Skip to content

Commit 3290c17

Browse files
asger-semmleasger-semmle
committed
JS: Add DataFlow::Node.getAFunctionValue
1 parent 2fd1ee6 commit 3290c17

File tree

3 files changed

+143
-0
lines changed

3 files changed

+143
-0
lines changed

‎javascript/ql/src/semmle/javascript/dataflow/DataFlow.qll‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -111,6 +111,9 @@ module DataFlow {
111111
/** Gets the integer value of this node, if it is an integer constant. */
112112
int getIntValue() { result = asExpr().getIntValue() }
113113

114+
/** Gets a function value that may reach this node. */
115+
FunctionNode getAFunctionValue() { result.getAstNode() = analyze().getAValue().(AbstractCallable).getFunction() }
116+
114117
/**
115118
* Holds if this expression may refer to the initial value of parameter `p`.
116119
*/

‎javascript/ql/test/library-tests/CallGraphs/getAFunctionValue.expected‎

Lines changed: 136 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,136 @@
1+
| a.js:1:8:1:10 | foo | b.js:1:16:1:27 | function(){} |
2+
| a.js:1:15:1:17 | bar | b.js:2:8:2:24 | function bar() {} |
3+
| a.js:1:20:1:22 | qux | c.js:2:8:2:24 | function bar() {} |
4+
| a.js:2:1:2:3 | foo | b.js:1:16:1:27 | function(){} |
5+
| a.js:3:1:3:3 | bar | b.js:2:8:2:24 | function bar() {} |
6+
| a.js:4:1:4:3 | qux | c.js:2:8:2:24 | function bar() {} |
7+
| b.js:1:16:1:27 | function(){} | b.js:1:16:1:27 | function(){} |
8+
| b.js:2:8:2:24 | function bar() {} | b.js:2:8:2:24 | function bar() {} |
9+
| c.js:1:16:1:27 | function(){} | c.js:1:16:1:27 | function(){} |
10+
| c.js:2:8:2:24 | function bar() {} | c.js:2:8:2:24 | function bar() {} |
11+
| classes.js:1:1:19:2 | (functi ... o();\\n}) | classes.js:1:2:19:1 | functio ... lo();\\n} |
12+
| classes.js:1:2:19:1 | functio ... lo();\\n} | classes.js:1:2:19:1 | functio ... lo();\\n} |
13+
| classes.js:2:3:10:3 | A | classes.js:2:11:2:10 | () {} |
14+
| classes.js:2:3:10:3 | class A ... }\\n } | classes.js:2:11:2:10 | () {} |
15+
| classes.js:2:11:2:10 | () {} | classes.js:2:11:2:10 | () {} |
16+
| classes.js:3:10:5:5 | () {\\n ... ;\\n } | classes.js:3:10:5:5 | () {\\n ... ;\\n } |
17+
| classes.js:7:6:9:5 | () {\\n ... ;\\n } | classes.js:7:6:9:5 | () {\\n ... ;\\n } |
18+
| classes.js:8:7:8:16 | this.hello | classes.js:3:10:5:5 | () {\\n ... ;\\n } |
19+
| classes.js:12:3:16:3 | B | classes.js:12:21:12:20 | (...arg ... rgs); } |
20+
| classes.js:12:3:16:3 | class B ... }\\n } | classes.js:12:21:12:20 | (...arg ... rgs); } |
21+
| classes.js:12:19:12:19 | A | classes.js:2:11:2:10 | () {} |
22+
| classes.js:12:21:12:20 | (...arg ... rgs); } | classes.js:12:21:12:20 | (...arg ... rgs); } |
23+
| classes.js:12:21:12:20 | super | classes.js:2:11:2:10 | () {} |
24+
| classes.js:13:10:15:5 | () {\\n ... ;\\n } | classes.js:13:10:15:5 | () {\\n ... ;\\n } |
25+
| classes.js:18:3:18:15 | new B().hello | classes.js:13:10:15:5 | () {\\n ... ;\\n } |
26+
| classes.js:18:7:18:7 | B | classes.js:12:21:12:20 | (...arg ... rgs); } |
27+
