Skip to content

Conversation

@felicitymay
Copy link
Contributor

@markshannon and @taus-semmle - I've made some changes to the analysis change notes for Python. They're mostly smallish changes for consistency and clarity. The only substantial change was to move the information about "Assert statement tests the truth value of a literal constant" (py/assert-literal-constant) into the New queries table. As far as I can tell it was erroneously added to the wrong table.


> Changes that affect alerts in many files or from many queries
> For example, changes to file classification
A new predicate `Stmt.getAnEntryNode()` has been added to make it easier to write reachability queries involving statements.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This doesn't make as much sense out of context. This new predicate is necessary because of the changes to the CFG representation.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Okay - that wasn't clear to me. I'll move it.


A new predicate `Stmt.getAnEntryNode()` has been added to make it easier to write reachability queries involving statements.
| Old CFG node order | New CFG node order |
|--------------------|--------------------|
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I don't like the table form, as it suggest some relation between item of the same row, where there is none.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Okay - I'll revise it.

@felicitymay
Copy link
Contributor Author

@mark - does this work any better?

@markshannon
Copy link
Contributor

Yes, that's perfect

@markshannon markshannon merged commit d933152 into github:rc/1.19 Nov 30, 2018
cklin pushed a commit that referenced this pull request May 23, 2022
Yet another SSRF query for Golang
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants