Python: Rename getAUse -> getAValueReachableFromSource

asgerf · asgerf · commit b096f9ec7206 · 2022-06-21T12:44:06.000+02:00
diff --git a/python/ql/lib/semmle/python/ApiGraphs.qll b/python/ql/lib/semmle/python/ApiGraphs.qll
@@ -106,7 +106,7 @@ module API {
      * ```
      * both `obj.foo` and `x` are uses of the `foo` member from `obj`.
      */
-    DataFlow::Node getAUse() {
+    DataFlow::Node getAValueReachableFromSource() {
       exists(DataFlow::LocalSourceNode src | Impl::use(this, src) |
         Impl::trackUseNode(src).flowsTo(result)
       )
diff --git a/python/ql/lib/semmle/python/frameworks/Aiohttp.qll b/python/ql/lib/semmle/python/frameworks/Aiohttp.qll
@@ -626,7 +626,8 @@ module AiohttpWebModel {
         // and just go with the LHS
         this.asCfgNode() = subscript
       |
-        subscript.getObject() = aiohttpResponseInstance().getMember("cookies").getAUse().asCfgNode() and
+        subscript.getObject() =
+          aiohttpResponseInstance().getMember("cookies").getAValueReachableFromSource().asCfgNode() and
         value.asCfgNode() = subscript.(DefinitionNode).getValue() and
         index.asCfgNode() = subscript.getIndex()
       )
diff --git a/python/ql/lib/semmle/python/frameworks/Cryptodome.qll b/python/ql/lib/semmle/python/frameworks/Cryptodome.qll
@@ -164,7 +164,7 @@ private module CryptodomeModel {
               .getMember("Cipher")
               .getMember(cipherName)
               .getMember(modeName)
-              .getAUse()
+              .getAValueReachableFromSource()
       |
         result = modeName.splitAt("_", 1)
       )
diff --git a/python/ql/lib/semmle/python/frameworks/Cryptography.qll b/python/ql/lib/semmle/python/frameworks/Cryptography.qll
@@ -145,9 +145,9 @@ private module CryptographyModel {
 
     override int getKeySizeWithOrigin(DataFlow::Node origin) {
       exists(API::Node n | n = Ecc::predefinedCurveClass(result) and origin = n.asSource() |
-        this.getCurveArg() = n.getAUse()
+        this.getCurveArg() = n.getAValueReachableFromSource()
         or
-        this.getCurveArg() = n.getReturn().getAUse()
+        this.getCurveArg() = n.getReturn().getAValueReachableFromSource()
       )
     }
 
@@ -189,12 +189,12 @@ private module CryptographyModel {
               .getMember("ciphers")
               .getMember("Cipher")
               .getACall() and
-        algorithmClassRef(algorithmName).getReturn().getAUse() in [
+        algorithmClassRef(algorithmName).getReturn().getAValueReachableFromSource() in [
             call.getArg(0), call.getArgByName("algorithm")
           ] and
         exists(DataFlow::Node modeArg | modeArg in [call.getArg(1), call.getArgByName("mode")] |
-          if modeArg = modeClassRef(_).getReturn().getAUse()
-          then modeArg = modeClassRef(modeName).getReturn().getAUse()
+          if modeArg = modeClassRef(_).getReturn().getAValueReachableFromSource()
+          then modeArg = modeClassRef(modeName).getReturn().getAValueReachableFromSource()
           else modeName = "<None or unknown>"
         )
       )
@@ -252,7 +252,7 @@ private module CryptographyModel {
               .getMember("hashes")
               .getMember("Hash")
               .getACall() and
-        algorithmClassRef(algorithmName).getReturn().getAUse() in [
+        algorithmClassRef(algorithmName).getReturn().getAValueReachableFromSource() in [
             call.getArg(0), call.getArgByName("algorithm")
           ]
       )
diff --git a/python/ql/lib/semmle/python/frameworks/Django.qll b/python/ql/lib/semmle/python/frameworks/Django.qll
@@ -2799,7 +2799,7 @@ module PrivateDjango {
             .getMember("decorators")
             .getMember("csrf")
             .getMember(decoratorName)
-            .getAUse() and
+            .getAValueReachableFromSource() and
       this.asExpr() = function.getADecorator()
     }
 