| es2015.js:1:1:5:1 | class E ... ;\\n }\\n} | es2015.js:2:14:4:3 | () {\\n ... ");\\n } |
28+
| es2015.js:2:14:4:3 | () {\\n ... ");\\n } | es2015.js:2:14:4:3 | () {\\n ... ");\\n } |
29+
| es2015.js:6:5:6:16 | ExampleClass | es2015.js:2:14:4:3 | () {\\n ... ");\\n } |
30+
| es2015.js:8:2:12:1 | functio ... \\n };\\n} | es2015.js:8:2:12:1 | functio ... \\n };\\n} |
31+
| es2015.js:9:10:11:3 | () => { ... ();\\n } | es2015.js:9:10:11:3 | () => { ... ();\\n } |
32+
| es2015.js:10:5:10:20 | arguments.callee | es2015.js:8:2:12:1 | functio ... \\n };\\n} |
33+
| es2015.js:10:5:10:22 | arguments.callee() | es2015.js:9:10:11:3 | () => { ... ();\\n } |
34+
| es2015.js:14:1:18:1 | class S ... ;\\n }\\n} | es2015.js:15:14:17:3 | () {\\n ... ();\\n } |
35+
| es2015.js:14:19:14:47 | ("Wait ... eClass) | es2015.js:2:14:4:3 | () {\\n ... ");\\n } |
36+
| es2015.js:14:20:14:46 | "Wait f ... leClass | es2015.js:2:14:4:3 | () {\\n ... ");\\n } |
37+
| es2015.js:14:35:14:46 | ExampleClass | es2015.js:2:14:4:3 | () {\\n ... ");\\n } |
38+
| es2015.js:15:14:17:3 | () {\\n ... ();\\n } | es2015.js:15:14:17:3 | () {\\n ... ();\\n } |
39+
| es2015.js:16:5:16:9 | super | es2015.js:2:14:4:3 | () {\\n ... ");\\n } |
40+
| es2015.js:20:1:22:1 | functio ... = 42;\\n} | es2015.js:20:1:22:1 | functio ... = 42;\\n} |
41+
| es2015.js:24:1:29:1 | class O ... ;\\n }\\n} | es2015.js:25:14:28:3 | () {\\n ... x);\\n } |
42+
| es2015.js:24:24:24:34 | PseudoClass | es2015.js:20:1:22:1 | functio ... = 42;\\n} |
43+
| es2015.js:25:14:28:3 | () {\\n ... x);\\n } | es2015.js:25:14:28:3 | () {\\n ... x);\\n } |
44+
| es2015.js:26:5:26:9 | super | es2015.js:20:1:22:1 | functio ... = 42;\\n} |
45+
| es2015.js:31:1:33:1 | functio ... +y+z;\\n} | es2015.js:31:1:33:1 | functio ... +y+z;\\n} |
46+
| es2015.js:34:1:34:3 | sum | es2015.js:31:1:33:1 | functio ... +y+z;\\n} |
47+
| es2015.js:35:1:35:3 | sum | es2015.js:31:1:33:1 | functio ... +y+z;\\n} |
48+
| es2015.js:36:1:36:3 | sum | es2015.js:31:1:33:1 | functio ... +y+z;\\n} |
49+
| m2.js:2:6:2:18 | function() {} | m2.js:2:6:2:18 | function() {} |
50+
| m.js:1:1:1:25 | exports ... on() {} | m.js:1:13:1:25 | function() {} |
51+
| m.js:1:13:1:25 | function() {} | m.js:1:13:1:25 | function() {} |
52+
| m.js:2:1:2:9 | exports.f | m.js:1:13:1:25 | function() {} |
53+
| m.js:3:1:3:16 | module.exports.f | m.js:1:13:1:25 | function() {} |
54+
| n.js:2:1:2:3 | m.f | m.js:1:13:1:25 | function() {} |
55+
| n.js:5:1:5:4 | m2.f | m2.js:2:6:2:18 | function() {} |
56+
| reflection.js:1:1:3:1 | functio ... x+y;\\n} | reflection.js:1:1:3:1 | functio ... x+y;\\n} |
57+
| reflection.js:5:3:5:5 | add | reflection.js:1:1:3:1 | functio ... x+y;\\n} |
58+
| reflection.js:5:3:5:39 | add.app ... n 56; } | reflection.js:5:15:5:39 | functio ... n 56; } |
59+
| reflection.js:5:15:5:14 | this | reflection.js:1:1:3:1 | functio ... x+y;\\n} |
60+
| reflection.js:5:15:5:39 | functio ... n 56; } | reflection.js:5:15:5:39 | functio ... n 56; } |
61+
| reflection.js:7:1:7:3 | add | reflection.js:1:1:3:1 | functio ... x+y;\\n} |
