circle-ir 3.8.4 → 3.9.8
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +82 -5
- package/dist/analysis/dfg-verifier.d.ts +3 -14
- package/dist/analysis/dfg-verifier.js +43 -74
- package/dist/analysis/dfg-verifier.js.map +1 -1
- package/dist/analysis/interprocedural.d.ts +5 -1
- package/dist/analysis/interprocedural.js +62 -60
- package/dist/analysis/interprocedural.js.map +1 -1
- package/dist/analysis/metrics/index.d.ts +2 -0
- package/dist/analysis/metrics/index.js +2 -0
- package/dist/analysis/metrics/index.js.map +1 -0
- package/dist/analysis/metrics/metric-pass.d.ts +27 -0
- package/dist/analysis/metrics/metric-pass.js +2 -0
- package/dist/analysis/metrics/metric-pass.js.map +1 -0
- package/dist/analysis/metrics/metric-runner.d.ts +21 -0
- package/dist/analysis/metrics/metric-runner.js +47 -0
- package/dist/analysis/metrics/metric-runner.js.map +1 -0
- package/dist/analysis/metrics/passes/cohesion-metrics-pass.d.ts +21 -0
- package/dist/analysis/metrics/passes/cohesion-metrics-pass.js +100 -0
- package/dist/analysis/metrics/passes/cohesion-metrics-pass.js.map +1 -0
- package/dist/analysis/metrics/passes/complexity-metrics-pass.d.ts +15 -0
- package/dist/analysis/metrics/passes/complexity-metrics-pass.js +76 -0
- package/dist/analysis/metrics/passes/complexity-metrics-pass.js.map +1 -0
- package/dist/analysis/metrics/passes/composite-metrics-pass.d.ts +17 -0
- package/dist/analysis/metrics/passes/composite-metrics-pass.js +77 -0
- package/dist/analysis/metrics/passes/composite-metrics-pass.js.map +1 -0
- package/dist/analysis/metrics/passes/coupling-metrics-pass.d.ts +19 -0
- package/dist/analysis/metrics/passes/coupling-metrics-pass.js +94 -0
- package/dist/analysis/metrics/passes/coupling-metrics-pass.js.map +1 -0
- package/dist/analysis/metrics/passes/data-flow-metrics-pass.d.ts +14 -0
- package/dist/analysis/metrics/passes/data-flow-metrics-pass.js +25 -0
- package/dist/analysis/metrics/passes/data-flow-metrics-pass.js.map +1 -0
- package/dist/analysis/metrics/passes/documentation-metrics-pass.d.ts +15 -0
- package/dist/analysis/metrics/passes/documentation-metrics-pass.js +64 -0
- package/dist/analysis/metrics/passes/documentation-metrics-pass.js.map +1 -0
- package/dist/analysis/metrics/passes/halstead-metrics-pass.d.ts +16 -0
- package/dist/analysis/metrics/passes/halstead-metrics-pass.js +95 -0
- package/dist/analysis/metrics/passes/halstead-metrics-pass.js.map +1 -0
- package/dist/analysis/metrics/passes/inheritance-metrics-pass.d.ts +18 -0
- package/dist/analysis/metrics/passes/inheritance-metrics-pass.js +73 -0
- package/dist/analysis/metrics/passes/inheritance-metrics-pass.js.map +1 -0
- package/dist/analysis/metrics/passes/size-metrics-pass.d.ts +11 -0
- package/dist/analysis/metrics/passes/size-metrics-pass.js +64 -0
- package/dist/analysis/metrics/passes/size-metrics-pass.js.map +1 -0
- package/dist/analysis/passes/circular-dependency-pass.d.ts +18 -0
- package/dist/analysis/passes/circular-dependency-pass.js +39 -0
- package/dist/analysis/passes/circular-dependency-pass.js.map +1 -0
- package/dist/analysis/passes/constant-propagation-pass.d.ts +22 -0
- package/dist/analysis/passes/constant-propagation-pass.js +44 -0
- package/dist/analysis/passes/constant-propagation-pass.js.map +1 -0
- package/dist/analysis/passes/cross-file-pass.d.ts +27 -0
- package/dist/analysis/passes/cross-file-pass.js +102 -0
- package/dist/analysis/passes/cross-file-pass.js.map +1 -0
- package/dist/analysis/passes/dead-code-pass.d.ts +25 -0
- package/dist/analysis/passes/dead-code-pass.js +117 -0
- package/dist/analysis/passes/dead-code-pass.js.map +1 -0
- package/dist/analysis/passes/deep-inheritance-pass.d.ts +30 -0
- package/dist/analysis/passes/deep-inheritance-pass.js +82 -0
- package/dist/analysis/passes/deep-inheritance-pass.js.map +1 -0
- package/dist/analysis/passes/dependency-fan-out-pass.d.ts +19 -0
- package/dist/analysis/passes/dependency-fan-out-pass.js +35 -0
- package/dist/analysis/passes/dependency-fan-out-pass.js.map +1 -0
- package/dist/analysis/passes/infinite-loop-pass.d.ts +31 -0
- package/dist/analysis/passes/infinite-loop-pass.js +126 -0
- package/dist/analysis/passes/infinite-loop-pass.js.map +1 -0
- package/dist/analysis/passes/interprocedural-pass.d.ts +29 -0
- package/dist/analysis/passes/interprocedural-pass.js +169 -0
- package/dist/analysis/passes/interprocedural-pass.js.map +1 -0
- package/dist/analysis/passes/language-sources-pass.d.ts +76 -0
- package/dist/analysis/passes/language-sources-pass.js +491 -0
- package/dist/analysis/passes/language-sources-pass.js.map +1 -0
- package/dist/analysis/passes/leaked-global-pass.d.ts +34 -0
- package/dist/analysis/passes/leaked-global-pass.js +108 -0
- package/dist/analysis/passes/leaked-global-pass.js.map +1 -0
- package/dist/analysis/passes/missing-await-pass.d.ts +29 -0
- package/dist/analysis/passes/missing-await-pass.js +90 -0
- package/dist/analysis/passes/missing-await-pass.js.map +1 -0
- package/dist/analysis/passes/missing-public-doc-pass.d.ts +35 -0
- package/dist/analysis/passes/missing-public-doc-pass.js +148 -0
- package/dist/analysis/passes/missing-public-doc-pass.js.map +1 -0
- package/dist/analysis/passes/n-plus-one-pass.d.ts +29 -0
- package/dist/analysis/passes/n-plus-one-pass.js +100 -0
- package/dist/analysis/passes/n-plus-one-pass.js.map +1 -0
- package/dist/analysis/passes/null-deref-pass.d.ts +32 -0
- package/dist/analysis/passes/null-deref-pass.js +130 -0
- package/dist/analysis/passes/null-deref-pass.js.map +1 -0
- package/dist/analysis/passes/orphan-module-pass.d.ts +21 -0
- package/dist/analysis/passes/orphan-module-pass.js +38 -0
- package/dist/analysis/passes/orphan-module-pass.js.map +1 -0
- package/dist/analysis/passes/react-inline-jsx-pass.d.ts +36 -0
- package/dist/analysis/passes/react-inline-jsx-pass.js +140 -0
- package/dist/analysis/passes/react-inline-jsx-pass.js.map +1 -0
- package/dist/analysis/passes/redundant-loop-pass.d.ts +30 -0
- package/dist/analysis/passes/redundant-loop-pass.js +146 -0
- package/dist/analysis/passes/redundant-loop-pass.js.map +1 -0
- package/dist/analysis/passes/resource-leak-pass.d.ts +43 -0
- package/dist/analysis/passes/resource-leak-pass.js +156 -0
- package/dist/analysis/passes/resource-leak-pass.js.map +1 -0
- package/dist/analysis/passes/serial-await-pass.d.ts +36 -0
- package/dist/analysis/passes/serial-await-pass.js +132 -0
- package/dist/analysis/passes/serial-await-pass.js.map +1 -0
- package/dist/analysis/passes/sink-filter-pass.d.ts +39 -0
- package/dist/analysis/passes/sink-filter-pass.js +231 -0
- package/dist/analysis/passes/sink-filter-pass.js.map +1 -0
- package/dist/analysis/passes/stale-doc-ref-pass.d.ts +21 -0
- package/dist/analysis/passes/stale-doc-ref-pass.js +96 -0
- package/dist/analysis/passes/stale-doc-ref-pass.js.map +1 -0
- package/dist/analysis/passes/string-concat-loop-pass.d.ts +26 -0
- package/dist/analysis/passes/string-concat-loop-pass.js +87 -0
- package/dist/analysis/passes/string-concat-loop-pass.js.map +1 -0
- package/dist/analysis/passes/sync-io-async-pass.d.ts +28 -0