diff --git a/python/ql/lib/semmle/python/frameworks/Fabric.qll b/python/ql/lib/semmle/python/frameworks/Fabric.qll
@@ -179,7 +179,7 @@ private module FabricV2 {
       DataFlow::ParameterNode {
       FabricTaskFirstParamConnectionInstance() {
         exists(Function func |
-          func.getADecorator() = Fabric::Tasks::task().getAUse().asExpr() and
+          func.getADecorator() = Fabric::Tasks::task().getAValueReachableFromSource().asExpr() and
           this.getParameter() = func.getArg(0)
         )
       }
diff --git a/python/ql/lib/semmle/python/frameworks/FastApi.qll b/python/ql/lib/semmle/python/frameworks/FastApi.qll
@@ -90,7 +90,8 @@ private module FastApi {
   private class PydanticModelRequestHandlerParam extends Pydantic::BaseModel::InstanceSource,
     DataFlow::ParameterNode {
     PydanticModelRequestHandlerParam() {
-      this.getParameter().getAnnotation() = Pydantic::BaseModel::subclassRef().getAUse().asExpr() and
+      this.getParameter().getAnnotation() =
+        Pydantic::BaseModel::subclassRef().getAValueReachableFromSource().asExpr() and
       any(FastApiRouteSetup rs).getARequestHandler().getArgByName(_) = this.getParameter()
     }
   }
@@ -104,7 +105,8 @@ private module FastApi {
   private class WebSocketRequestHandlerParam extends Starlette::WebSocket::InstanceSource,
     DataFlow::ParameterNode {
     WebSocketRequestHandlerParam() {
-      this.getParameter().getAnnotation() = Starlette::WebSocket::classRef().getAUse().asExpr() and
+      this.getParameter().getAnnotation() =
+        Starlette::WebSocket::classRef().getAValueReachableFromSource().asExpr() and
       any(FastApiRouteSetup rs).getARequestHandler().getArgByName(_) = this.getParameter()
     }
   }
@@ -165,7 +167,7 @@ private module FastApi {
       // user-defined subclasses
       exists(Class cls, API::Node base |
         base = getModeledResponseClass(_).getASubclass*() and
-        cls.getABase() = base.getAUse().asExpr() and
+        cls.getABase() = base.getAValueReachableFromSource().asExpr() and
         responseClass.asSource().asExpr() = cls.getParent()
       |
         exists(Assign assign | assign = cls.getAStmt() |
@@ -257,7 +259,7 @@ private module FastApi {
 
       override string getMimetypeDefault() {
         exists(API::Node responseClass |
-          responseClass.getAUse() = routeSetup.getResponseClassArg() and
+          responseClass.getAValueReachableFromSource() = routeSetup.getResponseClassArg() and
           result = getDefaultMimeType(responseClass)
         )
         or
@@ -274,7 +276,7 @@ private module FastApi {
       FileSystemAccess::Range {
       FastApiRequestHandlerFileResponseReturn() {
         exists(API::Node responseClass |
-          responseClass.getAUse() = routeSetup.getResponseClassArg() and
+          responseClass.getAValueReachableFromSource() = routeSetup.getResponseClassArg() and
           responseClass = getModeledResponseClass("FileResponse").getASubclass*()
         )
       }
@@ -292,7 +294,7 @@ private module FastApi {
       HTTP::Server::HttpRedirectResponse::Range {
       FastApiRequestHandlerRedirectReturn() {
         exists(API::Node responseClass |
-          responseClass.getAUse() = routeSetup.getResponseClassArg() and
+          responseClass.getAValueReachableFromSource() = routeSetup.getResponseClassArg() and
           responseClass = getModeledResponseClass("RedirectResponse").getASubclass*()
         )
       }
@@ -311,7 +313,7 @@ private module FastApi {
     class RequestHandlerParam extends InstanceSource, DataFlow::ParameterNode {
       RequestHandlerParam() {
         this.getParameter().getAnnotation() =
-          getModeledResponseClass(_).getASubclass*().getAUse().asExpr() and
+          getModeledResponseClass(_).getASubclass*().getAValueReachableFromSource().asExpr() and
         any(FastApiRouteSetup rs).getARequestHandler().getArgByName(_) = this.getParameter()
       }
     }
diff --git a/python/ql/lib/semmle/python/frameworks/Flask.qll b/python/ql/lib/semmle/python/frameworks/Flask.qll
@@ -305,7 +305,7 @@ module Flask {
       )
       or
       exists(FlaskViewClass vc |
-        this.getViewArg() = vc.asViewResult().getAUse() and
+        this.getViewArg() = vc.asViewResult().getAValueReachableFromSource() and
         result = vc.getARequestHandler()
       )
     }
@@ -339,7 +339,7 @@ module Flask {
    */
   private class FlaskRequestSource extends RemoteFlowSource::Range {
     FlaskRequestSource() {
-      this = request().getAUse() and
+      this = request().getAValueReachableFromSource() and
       not any(Import imp).contains(this.asExpr()) and
       not exists(ControlFlowNode def | this.asVar().getSourceVariable().hasDefiningNode(def) |
         any(Import imp).contains(def.getNode())
@@ -357,7 +357,7 @@ module Flask {
   private class InstanceTaintSteps extends InstanceTaintStepsHelper {
     InstanceTaintSteps() { this = "flask.Request" }
 
