circle-ir 3.8.4 → 3.9.8

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (178) hide show
  1. package/README.md +82 -5
  2. package/dist/analysis/dfg-verifier.d.ts +3 -14
  3. package/dist/analysis/dfg-verifier.js +43 -74
  4. package/dist/analysis/dfg-verifier.js.map +1 -1
  5. package/dist/analysis/interprocedural.d.ts +5 -1
  6. package/dist/analysis/interprocedural.js +62 -60
  7. package/dist/analysis/interprocedural.js.map +1 -1
  8. package/dist/analysis/metrics/index.d.ts +2 -0
  9. package/dist/analysis/metrics/index.js +2 -0
  10. package/dist/analysis/metrics/index.js.map +1 -0
  11. package/dist/analysis/metrics/metric-pass.d.ts +27 -0
  12. package/dist/analysis/metrics/metric-pass.js +2 -0
  13. package/dist/analysis/metrics/metric-pass.js.map +1 -0
  14. package/dist/analysis/metrics/metric-runner.d.ts +21 -0
  15. package/dist/analysis/metrics/metric-runner.js +47 -0
  16. package/dist/analysis/metrics/metric-runner.js.map +1 -0
  17. package/dist/analysis/metrics/passes/cohesion-metrics-pass.d.ts +21 -0
  18. package/dist/analysis/metrics/passes/cohesion-metrics-pass.js +100 -0
  19. package/dist/analysis/metrics/passes/cohesion-metrics-pass.js.map +1 -0
  20. package/dist/analysis/metrics/passes/complexity-metrics-pass.d.ts +15 -0
  21. package/dist/analysis/metrics/passes/complexity-metrics-pass.js +76 -0
  22. package/dist/analysis/metrics/passes/complexity-metrics-pass.js.map +1 -0
  23. package/dist/analysis/metrics/passes/composite-metrics-pass.d.ts +17 -0
  24. package/dist/analysis/metrics/passes/composite-metrics-pass.js +77 -0
  25. package/dist/analysis/metrics/passes/composite-metrics-pass.js.map +1 -0
  26. package/dist/analysis/metrics/passes/coupling-metrics-pass.d.ts +19 -0
  27. package/dist/analysis/metrics/passes/coupling-metrics-pass.js +94 -0
  28. package/dist/analysis/metrics/passes/coupling-metrics-pass.js.map +1 -0
  29. package/dist/analysis/metrics/passes/data-flow-metrics-pass.d.ts +14 -0
  30. package/dist/analysis/metrics/passes/data-flow-metrics-pass.js +25 -0
  31. package/dist/analysis/metrics/passes/data-flow-metrics-pass.js.map +1 -0
  32. package/dist/analysis/metrics/passes/documentation-metrics-pass.d.ts +15 -0
  33. package/dist/analysis/metrics/passes/documentation-metrics-pass.js +64 -0
  34. package/dist/analysis/metrics/passes/documentation-metrics-pass.js.map +1 -0
  35. package/dist/analysis/metrics/passes/halstead-metrics-pass.d.ts +16 -0
  36. package/dist/analysis/metrics/passes/halstead-metrics-pass.js +95 -0
  37. package/dist/analysis/metrics/passes/halstead-metrics-pass.js.map +1 -0
  38. package/dist/analysis/metrics/passes/inheritance-metrics-pass.d.ts +18 -0
  39. package/dist/analysis/metrics/passes/inheritance-metrics-pass.js +73 -0
  40. package/dist/analysis/metrics/passes/inheritance-metrics-pass.js.map +1 -0
  41. package/dist/analysis/metrics/passes/size-metrics-pass.d.ts +11 -0
  42. package/dist/analysis/metrics/passes/size-metrics-pass.js +64 -0
  43. package/dist/analysis/metrics/passes/size-metrics-pass.js.map +1 -0
  44. package/dist/analysis/passes/circular-dependency-pass.d.ts +18 -0
  45. package/dist/analysis/passes/circular-dependency-pass.js +39 -0
  46. package/dist/analysis/passes/circular-dependency-pass.js.map +1 -0
  47. package/dist/analysis/passes/constant-propagation-pass.d.ts +22 -0
  48. package/dist/analysis/passes/constant-propagation-pass.js +44 -0
  49. package/dist/analysis/passes/constant-propagation-pass.js.map +1 -0
  50. package/dist/analysis/passes/cross-file-pass.d.ts +27 -0
  51. package/dist/analysis/passes/cross-file-pass.js +102 -0
  52. package/dist/analysis/passes/cross-file-pass.js.map +1 -0
  53. package/dist/analysis/passes/dead-code-pass.d.ts +25 -0
  54. package/dist/analysis/passes/dead-code-pass.js +117 -0
  55. package/dist/analysis/passes/dead-code-pass.js.map +1 -0
  56. package/dist/analysis/passes/deep-inheritance-pass.d.ts +30 -0
  57. package/dist/analysis/passes/deep-inheritance-pass.js +82 -0
  58. package/dist/analysis/passes/deep-inheritance-pass.js.map +1 -0
  59. package/dist/analysis/passes/dependency-fan-out-pass.d.ts +19 -0
  60. package/dist/analysis/passes/dependency-fan-out-pass.js +35 -0
  61. package/dist/analysis/passes/dependency-fan-out-pass.js.map +1 -0
  62. package/dist/analysis/passes/infinite-loop-pass.d.ts +31 -0
  63. package/dist/analysis/passes/infinite-loop-pass.js +126 -0
  64. package/dist/analysis/passes/infinite-loop-pass.js.map +1 -0
  65. package/dist/analysis/passes/interprocedural-pass.d.ts +29 -0
  66. package/dist/analysis/passes/interprocedural-pass.js +169 -0
  67. package/dist/analysis/passes/interprocedural-pass.js.map +1 -0
  68. package/dist/analysis/passes/language-sources-pass.d.ts +76 -0
  69. package/dist/analysis/passes/language-sources-pass.js +491 -0
  70. package/dist/analysis/passes/language-sources-pass.js.map +1 -0
  71. package/dist/analysis/passes/leaked-global-pass.d.ts +34 -0
  72. package/dist/analysis/passes/leaked-global-pass.js +108 -0
  73. package/dist/analysis/passes/leaked-global-pass.js.map +1 -0
  74. package/dist/analysis/passes/missing-await-pass.d.ts +29 -0
  75. package/dist/analysis/passes/missing-await-pass.js +90 -0
  76. package/dist/analysis/passes/missing-await-pass.js.map +1 -0
  77. package/dist/analysis/passes/missing-public-doc-pass.d.ts +35 -0
  78. package/dist/analysis/passes/missing-public-doc-pass.js +148 -0
  79. package/dist/analysis/passes/missing-public-doc-pass.js.map +1 -0
  80. package/dist/analysis/passes/n-plus-one-pass.d.ts +29 -0
  81. package/dist/analysis/passes/n-plus-one-pass.js +100 -0
  82. package/dist/analysis/passes/n-plus-one-pass.js.map +1 -0
  83. package/dist/analysis/passes/null-deref-pass.d.ts +32 -0
  84. package/dist/analysis/passes/null-deref-pass.js +130 -0
  85. package/dist/analysis/passes/null-deref-pass.js.map +1 -0
  86. package/dist/analysis/passes/orphan-module-pass.d.ts +21 -0
  87. package/dist/analysis/passes/orphan-module-pass.js +38 -0
  88. package/dist/analysis/passes/orphan-module-pass.js.map +1 -0
  89. package/dist/analysis/passes/react-inline-jsx-pass.d.ts +36 -0
  90. package/dist/analysis/passes/react-inline-jsx-pass.js +140 -0
  91. package/dist/analysis/passes/react-inline-jsx-pass.js.map +1 -0
  92. package/dist/analysis/passes/redundant-loop-pass.d.ts +30 -0
  93. package/dist/analysis/passes/redundant-loop-pass.js +146 -0
  94. package/dist/analysis/passes/redundant-loop-pass.js.map +1 -0
  95. package/dist/analysis/passes/resource-leak-pass.d.ts +43 -0
  96. package/dist/analysis/passes/resource-leak-pass.js +156 -0
  97. package/dist/analysis/passes/resource-leak-pass.js.map +1 -0
  98. package/dist/analysis/passes/serial-await-pass.d.ts +36 -0
  99. package/dist/analysis/passes/serial-await-pass.js +132 -0
  100. package/dist/analysis/passes/serial-await-pass.js.map +1 -0
  101. package/dist/analysis/passes/sink-filter-pass.d.ts +39 -0
  102. package/dist/analysis/passes/sink-filter-pass.js +231 -0
  103. package/dist/analysis/passes/sink-filter-pass.js.map +1 -0
  104. package/dist/analysis/passes/stale-doc-ref-pass.d.ts +21 -0
  105. package/dist/analysis/passes/stale-doc-ref-pass.js +96 -0
