codeql/python/ql/src/meta/analysis-quality/TTCallGraphOverview.ql at 4a21a85e73fe9d741c8a76835f57dc3d23578f7f · github/codeql · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
/**
 * @name Call graph edge overview from using type-tracking instead of points-to
 * @id py/meta/call-graph-overview
 * @precision very-low
 */

import python
import CallGraphQuality

from string tag, int c
where
  tag = "SHARED" and
  c =
    count(CallNode call, Target target |
      target.isRelevant() and
      call.(PointsToBasedCallGraph::ResolvableCall).getTarget() = target and
      call.(TypeTrackingBasedCallGraph::ResolvableCall).getTarget() = target
    )
  or
  tag = "NEW" and
  c =
    count(CallNode call, Target target |
      target.isRelevant() and
      not call.(PointsToBasedCallGraph::ResolvableCall).getTarget() = target and
      call.(TypeTrackingBasedCallGraph::ResolvableCall).getTarget() = target
    )
  or
  tag = "MISSING" and
  c =
    count(CallNode call, Target target |
      target.isRelevant() and
      call.(PointsToBasedCallGraph::ResolvableCall).getTarget() = target and
      not call.(TypeTrackingBasedCallGraph::ResolvableCall).getTarget() = target
    )
select tag, c