зеркало из https://github.com/github/codeql.git
remove a bunch of repeated words
This commit is contained in:
Родитель
2ea2bd8966
Коммит
85a652f3d1
|
@ -699,7 +699,7 @@ private predicate exprToExprStep_nocfg(Expr fromExpr, Expr toExpr) {
|
|||
call.getTarget() = f and
|
||||
// AST dataflow treats a reference as if it were the referred-to object, while the dataflow
|
||||
// models treat references as pointers. If the return type of the call is a reference, then
|
||||
// look for data flow the the referred-to object, rather than the reference itself.
|
||||
// look for data flow the referred-to object, rather than the reference itself.
|
||||
if call.getType().getUnspecifiedType() instanceof ReferenceType
|
||||
then outModel.isReturnValueDeref()
|
||||
else outModel.isReturnValue()
|
||||
|
|
|
@ -1573,7 +1573,7 @@ private module SimpleRangeAnalysisCached {
|
|||
result = min([max(getTruncatedUpperBounds(expr)), getGuardedUpperBound(expr)])
|
||||
}
|
||||
|
||||
/** Holds if the upper bound of `expr` may have been widened. This means the the upper bound is in practice likely to be overly wide. */
|
||||
/** Holds if the upper bound of `expr` may have been widened. This means the upper bound is in practice likely to be overly wide. */
|
||||
cached
|
||||
predicate upperBoundMayBeWidened(Expr e) {
|
||||
isRecursiveExpr(e) and
|
||||
|
|
|
@ -335,7 +335,7 @@ module Expressions {
|
|||
// ```csharp
|
||||
// new Dictionary<int, string>() { [0] = "Zero", [1] = "One", [2] = "Two" }
|
||||
// ```
|
||||
// need special treatment, because the the accesses `[0]`, `[1]`, and `[2]`
|
||||
// need special treatment, because the accesses `[0]`, `[1]`, and `[2]`
|
||||
// have no qualifier.
|
||||
this = any(MemberInitializer mi).getLValue()
|
||||
}
|
||||
|
|
|
@ -85,7 +85,7 @@ class ExternalApi extends DotNet::Callable {
|
|||
defaultAdditionalTaintStep(this.getAnInput(), _)
|
||||
}
|
||||
|
||||
/** Holds if this API is is a constructor without parameters. */
|
||||
/** Holds if this API is a constructor without parameters. */
|
||||
private predicate isParameterlessConstructor() {
|
||||
this instanceof Constructor and this.getNumberOfParameters() = 0
|
||||
}
|
||||
|
|
|
@ -13,7 +13,7 @@
|
|||
|
||||
import go
|
||||
|
||||
/** Gets the global value number of of `e`, which is the `i`th case label of `switch`. */
|
||||
/** Gets the global value number of `e`, which is the `i`th case label of `switch`. */
|
||||
GVN switchCaseGVN(SwitchStmt switch, int i, Expr e) {
|
||||
e = switch.getCase(i).getExpr(0) and result = e.getGlobalValueNumber()
|
||||
}
|
||||
|
|
|
@ -73,7 +73,7 @@ class ExternalApi extends Callable {
|
|||
TaintTracking::localAdditionalTaintStep(this.getAnInput(), _)
|
||||
}
|
||||
|
||||
/** Holds if this API is is a constructor without parameters. */
|
||||
/** Holds if this API is a constructor without parameters. */
|
||||
private predicate isParameterlessConstructor() {
|
||||
this instanceof Constructor and this.getNumberOfParameters() = 0
|
||||
}
|
||||
|
|
|
@ -2,7 +2,7 @@
|
|||
* Helper file that imports all framework modeling.
