circle-ir 3.9.8 → 3.11.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/analysis/passes/broad-catch-pass.d.ts +29 -0
- package/dist/analysis/passes/broad-catch-pass.js +79 -0
- package/dist/analysis/passes/broad-catch-pass.js.map +1 -0
- package/dist/analysis/passes/cleanup-verify-pass.d.ts +28 -0
- package/dist/analysis/passes/cleanup-verify-pass.js +130 -0
- package/dist/analysis/passes/cleanup-verify-pass.js.map +1 -0
- package/dist/analysis/passes/double-close-pass.d.ts +33 -0
- package/dist/analysis/passes/double-close-pass.js +109 -0
- package/dist/analysis/passes/double-close-pass.js.map +1 -0
- package/dist/analysis/passes/missing-guard-dom-pass.d.ts +25 -0
- package/dist/analysis/passes/missing-guard-dom-pass.js +99 -0
- package/dist/analysis/passes/missing-guard-dom-pass.js.map +1 -0
- package/dist/analysis/passes/missing-override-pass.d.ts +27 -0
- package/dist/analysis/passes/missing-override-pass.js +110 -0
- package/dist/analysis/passes/missing-override-pass.js.map +1 -0
- package/dist/analysis/passes/sink-filter-pass.js +88 -9
- package/dist/analysis/passes/sink-filter-pass.js.map +1 -1
- package/dist/analysis/passes/swallowed-exception-pass.d.ts +35 -0
- package/dist/analysis/passes/swallowed-exception-pass.js +103 -0
- package/dist/analysis/passes/swallowed-exception-pass.js.map +1 -0
- package/dist/analysis/passes/taint-matcher-pass.js +6 -1
- package/dist/analysis/passes/taint-matcher-pass.js.map +1 -1
- package/dist/analysis/passes/taint-propagation-pass.js +2 -3
- package/dist/analysis/passes/taint-propagation-pass.js.map +1 -1
- package/dist/analysis/passes/unhandled-exception-pass.d.ts +34 -0
- package/dist/analysis/passes/unhandled-exception-pass.js +123 -0
- package/dist/analysis/passes/unhandled-exception-pass.js.map +1 -0
- package/dist/analysis/passes/unused-interface-method-pass.d.ts +27 -0
- package/dist/analysis/passes/unused-interface-method-pass.js +62 -0
- package/dist/analysis/passes/unused-interface-method-pass.js.map +1 -0
- package/dist/analysis/passes/use-after-close-pass.d.ts +30 -0
- package/dist/analysis/passes/use-after-close-pass.js +100 -0
- package/dist/analysis/passes/use-after-close-pass.js.map +1 -0
- package/dist/analysis/taint-matcher.d.ts +2 -1
- package/dist/analysis/taint-matcher.js +10 -5
- package/dist/analysis/taint-matcher.js.map +1 -1
- package/dist/analyzer.d.ts +12 -3
- package/dist/analyzer.js +30 -3
- package/dist/analyzer.js.map +1 -1
- package/dist/browser/circle-ir.js +1523 -18
- package/dist/core/circle-ir-core.cjs +10 -6
- package/dist/core/circle-ir-core.js +10 -6
- package/dist/graph/exception-flow-graph.d.ts +44 -0
- package/dist/graph/exception-flow-graph.js +75 -0
- package/dist/graph/exception-flow-graph.js.map +1 -0
- package/dist/graph/index.d.ts +1 -0
- package/dist/graph/index.js +1 -0
- package/dist/graph/index.js.map +1 -1
- package/dist/index.d.ts +1 -0
- package/dist/index.js +1 -0
- package/dist/index.js.map +1 -1
- package/package.json +1 -1
|
@@ -0,0 +1,123 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Pass #30: unhandled-exception (CWE-390, category: reliability)
|
|
3
|
+
*
|
|
4
|
+
* Detects explicit throw/raise statements that are not covered by any
|
|
5
|
+
* try/catch in the same function. Uncaught exceptions surface as
|
|
6
|
+
* unhandled-rejection crashes (Node.js) or propagate unexpectedly to
|
|
7
|
+
* callers who may not anticipate them.
|
|
8
|
+
*
|
|
9
|
+
* Detection strategy (conservative, low false-positive):
|
|
10
|
+
* 1. Build ExceptionFlowGraph. Derive "covered" line ranges as
|
|
11
|
+
* [tryBlock.start_line, catchBlock.start_line − 1] for each pair.