-    override DataFlow::Node getInstance() { result = request().getAUse() }
+    override DataFlow::Node getInstance() { result = request().getAValueReachableFromSource() }
 
     override string getAttributeName() {
       result in [
@@ -415,12 +415,13 @@ module Flask {
       // be able to do something more structured for providing modeling of the members
       // of a container-object.
       exists(API::Node files | files = request().getMember("files") |
-        this.asCfgNode().(SubscriptNode).getObject() = files.getAUse().asCfgNode()
+        this.asCfgNode().(SubscriptNode).getObject() =
+          files.getAValueReachableFromSource().asCfgNode()
         or
         this = files.getMember("get").getACall()
         or
         this.asCfgNode().(SubscriptNode).getObject() =
-          files.getMember("getlist").getReturn().getAUse().asCfgNode()
+          files.getMember("getlist").getReturn().getAValueReachableFromSource().asCfgNode()
       )
     }
   }
diff --git a/python/ql/lib/semmle/python/frameworks/Invoke.qll b/python/ql/lib/semmle/python/frameworks/Invoke.qll
@@ -39,7 +39,8 @@ private module Invoke {
             result = InvokeModule::Context::ContextClass::classRef().getACall()
             or
             exists(Function func |
-              func.getADecorator() = invoke().getMember("task").getAUse().asExpr() and
+              func.getADecorator() =
+                invoke().getMember("task").getAValueReachableFromSource().asExpr() and
               result.(DataFlow::ParameterNode).getParameter() = func.getArg(0)
             )
           )
diff --git a/python/ql/lib/semmle/python/frameworks/RuamelYaml.qll b/python/ql/lib/semmle/python/frameworks/RuamelYaml.qll
@@ -44,7 +44,7 @@ private module RuamelYaml {
           API::moduleImport("ruamel")
               .getMember("yaml")
               .getMember(["SafeLoader", "BaseLoader", "CSafeLoader", "CBaseLoader"])
-              .getAUse()
+              .getAValueReachableFromSource()
       )
     }
 
diff --git a/python/ql/lib/semmle/python/frameworks/Stdlib.qll b/python/ql/lib/semmle/python/frameworks/Stdlib.qll
@@ -1727,15 +1727,16 @@ private module StdlibPrivate {
       private DataFlow::TypeTrackingNode fieldList(DataFlow::TypeTracker t) {
         t.start() and
         // TODO: Should have better handling of subscripting
-        result.asCfgNode().(SubscriptNode).getObject() = instance().getAUse().asCfgNode()
+        result.asCfgNode().(SubscriptNode).getObject() =
+          instance().getAValueReachableFromSource().asCfgNode()
         or
         exists(DataFlow::TypeTracker t2 | result = fieldList(t2).track(t2, t))
       }
 
       /** Gets a reference to a list of fields. */
       DataFlow::Node fieldList() {
-        result = getlistResult().getAUse() or
-        result = getvalueResult().getAUse() or
+        result = getlistResult().getAValueReachableFromSource() or
+        result = getvalueResult().getAValueReachableFromSource() or
         fieldList(DataFlow::TypeTracker::end()).flowsTo(result)
       }
 
@@ -1744,16 +1745,16 @@ private module StdlibPrivate {
         t.start() and
         // TODO: Should have better handling of subscripting
         result.asCfgNode().(SubscriptNode).getObject() =
-          [instance().getAUse(), fieldList()].asCfgNode()
+          [instance().getAValueReachableFromSource(), fieldList()].asCfgNode()
         or
         exists(DataFlow::TypeTracker t2 | result = field(t2).track(t2, t))
       }
 