- package/dist/analysis/passes/sync-io-async-pass.js +80 -0
- package/dist/analysis/passes/sync-io-async-pass.js.map +1 -0
- package/dist/analysis/passes/taint-matcher-pass.d.ts +24 -0
- package/dist/analysis/passes/taint-matcher-pass.js +71 -0
- package/dist/analysis/passes/taint-matcher-pass.js.map +1 -0
- package/dist/analysis/passes/taint-propagation-pass.d.ts +22 -0
- package/dist/analysis/passes/taint-propagation-pass.js +266 -0
- package/dist/analysis/passes/taint-propagation-pass.js.map +1 -0
- package/dist/analysis/passes/todo-in-prod-pass.d.ts +28 -0
- package/dist/analysis/passes/todo-in-prod-pass.js +71 -0
- package/dist/analysis/passes/todo-in-prod-pass.js.map +1 -0
- package/dist/analysis/passes/unbounded-collection-pass.d.ts +32 -0
- package/dist/analysis/passes/unbounded-collection-pass.js +128 -0
- package/dist/analysis/passes/unbounded-collection-pass.js.map +1 -0
- package/dist/analysis/passes/unchecked-return-pass.d.ts +34 -0
- package/dist/analysis/passes/unchecked-return-pass.js +106 -0
- package/dist/analysis/passes/unchecked-return-pass.js.map +1 -0
- package/dist/analysis/passes/unused-variable-pass.d.ts +36 -0
- package/dist/analysis/passes/unused-variable-pass.js +150 -0
- package/dist/analysis/passes/unused-variable-pass.js.map +1 -0
- package/dist/analysis/passes/variable-shadowing-pass.d.ts +41 -0
- package/dist/analysis/passes/variable-shadowing-pass.js +211 -0
- package/dist/analysis/passes/variable-shadowing-pass.js.map +1 -0
- package/dist/analysis/path-finder.d.ts +3 -13
- package/dist/analysis/path-finder.js +48 -63
- package/dist/analysis/path-finder.js.map +1 -1
- package/dist/analysis/taint-matcher.js +8 -1
- package/dist/analysis/taint-matcher.js.map +1 -1
- package/dist/analysis/taint-propagation.d.ts +5 -1
- package/dist/analysis/taint-propagation.js +44 -41
- package/dist/analysis/taint-propagation.js.map +1 -1
- package/dist/analyzer.d.ts +48 -1
- package/dist/analyzer.js +252 -1476
- package/dist/analyzer.js.map +1 -1
- package/dist/browser/circle-ir.js +3952 -1270
- package/dist/core/circle-ir-core.cjs +360 -106
- package/dist/core/circle-ir-core.js +360 -106
- package/dist/core/extractors/imports.js +18 -0
- package/dist/core/extractors/imports.js.map +1 -1
- package/dist/graph/analysis-pass.d.ts +68 -0
- package/dist/graph/analysis-pass.js +51 -0
- package/dist/graph/analysis-pass.js.map +1 -0
- package/dist/graph/code-graph.d.ts +92 -0
- package/dist/graph/code-graph.js +262 -0
- package/dist/graph/code-graph.js.map +1 -0
- package/dist/graph/dominator-graph.d.ts +53 -0
- package/dist/graph/dominator-graph.js +256 -0
- package/dist/graph/dominator-graph.js.map +1 -0
- package/dist/graph/import-graph.d.ts +33 -0
- package/dist/graph/import-graph.js +170 -0
- package/dist/graph/import-graph.js.map +1 -0
- package/dist/graph/index.d.ts +5 -0
- package/dist/graph/index.js +6 -0
- package/dist/graph/index.js.map +1 -0
- package/dist/graph/project-graph.d.ts +43 -0
- package/dist/graph/project-graph.js +80 -0
- package/dist/graph/project-graph.js.map +1 -0
- package/dist/graph/scope-graph.d.ts +63 -0
- package/dist/graph/scope-graph.js +89 -0
- package/dist/graph/scope-graph.js.map +1 -0
- package/dist/index.d.ts +3 -2
- package/dist/index.js +3 -1
- package/dist/index.js.map +1 -1
- package/dist/resolution/cross-file.js +52 -19
- package/dist/resolution/cross-file.js.map +1 -1
- package/dist/types/index.d.ts +151 -0
- package/docs/SPEC.md +10 -6
- package/package.json +1 -1
|
@@ -0,0 +1,491 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* LanguageSourcesPass
|
|
3
|
+
*
|
|
4
|
+
* Detects taint sources and sinks that are not covered by config-based
|
|
5
|
+
* pattern matching (analyzer.js / taint-matcher). Handles language-specific
|
|
6
|
+
* patterns that require text-level heuristics:
|
|
7
|
+
* - Java: getter methods returning tainted constructor fields
|
|
8
|
+
* - JavaScript/TypeScript: assignment sources, DOM XSS property sinks
|
|
9
|
+
* - Python: assignment sources, return-XSS sinks, trust-boundary violations
|
|
10
|
+
*
|
|
11
|
+
* Also computes the forward-taint maps (pyTaintedVars / jsTaintedVars) that
|
|
12
|
+
* SinkFilterPass uses to reduce false positives.
|
|
13
|
+
*
|
|
14
|
+
* Depends on: taint-matcher, constant-propagation
|
|
15
|
+
*/
|
|
16
|
+
// ---------------------------------------------------------------------------
|
|
17
|
+
// Pattern tables (moved from analyzer.ts)
|
|
18
|
+
// ---------------------------------------------------------------------------
|
|
19
|
+
const JS_DOM_XSS_SINKS = [
|
|
20
|
+
{ pattern: /\.innerHTML\s*=/, type: 'xss', cwe: 'CWE-79', severity: 'critical' },
|
|
21
|
+
{ pattern: /\.outerHTML\s*=/, type: 'xss', cwe: 'CWE-79', severity: 'critical' },
|
|
22
|
+
{ pattern: /document\.write\s*\(/, type: 'xss', cwe: 'CWE-79', severity: 'critical' },
|
|
23
|
+
{ pattern: /document\.writeln\s*\(/, type: 'xss', cwe: 'CWE-79', severity: 'critical' },
|
|
24
|
+
{ pattern: /\.insertAdjacentHTML\s*\(/, type: 'xss', cwe: 'CWE-79', severity: 'critical' },
|
|
25
|
+
{ pattern: /\.src\s*=/, type: 'xss', cwe: 'CWE-79', severity: 'high' },
|
|
26
|
+
{ pattern: /\.href\s*=/, type: 'xss', cwe: 'CWE-79', severity: 'high' },
|
|
27
|
+
];
|
|
28
|
+
export const JS_TAINTED_PATTERNS = [
|
|
29
|
+
{ pattern: /\breq\.query\b/, type: 'http_param' },
|
|
30
|
+
{ pattern: /\breq\.params\b/, type: 'http_param' },
|
|
31
|
+
{ pattern: /\breq\.body\b/, type: 'http_body' },
|
|
32
|
+
{ pattern: /\breq\.headers\b/, type: 'http_header' },
|
|
33
|
+
{ pattern: /\breq\.cookies\b/, type: 'http_cookie' },
|
|
34
|
+
{ pattern: /\breq\.url\b/, type: 'http_path' },
|
|
35
|
+
{ pattern: /\breq\.path\b/, type: 'http_path' },
|
|
36
|
+
{ pattern: /\breq\.originalUrl\b/, type: 'http_path' },
|
|
37
|
+
{ pattern: /\breq\.files?\b/, type: 'file_input' },
|
|
38
|
+
{ pattern: /\brequest\.query\b/, type: 'http_param' },
|
|
39
|
+
{ pattern: /\brequest\.params\b/, type: 'http_param' },
|
|
40
|
+
{ pattern: /\brequest\.body\b/, type: 'http_body' },
|
|
41
|
+
{ pattern: /\brequest\.headers\b/, type: 'http_header' },
|
|
42
|
+
{ pattern: /\bctx\.query\b/, type: 'http_param' },
|
|
43
|
+
{ pattern: /\bctx\.params\b/, type: 'http_param' },
|
|
44
|
+
{ pattern: /\bctx\.request\b/, type: 'http_body' },
|
|
45
|
+
{ pattern: /\bprocess\.env\b/, type: 'env_input' },
|
|
46
|
+
{ pattern: /\bprocess\.argv\b/, type: 'io_input' },
|
|
47
|
+
{ pattern: /\blocation\.search\b/, type: 'http_param' },
|
|
48
|
+
{ pattern: /\blocation\.hash\b/, type: 'http_param' },
|
|
49
|
+
{ pattern: /\blocation\.href\b/, type: 'http_path' },
|
|
50
|
+
{ pattern: /\bdocument\.getElementById\b/, type: 'dom_input' },
|
|
51
|
+
{ pattern: /\bdocument\.querySelector\b/, type: 'dom_input' },
|
|
52
|
+
// Narrow to event-based DOM input reads: `e.target.value`, `event.target.value`.
|
|
53
|
+
// The formerly broad `/\.value\b/` matched any `.value` property (e.g. `result.value`,
|
|
54
|
+
// `node.value` in TypeScript) generating false positives in non-browser code.
