-
Notifications
You must be signed in to change notification settings - Fork 1.8k
Ruby: generalise summaries for ActiveSupport Hash extensions #11166
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
ReverseMergeSummary() { this = ["reverse_merge", "with_defaults"] } | ||
|
||
override predicate propagatesFlowExt(string input, string output, boolean preservesValue) { | ||
input = ["Argument[self]", "Argument[0]"] and |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Are we missing a .WithElement
here?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Yeah. After some thought I've put the old summaries back (the ones that are specific to the context of ActionController params), and then made these general summaries use WithElement
.
ReverseMergeBangSummary() { this = ["reverse_merge!", "with_defaults!", "reverse_update"] } | ||
|
||
override predicate propagatesFlowExt(string input, string output, boolean preservesValue) { | ||
input = ["Argument[self]", "Argument[0]"] and |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Same.
- revert the changes to the taint summaries specific to ActionController params - make the general flow summaries value-preserving and use WithElement[any]
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Let's see what DCA says.
DCA shows a bad row under stage timings. I don't really know what to make of that. But I need to resolve conflicts anyway, so I'll kick off another run after that. |
No description provided.