  106. package/dist/analysis/passes/stale-doc-ref-pass.js.map +1 -0
  107. package/dist/analysis/passes/string-concat-loop-pass.d.ts +26 -0
  108. package/dist/analysis/passes/string-concat-loop-pass.js +87 -0
  109. package/dist/analysis/passes/string-concat-loop-pass.js.map +1 -0
  110. package/dist/analysis/passes/sync-io-async-pass.d.ts +28 -0
  111. package/dist/analysis/passes/sync-io-async-pass.js +80 -0
  112. package/dist/analysis/passes/sync-io-async-pass.js.map +1 -0
  113. package/dist/analysis/passes/taint-matcher-pass.d.ts +24 -0
  114. package/dist/analysis/passes/taint-matcher-pass.js +71 -0
  115. package/dist/analysis/passes/taint-matcher-pass.js.map +1 -0
  116. package/dist/analysis/passes/taint-propagation-pass.d.ts +22 -0
  117. package/dist/analysis/passes/taint-propagation-pass.js +266 -0
  118. package/dist/analysis/passes/taint-propagation-pass.js.map +1 -0
  119. package/dist/analysis/passes/todo-in-prod-pass.d.ts +28 -0
  120. package/dist/analysis/passes/todo-in-prod-pass.js +71 -0
  121. package/dist/analysis/passes/todo-in-prod-pass.js.map +1 -0
  122. package/dist/analysis/passes/unbounded-collection-pass.d.ts +32 -0
  123. package/dist/analysis/passes/unbounded-collection-pass.js +128 -0
  124. package/dist/analysis/passes/unbounded-collection-pass.js.map +1 -0
  125. package/dist/analysis/passes/unchecked-return-pass.d.ts +34 -0
  126. package/dist/analysis/passes/unchecked-return-pass.js +106 -0
  127. package/dist/analysis/passes/unchecked-return-pass.js.map +1 -0
  128. package/dist/analysis/passes/unused-variable-pass.d.ts +36 -0
  129. package/dist/analysis/passes/unused-variable-pass.js +150 -0
  130. package/dist/analysis/passes/unused-variable-pass.js.map +1 -0
  131. package/dist/analysis/passes/variable-shadowing-pass.d.ts +41 -0
  132. package/dist/analysis/passes/variable-shadowing-pass.js +211 -0
  133. package/dist/analysis/passes/variable-shadowing-pass.js.map +1 -0
  134. package/dist/analysis/path-finder.d.ts +3 -13
  135. package/dist/analysis/path-finder.js +48 -63
  136. package/dist/analysis/path-finder.js.map +1 -1
  137. package/dist/analysis/taint-matcher.js +8 -1
  138. package/dist/analysis/taint-matcher.js.map +1 -1
  139. package/dist/analysis/taint-propagation.d.ts +5 -1
  140. package/dist/analysis/taint-propagation.js +44 -41
  141. package/dist/analysis/taint-propagation.js.map +1 -1
  142. package/dist/analyzer.d.ts +48 -1
  143. package/dist/analyzer.js +252 -1476
  144. package/dist/analyzer.js.map +1 -1
  145. package/dist/browser/circle-ir.js +3952 -1270
  146. package/dist/core/circle-ir-core.cjs +360 -106
  147. package/dist/core/circle-ir-core.js +360 -106
  148. package/dist/core/extractors/imports.js +18 -0
  149. package/dist/core/extractors/imports.js.map +1 -1
  150. package/dist/graph/analysis-pass.d.ts +68 -0
  151. package/dist/graph/analysis-pass.js +51 -0
  152. package/dist/graph/analysis-pass.js.map +1 -0
  153. package/dist/graph/code-graph.d.ts +92 -0
  154. package/dist/graph/code-graph.js +262 -0
  155. package/dist/graph/code-graph.js.map +1 -0
  156. package/dist/graph/dominator-graph.d.ts +53 -0
  157. package/dist/graph/dominator-graph.js +256 -0
  158. package/dist/graph/dominator-graph.js.map +1 -0
  159. package/dist/graph/import-graph.d.ts +33 -0
  160. package/dist/graph/import-graph.js +170 -0
  161. package/dist/graph/import-graph.js.map +1 -0
  162. package/dist/graph/index.d.ts +5 -0
  163. package/dist/graph/index.js +6 -0
  164. package/dist/graph/index.js.map +1 -0
  165. package/dist/graph/project-graph.d.ts +43 -0
  166. package/dist/graph/project-graph.js +80 -0
  167. package/dist/graph/project-graph.js.map +1 -0
  168. package/dist/graph/scope-graph.d.ts +63 -0
  169. package/dist/graph/scope-graph.js +89 -0
  170. package/dist/graph/scope-graph.js.map +1 -0
  171. package/dist/index.d.ts +3 -2
  172. package/dist/index.js +3 -1
  173. package/dist/index.js.map +1 -1
  174. package/dist/resolution/cross-file.js +52 -19
  175. package/dist/resolution/cross-file.js.map +1 -1
  176. package/dist/types/index.d.ts +151 -0
  177. package/docs/SPEC.md +10 -6
  178. package/package.json +1 -1
@@ -0,0 +1,491 @@
1
+ /**
2
+ * LanguageSourcesPass
3
+ *
4
+ * Detects taint sources and sinks that are not covered by config-based
5
+ * pattern matching (analyzer.js / taint-matcher). Handles language-specific
6
+ * patterns that require text-level heuristics:
7
+ * - Java: getter methods returning tainted constructor fields
8
+ * - JavaScript/TypeScript: assignment sources, DOM XSS property sinks
9
+ * - Python: assignment sources, return-XSS sinks, trust-boundary violations
10
+ *
11
+ * Also computes the forward-taint maps (pyTaintedVars / jsTaintedVars) that
12
+ * SinkFilterPass uses to reduce false positives.
13
+ *
14
+ * Depends on: taint-matcher, constant-propagation
15
+ */
16
+ // ---------------------------------------------------------------------------
17
+ // Pattern tables (moved from analyzer.ts)
18
+ // ---------------------------------------------------------------------------
19
+ const JS_DOM_XSS_SINKS = [
20
+ { pattern: /\.innerHTML\s*=/, type: 'xss', cwe: 'CWE-79', severity: 'critical' },
21
+ { pattern: /\.outerHTML\s*=/, type: 'xss', cwe: 'CWE-79', severity: 'critical' },
22
+ { pattern: /document\.write\s*\(/, type: 'xss', cwe: 'CWE-79', severity: 'critical' },
23
+ { pattern: /document\.writeln\s*\(/, type: 'xss', cwe: 'CWE-79', severity: 'critical' },
24
+ { pattern: /\.insertAdjacentHTML\s*\(/, type: 'xss', cwe: 'CWE-79', severity: 'critical' },
25
+ { pattern: /\.src\s*=/, type: 'xss', cwe: 'CWE-79', severity: 'high' },
26
+ { pattern: /\.href\s*=/, type: 'xss', cwe: 'CWE-79', severity: 'high' },
27
+ ];
28
+ export const JS_TAINTED_PATTERNS = [
29
+ { pattern: /\breq\.query\b/, type: 'http_param' },
30
+ { pattern: /\breq\.params\b/, type: 'http_param' },
31
+ { pattern: /\breq\.body\b/, type: 'http_body' },
32
+ { pattern: /\breq\.headers\b/, type: 'http_header' },
33
+ { pattern: /\breq\.cookies\b/, type: 'http_cookie' },
34
+ { pattern: /\breq\.url\b/, type: 'http_path' },
35
+ { pattern: /\breq\.path\b/, type: 'http_path' },
36
+ { pattern: /\breq\.originalUrl\b/, type: 'http_path' },
37
+ { pattern: /\breq\.files?\b/, type: 'file_input' },
38
+ { pattern: /\brequest\.query\b/, type: 'http_param' },
39
+ { pattern: /\brequest\.params\b/, type: 'http_param' },
40
+ { pattern: /\brequest\.body\b/, type: 'http_body' },
41
+ { pattern: /\brequest\.headers\b/, type: 'http_header' },
42
+ { pattern: /\bctx\.query\b/, type: 'http_param' },
43
+ { pattern: /\bctx\.params\b/, type: 'http_param' },
44
+ { pattern: /\bctx\.request\b/, type: 'http_body' },
45
+ { pattern: /\bprocess\.env\b/, type: 'env_input' },
46
+ { pattern: /\bprocess\.argv\b/, type: 'io_input' },
47
+ { pattern: /\blocation\.search\b/, type: 'http_param' },
48
+ { pattern: /\blocation\.hash\b/, type: 'http_param' },
49
+ { pattern: /\blocation\.href\b/, type: 'http_path' },
50
+ { pattern: /\bdocument\.getElementById\b/, type: 'dom_input' },
51
+ { pattern: /\bdocument\.querySelector\b/, type: 'dom_input' },
52
+ // Narrow to event-based DOM input reads: `e.target.value`, `event.target.value`.
53
+ // The formerly broad `/\.value\b/` matched any `.value` property (e.g. `result.value`,
54
+ // `node.value` in TypeScript) generating false positives in non-browser code.
55
+ { pattern: /\b(?:event|e)\.(?:target\.)?value\b/, type: 'dom_input' },
56
+ ];
57
+ const PYTHON_TAINTED_PATTERNS = [
58
+ { pattern: /\brequest\.args\b/, type: 'http_param' },
59
+ { pattern: /\brequest\.form\b/, type: 'http_body' },
60
+ { pattern: /\brequest\.json\b/, type: 'http_body' },
61
+ { pattern: /\brequest\.data\b/, type: 'http_body' },
62
+ { pattern: /\brequest\.files?\b/, type: 'file_input' },
63
+ { pattern: /\brequest\.headers?\b/, type: 'http_header' },
64
+ { pattern: /\brequest\.cookies\b/, type: 'http_cookie' },
65
+ { pattern: /\brequest\.GET\b/, type: 'http_param' },
66
+ { pattern: /\brequest\.POST\b/, type: 'http_body' },
67
+ { pattern: /\brequest\.META\b/, type: 'http_header' },
68
+ { pattern: /\brequest\.FILES\b/, type: 'file_input' },
69
+ { pattern: /\brequest\.query_params\b/, type: 'http_param' },
70
+ { pattern: /\brequest\.path_params\b/, type: 'http_param' },
71
+ { pattern: /\brequest\.query_string\b/, type: 'http_param' },
72
+ { pattern: /\brequest\.get_data\s*\(/, type: 'http_body' },
73
+ { pattern: /\bget_form_parameter\s*\(/, type: 'http_body' },
74
+ { pattern: /\bget_query_parameter\s*\(/, type: 'http_param' },
75
+ { pattern: /\bget_header_value\s*\(/, type: 'http_header' },
76
+ { pattern: /\bget_cookie_value\s*\(/, type: 'http_cookie' },
77
+ ];
78
+ // ---------------------------------------------------------------------------
79
+ // Pass
80
+ // ---------------------------------------------------------------------------
81
+ export class LanguageSourcesPass {
82
+ name = 'language-sources';
83
+ category = 'security';
84
+ run(ctx) {
85
+ const { graph, code, language } = ctx;
86
+ const { types } = graph.ir;
87
+ const constProp = ctx.getResult('constant-propagation');
88
+ const additionalSources = [];
89
+ const additionalSinks = [];
90
+ // -- Java: getter methods that return tainted constructor fields ----------
91
+ additionalSources.push(...findGetterSources(types, constProp.instanceFieldTaint, code));
92
+ // -- JavaScript/TypeScript: assignment sources and DOM XSS sinks ---------
93
+ additionalSources.push(...findJavaScriptAssignmentSources(code, language));
94
+ const jsDOMSinks = findJavaScriptDOMSinks(code, language);
95
+ for (const s of jsDOMSinks) {
96
+ const alreadyExists = additionalSinks.some(x => x.line === s.line && x.cwe === s.cwe);
97
+ if (!alreadyExists) {
98
+ additionalSinks.push({
99
+ type: 'xss',
100
+ cwe: s.cwe,
101
+ line: s.line,
102
+ location: s.location,
103
+ method: s.method,
104
+ confidence: 1.0,
105
+ });
106
+ }
107
+ }
108
+ // -- Python: assignment sources, trust-boundary sinks, return-XSS sinks --
109
+ additionalSources.push(...findPythonAssignmentSources(code, language));
110
+ const pyTaintedVars = language === 'python' ? buildPythonTaintedVars(code) : new Map();
111
+ const pySanitizedVars = language === 'python' ? buildPythonSanitizedVars(code, pyTaintedVars) : new Set();
112
+ if (language === 'python' && pyTaintedVars.size > 0) {
113
+ for (const v of findPythonTrustBoundaryViolations(code, pyTaintedVars)) {
114
+ const alreadyExists = additionalSinks.some(s => s.line === v.sinkLine && s.type === 'trust_boundary');
115
+ if (!alreadyExists) {
116
+ additionalSinks.push({
117
+ type: 'trust_boundary',
118
+ cwe: 'CWE-501',
119
+ line: v.sinkLine,
120
+ location: `session write at line ${v.sinkLine}`,
121
+ confidence: 0.85,
122
+ });
123
+ }
124
+ }
125
+ for (const r of findPythonReturnXSSSinks(code, pyTaintedVars)) {
126
+ const alreadyExists = additionalSinks.some(s => s.line === r.sinkLine && s.type === 'xss');
127
+ if (!alreadyExists) {
128
+ additionalSinks.push({
129
+ type: 'xss',
130
+ cwe: 'CWE-79',
131
+ line: r.sinkLine,
132
+ location: `return HTML with user input at line ${r.sinkLine}`,
133
+ confidence: 0.9,
134
+ });
135
+ }
136
+ }
137
+ }
138
+ const jsTaintedVars = buildJavaScriptTaintedVars(code, language);
139
+ return { additionalSources, additionalSinks, pyTaintedVars, pySanitizedVars, jsTaintedVars };
140
+ }
141
+ }
142
+ function findGetterSources(types, instanceFieldTaint, _sourceCode) {
143
+ const sources = [];
144
+ if (instanceFieldTaint.size === 0)
145
+ return sources;
146
+ for (const type of types) {
147
+ for (const method of type.methods) {
148
+ const methodName = method.name;
149
+ let potentialFieldName = null;
150
+ if (methodName.startsWith('get') && methodName.length > 3) {
151
+ potentialFieldName = methodName.charAt(3).toLowerCase() + methodName.substring(4);
152
+ }
153
+ else if (methodName.startsWith('is') && methodName.length > 2) {
154
+ potentialFieldName = methodName.charAt(2).toLowerCase() + methodName.substring(3);
155
+ }
156
+ if (method.parameters.length === 0) {
157
+ const fieldsToCheck = potentialFieldName
158
+ ? [potentialFieldName, methodName]
159
+ : [methodName];
160
+ for (const fieldName of fieldsToCheck) {
161
+ const fieldTaint = instanceFieldTaint.get(fieldName);
162
+ if (fieldTaint && fieldTaint.className === type.name) {
163
+ sources.push({
164
+ type: 'constructor_field',
165
+ location: `${type.name}.${methodName}() returns tainted field '${fieldName}' (from constructor param '${fieldTaint.sourceParam}')`,
166
+ severity: 'high',
167
+ line: method.start_line,
168
+ confidence: 0.95,
169
+ });
170
+ break;
171
+ }
172
+ }
173
+ }
174
+ for (const [fieldName, fieldTaint] of instanceFieldTaint) {
175
+ if (fieldTaint.className === type.name) {
176
+ if (methodName === fieldName && method.parameters.length === 0) {
177
+ const alreadyAdded = sources.some(s => s.location.includes(`${type.name}.${methodName}()`));
178
+ if (!alreadyAdded) {
179
+ sources.push({
180
+ type: 'constructor_field',
181
+ location: `${type.name}.${methodName}() returns tainted field '${fieldName}' (from constructor param '${fieldTaint.sourceParam}')`,
182
+ severity: 'high',
183
+ line: method.start_line,
184
+ confidence: 0.95,
185
+ });
186
+ }
187
+ }
188
+ }
189
+ }
190
+ }
191
+ }
192