|
|
12
|
+
* 2. Scan source lines for explicit throw/raise keywords.
|
|
13
|
+
* 3. Skip if the throw line is already inside a catch block (re-throw).
|
|
14
|
+
* 4. Skip if the throw line falls within any covered range.
|
|
15
|
+
* 5. Emit one finding per enclosing method (avoid duplicate findings for
|
|
16
|
+
* multiple throws in the same uncovered method).
|
|
17
|
+
*
|
|
18
|
+
* Languages: JavaScript, TypeScript, Python only.
|
|
19
|
+
* - Java: checked exceptions are intentionally propagated via `throws`;
|
|
20
|
+
* too noisy without type hierarchy support.
|
|
21
|
+
* - Rust/Bash: no traditional throw/raise; skip.
|
|
22
|
+
*/
|
|
23
|
+
import { ExceptionFlowGraph } from '../../graph/exception-flow-graph.js';
|
|
24
|
+
const JS_THROW_RE = /^\s*throw\s+/;
|
|
25
|
+
const PYTHON_RAISE_RE = /^\s*raise\b/;
|
|
26
|
+
export class UnhandledExceptionPass {
|
|
27
|
+
name = 'unhandled-exception';
|
|
28
|
+
category = 'reliability';
|
|
29
|
+
run(ctx) {
|
|
30
|
+
const { graph, code, language } = ctx;
|
|
31
|
+
if (language !== 'javascript' && language !== 'typescript' && language !== 'python') {
|
|
32
|
+
return { unhandled: [] };
|
|
33
|
+
}
|
|
34
|
+
const { cfg } = graph.ir;
|
|
35
|
+
const file = graph.ir.meta.file;
|
|
36
|
+
const codeLines = code.split('\n');
|
|
37
|
+
const exGraph = new ExceptionFlowGraph(cfg, graph.blockById);
|
|
38
|
+
// Build covered ranges: [tryBlock.start_line, catchBlock.start_line - 1]
|
|
39
|
+
const coveredRanges = [];
|
|
40
|
+
for (const pair of exGraph.pairs) {
|
|
41
|
+
if (pair.catchBlock.start_line > pair.tryBlock.start_line) {
|
|
42
|
+
coveredRanges.push({
|
|
43
|
+
start: pair.tryBlock.start_line,
|
|
44
|
+
end: pair.catchBlock.start_line - 1,
|
|
45
|
+
});
|
|
46
|
+
}
|
|
47
|
+
}
|
|
48
|
+
// Collect catch-block start lines (to detect re-throws)
|
|
49
|
+
const catchStarts = new Set(exGraph.pairs.map(p => p.catchBlock.start_line));
|
|
50
|
+
const throwRe = language === 'python' ? PYTHON_RAISE_RE : JS_THROW_RE;
|
|
51
|
+
const unhandled = [];
|
|
52
|
+
const reportedMethods = new Set();
|
|
53
|
+
for (let ln = 1; ln <= codeLines.length; ln++) {
|
|
54
|
+
const lineText = codeLines[ln - 1] ?? '';
|
|
55
|
+
if (!throwRe.test(lineText))
|
|
56
|
+
continue;
|
|
57
|
+
// Skip re-throws inside catch blocks
|
|
58
|
+
let inCatch = false;
|
|
59
|
+
for (const cs of catchStarts) {
|
|
60
|
+
if (ln >= cs) {
|
|
61
|
+
inCatch = true;
|
|
62
|
+
break;
|
|
63
|
+
}
|
|
64
|
+
}
|
|
65
|
+
// More precise: only skip if ln is actually within a catch body
|
|
66
|
+
// (not just any line after a catch start). Use method boundary check.
|
|
67
|
+
// Simplified: if the line is >= any catch start within the same method, skip.
|
|
68
|
+
// Better heuristic: check if any pair has catchBlock.start_line <= ln
|
|
69
|
+
// and the throw is inside that catch body (ln <= methodEnd of that catch).
|
|
70
|
+
// We use a simple check: if the throw line is >= a catch start and
|
|
71
|
+
// the enclosing method contains the corresponding try, treat as re-throw.