       /** Gets a reference to a field. */
       DataFlow::Node field() {
-        result = getfirstResult().getAUse()
+        result = getfirstResult().getAValueReachableFromSource()
         or
-        result = getvalueResult().getAUse()
+        result = getvalueResult().getAValueReachableFromSource()
         or
         field(DataFlow::TypeTracker::end()).flowsTo(result)
       }
@@ -1762,20 +1763,23 @@ private module StdlibPrivate {
         override predicate step(DataFlow::Node nodeFrom, DataFlow::Node nodeTo) {
           // Methods
           nodeFrom = nodeTo.(DataFlow::AttrRead).getObject() and
-          nodeFrom = instance().getAUse() and
-          nodeTo = [getvalueRef(), getfirstRef(), getlistRef()].getAUse()
+          nodeFrom = instance().getAValueReachableFromSource() and
+          nodeTo = [getvalueRef(), getfirstRef(), getlistRef()].getAValueReachableFromSource()
           or
           nodeFrom.asCfgNode() = nodeTo.asCfgNode().(CallNode).getFunction() and
           (
-            nodeFrom = getvalueRef().getAUse() and nodeTo = getvalueResult().asSource()
+            nodeFrom = getvalueRef().getAValueReachableFromSource() and
+            nodeTo = getvalueResult().asSource()
             or
-            nodeFrom = getfirstRef().getAUse() and nodeTo = getfirstResult().asSource()
+            nodeFrom = getfirstRef().getAValueReachableFromSource() and
+            nodeTo = getfirstResult().asSource()
             or
-            nodeFrom = getlistRef().getAUse() and nodeTo = getlistResult().asSource()
+            nodeFrom = getlistRef().getAValueReachableFromSource() and
+            nodeTo = getlistResult().asSource()
           )
           or
           // Indexing
-          nodeFrom in [instance().getAUse(), fieldList()] and
+          nodeFrom in [instance().getAValueReachableFromSource(), fieldList()] and
           nodeTo.asCfgNode().(SubscriptNode).getObject() = nodeFrom.asCfgNode()
           or
           // Attributes on Field
@@ -3438,7 +3442,7 @@ private module StdlibPrivate {
             .getMember("sax")
             .getMember("handler")
             .getMember("feature_external_ges")
-            .getAUse() and
+            .getAValueReachableFromSource() and
       call.getStateArg().getAValueReachingRhs().asExpr().(BooleanLiteral).booleanValue() = true and
       result = call.getObject()
     )
@@ -3454,7 +3458,7 @@ private module StdlibPrivate {
             .getMember("sax")
             .getMember("handler")
             .getMember("feature_external_ges")
-            .getAUse() and
+            .getAValueReachableFromSource() and
       call.getStateArg().getAValueReachingRhs().asExpr().(BooleanLiteral).booleanValue() = false
     )
   }
diff --git a/python/ql/lib/semmle/python/frameworks/Werkzeug.qll b/python/ql/lib/semmle/python/frameworks/Werkzeug.qll
@@ -285,7 +285,7 @@ private module WerkzeugOld {
          * See https://werkzeug.palletsprojects.com/en/1.0.x/datastructures/#werkzeug.datastructures.Headers.getlist
          */
         deprecated DataFlow::Node getlist() {
-          result = any(InstanceSourceApiNode a).getMember("getlist").getAUse()
+          result = any(InstanceSourceApiNode a).getMember("getlist").getAValueReachableFromSource()
         }
 
         private class MultiDictAdditionalTaintStep extends TaintTracking::AdditionalTaintStep {
@@ -331,7 +331,9 @@ private module WerkzeugOld {
         abstract deprecated class InstanceSourceApiNode extends API::Node { }
 