+ return sources;
193
+ }
194
+ function findJavaScriptAssignmentSources(sourceCode, language) {
195
+ if (!['javascript', 'typescript'].includes(language))
196
+ return [];
197
+ const sources = [];
198
+ const lines = sourceCode.split('\n');
199
+ for (let lineNum = 0; lineNum < lines.length; lineNum++) {
200
+ const line = lines[lineNum];
201
+ const lineNumber = lineNum + 1;
202
+ const assignmentMatch = line.match(/(?:(?:var|let|const)\s+)?(\w+)\s*=\s*(.+)/);
203
+ if (!assignmentMatch)
204
+ continue;
205
+ const [, varName, rhs] = assignmentMatch;
206
+ for (const { pattern, type } of JS_TAINTED_PATTERNS) {
207
+ if (pattern.test(rhs)) {
208
+ const alreadyExists = sources.some(s => s.line === lineNumber && s.type === type);
209
+ if (!alreadyExists) {
210
+ sources.push({
211
+ type,
212
+ location: `${varName} = ${rhs.trim().substring(0, 50)}${rhs.length > 50 ? '...' : ''}`,
213
+ severity: 'high',
214
+ line: lineNumber,
215
+ confidence: 1.0,
216
+ variable: varName,
217
+ });
218
+ }
219
+ break;
220
+ }
221
+ }
222
+ }
223
+ return sources;
224
+ }
225
+ function findPythonAssignmentSources(sourceCode, language) {
226
+ if (language !== 'python')
227
+ return [];
228
+ const sources = [];
229
+ const lines = sourceCode.split('\n');
230
+ for (let lineNum = 0; lineNum < lines.length; lineNum++) {
231
+ const line = lines[lineNum];
232
+ const lineNumber = lineNum + 1;
233
+ if (line.trimStart().startsWith('#'))
234
+ continue;
235
+ const assignmentMatch = line.match(/^(\s*\w[\w.]*)\s*(?::\s*\w[\w\[\], .]*)?\s*=\s*(.+)/);
236
+ if (!assignmentMatch)
237
+ continue;
238
+ const rhs = assignmentMatch[2];
239
+ for (const { pattern, type } of PYTHON_TAINTED_PATTERNS) {
240
+ if (pattern.test(rhs)) {
241
+ const varMatch = line.match(/^\s*(\w+)\s*/);
242
+ const varName = varMatch ? varMatch[1] : 'unknown';
243
+ const alreadyExists = sources.some(s => s.line === lineNumber && s.type === type);
244
+ if (!alreadyExists) {
245
+ sources.push({
246
+ type,
247
+ location: `${varName} = ${rhs.trim().substring(0, 50)}${rhs.length > 50 ? '...' : ''}`,
248
+ severity: 'high',
249
+ line: lineNumber,
250
+ confidence: 0.95,
251
+ variable: varName,
252
+ });
253
+ }
254
+ break;
255
+ }
256
+ }
257
+ }
258
+ return sources;
259
+ }
260
+ export function buildPythonTaintedVars(sourceCode) {
261
+ const tainted = new Map();
262
+ const containerTainted = new Map();
263
+ const lines = sourceCode.split('\n');
264
+ for (let i = 0; i < lines.length; i++) {
265
+ const line = lines[i];
266
+ if (line.trimStart().startsWith('#'))
267
+ continue;
268
+ const subscriptAssign = line.match(/^\s*(\w+)\[(['"])([^'"]+)\2\]\s*=\s*(.+)$/);
269
+ if (subscriptAssign) {
270
+ const [, container, , key, rhs2] = subscriptAssign;
271
+ const isTaintedRhs = [...tainted.keys()].some(v => new RegExp(`\\b${v}\\b`).test(rhs2));
272
+ if (isTaintedRhs)
273
+ containerTainted.set(`${container}['${key}']`, i + 1);
274
+ continue;
275
+ }
276
+ const setCallMatch = line.match(/^\s*(\w+)\.set\s*\(\s*(['"])([^'"]+)\2\s*,\s*(['"])([^'"]+)\4\s*,\s*(.+?)\s*\)$/);
277
+ if (setCallMatch) {
278
+ const [, obj, , section, , key, rhs2] = setCallMatch;
279
+ const isTaintedRhs = [...tainted.keys()].some(v => new RegExp(`\\b${v}\\b`).test(rhs2));
280
+ if (isTaintedRhs)
281
+ containerTainted.set(`${obj}['${section}']['${key}']`, i + 1);
282
+ continue;
283
+ }
284
+ const augAssign = line.match(/^\s*(\w+)\s*\+=\s*(.+)$/);
285
+ if (augAssign) {
286
+ const [, augLhs, augRhs] = augAssign;
287
+ const rhsTainted = [...tainted.keys()].some(v => new RegExp(`\\b${v}\\b`).test(augRhs));
288
+ if (rhsTainted || tainted.has(augLhs))
289
+ tainted.set(augLhs, tainted.get(augLhs) ?? (i + 1));
290
+ continue;
291
+ }
292
+ const forLoopMatch = line.match(/^\s*for\s+(\w+)\s+in\s+(.+?)(?:\s*:\s*)?$/);
293
+ if (forLoopMatch) {
294
+ const [, iterVar, iterExpr] = forLoopMatch;
295
+ const isDirectSource = PYTHON_TAINTED_PATTERNS.some(p => p.pattern.test(iterExpr));
296
+ const isPropagated = [...tainted.keys()].some(v => new RegExp(`\\b${v}\\b`).test(iterExpr));
297
+ if (isDirectSource || isPropagated)
298
+ tainted.set(iterVar, i + 1);
299
+ continue;
300
+ }
301
+ const assignMatch = line.match(/^\s*(\w+)\s*=\s*(.+)$/);
302
+ if (!assignMatch)
303
+ continue;
304
+ const [, lhs, rhs] = assignMatch;
305
+ const isDirectSource = PYTHON_TAINTED_PATTERNS.some(p => p.pattern.test(rhs));
306
+ let propagatedFrom;
307
+ const dictAccessMatch = rhs.trim().match(/^(\w+)\[(['"])([^'"]+)\2\]$/);
308
+ if (dictAccessMatch) {
309
+ const [, container, , key] = dictAccessMatch;
310
+ if (containerTainted.has(`${container}['${key}']`))
311
+ propagatedFrom = `${container}['${key}']`;
312
+ }
313
+ if (!propagatedFrom) {
314
+ const confGetMatch = rhs.trim().match(/^(\w+)\.get\s*\(\s*(['"])([^'"]+)\2\s*,\s*(['"])([^'"]+)\4\s*\)$/);
315
+ if (confGetMatch) {
316
+ const [, obj, , section, , key] = confGetMatch;
317
+ if (containerTainted.has(`${obj}['${section}']['${key}']`))
318
+ propagatedFrom = `${obj}['${section}']['${key}']`;
319
+ }
320
+ }
321
+ if (!propagatedFrom) {
322
+ const isSafeEnvRead = /\bos\.environ\.get\s*\(/.test(rhs) || /\bos\.getenv\s*\(/.test(rhs);
323
+ if (!isSafeEnvRead)
324
+ propagatedFrom = [...tainted.keys()].find(v => new RegExp(`\\b${v}\\b`).test(rhs));
325
+ }
326
+ if (isDirectSource) {
327
+ tainted.set(lhs, i + 1);
328
+ }
329
+ else if (propagatedFrom !== undefined) {
330
+ tainted.set(lhs, i + 1);
331
+ }
332
+ else if (tainted.has(lhs)) {
333
+ const prevNonBlank = lines.slice(0, i).reverse().find(l => l.trim() && !l.trimStart().startsWith('#'));
334
+ const isNullGuard = prevNonBlank !== undefined && (new RegExp(`^\\s*if\\s+not\\s+${lhs}\\s*:`).test(prevNonBlank) ||
335
+ new RegExp(`^\\s*if\\s+${lhs}\\s+is\\s+None\\s*:`).test(prevNonBlank));
336
+ if (!isNullGuard)
337
+ tainted.delete(lhs);
338
+ }
339
+ }
340
+ return tainted;
341
+ }
342
+ export function buildPythonSanitizedVars(sourceCode, pyTaintedVars) {
343
+ const sanitized = new Set();
344
+ const lines = sourceCode.split('\n');
345
+ // Apostrophe-guard: if "'" in var: return/raise/abort/...