|
|
72
|
+
inCatch = false;
|
|
73
|
+
for (const pair of exGraph.pairs) {
|
|
74
|
+
if (ln >= pair.catchBlock.start_line) {
|
|
75
|
+
// Check same method
|
|
76
|
+
const mThrow = graph.methodAtLine(ln);
|
|
77
|
+
const mCatch = graph.methodAtLine(pair.catchBlock.start_line);
|
|
78
|
+
if (mThrow &&
|
|
79
|
+
mCatch &&
|
|
80
|
+
mThrow.method.start_line === mCatch.method.start_line) {
|
|
81
|
+
inCatch = true;
|
|
82
|
+
break;
|
|
83
|
+
}
|
|
84
|
+
}
|
|
85
|
+
}
|
|
86
|
+
if (inCatch)
|
|
87
|
+
continue;
|
|
88
|
+
// Check if covered by a try/catch range
|
|
89
|
+
const isCovered = coveredRanges.some(r => ln >= r.start && ln <= r.end);
|
|
90
|
+
if (isCovered)
|
|
91
|
+
continue;
|
|
92
|
+
// Deduplicate by enclosing method
|
|
93
|
+
const methodInfo = graph.methodAtLine(ln);
|
|
94
|
+
const methodKey = methodInfo
|
|
95
|
+
? `${methodInfo.method.start_line}-${methodInfo.method.end_line}`
|
|
96
|
+
: `global-${ln}`;
|
|
97
|
+
if (reportedMethods.has(methodKey))
|
|
98
|
+
continue;
|
|
99
|
+
reportedMethods.add(methodKey);
|
|
100
|
+
const methodName = methodInfo?.method.name ?? '<anonymous>';
|
|
101
|
+
unhandled.push({ line: ln, method: methodName });
|
|
102
|
+
const snippet = lineText.trim();
|
|
103
|
+
ctx.addFinding({
|
|
104
|
+
id: `unhandled-exception-${file}-${ln}`,
|
|
105
|
+
pass: this.name,
|
|
106
|
+
category: this.category,
|
|
107
|
+
rule_id: this.name,
|
|
108
|
+
cwe: 'CWE-390',
|
|
109
|
+
severity: 'medium',
|
|
110
|
+
level: 'warning',
|
|
111
|
+
message: `Unhandled exception: \`throw\` at line ${ln} in \`${methodName}\` is not inside ` +
|
|
112
|
+
`a try/catch — callers receive an unexpected exception`,
|
|
113
|
+
file,
|
|
114
|
+
line: ln,
|
|
115
|
+
snippet,
|
|
116
|
+
fix: 'Wrap throwing code in a try/catch, or document the exception in the function signature',
|
|
117
|
+
evidence: { method: methodName },
|
|
118
|
+
});
|
|
119
|
+
}
|
|
120
|
+
return { unhandled };
|
|
121
|
+
}
|
|
122
|
+
}
|
|
123
|
+
//# sourceMappingURL=unhandled-exception-pass.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"unhandled-exception-pass.js","sourceRoot":"","sources":["../../../src/analysis/passes/unhandled-exception-pass.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAGH,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAEzE,MAAM,WAAW,GAAG,cAAc,CAAC;AACnC,MAAM,eAAe,GAAG,aAAa,CAAC;AAMtC,MAAM,OAAO,sBAAsB;IACxB,IAAI,GAAG,qBAAqB,CAAC;IAC7B,QAAQ,GAAG,aAAsB,CAAC;IAE3C,GAAG,CAAC,GAAgB;QAClB,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC;QAEtC,IAAI,QAAQ,KAAK,YAAY,IAAI,QAAQ,KAAK,YAAY,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACpF,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;QAC3B,CAAC;QAED,MAAM,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;QAChC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAEnC,MAAM,OAAO,GAAG,IAAI,kBAAkB,CAAC,GAAG,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QAE7D,yEAAyE;QACzE,MAAM,aAAa,GAA0C,EAAE,CAAC;QAChE,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YACjC,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;gBAC1D,aAAa,CAAC,IAAI,CAAC;oBACjB,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU;oBAC/B,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,UAAU,GAAG,CAAC;iBACpC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,wDAAwD;QACxD,MAAM,WAAW,GAAG,IAAI,GAAG,CACzB,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAChD,CAAC;QAEF,MAAM,OAAO,GAAG,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,WAAW,CAAC;QAEtE,MAAM,SAAS,GAA0C,EAAE,CAAC;QAC5D,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;QAE1C,KAAK,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,SAAS,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC;YAC9C,MAAM,QAAQ,GAAG,SAAS,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YACzC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;gBAAE,SAAS;YAEtC,qCAAqC;YACrC,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,KAAK,MAAM,EAAE,IAAI,WAAW,EAAE,CAAC;gBAC7B,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;oBAAC,OAAO,GAAG,IAAI,CAAC;oBAAC,MAAM;gBAAC,CAAC;YAC1C,CAAC;YACD,gEAAgE;YAChE,sEAAsE;YACtE,8EAA8E;YAC9E,sEAAsE;YACtE,2EAA2E;YAC3E,mEAAmE;YACnE,0EAA0E;YAC1E,OAAO,GAAG,KAAK,CAAC;YAChB,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;gBACjC,IAAI,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC;oBACrC,oBAAoB;oBACpB,MAAM,MAAM,GAAG,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;oBACtC,MAAM,MAAM,GAAG,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;oBAC9D,IACE,MAAM;wBACN,MAAM;wBACN,MAAM,CAAC,MAAM,CAAC,UAAU,KAAK,MAAM,CAAC,MAAM,CAAC,UAAU,EACrD,CAAC;wBACD,OAAO,GAAG,IAAI,CAAC;wBACf,MAAM;oBACR,CAAC;gBACH,CAAC;YACH,CAAC;YACD,IAAI,OAAO;gBAAE,SAAS;YAEtB,wCAAwC;YACxC,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YACxE,IAAI,SAAS;gBAAE,SAAS;YAExB,kCAAkC;YAClC,MAAM,UAAU,GAAG,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;YAC1C,MAAM,SAAS,GAAG,UAAU;gBAC1B,CAAC,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,CAAC,QAAQ,EAAE;gBACjE,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC;YAEnB,IAAI,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC;gBAAE,SAAS;YAC7C,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAE/B,MAAM,UAAU,GAAG,UAAU,EAAE,MAAM,CAAC,IAAI,IAAI,aAAa,CAAC;YAC5D,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;YAEjD,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;YAChC,GAAG,CAAC,UAAU,CAAC;gBACb,EAAE,EAAE,uBAAuB,IAAI,IAAI,EAAE,EAAE;gBACvC,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,OAAO,EAAE,IAAI,CAAC,IAAI;gBAClB,GAAG,EAAE,SAAS;gBACd,QAAQ,EAAE,QAAQ;gBAClB,KAAK,EAAE,SAAS;gBAChB,OAAO,EACL,0CAA0C,EAAE,SAAS,UAAU,mBAAmB;oBAClF,uDAAuD;gBACzD,IAAI;gBACJ,IAAI,EAAE,EAAE;gBACR,OAAO;gBACP,GAAG,EAAE,wFAAwF;gBAC7F,QAAQ,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE;aACjC,CAAC,CAAC;QACL,CAAC;QAED,OAAO,EAAE,SAAS,EAAE,CAAC;IACvB,CAAC;CACF"}
|
|
@@ -0,0 +1,27 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Pass: unused-interface-method (#66)
|
|
3
|
+
*
|
|
4
|
+
* Detects interface methods that are never called anywhere in the current file.
|
|
5
|
+
* This is a conservative single-file check: if a method is called at all (even
|
|
6
|
+
* through a different receiver), it is not flagged.
|
|
7
|
+
*
|
|
8
|
+
* Detection strategy:
|
|
9
|
+
* 1. Collect all method names called anywhere in the file.
|
|
10
|
+
* 2. For each interface type, for each method whose name does not appear in
|
|
11
|
+
* the called-method set → emit finding.
|
|
12
|
+
*
|
|
13
|
+
* Note: This analysis is intentionally conservative. Cross-file callers are
|
|
14
|
+
* not checked; downstream consumers should suppress findings for public APIs.
|
|
15
|
+
*
|
|
16
|
+
* Languages: Java, TypeScript.
|
|
17
|
+
* Dedup: at most one finding per interface:method pair.
