qtil

advanced-security/qtil-ruby 0.0.2

Module TypeTrackerSpecific

Import path

import codeql.ruby.typetracking.TypeTrackerSpecific

Predicates

basicLoadStep	Holds if `nodeTo` is the result of accessing the `content` content of `nodeFrom`.
basicLoadStoreStep	Holds if the `loadContent` of `nodeFrom` is stored in the `storeContent` of `nodeTo`.
basicStoreStep	Holds if `nodeFrom` is being written to the `contents` of the object in `nodeTo`.
basicWithContentStep	Holds if type-tracking should step from `nodeFrom` to `nodeTo` if inside a content matched by `filter`.
basicWithoutContentStep	Holds if type-tracking should step from `nodeFrom` to `nodeTo` but block flow of contents matched by `filter` through here.
callStep	Holds if `nodeFrom` steps to `nodeTo` by being passed as a parameter in a call.
callStep	Holds if there is flow from `arg` to `p` via the call `call`.
compatibleContents	Holds if a value stored with `storeContents` can be read back with `loadContents`.
isNonLocal	Holds if the given component can’t be evaluated by `evaluateSummaryComponentStackLocal`.
levelStepCall	Holds if there is a level step from `nodeFrom` to `nodeTo`, which may depend on the call graph.
levelStepNoCall	Holds if there is a level step from `nodeFrom` to `nodeTo`, which does not depend on the call graph.
noContent	Gets the “no content set” value to use for a type tracker not inside any content.
returnStep	Holds if `nodeFrom` steps to `nodeTo` by being returned from a call.
storeStepIntoSourceNode	Holds if a store step `nodeFrom -> nodeTo` with `contents` exists, where the destination node is a post-update node that should be treated as a local source node.

Classes

Boolean	A utility class that is equivalent to `boolean` but does not require type joining.
ContentFilter	A label to use for `WithContent` and `WithoutContent` steps, restricting which `ContentSet` may pass through.
OptionalTypeTrackerContent	An optional content set, that is, a `ContentSet` or the special “no content set” value.

Modules

Module for getting ContentFilter values.

Aliases

Node	An element, viewed as a node in a data flow graph. Either an expression (`ExprNode`) or a parameter (`ParameterNode`).
TypeTrackerContent	An entity that represents a set of `Content`s.
TypeTrackingNode	A data-flow node that is a source of local flow.
jumpStep	Holds if data can flow from `node1` to `node2` in a way that discards call contexts.
simpleLocalFlowStep	Holds if there is a simple local flow step from `nodeFrom` to `nodeTo`