         /** Gets a reference to an instance of `werkzeug.datastructures.FileStorage`. */
-        deprecated DataFlow::Node instance() { result = any(InstanceSourceApiNode a).getAUse() }
+        deprecated DataFlow::Node instance() {
+          result = any(InstanceSourceApiNode a).getAValueReachableFromSource()
+        }
 
         private class FileStorageAdditionalTaintStep extends TaintTracking::AdditionalTaintStep {
           override predicate step(DataFlow::Node nodeFrom, DataFlow::Node nodeTo) {
diff --git a/python/ql/lib/semmle/python/frameworks/Yaml.qll b/python/ql/lib/semmle/python/frameworks/Yaml.qll
@@ -64,7 +64,7 @@ private module Yaml {
         loader_arg =
           API::moduleImport("yaml")
               .getMember(["SafeLoader", "BaseLoader", "CSafeLoader", "CBaseLoader"])
-              .getAUse()
+              .getAValueReachableFromSource()
       )
     }
 
diff --git a/python/ql/lib/semmle/python/frameworks/internal/PEP249Impl.qll b/python/ql/lib/semmle/python/frameworks/internal/PEP249Impl.qll
@@ -33,7 +33,9 @@ module PEP249 {
   }
 
   /** Gets a reference to the `connect` function of a module that implements PEP 249. */
-  DataFlow::Node connect() { result = any(PEP249ModuleApiNode a).getMember("connect").getAUse() }
+  DataFlow::Node connect() {
+    result = any(PEP249ModuleApiNode a).getMember("connect").getAValueReachableFromSource()
+  }
 
   /**
    * Provides models for database connections (following PEP 249).
diff --git a/python/ql/lib/semmle/python/frameworks/internal/SubclassFinder.qll b/python/ql/lib/semmle/python/frameworks/internal/SubclassFinder.qll
@@ -152,7 +152,7 @@ private module NotExposed {
     FindSubclassesSpec spec, string newAliasFullyQualified, ImportMember importMember, Module mod,
     Location loc
   ) {
-    importMember = newOrExistingModeling(spec).getAUse().asExpr() and
+    importMember = newOrExistingModeling(spec).getAValueReachableFromSource().asExpr() and
     importMember.getScope() = mod and
     loc = importMember.getLocation() and
     (
@@ -182,7 +182,7 @@ private module NotExposed {
     // WHAT A HACK :D :D
     relevantClass.getPath() =
       relevantClass.getAPredecessor().getPath() + ".getMember(\"" + relevantName + "\")" and
-    relevantClass.getAPredecessor().getAUse().asExpr() = importStar.getModule() and
+    relevantClass.getAPredecessor().getAValueReachableFromSource().asExpr() = importStar.getModule() and
     (
       mod.isPackageInit() and
       newAliasFullyQualified = mod.getPackageName() + "." + relevantName
diff --git a/python/ql/lib/semmle/python/internal/CachedStages.qll b/python/ql/lib/semmle/python/internal/CachedStages.qll
@@ -121,7 +121,7 @@ module Stages {
       or
       exists(any(NewDataFlow::TypeTracker t).append(_))
       or
-      exists(any(API::Node n).getAMember().getAUse())
+      exists(any(API::Node n).getAMember().getAValueReachableFromSource())
     }
   }
 
diff --git a/python/ql/src/Security/CWE-295/MissingHostKeyValidation.ql b/python/ql/src/Security/CWE-295/MissingHostKeyValidation.ql
@@ -29,7 +29,7 @@ where
   call = paramikoSSHClientInstance().getMember("set_missing_host_key_policy").getACall() and
   arg in [call.getArg(0), call.getArgByName("policy")] and
   (
-    arg = unsafe_paramiko_policy(name).getAUse() or
-    arg = unsafe_paramiko_policy(name).getReturn().getAUse()
+    arg = unsafe_paramiko_policy(name).getAValueReachableFromSource() or
+    arg = unsafe_paramiko_policy(name).getReturn().getAValueReachableFromSource()
   )
 select call, "Setting missing host key policy to " + name + " may be unsafe."
diff --git a/python/ql/src/Security/CWE-327/PyOpenSSL.qll b/python/ql/src/Security/CWE-327/PyOpenSSL.qll
@@ -17,7 +17,8 @@ class PyOpenSSLContextCreation extends ContextCreation, DataFlow::CallCfgNode {
       protocolArg in [this.getArg(0), this.getArgByName("method")]
     |
       protocolArg in [
-          pyo.specific_version(result).getAUse(), pyo.unspecific_version(result).getAUse()
+          pyo.specific_version(result).getAValueReachableFromSource(),
+          pyo.unspecific_version(result).getAValueReachableFromSource()
         ]
     )
   }
@@ -43,9 +44,10 @@ class SetOptionsCall extends ProtocolRestriction, DataFlow::CallCfgNode {
   }
 