|
|
18
|
+
*/
|
|
19
|
+
import type { AnalysisPass, PassContext } from '../../graph/analysis-pass.js';
|
|
20
|
+
export interface UnusedInterfaceMethodResult {
|
|
21
|
+
findings: number;
|
|
22
|
+
}
|
|
23
|
+
export declare class UnusedInterfaceMethodPass implements AnalysisPass<UnusedInterfaceMethodResult> {
|
|
24
|
+
readonly name = "unused-interface-method";
|
|
25
|
+
readonly category: "maintainability";
|
|
26
|
+
run(ctx: PassContext): UnusedInterfaceMethodResult;
|
|
27
|
+
}
|
|
@@ -0,0 +1,62 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Pass: unused-interface-method (#66)
|
|
3
|
+
*
|
|
4
|
+
* Detects interface methods that are never called anywhere in the current file.
|
|
5
|
+
* This is a conservative single-file check: if a method is called at all (even
|
|
6
|
+
* through a different receiver), it is not flagged.
|
|
7
|
+
*
|
|
8
|
+
* Detection strategy:
|
|
9
|
+
* 1. Collect all method names called anywhere in the file.
|
|
10
|
+
* 2. For each interface type, for each method whose name does not appear in
|
|
11
|
+
* the called-method set → emit finding.
|
|
12
|
+
*
|
|
13
|
+
* Note: This analysis is intentionally conservative. Cross-file callers are
|
|
14
|
+
* not checked; downstream consumers should suppress findings for public APIs.
|
|
15
|
+
*
|
|
16
|
+
* Languages: Java, TypeScript.
|
|
17
|
+
* Dedup: at most one finding per interface:method pair.
|
|
18
|
+
*/
|
|
19
|
+
export class UnusedInterfaceMethodPass {
|
|
20
|
+
name = 'unused-interface-method';
|
|
21
|
+
category = 'maintainability';
|
|
22
|
+
run(ctx) {
|
|
23
|
+
const { graph, language } = ctx;
|
|
24
|
+
if (language !== 'java' && language !== 'typescript')
|
|
25
|
+
return { findings: 0 };
|
|
26
|
+
const { types, calls } = graph.ir;
|
|
27
|
+
const file = graph.ir.meta.file;
|
|
28
|
+
// Collect all method names that appear in at least one call in this file
|
|
29
|
+
const calledMethods = new Set(calls.map(c => c.method_name));
|
|
30
|
+
const dedup = new Set();
|
|
31
|
+
let count = 0;
|
|
32
|
+
for (const type of types) {
|
|
33
|
+
if (type.kind !== 'interface')
|
|
34
|
+
continue;
|
|
35
|
+
for (const method of type.methods) {
|
|
36
|
+
if (calledMethods.has(method.name))
|
|
37
|
+
continue;
|
|
38
|
+
const key = `${type.name}:${method.name}`;
|
|
39
|
+
if (dedup.has(key))
|
|
40
|
+
continue;
|
|
41
|
+
dedup.add(key);
|
|
42
|
+
count++;
|
|
43
|
+
ctx.addFinding({
|
|
44
|
+
id: `unused-interface-method-${file}-${method.start_line}`,
|
|
45
|
+
pass: this.name,
|
|
46
|
+
category: this.category,
|
|
47
|
+
rule_id: 'unused-interface-method',
|
|
48
|
+
severity: 'low',
|
|
49
|
+
level: 'note',
|
|
50
|
+
message: `Interface method \`${method.name}()\` in \`${type.name}\` is never called ` +
|
|
51
|
+
`in this file`,
|
|
52
|
+
file,
|
|
53
|
+
line: method.start_line,
|
|
54
|
+
fix: 'Remove this method or verify it is used from other files; unused interface methods inflate the public API',
|
|
55
|
+
evidence: { interfaceName: type.name, methodName: method.name },
|
|
56
|
+
});
|
|
57
|
+
}
|
|
58
|
+
}
|
|
59
|
+
return { findings: count };
|
|
60
|
+
}
|
|
61
|
+
}
|
|
62
|
+