|
|
55
|
+
{ pattern: /\b(?:event|e)\.(?:target\.)?value\b/, type: 'dom_input' },
|
|
56
|
+
];
|
|
57
|
+
const PYTHON_TAINTED_PATTERNS = [
|
|
58
|
+
{ pattern: /\brequest\.args\b/, type: 'http_param' },
|
|
59
|
+
{ pattern: /\brequest\.form\b/, type: 'http_body' },
|
|
60
|
+
{ pattern: /\brequest\.json\b/, type: 'http_body' },
|
|
61
|
+
{ pattern: /\brequest\.data\b/, type: 'http_body' },
|
|
62
|
+
{ pattern: /\brequest\.files?\b/, type: 'file_input' },
|
|
63
|
+
{ pattern: /\brequest\.headers?\b/, type: 'http_header' },
|
|
64
|
+
{ pattern: /\brequest\.cookies\b/, type: 'http_cookie' },
|
|
65
|
+
{ pattern: /\brequest\.GET\b/, type: 'http_param' },
|
|
66
|
+
{ pattern: /\brequest\.POST\b/, type: 'http_body' },
|
|
67
|
+
{ pattern: /\brequest\.META\b/, type: 'http_header' },
|
|
68
|
+
{ pattern: /\brequest\.FILES\b/, type: 'file_input' },
|
|
69
|
+
{ pattern: /\brequest\.query_params\b/, type: 'http_param' },
|
|
70
|
+
{ pattern: /\brequest\.path_params\b/, type: 'http_param' },
|
|
71
|
+
{ pattern: /\brequest\.query_string\b/, type: 'http_param' },
|
|
72
|
+
{ pattern: /\brequest\.get_data\s*\(/, type: 'http_body' },
|
|
73
|
+
{ pattern: /\bget_form_parameter\s*\(/, type: 'http_body' },
|
|
74
|
+
{ pattern: /\bget_query_parameter\s*\(/, type: 'http_param' },
|
|
75
|
+
{ pattern: /\bget_header_value\s*\(/, type: 'http_header' },
|
|
76
|
+
{ pattern: /\bget_cookie_value\s*\(/, type: 'http_cookie' },
|
|
77
|
+
];
|
|
78
|
+
// ---------------------------------------------------------------------------
|
|
79
|
+
// Pass
|
|
80
|
+
// ---------------------------------------------------------------------------
|
|
81
|
+
export class LanguageSourcesPass {
|
|
82
|
+
name = 'language-sources';
|
|
83
|
+
category = 'security';
|
|
84
|
+
run(ctx) {
|
|
85
|
+
const { graph, code, language } = ctx;
|
|
86
|
+
const { types } = graph.ir;
|
|
87
|
+
const constProp = ctx.getResult('constant-propagation');
|
|
88
|
+
const additionalSources = [];
|
|
89
|
+
const additionalSinks = [];
|
|
90
|
+
// -- Java: getter methods that return tainted constructor fields ----------
|
|
91
|
+
additionalSources.push(...findGetterSources(types, constProp.instanceFieldTaint, code));
|
|
92
|
+
// -- JavaScript/TypeScript: assignment sources and DOM XSS sinks ---------
|
|
93
|
+
additionalSources.push(...findJavaScriptAssignmentSources(code, language));
|
|
94
|
+
const jsDOMSinks = findJavaScriptDOMSinks(code, language);
|
|
95
|
+
for (const s of jsDOMSinks) {
|
|
96
|
+
const alreadyExists = additionalSinks.some(x => x.line === s.line && x.cwe === s.cwe);
|
|
97
|
+
if (!alreadyExists) {
|
|
98
|
+
additionalSinks.push({
|
|
99
|
+
type: 'xss',
|
|
100
|
+
cwe: s.cwe,
|
|
101
|
+
line: s.line,
|
|
102
|
+
location: s.location,
|
|
103
|
+
method: s.method,
|
|
104
|
+
confidence: 1.0,
|
|
105
|
+
});
|
|
106
|
+
}
|
|
107
|
+
}
|
|
108
|
+
// -- Python: assignment sources, trust-boundary sinks, return-XSS sinks --
|
|
109
|
+
additionalSources.push(...findPythonAssignmentSources(code, language));
|
|
110
|
+
const pyTaintedVars = language === 'python' ? buildPythonTaintedVars(code) : new Map();
|
|
111
|
+
const pySanitizedVars = language === 'python' ? buildPythonSanitizedVars(code, pyTaintedVars) : new Set();
|
|
112
|
+
if (language === 'python' && pyTaintedVars.size > 0) {
|
|
113
|
+
for (const v of findPythonTrustBoundaryViolations(code, pyTaintedVars)) {
|
|
114
|
+
const alreadyExists = additionalSinks.some(s => s.line === v.sinkLine && s.type === 'trust_boundary');
|
|
115
|
+
if (!alreadyExists) {
|
|
116
|
+
additionalSinks.push({
|
|
117
|
+
type: 'trust_boundary',
|
|
118
|
+
cwe: 'CWE-501',
|
|
119
|
+
line: v.sinkLine,
|
|
120
|
+
location: `session write at line ${v.sinkLine}`,
|
|
121
|
+
confidence: 0.85,
|
|
122
|
+
});
|
|
123
|
+
}
|
|
124
|
+
}
|
|
125
|
+
for (const r of findPythonReturnXSSSinks(code, pyTaintedVars)) {
|
|
126
|
+
const alreadyExists = additionalSinks.some(s => s.line === r.sinkLine && s.type === 'xss');
|
|
127
|
+
if (!alreadyExists) {
|
|
128
|
+
additionalSinks.push({
|
|
129
|
+
type: 'xss',
|
|
130
|
+
cwe: 'CWE-79',
|
|
131
|
+
line: r.sinkLine,
|
|
132
|
+
location: `return HTML with user input at line ${r.sinkLine}`,
|
|
133
|
+
confidence: 0.9,
|
|
134
|
+
});
|
|
135
|
+
}
|
|
136
|
+
}
|
|
137
|
+
}
|
|
138
|
+
const jsTaintedVars = buildJavaScriptTaintedVars(code, language);
|
|
139
|
+
return { additionalSources, additionalSinks, pyTaintedVars, pySanitizedVars, jsTaintedVars };
|
|
140
|
+
}
|
|
141
|
+
}
|
|
142
|
+
function findGetterSources(types, instanceFieldTaint, _sourceCode) {
|
|
143
|
+
const sources = [];
|
|
144
|
+
if (instanceFieldTaint.size === 0)
|
|
145
|
+
return sources;
|
|
146
|
+
for (const type of types) {
|
|
147
|
+
for (const method of type.methods) {
|
|
148
|
+
const methodName = method.name;
|
|
149
|
+
let potentialFieldName = null;
|
|
150
|
+
if (methodName.startsWith('get') && methodName.length > 3) {
|
|
151
|
+
potentialFieldName = methodName.charAt(3).toLowerCase() + methodName.substring(4);
|
|
152
|
+
}
|
|
153
|
+
else if (methodName.startsWith('is') && methodName.length > 2) {
|
|
154
|
+
potentialFieldName = methodName.charAt(2).toLowerCase() + methodName.substring(3);
|
|
155
|
+
}
|
|
156
|
+
if (method.parameters.length === 0) {
|
|
157
|
+
const fieldsToCheck = potentialFieldName
|
|
158
|
+
? [potentialFieldName, methodName]
|
|
159
|
+
: [methodName];
|
|
160
|
+
for (const fieldName of fieldsToCheck) {
|
|
161
|
+
const fieldTaint = instanceFieldTaint.get(fieldName);
|
|
162
|
+
if (fieldTaint && fieldTaint.className === type.name) {
|
|
163
|
+
sources.push({
|
|
164
|
+
type: 'constructor_field',
|
|
165
|
+
location: `${type.name}.${methodName}() returns tainted field '${fieldName}' (from constructor param '${fieldTaint.sourceParam}')`,
|
|
166
|
+
severity: 'high',
|
|
167
|
+
line: method.start_line,
|
|
168
|
+
confidence: 0.95,
|
|
169
|
+
});
|
|
170
|
+
break;
|
|
171
|
+
}
|
|
172
|
+
}
|
|
173
|
+
}
|
|
174
|
+
for (const [fieldName, fieldTaint] of instanceFieldTaint) {
|
|
175
|
+
if (fieldTaint.className === type.name) {
|
|
176
|
+
if (methodName === fieldName && method.parameters.length === 0) {
|
|
177
|
+
const alreadyAdded = sources.some(s => s.location.includes(`${type.name}.${methodName}()`));
|
|
178
|
+
if (!alreadyAdded) {
|
|
179
|
+
sources.push({
|
|
180
|
+
type: 'constructor_field',
|
|
181
|
+
location: `${type.name}.${methodName}() returns tainted field '${fieldName}' (from constructor param '${fieldTaint.sourceParam}')`,
|
|
182
|
+
severity: 'high',
|
|
183
|
+
line: method.start_line,
|
|
184
|
+
confidence: 0.95,
|
|
185
|
+
});
|
|
186
|
+
}
|
|
187
|
+
}
|
|
188
|
+
}
|
|
189
|
+
}
|
|
190
|
+
}
|
|
191
|
+
}
|
|
192
|
+
return sources;
|
|
193
|
+
}
|
|
194
|
+
function findJavaScriptAssignmentSources(sourceCode, language) {
|
|
195
|
+