346
+ for (let i = 0; i < lines.length - 1; i++) {
347
+ const m = lines[i].match(/^\s*if\s+(?:'(?:[^'\\]|\\.)*'|"(?:[^"\\]|\\.)*")\s+in\s+(\w+)\s*:/);
348
+ if (!m)
349
+ continue;
350
+ const ifIndent = (lines[i].match(/^(\s*)/) ?? ['', ''])[1].length;
351
+ let foundExit = false;
352
+ for (let j = i + 1; j <= Math.min(i + 5, lines.length - 1); j++) {
353
+ const jLine = lines[j] ?? '';
354
+ if (!jLine.trim())
355
+ continue;
356
+ const jIndent = (jLine.match(/^(\s*)/) ?? ['', ''])[1].length;
357
+ if (jIndent <= ifIndent)
358
+ break;
359
+ if (/^(return|raise|abort|continue|break)\b/.test(jLine.trim())) {
360
+ foundExit = true;
361
+ break;
362
+ }
363
+ }
364
+ if (foundExit)
365
+ sanitized.add(m[1]);
366
+ }
367
+ // Propagate sanitization through assignments: if bar is sanitized and query = f"...{bar}...", query is also sanitized
368
+ for (const line of lines) {
369
+ const am = line.match(/^\s*(\w+)\s*=\s*(.+)$/);
370
+ if (!am)
371
+ continue;
372
+ const [, lhs, rhs] = am;
373
+ if ([...sanitized].some(v => new RegExp(`\\b${v}\\b`).test(rhs)))
374
+ sanitized.add(lhs);
375
+ }
376
+ // Inline .replace() sanitizer: query = f"...{bar.replace('\'', '&apos;')}..."
377
+ for (const line of lines) {
378
+ const am = line.match(/^\s*(\w+)\s*=\s*(.+)$/);
379
+ if (!am)
380
+ continue;
381
+ const [, lhs, rhs] = am;
382
+ const hasReplaceOnTainted = [...pyTaintedVars.keys()].some(v => new RegExp(`\\b${v}\\.replace\\s*\\(`).test(rhs));
383
+ if (hasReplaceOnTainted)
384
+ sanitized.add(lhs);
385
+ }
386
+ return sanitized;
387
+ }
388
+ export function findPythonTrustBoundaryViolations(sourceCode, taintedVars) {
389
+ if (taintedVars.size === 0)
390
+ return [];
391
+ const violations = [];
392
+ const lines = sourceCode.split('\n');
393
+ const SESSION_WRITE = /(?:flask\.)?session\[([^\]]+)\]\s*=\s*(.+)$/;
394
+ const taintedKeys = [...taintedVars.keys()];
395
+ const earliestSourceLine = Math.min(...[...taintedVars.values()]);
396
+ for (let i = 0; i < lines.length; i++) {
397
+ const line = lines[i];
398
+ if (line.trimStart().startsWith('#'))
399
+ continue;
400
+ const m = line.match(SESSION_WRITE);
401
+ if (!m)
402
+ continue;
403
+ const [, keyExpr, valueExpr] = m;
404
+ const keyTainted = taintedKeys.some(v => new RegExp(`\\b${v}\\b`).test(keyExpr));
405
+ const valueTainted = taintedKeys.some(v => new RegExp(`\\b${v}\\b`).test(valueExpr));
406
+ if (keyTainted || valueTainted)
407
+ violations.push({ sourceLine: earliestSourceLine, sinkLine: i + 1 });
408
+ }
409
+ return violations;
410
+ }
411
+ function findPythonReturnXSSSinks(sourceCode, taintedVars) {
412
+ if (taintedVars.size === 0)
413
+ return [];
414
+ const sinks = [];
415
+ const lines = sourceCode.split('\n');
416
+ const taintedKeys = [...taintedVars.keys()];
417
+ for (let i = 0; i < lines.length; i++) {
418
+ const line = lines[i];
419
+ if (line.trimStart().startsWith('#'))
420
+ continue;
421
+ const returnMatch = line.match(/^\s*(?:return|yield)\s+(.+)$/);
422
+ if (!returnMatch)
423
+ continue;
424
+ const expr = returnMatch[1];
425
+ const hasTaintedVar = taintedKeys.some(v => new RegExp(`\\b${v}\\b`).test(expr));
426
+ if (!hasTaintedVar)
427
+ continue;
428
+ const looksLikeHTML = expr.includes('<') || /['"]\s*\+/.test(expr) || /\+\s*['"]/.test(expr) || /f['"][^'"]*\{/.test(expr);
429
+ if (!looksLikeHTML)
430
+ continue;
431
+ sinks.push({ sinkLine: i + 1 });
432
+ }
433
+ return sinks;
434
+ }
435
+ function findJavaScriptDOMSinks(sourceCode, language) {
436
+ if (!['javascript', 'typescript'].includes(language))
437
+ return [];
438
+ const sinks = [];
439
+ const lines = sourceCode.split('\n');
440
+ for (let lineNum = 0; lineNum < lines.length; lineNum++) {
441
+ const line = lines[lineNum];
442
+ const lineNumber = lineNum + 1;
443
+ for (const { pattern, type, cwe, severity } of JS_DOM_XSS_SINKS) {
444
+ if (pattern.test(line)) {
445
+ let method = 'innerHTML';
446
+ if (line.includes('.outerHTML'))
447
+ method = 'outerHTML';
448
+ else if (line.includes('document.write('))
449
+ method = 'document.write';
450
+ else if (line.includes('document.writeln('))
451
+ method = 'document.writeln';
452
+ else if (line.includes('.insertAdjacentHTML'))
453
+ method = 'insertAdjacentHTML';
454
+ else if (line.includes('.src'))
455
+ method = 'src';
456
+ else if (line.includes('.href'))
457
+ method = 'href';
458
+ const alreadyExists = sinks.some(s => s.line === lineNumber && s.cwe === cwe);
459
+ if (!alreadyExists) {
460
+ sinks.push({ type, cwe, severity, line: lineNumber, location: line.trim().substring(0, 80), method });
461
+ }
462
+ break;
463
+ }
464
+ }
465
+ }
466
+ return sinks;
467
+ }
468
+ export function buildJavaScriptTaintedVars(sourceCode, language) {
469
+ if (!['javascript', 'typescript'].includes(language))
470
+ return new Map();
471
+ const tainted = new Map();
472
+ const lines = sourceCode.split('\n');
473
+ for (let i = 0; i < lines.length; i++) {
474
+ const line = lines[i];
475
+ const trimmed = line.trimStart();
476
+ if (trimmed.startsWith('//') || trimmed.startsWith('*'))
477
+ continue;
478
+ const assignMatch = line.match(/(?:(?:var|let|const)\s+)?(\w+)\s*=\s*(.+)/);
479
+ if (!assignMatch)
480
+ continue;
481
+ const [, lhs, rhs] = assignMatch;
482
+ if (['if', 'while', 'for', 'return', 'true', 'false', 'null', 'undefined', 'case'].includes(lhs))
483
+ continue;
484
+ const isDirectSource = JS_TAINTED_PATTERNS.some(p => p.pattern.test(rhs));
485
+ const isTaintedPropagation = tainted.size > 0 && [...tainted.keys()].some(v => new RegExp(`\\b${v}\\b`).test(rhs));
486
+ if (isDirectSource || isTaintedPropagation)
487
+ tainted.set(lhs, i + 1);
488
+ }
489
+ return tainted;
490
+ }
491
