parse.bat whose version is 4.0.36 to generate CPGs for C# for taint analysis, but today when I tried version 4.0.336, I found that the generated CPG couldn't...

wooyune1

How can I generate/export the node.csv and edge.csv files in the current version of Joern?

6

I'm currently replicating the workflow from a research paper which requires exporting node.csv and edge.csv. It seems that older versions of Joern supported exporting these files. Is this functionality still...

trianglexx