if (!['javascript', 'typescript'].includes(language))
|
|
196
|
+
return [];
|
|
197
|
+
const sources = [];
|
|
198
|
+
const lines = sourceCode.split('\n');
|
|
199
|
+
for (let lineNum = 0; lineNum < lines.length; lineNum++) {
|
|
200
|
+
const line = lines[lineNum];
|
|
201
|
+
const lineNumber = lineNum + 1;
|
|
202
|
+
const assignmentMatch = line.match(/(?:(?:var|let|const)\s+)?(\w+)\s*=\s*(.+)/);
|
|
203
|
+
if (!assignmentMatch)
|
|
204
|
+
continue;
|
|
205
|
+
const [, varName, rhs] = assignmentMatch;
|
|
206
|
+
for (const { pattern, type } of JS_TAINTED_PATTERNS) {
|
|
207
|
+
if (pattern.test(rhs)) {
|
|
208
|
+
const alreadyExists = sources.some(s => s.line === lineNumber && s.type === type);
|
|
209
|
+
if (!alreadyExists) {
|
|
210
|
+
sources.push({
|
|
211
|
+
type,
|
|
212
|
+
location: `${varName} = ${rhs.trim().substring(0, 50)}${rhs.length > 50 ? '...' : ''}`,
|
|
213
|
+
severity: 'high',
|
|
214
|
+
line: lineNumber,
|
|
215
|
+
confidence: 1.0,
|
|
216
|
+
variable: varName,
|
|
217
|
+
});
|
|
218
|
+
}
|
|
219
|
+
break;
|
|
220
|
+
}
|
|
221
|
+
}
|
|
222
|
+
}
|
|
223
|
+
return sources;
|
|
224
|
+
}
|
|
225
|
+
function findPythonAssignmentSources(sourceCode, language) {
|
|
226
|
+
if (language !== 'python')
|
|
227
|
+
return [];
|
|
228
|
+
const sources = [];
|
|
229
|
+
const lines = sourceCode.split('\n');
|
|
230
|
+
for (let lineNum = 0; lineNum < lines.length; lineNum++) {
|
|
231
|
+
const line = lines[lineNum];
|
|
232
|
+
const lineNumber = lineNum + 1;
|
|
233
|
+
if (line.trimStart().startsWith('#'))
|
|
234
|
+
continue;
|
|
235
|
+
const assignmentMatch = line.match(/^(\s*\w[\w.]*)\s*(?::\s*\w[\w\[\], .]*)?\s*=\s*(.+)/);
|
|
236
|
+
if (!assignmentMatch)
|
|
237
|
+
continue;
|
|
238
|
+
const rhs = assignmentMatch[2];
|
|
239
|
+
for (const { pattern, type } of PYTHON_TAINTED_PATTERNS) {
|
|
240
|
+
if (pattern.test(rhs)) {
|
|
241
|
+
const varMatch = line.match(/^\s*(\w+)\s*/);
|
|
242
|
+
const varName = varMatch ? varMatch[1] : 'unknown';
|
|
243
|
+
const alreadyExists = sources.some(s => s.line === lineNumber && s.type === type);
|
|
244
|
+
if (!alreadyExists) {
|
|
245
|
+
sources.push({
|
|
246
|
+
type,
|
|
247
|
+
location: `${varName} = ${rhs.trim().substring(0, 50)}${rhs.length > 50 ? '...' : ''}`,
|
|
248
|
+
severity: 'high',
|
|
249
|
+
line: lineNumber,
|
|
250
|
+
confidence: 0.95,
|
|
251
|
+
variable: varName,
|
|
252
|
+
});
|
|
253
|
+
}
|
|
254
|
+
break;
|
|
255
|
+
}
|
|
256
|
+
}
|
|
257
|
+
}
|
|
258
|
+
return sources;
|
|
259
|
+
}
|
|
260
|
+
export function buildPythonTaintedVars(sourceCode) {
|
|
261
|
+
const tainted = new Map();
|
|
262
|
+
const containerTainted = new Map();
|
|
263
|
+
const lines = sourceCode.split('\n');
|
|
264
|
+
for (let i = 0; i < lines.length; i++) {
|
|
265
|
+
const line = lines[i];
|
|
266
|
+
if (line.trimStart().startsWith('#'))
|
|
267
|
+
continue;
|
|
268
|
+
const subscriptAssign = line.match(/^\s*(\w+)\[(['"])([^'"]+)\2\]\s*=\s*(.+)$/);
|
|
269
|
+
if (subscriptAssign) {
|
|
270
|
+
const [, container, , key, rhs2] = subscriptAssign;
|
|
271
|
+
const isTaintedRhs = [...tainted.keys()].some(v => new RegExp(`\\b${v}\\b`).test(rhs2));
|
|
272
|
+
if (isTaintedRhs)
|
|
273
|
+
containerTainted.set(`${container}['${key}']`, i + 1);
|
|
274
|
+
continue;
|
|
275
|
+
}
|
|
276
|
+
const setCallMatch = line.match(/^\s*(\w+)\.set\s*\(\s*(['"])([^'"]+)\2\s*,\s*(['"])([^'"]+)\4\s*,\s*(.+?)\s*\)$/);
|
|
277
|
+
if (setCallMatch) {
|
|
278
|
+
const [, obj, , section, , key, rhs2] = setCallMatch;
|
|
279
|
+
const isTaintedRhs = [...tainted.keys()].some(v => new RegExp(`\\b${v}\\b`).test(rhs2));
|
|
280
|
+
if (isTaintedRhs)
|
|
281
|
+
containerTainted.set(`${obj}['${section}']['${key}']`, i + 1);
|
|
282
|
+
continue;
|
|
283
|
+
}
|
|
284
|
+
const augAssign = line.match(/^\s*(\w+)\s*\+=\s*(.+)$/);
|
|
285
|
+
if (augAssign) {
|
|
286
|
+
const [, augLhs, augRhs] = augAssign;
|
|
287
|
+
const rhsTainted = [...tainted.keys()].some(v => new RegExp(`\\b${v}\\b`).test(augRhs));
|
|
288
|
+
if (rhsTainted || tainted.has(augLhs))
|
|
289
|
+
tainted.set(augLhs, tainted.get(augLhs) ?? (i + 1));
|
|
290
|
+
continue;
|
|
291
|
+
}
|
|
292
|
+
const forLoopMatch = line.match(/^\s*for\s+(\w+)\s+in\s+(.+?)(?:\s*:\s*)?$/);
|
|
293
|
+
if (forLoopMatch) {
|
|
294
|
+
const [, iterVar, iterExpr] = forLoopMatch;
|
|
295
|
+
const isDirectSource = PYTHON_TAINTED_PATTERNS.some(p => p.pattern.test(iterExpr));
|
|
296
|
+
const isPropagated = [...tainted.keys()].some(v => new RegExp(`\\b${v}\\b`).test(iterExpr));
|
|
297
|
+
if (isDirectSource || isPropagated)
|
|
298
|
+
tainted.set(iterVar, i + 1);
|
|
299
|
+
continue;
|
|
300
|
+
}
|
|
301
|
+
const assignMatch = line.match(/^\s*(\w+)\s*=\s*(.+)$/);
|
|
302
|
+
if (!assignMatch)
|
|
303
|
+
continue;
|
|
304
|
+
const [, lhs, rhs] = assignMatch;
|
|
305
|
+
const isDirectSource = PYTHON_TAINTED_PATTERNS.some(p => p.pattern.test(rhs));
|
|
306
|
+
let propagatedFrom;
|
|
307
|
+
const dictAccessMatch = rhs.trim().match(/^(\w+)\[(['"])([^'"]+)\2\]$/);
|
|
308
|
+
if (dictAccessMatch) {
|
|
309
|
+
const [, container, , key] = dictAccessMatch;
|
|
310
|
+
if (containerTainted.has(`${container}['${key}']`))
|
|
311
|
+
propagatedFrom = `${container}['${key}']`;
|
|
312
|
+
}
|
|
313
|
+
if (!propagatedFrom) {
|
|
314
|
+
const confGetMatch = rhs.trim().match(/^(\w+)\.get\s*\(\s*(['"])([^'"]+)\2\s*,\s*(['"])([^'"]+)\4\s*\)$/);
|
|
315
|
+
if (confGetMatch) {
|
|
316
|
+
const [, obj, , section, , key] = confGetMatch;
|
|
317
|
+
if (containerTainted.has(`${obj}['${section}']['${key}']`))
|
|
318
|
+
propagatedFrom = `${obj}['${section}']['${key}']`;
|
|
319
|
+
}
|
|
320
|
+
}
|
|
321
|
+
if (!propagatedFrom) {
|
|
322
|
+
const isSafeEnvRead = /\bos\.environ\.get\s*\(/.test(rhs) || /\bos\.getenv\s*\(/.test(rhs);
|
|
323
|
+
if (!isSafeEnvRead)
|
|
324
|
+
propagatedFrom = [...tainted.keys()].find(v => new RegExp(`\\b${v}\\b`).test(rhs));
|
|
325
|
+
}
|
|
326
|
+
if (isDirectSource) {
|
|
327
|
+
tainted.set(lhs, i + 1);
|
|
328
|
+
}
|
|
329
|
+
else if (propagatedFrom !== undefined) {
|
|
330
|
+
tainted.set(lhs, i + 1);
|
|
331
|
+
}
|
|
332
|
+
else if (tainted.has(lhs)) {
|
|
333
|
+
const prevNonBlank = lines.slice(0, i).reverse().find(l => l.trim() && !l.trimStart().startsWith('#'));
|
|
334
|
+
const isNullGuard = prevNonBlank !== undefined && (new RegExp(`^\\s*if\\s+not\\s+${lhs}\\s*:`).test(prevNonBlank) ||
|
|
335
|
+
new RegExp(`^\\s*if\\s+${lhs}\\s+is\\s+None\\s*:`).test(prevNonBlank));
|
|
336
|
+
if (!isNullGuard)
|
|
337
|
+
tainted.delete(lhs);
|
|
338
|
+
}
|
|
339
|
+
}
|
|
340
|
+
return tainted;
|
|
341
|
+
}
|
|
342
|
+
export function buildPythonSanitizedVars(sourceCode, pyTaintedVars) {
|
|
343
|
+
const sanitized = new Set();
|
|
344
|
+
const lines = sourceCode.split('\n');
|
|
345
|
+
// Apostrophe-guard: if "'" in var: return/raise/abort/...
