Merge pull request #4563 from tausbn/python-remove-refersto-from-regex-libs

yoff · web-flow · commit c8bb0509e513 · 2020-10-28T13:37:14.000+01:00
Python: Remove `refersTo` from `regex.qll`
diff --git a/python/ql/src/semmle/python/regex.qll b/python/ql/src/semmle/python/regex.qll
@@ -27,7 +27,7 @@ predicate used_as_regex(Expr s, string mode) {
   (s instanceof Bytes or s instanceof Unicode) and
   /* Call to re.xxx(regex, ... [mode]) */
   exists(CallNode call, string name |
-    call.getArg(0).refersTo(_, _, s.getAFlowNode()) and
+    call.getArg(0).pointsTo(_, _, s.getAFlowNode()) and
     call.getFunction().pointsTo(Module::named("re").attr(name)) and
     not name = "escape"
   |

Original file line number	Diff line number	Diff line change
`@@ -27,7 +27,7 @@ predicate used_as_regex(Expr s, string mode) {`
`27`	`27`	`(s instanceof Bytes or s instanceof Unicode) and`
`28`	`28`	`/* Call to re.xxx(regex, ... [mode]) */`
`29`	`29`	`exists(CallNode call, string name \|`
`30`		`- call.getArg(0).refersTo(_, _, s.getAFlowNode()) and`
	`30`	`+ call.getArg(0).pointsTo(_, _, s.getAFlowNode()) and`
`31`	`31`	`call.getFunction().pointsTo(Module::named("re").attr(name)) and`
`32`	`32`	`not name = "escape"`
`33`	`33`	`\|`