62+
| reflection.js:8:1:8:3 | add | reflection.js:1:1:3:1 | functio ... x+y;\\n} |
63+
| reflection.js:8:1:8:9 | add.apply | reflection.js:5:15:5:39 | functio ... n 56; } |
64+
| tst3.js:1:1:1:22 | functio ... fn() {} | tst3.js:1:1:1:22 | functio ... fn() {} |
65+
| tst3.js:2:1:2:23 | functio ... n2() {} | tst3.js:2:1:2:23 | functio ... n2() {} |
66+
| tst.js:1:1:1:15 | function f() {} | tst.js:1:1:1:15 | function f() {} |
67+
| tst.js:2:9:2:21 | function() {} | tst.js:2:9:2:21 | function() {} |
68+
| tst.js:3:1:3:17 | h = function() {} | tst.js:3:5:3:17 | function() {} |
69+
| tst.js:3:5:3:17 | function() {} | tst.js:3:5:3:17 | function() {} |
70+
| tst.js:4:1:4:5 | k = g | tst.js:2:9:2:21 | function() {} |
71+
| tst.js:4:5:4:5 | g | tst.js:2:9:2:21 | function() {} |
72+
| tst.js:6:1:6:1 | f | tst.js:1:1:1:15 | function f() {} |
73+
| tst.js:7:1:7:1 | g | tst.js:2:9:2:21 | function() {} |
74+
| tst.js:8:1:8:1 | h | tst.js:3:5:3:17 | function() {} |
75+
| tst.js:9:1:9:1 | k | tst.js:2:9:2:21 | function() {} |
76+
| tst.js:11:1:20:1 | functio ... \\tf();\\n} | tst.js:11:1:20:1 | functio ... \\tf();\\n} |
77+
| tst.js:12:6:12:27 | n | tst.js:12:15:12:27 | function() {} |
78+
| tst.js:12:10:12:27 | m \|\| function() {} | tst.js:12:15:12:27 | function() {} |
79+
| tst.js:12:15:12:27 | function() {} | tst.js:12:15:12:27 | function() {} |
80+
| tst.js:13:2:13:16 | function p() {} | tst.js:13:2:13:16 | function p() {} |
81+
| tst.js:13:11:13:11 | p | tst.js:13:2:13:16 | function p() {} |
82+
| tst.js:15:2:15:2 | l | tst.js:11:1:20:1 | functio ... \\tf();\\n} |
83+
| tst.js:16:2:16:17 | arguments.callee | tst.js:11:1:20:1 | functio ... \\tf();\\n} |
84+
| tst.js:17:2:17:2 | n | tst.js:12:15:12:27 | function() {} |
85+
| tst.js:18:2:18:2 | p | tst.js:13:2:13:16 | function p() {} |
86+
| tst.js:19:2:19:2 | f | tst.js:1:1:1:15 | function f() {} |
87+
| tst.js:22:1:22:1 | l | tst.js:11:1:20:1 | functio ... \\tf();\\n} |
88+
| tst.js:22:3:22:3 | k | tst.js:2:9:2:21 | function() {} |
89+
| tst.js:24:5:24:5 | f | tst.js:1:1:1:15 | function f() {} |
90+
| tst.js:25:5:25:5 | g | tst.js:2:9:2:21 | function() {} |
91+
| tst.js:27:1:27:14 | (function(){}) | tst.js:27:2:27:13 | function(){} |
92+
| tst.js:27:2:27:13 | function(){} | tst.js:27:2:27:13 | function(){} |
93+
| tst.js:28:2:28:13 | function(){} | tst.js:28:2:28:13 | function(){} |
94+
| tst.js:32:6:34:3 | functio ... ();\\n\\t\\t} | tst.js:32:6:34:3 | functio ... ();\\n\\t\\t} |
95+
| tst.js:33:4:33:9 | this.g | tst.js:35:6:35:18 | function() {} |
96+
| tst.js:35:6:35:18 | function() {} | tst.js:35:6:35:18 | function() {} |
97+
| tst.js:38:6:38:18 | function() {} | tst.js:38:6:38:18 | function() {} |
98+
| tst.js:39:6:39:6 | g | tst.js:2:9:2:21 | function() {} |
99+
| tst.js:41:1:41:3 | o.f | tst.js:32:6:34:3 | functio ... ();\\n\\t\\t} |
100+
| tst.js:42:1:42:32 | (functi ... }(o)).f | tst.js:32:6:34:3 | functio ... ();\\n\\t\\t} |
101+
| tst.js:42:2:42:26 | functio ... rn x; } | tst.js:42:2:42:26 | functio ... rn x; } |
102+