|
|
346
|
+
for (let i = 0; i < lines.length - 1; i++) {
|
|
347
|
+
const m = lines[i].match(/^\s*if\s+(?:'(?:[^'\\]|\\.)*'|"(?:[^"\\]|\\.)*")\s+in\s+(\w+)\s*:/);
|
|
348
|
+
if (!m)
|
|
349
|
+
continue;
|
|
350
|
+
const ifIndent = (lines[i].match(/^(\s*)/) ?? ['', ''])[1].length;
|
|
351
|
+
let foundExit = false;
|
|
352
|
+
for (let j = i + 1; j <= Math.min(i + 5, lines.length - 1); j++) {
|
|
353
|
+
const jLine = lines[j] ?? '';
|
|
354
|
+
if (!jLine.trim())
|
|
355
|
+
continue;
|
|
356
|
+
const jIndent = (jLine.match(/^(\s*)/) ?? ['', ''])[1].length;
|
|
357
|
+
if (jIndent <= ifIndent)
|
|
358
|
+
break;
|
|
359
|
+
if (/^(return|raise|abort|continue|break)\b/.test(jLine.trim())) {
|
|
360
|
+
foundExit = true;
|
|
361
|
+
break;
|
|
362
|
+
}
|
|
363
|
+
}
|
|
364
|
+
if (foundExit)
|
|
365
|
+
sanitized.add(m[1]);
|
|
366
|
+
}
|
|
367
|
+
// Propagate sanitization through assignments: if bar is sanitized and query = f"...{bar}...", query is also sanitized
|
|
368
|
+
for (const line of lines) {
|
|
369
|
+
const am = line.match(/^\s*(\w+)\s*=\s*(.+)$/);
|
|
370
|
+
if (!am)
|
|
371
|
+
continue;
|
|
372
|
+
const [, lhs, rhs] = am;
|
|
373
|
+
if ([...sanitized].some(v => new RegExp(`\\b${v}\\b`).test(rhs)))
|
|
374
|
+
sanitized.add(lhs);
|
|
375
|
+
}
|
|
376
|
+
// Inline .replace() sanitizer: query = f"...{bar.replace('\'', ''')}..."
|
|
377
|
+
for (const line of lines) {
|
|
378
|
+
const am = line.match(/^\s*(\w+)\s*=\s*(.+)$/);
|
|
379
|
+
if (!am)
|
|
380
|
+
continue;
|
|
381
|
+
const [, lhs, rhs] = am;
|
|
382
|
+
const hasReplaceOnTainted = [...pyTaintedVars.keys()].some(v => new RegExp(`\\b${v}\\.replace\\s*\\(`).test(rhs));
|
|
383
|
+
if (hasReplaceOnTainted)
|
|
384
|
+
sanitized.add(lhs);
|
|
385
|
+
}
|
|
386
|
+
return sanitized;
|
|
387
|
+
}
|
|
388
|
+
export function findPythonTrustBoundaryViolations(sourceCode, taintedVars) {
|
|
389
|
+
if (taintedVars.size === 0)
|
|
390
|
+
return [];
|
|
391
|
+
const violations = [];
|
|
392
|
+
const lines = sourceCode.split('\n');
|
|
393
|
+
const SESSION_WRITE = /(?:flask\.)?session\[([^\]]+)\]\s*=\s*(.+)$/;
|
|
394
|
+
const taintedKeys = [...taintedVars.keys()];
|
|
395
|
+
const earliestSourceLine = Math.min(...[...taintedVars.values()]);
|
|
396
|
+
for (let i = 0; i < lines.length; i++) {
|
|
397
|
+
const line = lines[i];
|
|
398
|
+
if (line.trimStart().startsWith('#'))
|
|
399
|
+
continue;
|
|
400
|
+
const m = line.match(SESSION_WRITE);
|
|
401
|
+
if (!m)
|
|
402
|
+
continue;
|
|
403
|
+
const [, keyExpr, valueExpr] = m;
|
|
404
|
+
const keyTainted = taintedKeys.some(v => new RegExp(`\\b${v}\\b`).test(keyExpr));
|
|
405
|
+
const valueTainted = taintedKeys.some(v => new RegExp(`\\b${v}\\b`).test(valueExpr));
|
|
406
|
+
if (keyTainted || valueTainted)
|
|
407
|
+
violations.push({ sourceLine: earliestSourceLine, sinkLine: i + 1 });
|
|
408
|
+
}
|
|
409
|
+
return violations;
|
|
410
|
+
}
|
|
411
|
+
function findPythonReturnXSSSinks(sourceCode, taintedVars) {
|
|
412
|
+
if (taintedVars.size === 0)
|
|
413
|
+
return [];
|
|
414
|
+
const sinks = [];
|
|
415
|
+
const lines = sourceCode.split('\n');
|
|
416
|
+
const taintedKeys = [...taintedVars.keys()];
|
|
417
|
+
for (let i = 0; i < lines.length; i++) {
|
|
418
|
+
const line = lines[i];
|
|
419
|
+
if (line.trimStart().startsWith('#'))
|
|
420
|
+
continue;
|
|
421
|
+
const returnMatch = line.match(/^\s*(?:return|yield)\s+(.+)$/);
|
|
422
|
+
if (!returnMatch)
|
|
423
|
+
continue;
|
|
424
|
+
const expr = returnMatch[1];
|
|
425
|
+
const hasTaintedVar = taintedKeys.some(v => new RegExp(`\\b${v}\\b`).test(expr));
|
|
426
|
+
if (!hasTaintedVar)
|
|
427
|
+
continue;
|
|
428
|
+
const looksLikeHTML = expr.includes('<') || /['"]\s*\+/.test(expr) || /\+\s*['"]/.test(expr) || /f['"][^'"]*\{/.test(expr);
|
|
429
|
+
if (!looksLikeHTML)
|
|
430
|
+
continue;
|
|
431
|
+
sinks.push({ sinkLine: i + 1 });
|
|
432
|
+
}
|
|
433
|
+
return sinks;
|
|
434
|
+
}
|
|
435
|
+
function findJavaScriptDOMSinks(sourceCode, language) {
|
|
436
|
+
if (!['javascript', 'typescript'].includes(language))
|
|
437
|
+
return [];
|
|
438
|
+
const sinks = [];
|
|
439
|
+
const lines = sourceCode.split('\n');
|
|
440
|
+
for (let lineNum = 0; lineNum < lines.length; lineNum++) {
|
|
441
|
+
const line = lines[lineNum];
|
|
442
|
+
const lineNumber = lineNum + 1;
|
|
443
|
+
for (const { pattern, type, cwe, severity } of JS_DOM_XSS_SINKS) {
|
|
444
|
+
if (pattern.test(line)) {
|
|
445
|
+
let method = 'innerHTML';
|
|
446
|
+
if (line.includes('.outerHTML'))
|
|
447
|
+
method = 'outerHTML';
|
|
448
|
+
else if (line.includes('document.write('))
|
|
449
|
+
method = 'document.write';
|
|
450
|
+
else if (line.includes('document.writeln('))
|
|
451
|
+
method = 'document.writeln';
|
|
452
|
+
else if (line.includes('.insertAdjacentHTML'))
|
|
453
|
+
method = 'insertAdjacentHTML';
|
|
454
|
+
else if (line.includes('.src'))
|
|
455
|
+
method = 'src';
|
|
456
|
+
else if (line.includes('.href'))
|
|
457
|
+
method = 'href';
|
|
458
|
+
const alreadyExists = sinks.some(s => s.line === lineNumber && s.cwe === cwe);
|
|
459
|
+
if (!alreadyExists) {
|
|
460
|
+
sinks.push({ type, cwe, severity, line: lineNumber, location: line.trim().substring(0, 80), method });
|
|
461
|
+
}
|
|
462
|
+
break;
|
|
463
|
+
}
|
|
464
|
+
}
|
|
465
|
+
}
|
|
466
|
+
return sinks;
|
|
467
|
+
}
|
|
468
|
+
export function buildJavaScriptTaintedVars(sourceCode, language) {
|
|
469
|
+
if (!['javascript', 'typescript'].includes(language))
|
|
470
|
+
return new Map();
|
|
471
|
+
const tainted = new Map();
|
|
472
|
+
const lines = sourceCode.split('\n');
|
|
473
|
+
for (let i = 0; i < lines.length; i++) {
|
|
474
|
+
const line = lines[i];
|
|
475
|
+
const trimmed = line.trimStart();
|
|
476
|
+
if (trimmed.startsWith('//') || trimmed.startsWith('*'))
|
|
477
|
+
continue;
|
|
478
|
+
const assignMatch = line.match(/(?:(?:var|let|const)\s+)?(\w+)\s*=\s*(.+)/);
|
|
479
|
+
if (!assignMatch)
|
|
480
|
+
continue;
|
|
481
|
+
const [, lhs, rhs] = assignMatch;
|
|
482
|
+
if (['if', 'while', 'for', 'return', 'true', 'false', 'null', 'undefined', 'case'].includes(lhs))
|
|
483
|
+
continue;
|
|
484
|
+
const isDirectSource = JS_TAINTED_PATTERNS.some(p => p.pattern.test(rhs));
|
|
485
|
+
const isTaintedPropagation = tainted.size > 0 && [...tainted.keys()].some(v => new RegExp(`\\b${v}\\b`).test(rhs));
|
|
486
|
+
if (isDirectSource || isTaintedPropagation)
|
|
487
|
+
tainted.set(lhs, i + 1);
|
|
488
|
+
}
|
|
489
|
+
return tainted;
|
|
490
|
+
}
|
|
491
|
+