+ //# sourceMappingURL=language-sources-pass.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"language-sources-pass.js","sourceRoot":"","sources":["../../../src/analysis/passes/language-sources-pass.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAOH,8EAA8E;AAC9E,0CAA0C;AAC1C,8EAA8E;AAE9E,MAAM,gBAAgB,GAAG;IACvB,EAAE,OAAO,EAAE,iBAAiB,EAAE,IAAI,EAAE,KAAc,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAmB,EAAE;IAClG,EAAE,OAAO,EAAE,iBAAiB,EAAE,IAAI,EAAE,KAAc,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAmB,EAAE;IAClG,EAAE,OAAO,EAAE,sBAAsB,EAAE,IAAI,EAAE,KAAc,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAmB,EAAE;IACvG,EAAE,OAAO,EAAE,wBAAwB,EAAE,IAAI,EAAE,KAAc,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAmB,EAAE;IACzG,EAAE,OAAO,EAAE,2BAA2B,EAAE,IAAI,EAAE,KAAc,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAmB,EAAE;IAC5G,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,KAAc,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAe,EAAE;IACxF,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,KAAc,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAe,EAAE;CAC1F,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,EAAE,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,YAAqB,EAAE;IAC1D,EAAE,OAAO,EAAE,iBAAiB,EAAE,IAAI,EAAE,YAAqB,EAAE;IAC3D,EAAE,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,WAAoB,EAAE;IACxD,EAAE,OAAO,EAAE,kBAAkB,EAAE,IAAI,EAAE,aAAsB,EAAE;IAC7D,EAAE,OAAO,EAAE,kBAAkB,EAAE,IAAI,EAAE,aAAsB,EAAE;IAC7D,EAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,WAAoB,EAAE;IACvD,EAAE,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,WAAoB,EAAE;IACxD,EAAE,OAAO,EAAE,sBAAsB,EAAE,IAAI,EAAE,WAAoB,EAAE;IAC/D,EAAE,OAAO,EAAE,iBAAiB,EAAE,IAAI,EAAE,YAAqB,EAAE;IAC3D,EAAE,OAAO,EAAE,oBAAoB,EAAE,IAAI,EAAE,YAAqB,EAAE;IAC9D,EAAE,OAAO,EAAE,qBAAqB,EAAE,IAAI,EAAE,YAAqB,EAAE;IAC/D,EAAE,OAAO,EAAE,mBAAmB,EAAE,IAAI,EAAE,WAAoB,EAAE;IAC5D,EAAE,OAAO,EAAE,sBAAsB,EAAE,IAAI,EAAE,aAAsB,EAAE;IACjE,EAAE,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,YAAqB,EAAE;IAC1D,EAAE,OAAO,EAAE,iBAAiB,EAAE,IAAI,EAAE,YAAqB,EAAE;IAC3D,EAAE,OAAO,EAAE,kBAAkB,EAAE,IAAI,EAAE,WAAoB,EAAE;IAC3D,EAAE,OAAO,EAAE,kBAAkB,EAAE,IAAI,EAAE,WAAoB,EAAE;IAC3D,EAAE,OAAO,EAAE,mBAAmB,EAAE,IAAI,EAAE,UAAmB,EAAE;IAC3D,EAAE,OAAO,EAAE,sBAAsB,EAAE,IAAI,EAAE,YAAqB,EAAE;IAChE,EAAE,OAAO,EAAE,oBAAoB,EAAE,IAAI,EAAE,YAAqB,EAAE;IAC9D,EAAE,OAAO,EAAE,oBAAoB,EAAE,IAAI,EAAE,WAAoB,EAAE;IAC7D,EAAE,OAAO,EAAE,8BAA8B,EAAE,IAAI,EAAE,WAAoB,EAAE;IACvE,EAAE,OAAO,EAAE,6BAA6B,EAAE,IAAI,EAAE,WAAoB,EAAE;IACtE,iFAAiF;IACjF,uFAAuF;IACvF,8EAA8E;IAC9E,EAAE,OAAO,EAAE,qCAAqC,EAAE,IAAI,EAAE,WAAoB,EAAE;CAC/E,CAAC;AAEF,MAAM,uBAAuB,GAAG;IAC9B,EAAE,OAAO,EAAE,mBAAmB,EAAe,IAAI,EAAE,YAA2B,EAAE;IAChF,EAAE,OAAO,EAAE,mBAAmB,EAAe,IAAI,EAAE,WAA2B,EAAE;IAChF,EAAE,OAAO,EAAE,mBAAmB,EAAe,IAAI,EAAE,WAA2B,EAAE;IAChF,EAAE,OAAO,EAAE,mBAAmB,EAAe,IAAI,EAAE,WAA2B,EAAE;IAChF,EAAE,OAAO,EAAE,qBAAqB,EAAa,IAAI,EAAE,YAA2B,EAAE;IAChF,EAAE,OAAO,EAAE,uBAAuB,EAAW,IAAI,EAAE,aAA2B,EAAE;IAChF,EAAE,OAAO,EAAE,sBAAsB,EAAY,IAAI,EAAE,aAA2B,EAAE;IAChF,EAAE,OAAO,EAAE,kBAAkB,EAAgB,IAAI,EAAE,YAA2B,EAAE;IAChF,EAAE,OAAO,EAAE,mBAAmB,EAAe,IAAI,EAAE,WAA2B,EAAE;IAChF,EAAE,OAAO,EAAE,mBAAmB,EAAe,IAAI,EAAE,aAA2B,EAAE;IAChF,EAAE,OAAO,EAAE,oBAAoB,EAAc,IAAI,EAAE,YAA2B,EAAE;IAChF,EAAE,OAAO,EAAE,2BAA2B,EAAO,IAAI,EAAE,YAA2B,EAAE;IAChF,EAAE,OAAO,EAAE,0BAA0B,EAAQ,IAAI,EAAE,YAA2B,EAAE;IAChF,EAAE,OAAO,EAAE,2BAA2B,EAAO,IAAI,EAAE,YAA2B,EAAE;IAChF,EAAE,OAAO,EAAE,0BAA0B,EAAQ,IAAI,EAAE,WAA2B,EAAE;IAChF,EAAE,OAAO,EAAE,2BAA2B,EAAO,IAAI,EAAE,WAA2B,EAAE;IAChF,EAAE,OAAO,EAAE,4BAA4B,EAAM,IAAI,EAAE,YAA2B,EAAE;IAChF,EAAE,OAAO,EAAE,yBAAyB,EAAS,IAAI,EAAE,aAA2B,EAAE;IAChF,EAAE,OAAO,EAAE,yBAAyB,EAAS,IAAI,EAAE,aAA2B,EAAE;CACjF,CAAC;AA0BF,8EAA8E;AAC9E,OAAO;AACP,8EAA8E;AAE9E,MAAM,OAAO,mBAAmB;IACrB,IAAI,GAAG,kBAAkB,CAAC;IAC1B,QAAQ,GAAG,UAAmB,CAAC;IAExC,GAAG,CAAC,GAAgB;QAClB,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC;QACtC,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,CAA2B,sBAAsB,CAAC,CAAC;QAElF,MAAM,iBAAiB,GAAkB,EAAE,CAAC;QAC5C,MAAM,eAAe,GAAgB,EAAE,CAAC;QAExC,4EAA4E;QAC5E,iBAAiB,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,KAAK,EAAE,SAAS,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAC,CAAC;QAExF,2EAA2E;QAC3E,iBAAiB,CAAC,IAAI,CAAC,GAAG,+BAA+B,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;QAE3E,MAAM,UAAU,GAAG,sBAAsB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC1D,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;YAC3B,MAAM,aAAa,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC;YACtF,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,eAAe,CAAC,IAAI,CAAC;oBACnB,IAAI,EAAE,KAAK;oBACX,GAAG,EAAE,CAAC,CAAC,GAAG;oBACV,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;oBACpB,MAAM,EAAE,CAAC,CAAC,MAAM;oBAChB,UAAU,EAAE,GAAG;iBAChB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,2EAA2E;QAC3E,iBAAiB,CAAC,IAAI,CAAC,GAAG,2BAA2B,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;QAEvE,MAAM,aAAa,GAAG,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,EAAkB,CAAC;QACvG,MAAM,eAAe,GAAG,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,wBAAwB,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,EAAU,CAAC;QAElH,IAAI,QAAQ,KAAK,QAAQ,IAAI,aAAa,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YACpD,KAAK,MAAM,CAAC,IAAI,iCAAiC,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE,CAAC;gBACvE,MAAM,aAAa,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC;gBACtG,IAAI,CAAC,aAAa,EAAE,CAAC;oBACnB,eAAe,CAAC,IAAI,CAAC;wBACnB,IAAI,EAAE,gBAAgB;wBACtB,GAAG,EAAE,SAAS;wBACd,IAAI,EAAE,CAAC,CAAC,QAAQ;wBAChB,QAAQ,EAAE,yBAAyB,CAAC,CAAC,QAAQ,EAAE;wBAC/C,UAAU,EAAE,IAAI;qBACjB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,KAAK,MAAM,CAAC,IAAI,wBAAwB,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE,CAAC;gBAC9D,MAAM,aAAa,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC;gBAC3F,IAAI,CAAC,aAAa,EAAE,CAAC;oBACnB,eAAe,CAAC,IAAI,CAAC;wBACnB,IAAI,EAAE,KAAK;wBACX,GAAG,EAAE,QAAQ;wBACb,IAAI,EAAE,CAAC,CAAC,QAAQ;wBAChB,QAAQ,EAAE,uCAAuC,CAAC,CAAC,QAAQ,EAAE;wBAC7D,UAAU,EAAE,GAAG;qBAChB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,aAAa,GAAG,0BAA0B,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAEjE,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,aAAa,EAAE,eAAe,EAAE,aAAa,EAAE,CAAC;IAC/F,CAAC;CACF;AAQD,SAAS,iBAAiB,CACxB,KAAiB,EACjB,kBAA+C,EAC/C,WAAmB;IAEnB,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,IAAI,kBAAkB,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC;IAElD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC;YAC/B,IAAI,kBAAkB,GAAkB,IAAI,CAAC;YAC7C,IAAI,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1D,kBAAkB,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YACpF,CAAC;iBAAM,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAChE,kBAAkB,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YACpF,CAAC;YAED,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACnC,MAAM,aAAa,GAAG,kBAAkB;oBACtC,CAAC,CAAC,CAAC,kBAAkB,EAAE,UAAU,CAAC;oBAClC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;gBAEjB,KAAK,MAAM,SAAS,IAAI,aAAa,EAAE,CAAC;oBACtC,MAAM,UAAU,GAAG,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;oBACrD,IAAI,UAAU,IAAI,UAAU,CAAC,SAAS,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;wBACrD,OAAO,CAAC,IAAI,CAAC;4BACX,IAAI,EAAE,mBAAmB;4BACzB,QAAQ,EAAE,GAAG,IAAI,CAAC,IAAI,IAAI,UAAU,6BAA6B,SAAS,8BAA8B,UAAU,CAAC,WAAW,IAAI;4BAClI,QAAQ,EAAE,MAAM;4BAChB,IAAI,EAAE,MAAM,CAAC,UAAU;4BACvB,UAAU,EAAE,IAAI;yBACjB,CAAC,CAAC;wBACH,MAAM;oBACR,CAAC;gBACH,CAAC;YACH,CAAC;YAED,KAAK,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,IAAI,kBAAkB,EAAE,CAAC;gBACzD,IAAI,UAAU,CAAC,SAAS,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;oBACvC,IAAI,UAAU,KAAK,SAAS,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;wBAC/D,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,IAAI,IAAI,UAAU,IAAI,CAAC,CAAC,CAAC;wBAC5F,IAAI,CAAC,YAAY,EAAE,CAAC;4BAClB,OAAO,CAAC,IAAI,CAAC;gCACX,IAAI,EAAE,mBAAmB;gCACzB,QAAQ,EAAE,GAAG,IAAI,CAAC,IAAI,IAAI,UAAU,6BAA6B,SAAS,8BAA8B,UAAU,CAAC,WAAW,IAAI;gCAClI,QAAQ,EAAE,MAAM;gCAChB,IAAI,EAAE,MAAM,CAAC,UAAU;gCACvB,UAAU,EAAE,IAAI;6BACjB,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,+BAA+B,CAAC,UAAkB,EAAE,QAAgB;IAC3E,IAAI,CAAC,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAC;IAChE,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAErC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC;QACxD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5B,MAAM,UAAU,GAAG,OAAO,GAAG,CAAC,CAAC;QAC/B,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAChF,IAAI,CAAC,eAAe;YAAE,SAAS;QAC/B,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,GAAG,eAAe,CAAC;QAEzC,KAAK,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,mBAAmB,EAAE,CAAC;YACpD,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACtB,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;gBAClF,IAAI,CAAC,aAAa,EAAE,CAAC;oBACnB,OAAO,CAAC,IAAI,CAAC;wBACX,IAAI;wBACJ,QAAQ,EAAE,GAAG,OAAO,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;wBACtF,QAAQ,EAAE,MAAM;wBAChB,IAAI,EAAE,UAAU;wBAChB,UAAU,EAAE,GAAG;wBACf,QAAQ,EAAE,OAAO;qBAClB,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,2BAA2B,CAAC,UAAkB,EAAE,QAAgB;IACvE,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACrC,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAErC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC;QACxD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5B,MAAM,UAAU,GAAG,OAAO,GAAG,CAAC,CAAC;QAC/B,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAE/C,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,qDAAqD,CAAC,CAAC;QAC1F,IAAI,CAAC,eAAe;YAAE,SAAS;QAC/B,MAAM,GAAG,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC;QAE/B,KAAK,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,uBAAuB,EAAE,CAAC;YACxD,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACtB,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;gBAC5C,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBACnD,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;gBAClF,IAAI,CAAC,aAAa,EAAE,CAAC;oBACnB,OAAO,CAAC,IAAI,CAAC;wBACX,IAAI;wBACJ,QAAQ,EAAE,GAAG,OAAO,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;wBACtF,QAAQ,EAAE,MAAM;wBAChB,IAAI,EAAE,UAAU;wBAChB,UAAU,EAAE,IAAI;wBAChB,QAAQ,EAAE,OAAO;qBAClB,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,UAAkB;IACvD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAkB,CAAC;IACnD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAErC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAE/C,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAChF,IAAI,eAAe,EAAE,CAAC;YACpB,MAAM,CAAC,EAAE,SAAS,EAAE,AAAD,EAAG,GAAG,EAAE,IAAI,CAAC,GAAG,eAAe,CAAC;YACnD,MAAM,YAAY,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YACxF,IAAI,YAAY;gBAAE,gBAAgB,CAAC,GAAG,CAAC,GAAG,SAAS,KAAK,GAAG,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACxE,SAAS;QACX,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,iFAAiF,CAAC,CAAC;QACnH,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,CAAC,EAAE,GAAG,EAAE,AAAD,EAAG,OAAO,EAAE,AAAD,EAAG,GAAG,EAAE,IAAI,CAAC,GAAG,YAAY,CAAC;YACrD,MAAM,YAAY,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YACxF,IAAI,YAAY;gBAAE,gBAAgB,CAAC,GAAG,CAAC,GAAG,GAAG,KAAK,OAAO,OAAO,GAAG,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YAChF,SAAS;QACX,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;QACxD,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC;YACrC,MAAM,UAAU,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;YACxF,IAAI,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC3F,SAAS;QACX,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC7E,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,GAAG,YAAY,CAAC;YAC3C,MAAM,cAAc,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;YACnF,MAAM,YAAY,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC5F,IAAI,cAAc,IAAI,YAAY;gBAAE,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YAChE,SAAS;QACX,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACxD,IAAI,CAAC,WAAW;YAAE,SAAS;QAC3B,MAAM,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,WAAW,CAAC;QAEjC,MAAM,cAAc,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9E,IAAI,cAAkC,CAAC;QAEvC,MAAM,eAAe,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACxE,IAAI,eAAe,EAAE,CAAC;YACpB,MAAM,CAAC,EAAE,SAAS,EAAE,AAAD,EAAG,GAAG,CAAC,GAAG,eAAe,CAAC;YAC7C,IAAI,gBAAgB,CAAC,GAAG,CAAC,GAAG,SAAS,KAAK,GAAG,IAAI,CAAC;gBAAE,cAAc,GAAG,GAAG,SAAS,KAAK,GAAG,IAAI,CAAC;QAChG,CAAC;QAED,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,MAAM,YAAY,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,kEAAkE,CAAC,CAAC;YAC1G,IAAI,YAAY,EAAE,CAAC;gBACjB,MAAM,CAAC,EAAE,GAAG,EAAE,AAAD,EAAG,OAAO,EAAE,AAAD,EAAG,GAAG,CAAC,GAAG,YAAY,CAAC;gBAC/C,IAAI,gBAAgB,CAAC,GAAG,CAAC,GAAG,GAAG,KAAK,OAAO,OAAO,GAAG,IAAI,CAAC;oBAAE,cAAc,GAAG,GAAG,GAAG,KAAK,OAAO,OAAO,GAAG,IAAI,CAAC;YAChH,CAAC;QACH,CAAC;QAED,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,MAAM,aAAa,GAAG,yBAAyB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC3F,IAAI,CAAC,aAAa;gBAAE,cAAc,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACzG,CAAC;QAED,IAAI,cAAc,EAAE,CAAC;YACnB,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1B,CAAC;aAAM,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;YACxC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1B,CAAC;aAAM,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;YACvG,MAAM,WAAW,GAAG,YAAY,KAAK,SAAS,IAAI,CAChD,IAAI,MAAM,CAAC,qBAAqB,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC;gBAC9D,IAAI,MAAM,CAAC,cAAc,GAAG,qBAAqB,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CACtE,CAAC;YACF,IAAI,CAAC,WAAW;gBAAE,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,UAAkB,EAAE,aAAkC;IAC7F,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAErC,0DAA0D;IAC1D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1C,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,mEAAmE,CAAC,CAAC;QAC9F,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAClE,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAChE,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC7B,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;gBAAE,SAAS;YAC5B,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YAC9D,IAAI,OAAO,IAAI,QAAQ;gBAAE,MAAM;YAC/B,IAAI,wCAAwC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;gBAAC,SAAS,GAAG,IAAI,CAAC;gBAAC,MAAM;YAAC,CAAC;QAC/F,CAAC;QACD,IAAI,SAAS;YAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC;IAED,sHAAsH;IACtH,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC/C,IAAI,CAAC,EAAE;YAAE,SAAS;QAClB,MAAM,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC;QACxB,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAAE,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACvF,CAAC;IAED,8EAA8E;IAC9E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC/C,IAAI,CAAC,EAAE;YAAE,SAAS;QAClB,MAAM,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC;QACxB,MAAM,mBAAmB,GAAG,CAAC,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAC7D,IAAI,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CACjD,CAAC;QACF,IAAI,mBAAmB;YAAE,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC9C,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,UAAkB,EAClB,WAAgC;IAEhC,IAAI,WAAW,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACtC,MAAM,UAAU,GAAoD,EAAE,CAAC;IACvE,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,aAAa,GAAG,6CAA6C,CAAC;IACpE,MAAM,WAAW,GAAG,CAAC,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5C,MAAM,kBAAkB,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAElE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAC/C,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QACpC,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,MAAM,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,UAAU,GAAK,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QACnF,MAAM,YAAY,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QACrF,IAAI,UAAU,IAAI,YAAY;YAAE,UAAU,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,kBAAkB,EAAE,QAAQ,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACvG,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,wBAAwB,CAC/B,UAAkB,EAClB,WAAgC;IAEhC,IAAI,WAAW,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACtC,MAAM,KAAK,GAAgC,EAAE,CAAC;IAC9C,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,WAAW,GAAG,CAAC,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC;IAE5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAC/C,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAC/D,IAAI,CAAC,WAAW;YAAE,SAAS;QAC3B,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,aAAa,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACjF,IAAI,CAAC,aAAa;YAAE,SAAS;QAC7B,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3H,IAAI,CAAC,aAAa;YAAE,SAAS;QAC7B,KAAK,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClC,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,sBAAsB,CAAC,UAAkB,EAAE,QAAgB;IAGlE,IAAI,CAAC,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAC;IAChE,MAAM,KAAK,GAA4G,EAAE,CAAC;IAC1H,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAErC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC;QACxD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5B,MAAM,UAAU,GAAG,OAAO,GAAG,CAAC,CAAC;QAC/B,KAAK,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,gBAAgB,EAAE,CAAC;YAChE,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvB,IAAI,MAAM,GAAG,WAAW,CAAC;gBACzB,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;oBAAE,MAAM,GAAG,WAAW,CAAC;qBACjD,IAAI,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC;oBAAE,MAAM,GAAG,gBAAgB,CAAC;qBAChE,IAAI,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC;oBAAE,MAAM,GAAG,kBAAkB,CAAC;qBACpE,IAAI,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC;oBAAE,MAAM,GAAG,oBAAoB,CAAC;qBACxE,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;oBAAE,MAAM,GAAG,KAAK,CAAC;qBAC1C,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;oBAAE,MAAM,GAAG,MAAM,CAAC;gBAEjD,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;gBAC9E,IAAI,CAAC,aAAa,EAAE,CAAC;oBACnB,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;gBACxG,CAAC;gBACD,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,UAAkB,EAAE,QAAgB;IAC7E,IAAI,CAAC,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,GAAG,EAAE,CAAC;IACvE,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAErC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QACjC,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAClE,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC5E,IAAI,CAAC,WAAW;YAAE,SAAS;QAC3B,MAAM,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,WAAW,CAAC;QACjC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,SAAS;QAC3G,MAAM,cAAc,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1E,MAAM,oBAAoB,GAAG,OAAO,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACnH,IAAI,cAAc,IAAI,oBAAoB;YAAE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtE,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}
@@ -0,0 +1,34 @@
1
+ /**
2
+ * Pass #81: leaked-global (CWE-1109, category: reliability)
3
+ *
4
+ * Detects assignments to undeclared variables inside function bodies in
5
+ * JavaScript/TypeScript. In non-strict mode JS (and absent `"use strict"`)
6
+ * writing to a variable that has no `let`/`const`/`var` declaration anywhere
7
+ * in the enclosing function silently creates (or mutates) a property on the
8
+ * global object — a classic source of hard-to-trace bugs.
9
+ *
10
+ * Detection strategy:
11
+ * 1. Language filter: JS/TS only.
12
+ * 2. Build a ScopeGraph for declaration-keyword awareness.
13
+ * 3. For each `kind='local'` def whose source line has NO declaration keyword:
14
+ * - Skip intentional throwaway names (_, err, e, …) and loop vars.
15
+ * - Skip if the variable IS declared (hasDeclKeyword=true) somewhere
16
+ * else in the same enclosing function → it is a legitimate reassignment.
17
+ * - Skip top-level assignments (methodStart === -1) — module-level bare
18
+ * assignments are an ES module pattern.
19
+ * - Flag the rest as potential global leaks.
20
+ */
21
+ import type { AnalysisPass, PassContext } from '../../graph/analysis-pass.js';
22
+ export interface LeakedGlobalResult {
23
+ leaks: Array<{
24
+ line: number;
25
+ variable: string;
26
+ /** Name of the enclosing function/method, or null if unavailable. */
27
+ enclosingFunction: string | null;
28
+ }>;
29
+ }
30
+ export declare class LeakedGlobalPass implements AnalysisPass<LeakedGlobalResult> {
31
+ readonly name = "leaked-global";
32
+ readonly category: "reliability";
33
+ run(ctx: PassContext): LeakedGlobalResult;
34
+ }