//# sourceMappingURL=unused-interface-method-pass.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"unused-interface-method-pass.js","sourceRoot":"","sources":["../../../src/analysis/passes/unused-interface-method-pass.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAQH,MAAM,OAAO,yBAAyB;IAC3B,IAAI,GAAG,yBAAyB,CAAC;IACjC,QAAQ,GAAG,iBAA0B,CAAC;IAE/C,GAAG,CAAC,GAAgB;QAClB,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC;QAEhC,IAAI,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,YAAY;YAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QAE7E,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;QAEhC,yEAAyE;QACzE,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;QAE7D,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;QAChC,IAAI,KAAK,GAAG,CAAC,CAAC;QAEd,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW;gBAAE,SAAS;YAExC,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBAClC,IAAI,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;oBAAE,SAAS;gBAE7C,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;gBAC1C,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;oBAAE,SAAS;gBAC7B,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAEf,KAAK,EAAE,CAAC;gBACR,GAAG,CAAC,UAAU,CAAC;oBACb,EAAE,EAAE,2BAA2B,IAAI,IAAI,MAAM,CAAC,UAAU,EAAE;oBAC1D,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,OAAO,EAAE,yBAAyB;oBAClC,QAAQ,EAAE,KAAK;oBACf,KAAK,EAAE,MAAM;oBACb,OAAO,EACL,sBAAsB,MAAM,CAAC,IAAI,aAAa,IAAI,CAAC,IAAI,qBAAqB;wBAC5E,cAAc;oBAChB,IAAI;oBACJ,IAAI,EAAE,MAAM,CAAC,UAAU;oBACvB,GAAG,EAAE,2GAA2G;oBAChH,QAAQ,EAAE,EAAE,aAAa,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE;iBAChE,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC7B,CAAC;CACF"}
|
|
@@ -0,0 +1,30 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Pass #32: use-after-close (CWE-672, category: reliability)
|
|
3
|
+
*
|
|
4
|
+
* Detects method calls on a resource variable that occur after the resource
|
|
5
|
+
* has been closed (close/dispose/shutdown). Using a closed stream or
|
|
6
|
+
* connection throws an IOException or similar, causing unexpected runtime
|
|
7
|
+
* failures.
|
|
8
|
+
*
|
|
9
|
+
* Detection strategy:
|
|
10
|
+
* 1. Find resource-opening calls (same patterns as resource-leak-pass).
|
|
11
|
+
* 2. Find the FIRST close() call on the resource variable within the method.
|
|
12
|
+
* 3. If a close is found, scan subsequent calls on the same receiver variable
|
|
13
|
+
* that are NOT themselves close calls → use-after-close.
|
|
14
|
+
*
|
|
15
|
+
* Languages: Java, JavaScript, TypeScript, Python, Rust (skip Bash).
|
|
16
|
+
*/
|
|
17
|
+
import type { AnalysisPass, PassContext } from '../../graph/analysis-pass.js';
|
|
18
|
+
export interface UseAfterCloseResult {
|
|
19
|
+
useAfterCloses: Array<{
|
|
20
|
+
openLine: number;
|
|
21
|
+
closeLine: number;
|
|
22
|
+
useLine: number;
|
|
23
|
+
variable: string;
|
|
24
|
+
}>;
|
|
25
|
+
}
|
|
26
|
+
export declare class UseAfterClosePass implements AnalysisPass<UseAfterCloseResult> {
|
|
27
|
+
readonly name = "use-after-close";
|
|
28
|
+
readonly category: "reliability";
|
|
29
|
+
run(ctx: PassContext): UseAfterCloseResult;
|
|
30
|
+
}
|
|
@@ -0,0 +1,100 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Pass #32: use-after-close (CWE-672, category: reliability)
|
|
3
|
+
*
|
|
4
|
+
* Detects method calls on a resource variable that occur after the resource
|
|
5
|
+
* has been closed (close/dispose/shutdown). Using a closed stream or
|
|
6
|
+
* connection throws an IOException or similar, causing unexpected runtime
|
|
7
|
+
* failures.
|
|
8
|
+
*
|
|
9
|
+
* Detection strategy:
|
|
10
|
+
* 1. Find resource-opening calls (same patterns as resource-leak-pass).
|
|
11
|
+
* 2. Find the FIRST close() call on the resource variable within the method.
|
|
12
|
+
* 3. If a close is found, scan subsequent calls on the same receiver variable
|
|
13
|
+
* that are NOT themselves close calls → use-after-close.
|
|
14
|
+
*
|
|
15
|
+
* Languages: Java, JavaScript, TypeScript, Python, Rust (skip Bash).
