github / github/codeql-cli-binaries
No result of the query
- 主要语言
- 没有语言数据
- 星标
- 1k
- 派生
- 184
- PR 合并指标
- 30 天内没有已合并 PR
描述
Hello, my name is Sofya
I was trying to run an example from this link on Visual Studio Code:
https://codeql.github.com/docs/codeql-language-guides/analyzing-data-flow-in-javascript-and-typescript/#analyzing-data-flow-in-javascript-and-typescript
I created a database of Node.js library manually and added it to Visual Studio Code and it is activated.
My query look like that:
/**
* @kind path-problem
*/
import javascript
import DataFlow::PathGraph
class CommandLineFileNameConfiguration extends TaintTracking::Configuration {
CommandLineFileNameConfiguration() { this = "CommandLineFileNameConfiguration" }
override predicate isSource(DataFlow::Node source) {
DataFlow::globalVarRef("process").getAPropertyRead("argv").getAPropertyRead() = source
}
override predicate isSink(DataFlow::Node sink) {
DataFlow::moduleMember("fs", "readFile").getACall().getArgument(0) = sink
}
}
from CommandLineFileNameConfiguration cfg, DataFlow::Node source, DataFlow::Node sink
where cfg.hasFlow(source, sink)
select sink, source, sink, ""
Unfortunately this query is not giving any results. (no errors occured)
Can you help me with it please? Maybe the problem is in database?
贡献指南
调研方向
先阅读链接的 CodeQL 数据流指南,然后将查询的源谓词和汇谓词与 Visual Studio Code 中手动创建的 Node.js 数据库进行比较。检查数据库是否包含所引用的 process.argv 和 fs.readFile 流。完成的标准是解释为什么没有结果,或确定数据库与查询之间的不匹配。
由索引模型根据 Issue 内容生成。
评估
- 技术栈
- javascript, node.js, typescript, vscode
- 领域
- devtools, security
- Issue 类型
- 缺陷
- 难度
- 4/5
- 预计耗时
- 3-5 天
- 活跃度
- 停滞
- 描述清晰度
- 需要澄清
- 新手友好度
- 25/100