github / github/codeql

Ruby: Traditional if-else not detected as `StringConstArrayInclusionCallBarrier` compared to conditional assignment.

Aperta
#11,558 2 commenti 0 reazioni 0 assegnatari Vedi su GitHub
question Ruby
Lingua principale
CodeQL
Stelle
10.1k
Fork
2.1k
Merge medio
2g 15h
PR unite (30g)
141

Descrizione

**Information**
CodeQL Version:
7f5df4fc0e9ec8ffed0e8eefe78fb5544be46dc4

**Description of the issue**
Create a database for this ruby code:
```ruby
aaa = "imagine this is derived from a remote source"
if ["fff", "eee"].include?(aaa) # {1}
# accept aaa as is
else
aaa = "Value"
end

aaa = if ["fff", "eee"].include?(aaa) # {2}
aaa
else
"Value"
end
```

**Expected**
1. {1} and {2} are detected as a `StringConstArrayInclusionCall` (using quick-eval)
2. {1} and {2} are detected as a `StringConstArrayInclusionCallBarrier` (using quick-eval)

**Actual**
1. {1} and {2} are detected as a `StringConstArrayInclusionCall` (using quick-eval)
2. {1} **is not** detected as a `StringConstArrayInclusionCallBarrier` (using quick-eval)
3. {2} **is** detected as a `StringConstArrayInclusionCallBarrier` (using quick-eval)

Guida per i contributori

Apri la guida per i contributori

Valutazione

Questa issue non è ancora stata valutata.

Ricevi le nuove issue nella tua casella

Un breve riepilogo di issue GitHub adatte ai principianti.