Quantcast
Viewing all articles
Browse latest Browse all 136

CodeQL JavaScript local data flow

Hi, I’m following the tutorial on CodeQL for JavaScript and tested the query to find all references to properties of process.argv:

import javascript

select DataFlow::globalVarRef("process").getAPropertyRead("argv").getAPropertyReference()

Now, a reference for the following code: var args = process.argv[2] is found, whereas for the code shown in the tutorial:

var args = process.argv;
var firstArg = args[2];

no results are produced for me, even though there should be according to the tutorial. What am I missing here? I’m on CodeQL command-line toolchain release 2.4.4 and am on commit ce1d8ded22b in the CodeQL repo.

3 posts - 2 participants

Read full topic


Viewing all articles
Browse latest Browse all 136

Trending Articles