github / github/codeql-cli-binaries

No result of the query

未關閉
#116 1 則留言 0 個 reaction 已指派 0 人 在 GitHub 檢視
CLI
主要語言
沒有語言資料
星號
1k
分支
184
PR 合併指標
30 天內沒有已合併 PR

描述

Hello, my name is Sofya
I was trying to run an example from this link on Visual Studio Code:
https://codeql.github.com/docs/codeql-language-guides/analyzing-data-flow-in-javascript-and-typescript/#analyzing-data-flow-in-javascript-and-typescript
I created a database of Node.js library manually and added it to Visual Studio Code and it is activated.
My query look like that:

/**
* @kind path-problem
*/

import javascript
import DataFlow::PathGraph

class CommandLineFileNameConfiguration extends TaintTracking::Configuration {
CommandLineFileNameConfiguration() { this = "CommandLineFileNameConfiguration" }

override predicate isSource(DataFlow::Node source) {
DataFlow::globalVarRef("process").getAPropertyRead("argv").getAPropertyRead() = source
}

override predicate isSink(DataFlow::Node sink) {
DataFlow::moduleMember("fs", "readFile").getACall().getArgument(0) = sink
}
}

from CommandLineFileNameConfiguration cfg, DataFlow::Node source, DataFlow::Node sink
where cfg.hasFlow(source, sink)
select sink, source, sink, ""

Unfortunately this query is not giving any results. (no errors occured)
Can you help me with it please? Maybe the problem is in database?

貢獻指南

開啟貢獻指南

研究方向

Start with the linked CodeQL data-flow guide, then compare the query's source and sink predicates with the manually created Node.js database in Visual Studio Code. Check whether the database contains the referenced process.argv and fs.readFile flow. Done means explaining why no results appear or identifying the database/query mismatch.

由索引模型根據 Issue 內容生成。

評估

技術堆疊
javascript, node.js, typescript, vscode
領域
devtools, security
Issue 類型
缺陷
難度
4/5
預估耗時
3-5 天
活躍度
停滯
描述清晰度
需要釐清
新手友好度
25/100

把新 issue 寄到你的電子郵件信箱

精選適合新手參與的 GitHub issue 摘要。