github / github/codeql-cli-binaries
No result of the query
- Lenguaje dominante
- Sin datos de lenguaje
- Estrellas
- 1k
- Forks
- 184
- Métricas de merge de PR
- Sin PR fusionados en 30 d
Descripción
Hello, my name is Sofya
I was trying to run an example from this link on Visual Studio Code:
https://codeql.github.com/docs/codeql-language-guides/analyzing-data-flow-in-javascript-and-typescript/#analyzing-data-flow-in-javascript-and-typescript
I created a database of Node.js library manually and added it to Visual Studio Code and it is activated.
My query look like that:
/**
* @kind path-problem
*/
import javascript
import DataFlow::PathGraph
class CommandLineFileNameConfiguration extends TaintTracking::Configuration {
CommandLineFileNameConfiguration() { this = "CommandLineFileNameConfiguration" }
override predicate isSource(DataFlow::Node source) {
DataFlow::globalVarRef("process").getAPropertyRead("argv").getAPropertyRead() = source
}
override predicate isSink(DataFlow::Node sink) {
DataFlow::moduleMember("fs", "readFile").getACall().getArgument(0) = sink
}
}
from CommandLineFileNameConfiguration cfg, DataFlow::Node source, DataFlow::Node sink
where cfg.hasFlow(source, sink)
select sink, source, sink, ""
Unfortunately this query is not giving any results. (no errors occured)
Can you help me with it please? Maybe the problem is in database?
Guía de contribución
Línea de trabajo
Start with the linked CodeQL data-flow guide, then compare the query's source and sink predicates with the manually created Node.js database in Visual Studio Code. Check whether the database contains the referenced process.argv and fs.readFile flow. Done means explaining why no results appear or identifying the database/query mismatch.
Escrito por el modelo de indexación a partir del texto del issue.
Evaluación
- Stack tecnológico
- javascript, node.js, typescript, vscode
- Área
- devtools, security
- Tipo de issue
- Error
- Dificultad
- 4/5
- Tiempo estimado
- 3-5 días
- Estado de actividad
- Estancado
- Claridad
- Necesita aclaración
- Aptitud para principiantes
- 25/100