   override ProtocolVersion getRestriction() {
-    API::moduleImport("OpenSSL").getMember("SSL").getMember("OP_NO_" + result).getAUse() in [
-        this.getArg(0), this.getArgByName("options")
-      ]
+    API::moduleImport("OpenSSL")
+          .getMember("SSL")
+          .getMember("OP_NO_" + result)
+          .getAValueReachableFromSource() in [this.getArg(0), this.getArgByName("options")]
   }
 }
 
diff --git a/python/ql/src/Security/CWE-327/Ssl.qll b/python/ql/src/Security/CWE-327/Ssl.qll
diff --git a/python/ql/src/experimental/semmle/python/frameworks/Django.qll b/python/ql/src/experimental/semmle/python/frameworks/Django.qll
diff --git a/python/ql/src/experimental/semmle/python/frameworks/Flask.qll b/python/ql/src/experimental/semmle/python/frameworks/Flask.qll
diff --git a/python/ql/src/experimental/semmle/python/frameworks/LDAP.qll b/python/ql/src/experimental/semmle/python/frameworks/LDAP.qll
diff --git a/python/ql/src/experimental/semmle/python/frameworks/NoSQL.qll b/python/ql/src/experimental/semmle/python/frameworks/NoSQL.qll
diff --git a/python/ql/test/TestUtilities/VerifyApiGraphs.qll b/python/ql/test/TestUtilities/VerifyApiGraphs.qll
diff --git a/python/ql/test/library-tests/ApiGraphs/py2/use.ql b/python/ql/test/library-tests/ApiGraphs/py2/use.ql