//# sourceMappingURL=language-sources-pass.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"language-sources-pass.js","sourceRoot":"","sources":["../../../src/analysis/passes/language-sources-pass.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAOH,8EAA8E;AAC9E,0CAA0C;AAC1C,8EAA8E;AAE9E,MAAM,gBAAgB,GAAG;IACvB,EAAE,OAAO,EAAE,iBAAiB,EAAE,IAAI,EAAE,KAAc,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAmB,EAAE;IAClG,EAAE,OAAO,EAAE,iBAAiB,EAAE,IAAI,EAAE,KAAc,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAmB,EAAE;IAClG,EAAE,OAAO,EAAE,sBAAsB,EAAE,IAAI,EAAE,KAAc,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAmB,EAAE;IACvG,EAAE,OAAO,EAAE,wBAAwB,EAAE,IAAI,EAAE,KAAc,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAmB,EAAE;IACzG,EAAE,OAAO,EAAE,2BAA2B,EAAE,IAAI,EAAE,KAAc,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAmB,EAAE;IAC5G,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,KAAc,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAe,EAAE;IACxF,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,KAAc,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAe,EAAE;CAC1F,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,EAAE,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,YAAqB,EAAE;IAC1D,EAAE,OAAO,EAAE,iBAAiB,EAAE,IAAI,EAAE,YAAqB,EAAE;IAC3D,EAAE,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,WAAoB,EAAE;IACxD,EAAE,OAAO,EAAE,kBAAkB,EAAE,IAAI,EAAE,aAAsB,EAAE;IAC7D,EAAE,OAAO,EAAE,kBAAkB,EAAE,IAAI,EAAE,aAAsB,EAAE;IAC7D,EAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,WAAoB,EAAE;IACvD,EAAE,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,WAAoB,EAAE;IACxD,EAAE,OAAO,EAAE,sBAAsB,EAAE,IAAI,EAAE,WAAoB,EAAE;IAC/D,EAAE,OAAO,EAAE,iBAAiB,EAAE,IAAI,EAAE,YAAqB,EAAE;IAC3D,EAAE,OAAO,EAAE,oBAAoB,EAAE,IAAI,EAAE,YAAqB,EAAE;IAC9D,EAAE,OAAO,EAAE,qBAAqB,EAAE,IAAI,EAAE,YAAqB,EAAE;IAC/D,EAAE,OAAO,EAAE,mBAAmB,EAAE,IAAI,EAAE,WAAoB,EAAE;IAC5D,EAAE,OAAO,EAAE,sBAAsB,EAAE,IAAI,EAAE,aAAsB,EAAE;IACjE,EAAE,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,YAAqB,EAAE;IAC1D,EAAE,OAAO,EAAE,iBAAiB,EAAE,IAAI,EAAE,YAAqB,EAAE;IAC3D,EAAE,OAAO,EAAE,kBAAkB,EAAE,IAAI,EAAE,WAAoB,EAAE;IAC3D,EAAE,OAAO,EAAE,kBAAkB,EAAE,IAAI,EAAE,WAAoB,EAAE;IAC3D,EAAE,OAAO,EAAE,mBAAmB,EAAE,IAAI,EAAE,UAAmB,EAAE;IAC3D,EAAE,OAAO,EAAE,sBAAsB,EAAE,IAAI,EAAE,YAAqB,EAAE;IAChE,EAAE,OAAO,EAAE,oBAAoB,EAAE,IAAI,EAAE,YAAqB,EAAE;IAC9D,EAAE,OAAO,EAAE,oBAAoB,EAAE,IAAI,EAAE,WAAoB,EAAE;IAC7D,EAAE,OAAO,EAAE,8BAA8B,EAAE,IAAI,EAAE,WAAoB,EAAE;IACvE,EAAE,OAAO,EAAE,6BAA6B,EAAE,IAAI,EAAE,WAAoB,EAAE;IACtE,iFAAiF;IACjF,uFAAuF;IACvF,8EAA8E;IAC9E,EAAE,OAAO,EAAE,qCAAqC,EAAE,IAAI,EAAE,WAAoB,EAAE;CAC/E,CAAC;AAEF,MAAM,uBAAuB,GAAG;IAC9B,EAAE,OAAO,EAAE,mBAAmB,EAAe,IAAI,EAAE,YAA2B,EAAE;IAChF,EAAE,OAAO,EAAE,mBAAmB,EAAe,IAAI,EAAE,WAA2B,EAAE;IAChF,EAAE,OAAO,EAAE,mBAAmB,EAAe,IAAI,EAAE,WAA2B,EAAE;IAChF,EAAE,OAAO,EAAE,mBAAmB,EAAe,IAAI,EAAE,WAA2B,EAAE;IAChF,EAAE,OAAO,EAAE,qBAAqB,EAAa,IAAI,EAAE,YAA2B,EAAE;IAChF,EAAE,OAAO,EAAE,uBAAuB,EAAW,IAAI,EAAE,aAA2B,EAAE;IAChF,EAAE,OAAO,EAAE,sBAAsB,EAAY,IAAI,EAAE,aAA2B,EAAE;IAChF,EAAE,OAAO,EAAE,kBAAkB,EAAgB,IAAI,EAAE,YAA2B,EAAE;IAChF,EAAE,OAAO,EAAE,mBAAmB,EAAe,IAAI,EAAE,WAA2B,EAAE;IAChF,EAAE,OAAO,EAAE,mBAAmB,EAAe,IAAI,EAAE,aAA2B,EAAE;IAChF,EAAE,OAAO,EAAE,oBAAoB,EAAc,IAAI,EAAE,YAA2B,EAAE;IAChF,EAAE,OAAO,EAAE,2BAA2B,EAAO,IAAI,EAAE,YAA2B,EAAE;IAChF,EAAE,OAAO,EAAE,0BAA0B,EAAQ,IAAI,EAAE,YAA2B,EAAE;IAChF,EAAE,OAAO,EAAE,2BAA2B,EAAO,IAAI,EAAE,YAA2B,EAAE;IAChF,EAAE,OAAO,EAAE,0BAA0B,EAAQ,IAAI,EAAE,WAA2B,EAAE;IAChF,EAAE,OAAO,EAAE,2BAA2B,EAAO,IAAI,EAAE,WAA2B,EAAE;IAChF,EAAE,OAAO,EAAE,4BAA4B,EAAM,IAAI,EAAE,YAA2B,EAAE;IAChF,EAAE,OAAO,EAAE,yBAAyB,EAAS,IAAI,EAAE,aAA2B,EAAE;IAChF,EAAE,OAAO,EAAE,yBAAyB,EAAS,IAAI,EAAE,aAA2B,EAAE;CACjF,CAAC;AA0BF,8EAA8E;AAC9E,OAAO;AACP,8EAA8E;AAE9E,MAAM,OAAO,mBAAmB;IACrB,IAAI,GAAG,kBAAkB,CAAC;IAC1B,QAAQ,GAAG,UAAmB,CAAC;IAExC,GAAG,CAAC,GAAgB;QAClB,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC;QACtC,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,CAA2B,sBAAsB,CAAC,CAAC;QAElF,MAAM,iBAAiB,GAAkB,EAAE,CAAC;QAC5C,MAAM,eAAe,GAAgB,EAAE,CAAC;QAExC,4EAA4E;QAC5E,iBAAiB,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,KAAK,EAAE,SAAS,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAC,CAAC;QAExF,2EAA2E;QAC3E,iBAAiB,CAAC,IAAI,CAAC,GAAG,+BAA+B,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;QAE3E,MAAM,UAAU,GAAG,sBAAsB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC1D,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;YAC3B,MAAM,aAAa,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC;YACtF,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,eAAe,CAAC,IAAI,CAAC;oBACnB,IAAI,EAAE,KAAK;oBACX,GAAG,EAAE,CAAC,CAAC,GAAG;oBACV,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;oBACpB,MAAM,EAAE,CAAC,CAAC,MAAM;oBAChB,UAAU,EAAE,GAAG;iBAChB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,2EAA2E;QAC3E,iBAAiB,CAAC,IAAI,CAAC,GAAG,2BAA2B,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;QAEvE,MAAM,aAAa,GAAG,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,EAAkB,CAAC;QACvG,MAAM,eAAe,GAAG,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,wBAAwB,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,EAAU,CAAC;QAElH,IAAI,QAAQ,KAAK,QAAQ,IAAI,aAAa,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YACpD,KAAK,MAAM,CAAC,IAAI,iCAAiC,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE,CAAC;gBACvE,MAAM,aAAa,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC;gBACtG,IAAI,CAAC,aAAa,EAAE,CAAC;oBACnB,eAAe,CAAC,IAAI,CAAC;wBACnB,IAAI,EAAE,gBAAgB;wBACtB,GAAG,EAAE,SAAS;wBACd,IAAI,EAAE,CAAC,CAAC,QAAQ;wBAChB,QAAQ,EAAE,yBAAyB,CAAC,CAAC,QAAQ,EAAE;wBAC/C,UAAU,EAAE,IAAI;qBACjB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,KAAK,MAAM,CAAC,IAAI,wBAAwB,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE,CAAC;gBAC9D,MAAM,aAAa,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC;gBAC3F,IAAI,CAAC,aAAa,EAAE,CAAC;oBACnB,eAAe,CAAC,IAAI,CAAC;wBACnB,IAAI,EAAE,KAAK;wBACX,GAAG,EAAE,QAAQ;wBACb,IAAI,EAAE,CAAC,CAAC,QAAQ;wBAChB,QAAQ,EAAE,uCAAuC,CAAC,CAAC,QAAQ,EAAE;wBAC7D,UAAU,EAAE,GAAG;qBAChB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,aAAa,GAAG,0BAA0B,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAEjE,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,aAAa,EAAE,eAAe,EAAE,aAAa,EAAE,CAAC;IAC/F,CAAC;CACF;AAQD,SAAS,iBAAiB,CACxB,KAAiB,EACjB,kBAA+C,EAC/C,WAAmB;IAEnB,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,IAAI,kBAAkB,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC;IAElD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC;YAC/B,IAAI,kBAAkB,GAAkB,IAAI,CAAC;YAC7C,IAAI,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1D,kBAAkB,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YACpF,CAAC;iBAAM,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAChE,kBAAkB,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YACpF,CAAC;YAED,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACnC,MAAM,aAAa,GAAG,kBAAkB;oBACtC,CAAC,CAAC,CAAC,kBAAkB,EAAE,UAAU,CAAC;oBAClC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;gBAEjB,KAAK,MAAM,SAAS,IAAI,aAAa,EAAE,CAAC;oBACtC,MAAM,UAAU,GAAG,