|
||||
*/
|
||||
|
||||
// If you add modeling of a new framework/library, remember to add it it to the docs in
|
||||
// If you add modeling of a new framework/library, remember to add it to the docs in
|
||||
// `docs/codeql/support/reusables/frameworks.rst`
|
||||
private import semmle.python.frameworks.Aioch
|
||||
private import semmle.python.frameworks.Aiohttp
|
||||
|
|
|
@ -333,7 +333,7 @@ abstract class Sanitizer extends string {
|
|||
/** Holds if `taint` cannot flow through `node`. */
|
||||
predicate sanitizingNode(TaintKind taint, ControlFlowNode node) { none() }
|
||||
|
||||
/** Holds if `call` removes removes the `taint` */
|
||||
/** Holds if `call` removes the `taint` */
|
||||
predicate sanitizingCall(TaintKind taint, FunctionObject callee) { none() }
|
||||
|
||||
/** Holds if `test` shows value to be untainted with `taint` */
|
||||
|
|
|
@ -78,7 +78,7 @@ private class Folder_ extends ContainerOrModule, TFolder {
|
|||
|
||||
override ContainerOrModule getEnclosing() {
|
||||
result = TFolder(f.getParentContainer()) and
|
||||
// if this the the root, then we stop.
|
||||
// if this the root, then we stop.
|
||||
not exists(f.getFile("qlpack.yml"))
|
||||
}
|
||||
|
||||
|
|
|
@ -57,7 +57,7 @@ class CandidatePredicate extends Predicate {
|
|||
this.getName()
|
||||
.regexpCapture("(.+)" + ["0", "helper", "aux", "cand", "Helper", "Aux", "Cand"], 1)
|
||||
or
|
||||
// Or this this predicate is named "foo02" and `pred` is named "foo01".
|
||||
// Or this predicate is named "foo02" and `pred` is named "foo01".
|
||||
exists(int n, string name |
|
||||
hasNameWithNumberSuffix(pred, name, n) and
|
||||
hasNameWithNumberSuffix(this, name, n - 1)
|
||||
|
|
|
@ -348,7 +348,7 @@ module ExprNodes {
|
|||
/** Gets an argument of this call. */
|
||||
final ExprCfgNode getAnArgument() { result = this.getArgument(_) }
|
||||
|
||||
/** Gets the the keyword argument whose key is `keyword` of this call. */
|
||||
/** Gets the keyword argument whose key is `keyword` of this call. */
|
||||
final ExprCfgNode getKeywordArgument(string keyword) {
|
||||
exists(PairCfgNode n |
|
||||
e.hasCfgChild(e.getAnArgument(), this, n) and
|
||||
|
|
|
@ -71,7 +71,7 @@ class CallNode extends LocalSourceNode, ExprNode {
|
|||
/** Gets the data-flow node corresponding to the named argument of the call corresponding to this data-flow node */
|
||||
ExprNode getKeywordArgument(string name) { result.getExprNode() = node.getKeywordArgument(name) }
|
||||
|
||||
/** Gets the name of the the method called by the method call (if any) corresponding to this data-flow node */
|
||||
/** Gets the name of the method called by the method call (if any) corresponding to this data-flow node */
|
||||
string getMethodName() { result = node.getExpr().(MethodCall).getMethodName() }
|
||||
|
||||
/** Gets the number of arguments of this call. */
|
||||
|
|
|
@ -379,7 +379,7 @@ class GraphqlFieldResolutionMethod extends Method, HTTP::Server::RequestHandler:
|
|||
result.(KeywordParameter).hasName(argDefn.getArgumentName())
|
||||
or
|
||||
// TODO this will cause false positives because now *anything* in the **args
|
||||
// param will be flagged as as RoutedParameter/RemoteFlowSource, but really
|
||||
// param will be flagged as RoutedParameter/RemoteFlowSource, but really
|
||||
// only the hash keys corresponding to the defined arguments are user input
|
||||
// others could be things defined in the `:extras` keyword argument to the `argument`
|
||||
result instanceof HashSplatParameter // often you see `def field(**args)`
|
||||
|
|
Загрузка…
Ссылка в новой задаче