github / github/codeql-cli-binaries
No result of the query
- Dominant language
- No language data
- Stars
- 1k
- Forks
- 184
- PR merge metrics
- No merged PRs in 30d
Description
Hello, my name is Sofya
I was trying to run an example from this link on Visual Studio Code:
https://codeql.github.com/docs/codeql-language-guides/analyzing-data-flow-in-javascript-and-typescript/#analyzing-data-flow-in-javascript-and-typescript
I created a database of Node.js library manually and added it to Visual Studio Code and it is activated.
My query look like that:
/**
* @kind path-problem
*/
import javascript
import DataFlow::PathGraph
class CommandLineFileNameConfiguration extends TaintTracking::Configuration {
CommandLineFileNameConfiguration() { this = "CommandLineFileNameConfiguration" }
override predicate isSource(DataFlow::Node source) {
DataFlow::globalVarRef("process").getAPropertyRead("argv").getAPropertyRead() = source
}
override predicate isSink(DataFlow::Node sink) {
DataFlow::moduleMember("fs", "readFile").getACall().getArgument(0) = sink
}
}
from CommandLineFileNameConfiguration cfg, DataFlow::Node source, DataFlow::Node sink
where cfg.hasFlow(source, sink)
select sink, source, sink, ""
Unfortunately this query is not giving any results. (no errors occured)
Can you help me with it please? Maybe the problem is in database?
Contributor guide
Research direction
Start with the linked CodeQL data-flow guide, then compare the query's source and sink predicates with the manually created Node.js database in Visual Studio Code. Check whether the database contains the referenced process.argv and fs.readFile flow. Done means explaining why no results appear or identifying the database/query mismatch.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript, node.js, typescript, vscode
- Domain
- devtools, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100