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;oBACrD,IAAI,UAAU,IAAI,UAAU,CAAC,SAAS,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;wBACrD,OAAO,CAAC,IAAI,CAAC;4BACX,IAAI,EAAE,mBAAmB;4BACzB,QAAQ,EAAE,GAAG,IAAI,CAAC,IAAI,IAAI,UAAU,6BAA6B,SAAS,8BAA8B,UAAU,CAAC,WAAW,IAAI;4BAClI,QAAQ,EAAE,MAAM;4BAChB,IAAI,EAAE,MAAM,CAAC,UAAU;4BACvB,UAAU,EAAE,IAAI;yBACjB,CAAC,CAAC;wBACH,MAAM;oBACR,CAAC;gBACH,CAAC;YACH,CAAC;YAED,KAAK,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,IAAI,kBAAkB,EAAE,CAAC;gBACzD,IAAI,UAAU,CAAC,SAAS,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;oBACvC,IAAI,UAAU,KAAK,SAAS,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;wBAC/D,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,IAAI,IAAI,UAAU,IAAI,CAAC,CAAC,CAAC;wBAC5F,IAAI,CAAC,YAAY,EAAE,CAAC;4BAClB,OAAO,CAAC,IAAI,CAAC;gCACX,IAAI,EAAE,mBAAmB;gCACzB,QAAQ,EAAE,GAAG,IAAI,CAAC,IAAI,IAAI,UAAU,6BAA6B,SAAS,8BAA8B,UAAU,CAAC,WAAW,IAAI;gCAClI,QAAQ,EAAE,MAAM;gCAChB,IAAI,EAAE,MAAM,CAAC,UAAU;gCACvB,UAAU,EAAE,IAAI;6BACjB,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,+BAA+B,CAAC,UAAkB,EAAE,QAAgB;IAC3E,IAAI,CAAC,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAC;IAChE,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAErC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC;QACxD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5B,MAAM,UAAU,GAAG,OAAO,GAAG,CAAC,CAAC;QAC/B,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAChF,IAAI,CAAC,eAAe;YAAE,SAAS;QAC/B,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,GAAG,eAAe,CAAC;QAEzC,KAAK,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,mBAAmB,EAAE,CAAC;YACpD,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACtB,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;gBAClF,IAAI,CAAC,aAAa,EAAE,CAAC;oBACnB,OAAO,CAAC,IAAI,CAAC;wBACX,IAAI;wBACJ,QAAQ,EAAE,GAAG,OAAO,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;wBACtF,QAAQ,EAAE,MAAM;wBAChB,IAAI,EAAE,UAAU;wBAChB,UAAU,EAAE,GAAG;wBACf,QAAQ,EAAE,OAAO;qBAClB,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,2BAA2B,CAAC,UAAkB,EAAE,QAAgB;IACvE,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACrC,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAErC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC;QACxD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5B,MAAM,UAAU,GAAG,OAAO,GAAG,CAAC,CAAC;QAC/B,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAE/C,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,qDAAqD,CAAC,CAAC;QAC1F,IAAI,CAAC,eAAe;YAAE,SAAS;QAC/B,MAAM,GAAG,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC;QAE/B,KAAK,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,uBAAuB,EAAE,CAAC;YACxD,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACtB,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;gBAC5C,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBACnD,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;gBAClF,IAAI,CAAC,aAAa,EAAE,CAAC;oBACnB,OAAO,CAAC,IAAI,CAAC;wBACX,IAAI;wBACJ,QAAQ,EAAE,GAAG,OAAO,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;wBACtF,QAAQ,EAAE,MAAM;wBAChB,IAAI,EAAE,UAAU;wBAChB,UAAU,EAAE,IAAI;wBAChB,QAAQ,EAAE,OAAO;qBAClB,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,UAAkB;IACvD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAkB,CAAC;IACnD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAErC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAE/C,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAChF,IAAI,eAAe,EAAE,CAAC;YACpB,MAAM,CAAC,EAAE,SAAS,EAAE,AAAD,EAAG,GAAG,EAAE,IAAI,CAAC,GAAG,eAAe,CAAC;YACnD,MAAM,YAAY,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YACxF,IAAI,YAAY;gBAAE,gBAAgB,CAAC,GAAG,CAAC,GAAG,SAAS,KAAK,GAAG,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACxE,SAAS;QACX,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,iFAAiF,CAAC,CAAC;QACnH,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,CAAC,EAAE,GAAG,EAAE,AAAD,EAAG,OAAO,EAAE,AAAD,EAAG,GAAG,EAAE,IAAI,CAAC,GAAG,YAAY,CAAC;YACrD,MAAM,YAAY,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YACxF,IAAI,YAAY;gBAAE,gBAAgB,CAAC,GAAG,CAAC,GAAG,GAAG,KAAK,OAAO,OAAO,GAAG,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YAChF,SAAS;QACX,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;QACxD,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC;YACrC,MAAM,UAAU,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;YACxF,IAAI,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC3F,SAAS;QACX,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC7E,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,GAAG,YAAY,CAAC;YAC3C,MAAM,cAAc,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;YACnF,MAAM,YAAY,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC5F,IAAI,cAAc,IAAI,YAAY;gBAAE,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YAChE,SAAS;QACX,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACxD,IAAI,CAAC,WAAW;YAAE,SAAS;QAC3B,MAAM,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,WAAW,CAAC;QAEjC,MAAM,cAAc,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9E,IAAI,cAAkC,CAAC;QAEvC,MAAM,eAAe,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACxE,IAAI,eAAe,EAAE,CAAC;YACpB,MAAM,CAAC,EAAE,SAAS,EAAE,AAAD,EAAG,GAAG,CAAC,GAAG,eAAe,CAAC;YAC7C,IAAI,gBAAgB,CAAC,GAAG,CAAC,GAAG,SAAS,KAAK,GAAG,IAAI,CAAC;gBAAE,cAAc,GAAG,GAAG,SAAS,KAAK,GAAG,IAAI,CAAC;QAChG,CAAC;QAED,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,MAAM,YAAY,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,kEAAkE,CAAC,CAAC;YAC1G,IAAI,YAAY,EAAE,CAAC;gBACjB,MAAM,CAAC,EAAE,GAAG,EAAE,AAAD,EAAG,OAAO,EAAE,AAAD,EAAG,GAAG,CAAC,GAAG,YAAY,CAAC;gBAC/C,IAAI,gBAAgB,CAAC,GAAG,CAAC,GAAG,GAAG,KAAK,OAAO,OAAO,GAAG,IAAI,CAAC;oBAAE,cAAc,GAAG,GAAG,GAAG,KAAK,OAAO,OAAO,GAAG,IAAI,CAAC;YAChH,CAAC;QACH,CAAC;QAED,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,MAAM,aAAa,GAAG,yBAAyB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC3F,IAAI,CAAC,aAAa;gBAAE,cAAc,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACzG,CAAC;QAED,IAAI,cAAc,EAAE,CAAC;YACnB,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1B,CAAC;aAAM,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;YACxC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1B,CAAC;aAAM,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;YACvG,MAAM,WAAW,GAAG,YAAY,KAAK,SAAS,IAAI,CAChD,IAAI,MAAM,CAAC,qBAAqB,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC;gBAC9D,IAAI,MAAM,CAAC,cAAc,GAAG,qBAAqB,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CACtE,CAAC;YACF,IAAI,CAAC,WAAW;gBAAE,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,UAAkB,EAAE,aAAkC;IAC7F,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAErC,0DAA0D;IAC1D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1C,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,mEAAmE,CAAC,CAAC;QAC9F,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAClE,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAChE,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC7B,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;gBAAE,SAAS;YAC5B,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YAC9D,IAAI,OAAO,IAAI,QAAQ;gBAAE,MAAM;YAC/B,IAAI,wCAAwC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;gBAAC,SAAS,GAAG,IAAI,CAAC;gBAAC,MAAM;YAAC,CAAC;QAC/F,CAAC;QACD,IAAI,SAAS;YAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC;IAED,sHAAsH;IACtH,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC/C,IAAI,CAAC,EAAE;YAAE,SAAS;QAClB,MAAM,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC;QACxB,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAAE,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACvF,CAAC;IAED,8EAA8E;IAC9E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC/C,IAAI,CAAC,EAAE;YAAE,SAAS;QAClB,MAAM,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC;QACxB,MAAM,mBAAmB,GAAG,CAAC,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAC7D,IAAI,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CACjD,CAAC;QACF,IAAI,mBAAmB;YAAE,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC9C,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,UAAkB,EAClB,WAAgC;IAEhC,IAAI,WAAW,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACtC,MAAM,UAAU,GAAoD,EAAE,CAAC;IACvE,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,aAAa,GAAG,6CAA6C,CAAC;IACpE,MAAM,WAAW,GAAG,CAAC,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5C,MAAM,kBAAkB,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAElE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAC/C,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QACpC,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,MAAM,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,UAAU,GAAK,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QACnF,MAAM,YAAY,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QACrF,IAAI,UAAU,IAAI,YAAY;YAAE,UAAU,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,kBAAkB,EAAE,QAAQ,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACvG,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,wBAAwB,CAC/B,UAAkB,EAClB,WAAgC;IAEhC,IAAI,WAAW,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACtC,MAAM,KAAK,GAAgC,EAAE,CAAC;IAC9C,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,WAAW,GAAG,CAAC,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC;IAE5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAC/C,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAC/D,IAAI,CAAC,WAAW;YAAE,SAAS;QAC3B,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,aAAa,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACjF,IAAI,CAAC,aAAa;YAAE,SAAS;QAC7B,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3H,IAAI,CAAC,aAAa;YAAE,SAAS;QAC7B,KAAK,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClC,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,sBAAsB,CAAC,UAAkB,EAAE,QAAgB;IAGlE,IAAI,CAAC,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAC;IAChE,MAAM,KAAK,GAA4G,EAAE,CAAC;IAC1H,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAErC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC;QACxD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5B,MAAM,UAAU,GAAG,OAAO,GAAG,CAAC,CAAC;QAC/B,KAAK,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,gBAAgB,EAAE,CAAC;YAChE,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvB,IAAI,MAAM,GAAG,WAAW,CAAC;gBACzB,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;oBAAE,MAAM,GAAG,WAAW,CAAC;qBACjD,IAAI,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC;oBAAE,MAAM,GAAG,gBAAgB,CAAC;qBAChE,IAAI,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC;oBAAE,MAAM,GAAG,kBAAkB,CAAC;qBACpE,IAAI,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC;oBAAE,MAAM,GAAG,oBAAoB,CAAC;qBACxE,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;oBAAE,MAAM,GAAG,KAAK,CAAC;qBAC1C,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;oBAAE,MAAM,GAAG,MAAM,CAAC;gBAEjD,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;gBAC9E,IAAI,CAAC,aAAa,EAAE,CAAC;oBACnB,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;gBACxG,CAAC;gBACD,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,UAAkB,EAAE,QAAgB;IAC7E,IAAI,CAAC,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,GAAG,EAAE,CAAC;IACvE,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAErC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QACjC,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAClE,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC5E,IAAI,CAAC,WAAW;YAAE,SAAS;QAC3B,MAAM,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,WAAW,CAAC;QACjC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,SAAS;QAC3G,MAAM,cAAc,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1E,MAAM,oBAAoB,GAAG,OAAO,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACnH,IAAI,cAAc,IAAI,oBAAoB;YAAE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtE,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}
|
|
@@ -0,0 +1,34 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Pass #81: leaked-global (CWE-1109, category: reliability)
|
|
3
|
+
*
|
|
4
|
+
* Detects assignments to undeclared variables inside function bodies in
|
|
5
|
+
* JavaScript/TypeScript. In non-strict mode JS (and absent `"use strict"`)
|
|
6
|
+
* writing to a variable that has no `let`/`const`/`var` declaration anywhere
|
|
7
|
+
* in the enclosing function silently creates (or mutates) a property on the
|
|
8
|
+
* global object — a classic source of hard-to-trace bugs.
|
|
9
|
+
*
|
|
10
|
+
* Detection strategy:
|
|
11
|
+
* 1. Language filter: JS/TS only.
|
|
12
|
+
* 2. Build a ScopeGraph for declaration-keyword awareness.
|
|
13
|
+
* 3. For each `kind='local'` def whose source line has NO declaration keyword:
|
|
14
|
+
* - Skip intentional throwaway names (_, err, e, …) and loop vars.
|
|
15
|
+
* - Skip if the variable IS declared (hasDeclKeyword=true) somewhere
|
|
16
|
+
* else in the same enclosing function → it is a legitimate reassignment.
|
|
17
|
+
* - Skip top-level assignments (methodStart === -1) — module-level bare
|
|
18
|
+
* assignments are an ES module pattern.
|
|
19
|
+
* - Flag the rest as potential global leaks.
|
|
20
|
+
*/
|
|
21
|
+
import type { AnalysisPass, PassContext } from '../../graph/analysis-pass.js';
|
|
22
|
+
export interface LeakedGlobalResult {
|
|
23
|
+
leaks: Array<{
|
|
24
|
+
line: number;
|
|
25
|
+
variable: string;
|
|
26
|
+
/** Name of the enclosing function/method, or null if unavailable. */
|
|
27
|
+
enclosingFunction: string | null;
|
|
28
|
+
}>;
|
|
29
|
+
}
|
|
30
|
+
export declare class LeakedGlobalPass implements AnalysisPass<LeakedGlobalResult> {
|
|
31
|
+
readonly name = "leaked-global";
|
|
32
|
+
readonly category: "reliability";
|
|
33
|
+
run(ctx: PassContext): LeakedGlobalResult;
|
|
34
|
+
}
|