Original file line number	Diff line number	Diff line change
`@@ -106,7 +106,7 @@ module API {`
`106`	`106`	* ```
`107`	`107`	* both `obj.foo` and `x` are uses of the `foo` member from `obj`.
`108`	`108`	`*/`
`109`		`- DataFlow::Node getAUse() {`
	`109`	`+ DataFlow::Node getAValueReachableFromSource() {`
`110`	`110`	`exists(DataFlow::LocalSourceNode src \| Impl::use(this, src) \|`
`111`	`111`	`Impl::trackUseNode(src).flowsTo(result)`
`112`	`112`	`)`
Original file line number	Diff line number	Diff line change
`@@ -626,7 +626,8 @@ module AiohttpWebModel {`
`626`	`626`	`// and just go with the LHS`
`627`	`627`	`this.asCfgNode() = subscript`
`628`	`628`	`\|`
`629`		`- subscript.getObject() = aiohttpResponseInstance().getMember("cookies").getAUse().asCfgNode() and`
	`629`	`+ subscript.getObject() =`
	`630`	`+ aiohttpResponseInstance().getMember("cookies").getAValueReachableFromSource().asCfgNode() and`
`630`	`631`	`value.asCfgNode() = subscript.(DefinitionNode).getValue() and`
`631`	`632`	`index.asCfgNode() = subscript.getIndex()`
`632`	`633`	`)`
Original file line number	Diff line number	Diff line change
`@@ -164,7 +164,7 @@ private module CryptodomeModel {`
`164`	`164`	`.getMember("Cipher")`
`165`	`165`	`.getMember(cipherName)`
`166`	`166`	`.getMember(modeName)`
`167`		`- .getAUse()`
	`167`	`+ .getAValueReachableFromSource()`
`168`	`168`	`\|`
`169`	`169`	`result = modeName.splitAt("_", 1)`
`170`	`170`	`)`
Original file line number	Diff line number	Diff line change
`@@ -145,9 +145,9 @@ private module CryptographyModel {`
`145`	`145`
`146`	`146`	`override int getKeySizeWithOrigin(DataFlow::Node origin) {`
`147`	`147`	`exists(API::Node n \| n = Ecc::predefinedCurveClass(result) and origin = n.asSource() \|`
`148`		`- this.getCurveArg() = n.getAUse()`
	`148`	`+ this.getCurveArg() = n.getAValueReachableFromSource()`
`149`	`149`	`or`
`150`		`- this.getCurveArg() = n.getReturn().getAUse()`
	`150`	`+ this.getCurveArg() = n.getReturn().getAValueReachableFromSource()`
`151`	`151`	`)`
`152`	`152`	`}`
`153`	`153`
`@@ -189,12 +189,12 @@ private module CryptographyModel {`
`189`	`189`	`.getMember("ciphers")`
`190`	`190`	`.getMember("Cipher")`
`191`	`191`	`.getACall() and`
`192`		`- algorithmClassRef(algorithmName).getReturn().getAUse() in [`
	`192`	`+ algorithmClassRef(algorithmName).getReturn().getAValueReachableFromSource() in [`
`193`	`193`	`call.getArg(0), call.getArgByName("algorithm")`
`194`	`194`	`] and`
`195`	`195`	`exists(DataFlow::Node modeArg \| modeArg in [call.getArg(1), call.getArgByName("mode")] \|`
`196`		`- if modeArg = modeClassRef(_).getReturn().getAUse()`
`197`		`- then modeArg = modeClassRef(modeName).getReturn().getAUse()`
	`196`	`+ if modeArg = modeClassRef(_).getReturn().getAValueReachableFromSource()`
	`197`	`+ then modeArg = modeClassRef(modeName).getReturn().getAValueReachableFromSource()`
`198`	`198`	`else modeName = "<None or unknown>"`
`199`	`199`	`)`
`200`	`200`	`)`
`@@ -252,7 +252,7 @@ private module CryptographyModel {`
`252`	`252`	`.getMember("hashes")`
`253`	`253`	`.getMember("Hash")`
`254`	`254`	`.getACall() and`
`255`		`- algorithmClassRef(algorithmName).getReturn().getAUse() in [`
	`255`	`+ algorithmClassRef(algorithmName).getReturn().getAValueReachableFromSource() in [`
`256`	`256`	`call.getArg(0), call.getArgByName("algorithm")`
`257`	`257`	`]`
`258`	`258`	`)`
Original file line number	Diff line number	Diff line change
`@@ -2799,7 +2799,7 @@ module PrivateDjango {`
`2799`	`2799`	`.getMember("decorators")`
`2800`	`2800`	`.getMember("csrf")`
`2801`	`2801`	`.getMember(decoratorName)`
`2802`		`- .getAUse() and`
	`2802`	`+ .getAValueReachableFromSource() and`
`2803`	`2803`	`this.asExpr() = function.getADecorator()`
`2804`	`2804`	`}`
`2805`	`2805`
Original file line number	Diff line number	Diff line change
`@@ -179,7 +179,7 @@ private module FabricV2 {`
`179`	`179`	`DataFlow::ParameterNode {`
`180`	`180`	`FabricTaskFirstParamConnectionInstance() {`
`181`	`181`	`exists(Function func \|`
`182`		`- func.getADecorator() = Fabric::Tasks::task().getAUse().asExpr() and`
	`182`	`+ func.getADecorator() = Fabric::Tasks::task().getAValueReachableFromSource().asExpr() and`
`183`	`183`	`this.getParameter() = func.getArg(0)`
`184`	`184`	`)`
`185`	`185`	`}`
Original file line number	Diff line number	Diff line change
`@@ -90,7 +90,8 @@ private module FastApi {`
`90`	`90`	`private class PydanticModelRequestHandlerParam extends Pydantic::BaseModel::InstanceSource,`
