FilesExpand file tree

codeql-cli/v2.27.2

/

Pythagorean.ql

Copy path

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

39 lines (34 loc) · 1.21 KB

codeql-cli/v2.27.2

/

Pythagorean.ql

Copy path

Top

File metadata and controls

• Code
• Blame

39 lines (34 loc) · 1.21 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

/**

* @name Pythagorean calculation with sub-optimal numerics

* @description Calculating the length of the hypotenuse using the standard formula may lead to overflow.

* @kind problem

* @tags accuracy

* @problem.severity warning

* @sub-severity low

* @precision medium

* @id py/pythagorean

*/

import python

import semmle.python.dataflow.new.DataFlow

import semmle.python.ApiGraphs

DataFlow::ExprNode squareOp() {

exists(BinaryExpr e | e = result.asExpr() |

e.getOp() instanceof Pow and e.getRight().(IntegerLiteral).getN() = "2"

)

}

DataFlow::ExprNode squareMul() {

exists(BinaryExpr e | e = result.asExpr() |

e.getOp() instanceof Mult and e.getRight().(Name).getId() = e.getLeft().(Name).getId()

)

}

DataFlow::ExprNode square() { result in [squareOp(), squareMul()] }

from DataFlow::CallCfgNode c, BinaryExpr s, DataFlow::ExprNode left, DataFlow::ExprNode right

where

c = API::moduleImport("math").getMember("sqrt").getACall() and

c.getArg(0).asExpr() = s and

s.getOp() instanceof Add and

left.asExpr() = s.getLeft() and

right.asExpr() = s.getRight() and

left.getALocalSource() = square() and

right.getALocalSource() = square()

select c, "Pythagorean calculation with sub-optimal numerics."