| tst.js:44:1:44:15 | function A() {} | tst.js:44:1:44:15 | function A() {} |
103+
| tst.js:45:1:45:1 | A | tst.js:44:1:44:15 | function A() {} |
104+
| tst.js:45:1:47:1 | A.proto ... .g();\\n} | tst.js:45:17:47:1 | functio ... .g();\\n} |
105+
| tst.js:45:17:47:1 | functio ... .g();\\n} | tst.js:45:17:47:1 | functio ... .g();\\n} |
106+
| tst.js:46:2:46:7 | this.g | tst.js:48:17:48:29 | function() {} |
107+
| tst.js:46:2:46:7 | this.g | tst.js:61:17:61:29 | function() {} |
108+
| tst.js:48:1:48:1 | A | tst.js:44:1:44:15 | function A() {} |
109+
| tst.js:48:1:48:29 | A.proto ... on() {} | tst.js:48:17:48:29 | function() {} |
110+
| tst.js:48:17:48:29 | function() {} | tst.js:48:17:48:29 | function() {} |
111+
| tst.js:50:1:50:15 | function B() {} | tst.js:50:1:50:15 | function B() {} |
112+
| tst.js:51:1:51:1 | B | tst.js:50:1:50:15 | function B() {} |
113+
| tst.js:52:5:54:2 | functio ... g();\\n\\t} | tst.js:52:5:54:2 | functio ... g();\\n\\t} |
114+
| tst.js:53:3:53:8 | this.g | tst.js:56:39:56:51 | function() {} |
115+
| tst.js:53:3:53:8 | this.g | tst.js:57:39:57:51 | function() {} |
116+
| tst.js:56:1:56:1 | B | tst.js:50:1:50:15 | function B() {} |
117+
| tst.js:56:1:57:51 | B.proto ... on() {} | tst.js:56:39:56:51 | function() {} |
118+
| tst.js:56:1:57:51 | B.proto ... on() {} | tst.js:57:39:57:51 | function() {} |
119+
| tst.js:56:17:57:51 | Math.ra ... on() {} | tst.js:56:39:56:51 | function() {} |
120+
| tst.js:56:17:57:51 | Math.ra ... on() {} | tst.js:57:39:57:51 | function() {} |
121+
| tst.js:56:39:56:51 | function() {} | tst.js:56:39:56:51 | function() {} |
122+
| tst.js:57:39:57:51 | function() {} | tst.js:57:39:57:51 | function() {} |
123+
| tst.js:59:1:59:15 | function C() {} | tst.js:59:1:59:15 | function C() {} |
124+
| tst.js:60:1:60:1 | C | tst.js:59:1:59:15 | function C() {} |
125+
| tst.js:60:19:60:19 | A | tst.js:44:1:44:15 | function A() {} |
126+
| tst.js:61:1:61:1 | C | tst.js:59:1:59:15 | function C() {} |
127+
| tst.js:61:1:61:29 | C.proto ... on() {} | tst.js:61:17:61:29 | function() {} |
128+
| tst.js:61:17:61:29 | function() {} | tst.js:61:17:61:29 | function() {} |
129+
| tst.js:63:1:67:2 | (functi ... f();\\n}) | tst.js:63:2:67:1 | functio ... .f();\\n} |
130+
| tst.js:63:2:67:1 | functio ... .f();\\n} | tst.js:63:2:67:1 | functio ... .f();\\n} |
131+
| tst.js:64:17:64:17 | B | tst.js:50:1:50:15 | function B() {} |
132+
| tst.js:65:5:65:23 | b.f = function() {} | tst.js:65:11:65:23 | function() {} |
133+
| tst.js:65:11:65:23 | function() {} | tst.js:65:11:65:23 | function() {} |
134+
| tst.js:66:5:66:7 | b.f | tst.js:65:11:65:23 | function() {} |
135+
| tst.js:69:1:69:8 | globalfn | tst3.js:1:1:1:22 | functio ... fn() {} |
136+
| tst.js:70:1:70:9 | globalfn2 | tst3.js:2:1:2:23 | functio ... n2() {} |

‎javascript/ql/test/library-tests/CallGraphs/getAFunctionValue.ql‎

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
import javascript
2+
3+
from DataFlow::Node node
4+
select node, node.getAFunctionValue()

0 commit comments

Comments
 (0)