FilesExpand file tree

 master

/

KeyPointsToFailure.ql

Copy path

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

33 lines (29 loc) · 964 Bytes

 master

/

KeyPointsToFailure.ql

Copy path

Top

File metadata and controls

• Code
• Blame

33 lines (29 loc) · 964 Bytes

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

/**

* @name Key points-to fails for expression.

* @description Expression does not "point-to" an object which prevents further points-to analysis.

* @kind problem

* @problem.severity info

* @id py/key-points-to-failure

* @deprecated

*/

import python

import semmle.python.pointsto.PointsTo

predicate points_to_failure(Expr e) {

exists(ControlFlowNode f |

f = e.getAFlowNode() |

not PointsTo::pointsTo(f, _, _, _)

)

}

predicate key_points_to_failure(Expr e) {

points_to_failure(e) and not points_to_failure(e.getASubExpression())

and

not exists(SsaVariable ssa |

ssa.getAUse() = e.getAFlowNode() |

points_to_failure(ssa.getAnUltimateDefinition().getDefinition().getNode())

)

and

not exists(Assign a | a.getATarget() = e)

}

from Attribute e

where key_points_to_failure(e) and not exists(Call c | c.getFunc() = e)

select e, "Expression does not 'point-to' any object, but all its sources do."