`91`	`91`	`DataFlow::ParameterNode {`
`92`	`92`	`PydanticModelRequestHandlerParam() {`
`93`		`- this.getParameter().getAnnotation() = Pydantic::BaseModel::subclassRef().getAUse().asExpr() and`
	`93`	`+ this.getParameter().getAnnotation() =`
	`94`	`+ Pydantic::BaseModel::subclassRef().getAValueReachableFromSource().asExpr() and`
`94`	`95`	`any(FastApiRouteSetup rs).getARequestHandler().getArgByName(_) = this.getParameter()`
`95`	`96`	`}`
`96`	`97`	`}`
`@@ -104,7 +105,8 @@ private module FastApi {`
`104`	`105`	`private class WebSocketRequestHandlerParam extends Starlette::WebSocket::InstanceSource,`
`105`	`106`	`DataFlow::ParameterNode {`
`106`	`107`	`WebSocketRequestHandlerParam() {`
`107`		`- this.getParameter().getAnnotation() = Starlette::WebSocket::classRef().getAUse().asExpr() and`
	`108`	`+ this.getParameter().getAnnotation() =`
	`109`	`+ Starlette::WebSocket::classRef().getAValueReachableFromSource().asExpr() and`
`108`	`110`	`any(FastApiRouteSetup rs).getARequestHandler().getArgByName(_) = this.getParameter()`
`109`	`111`	`}`
`110`	`112`	`}`
`@@ -165,7 +167,7 @@ private module FastApi {`
`165`	`167`	`// user-defined subclasses`
`166`	`168`	`exists(Class cls, API::Node base \|`
`167`	`169`	`base = getModeledResponseClass(_).getASubclass*() and`
`168`		`- cls.getABase() = base.getAUse().asExpr() and`
	`170`	`+ cls.getABase() = base.getAValueReachableFromSource().asExpr() and`
`169`	`171`	`responseClass.asSource().asExpr() = cls.getParent()`
`170`	`172`	`\|`
`171`	`173`	`exists(Assign assign \| assign = cls.getAStmt() \|`
`@@ -257,7 +259,7 @@ private module FastApi {`
`257`	`259`
`258`	`260`	`override string getMimetypeDefault() {`
`259`	`261`	`exists(API::Node responseClass \|`
`260`		`- responseClass.getAUse() = routeSetup.getResponseClassArg() and`
	`262`	`+ responseClass.getAValueReachableFromSource() = routeSetup.getResponseClassArg() and`
`261`	`263`	`result = getDefaultMimeType(responseClass)`
`262`	`264`	`)`
`263`	`265`	`or`
`@@ -274,7 +276,7 @@ private module FastApi {`
`274`	`276`	`FileSystemAccess::Range {`
`275`	`277`	`FastApiRequestHandlerFileResponseReturn() {`
`276`	`278`	`exists(API::Node responseClass \|`
`277`		`- responseClass.getAUse() = routeSetup.getResponseClassArg() and`
	`279`	`+ responseClass.getAValueReachableFromSource() = routeSetup.getResponseClassArg() and`
`278`	`280`	`responseClass = getModeledResponseClass("FileResponse").getASubclass*()`
`279`	`281`	`)`
`280`	`282`	`}`
`@@ -292,7 +294,7 @@ private module FastApi {`
`292`	`294`	`HTTP::Server::HttpRedirectResponse::Range {`
`293`	`295`	`FastApiRequestHandlerRedirectReturn() {`
`294`	`296`	`exists(API::Node responseClass \|`
`295`		`- responseClass.getAUse() = routeSetup.getResponseClassArg() and`
	`297`	`+ responseClass.getAValueReachableFromSource() = routeSetup.getResponseClassArg() and`
`296`	`298`	`responseClass = getModeledResponseClass("RedirectResponse").getASubclass*()`
`297`	`299`	`)`
`298`	`300`	`}`
`@@ -311,7 +313,7 @@ private module FastApi {`
`311`	`313`	`class RequestHandlerParam extends InstanceSource, DataFlow::ParameterNode {`
`312`	`314`	`RequestHandlerParam() {`
`313`	`315`	`this.getParameter().getAnnotation() =`
`314`		`- getModeledResponseClass(_).getASubclass*().getAUse().asExpr() and`
	`316`	`+ getModeledResponseClass(_).getASubclass*().getAValueReachableFromSource().asExpr() and`
`315`	`317`	`any(FastApiRouteSetup rs).getARequestHandler().getArgByName(_) = this.getParameter()`
`316`	`318`	`}`
`317`	`319`	`}`
Original file line number	Diff line number	Diff line change
`@@ -39,7 +39,8 @@ private module Invoke {`
`39`	`39`	`result = InvokeModule::Context::ContextClass::classRef().getACall()`
`40`	`40`	`or`
`41`	`41`	`exists(Function func \|`
`42`		`- func.getADecorator() = invoke().getMember("task").getAUse().asExpr() and`
	`42`	`+ func.getADecorator() =`
	`43`	`+ invoke().getMember("task").getAValueReachableFromSource().asExpr() and`
`43`	`44`	`result.(DataFlow::ParameterNode).getParameter() = func.getArg(0)`
`44`	`45`	`)`
`45`	`46`	`)`
Original file line number	Diff line number	Diff line change
`@@ -44,7 +44,7 @@ private module RuamelYaml {`
`44`	`44`	`API::moduleImport("ruamel")`
`45`	`45`	`.getMember("yaml")`
`46`	`46`	`.getMember(["SafeLoader", "BaseLoader", "CSafeLoader", "CBaseLoader"])`
`47`		`- .getAUse()`
	`47`	`+ .getAValueReachableFromSource()`
`48`	`48`	`)`
`49`	`49`	`}`
`50`	`50`