|
|
16
|
+
*/
|
|
17
|
+
const RESOURCE_CTORS = new Set([
|
|
18
|
+
'FileInputStream', 'FileOutputStream', 'FileReader', 'FileWriter',
|
|
19
|
+
'BufferedReader', 'BufferedWriter', 'PrintWriter', 'InputStreamReader',
|
|
20
|
+
'OutputStreamWriter', 'RandomAccessFile', 'DataInputStream', 'DataOutputStream',
|
|
21
|
+
'ObjectInputStream', 'ObjectOutputStream', 'ZipInputStream', 'ZipOutputStream',
|
|
22
|
+
'JarInputStream', 'JarOutputStream', 'GZIPInputStream', 'GZIPOutputStream',
|
|
23
|
+
'FileChannel', 'Socket', 'ServerSocket', 'DatagramSocket',
|
|
24
|
+
]);
|
|
25
|
+
const RESOURCE_FACTORY_METHODS = new Set([
|
|
26
|
+
'openConnection', 'openStream', 'newInputStream', 'newOutputStream',
|
|
27
|
+
'newBufferedReader', 'newBufferedWriter', 'newByteChannel',
|
|
28
|
+
'open', 'createReadStream', 'createWriteStream', 'createConnection',
|
|
29
|
+
]);
|
|
30
|
+
const CLOSE_METHODS = new Set([
|
|
31
|
+
'close', 'dispose', 'shutdown', 'disconnect', 'release', 'destroy', 'free',
|
|
32
|
+
'shutdownNow', 'terminate',
|
|
33
|
+
]);
|
|
34
|
+
export class UseAfterClosePass {
|
|
35
|
+
name = 'use-after-close';
|
|
36
|
+
category = 'reliability';
|
|
37
|
+
run(ctx) {
|
|
38
|
+
const { graph, code } = ctx;
|
|
39
|
+
if (ctx.language === 'bash')
|
|
40
|
+
return { useAfterCloses: [] };
|
|
41
|
+
const file = graph.ir.meta.file;
|
|
42
|
+
const codeLines = code.split('\n');
|
|
43
|
+
const useAfterCloses = [];
|
|
44
|
+
for (const call of graph.ir.calls) {
|
|
45
|
+
const name = call.method_name;
|
|
46
|
+
const isConstructor = call.is_constructor === true && RESOURCE_CTORS.has(name);
|
|
47
|
+
const isFactory = !call.is_constructor && RESOURCE_FACTORY_METHODS.has(name);
|
|
48
|
+
if (!isConstructor && !isFactory)
|
|
49
|
+
continue;
|
|
50
|
+
const openLine = call.location.line;
|
|
51
|
+
const defs = graph.defsAtLine(openLine);
|
|
52
|
+
if (defs.length === 0)
|
|
53
|
+
continue;
|
|
54
|
+
const resourceVar = defs[0].variable;
|
|
55
|
+
const methodInfo = graph.methodAtLine(openLine);
|
|
56
|
+
if (!methodInfo)
|
|
57
|
+
continue;
|
|
58
|
+
const methodEnd = methodInfo.method.end_line;
|
|
59
|
+
// Find the FIRST close call on resourceVar
|
|
60
|
+
const firstClose = graph.ir.calls
|
|
61
|
+
.filter(c => CLOSE_METHODS.has(c.method_name) &&
|
|
62
|
+
c.receiver === resourceVar &&
|
|
63
|
+
c.location.line > openLine &&
|
|
64
|
+
c.location.line <= methodEnd)
|
|
65
|
+
.sort((a, b) => a.location.line - b.location.line)[0];
|
|
66
|
+
if (!firstClose)
|
|
67
|
+
continue; // No close → handled by resource-leak pass
|
|
68
|
+
const closeLine = firstClose.location.line;
|
|
69
|
+
// Find any non-close call on resourceVar after closeLine
|
|
70
|
+
const usesAfterClose = graph.ir.calls.filter(c => c.receiver === resourceVar &&
|
|
71
|
+
c.location.line > closeLine &&
|
|
72
|
+
c.location.line <= methodEnd &&
|
|
73
|
+
!CLOSE_METHODS.has(c.method_name));
|
|
74
|
+
for (const use of usesAfterClose) {
|
|
75
|
+
const useLine = use.location.line;
|
|
76
|
+
useAfterCloses.push({ openLine, closeLine, useLine, variable: resourceVar });
|
|
77
|
+
const snippet = (codeLines[useLine - 1] ?? '').trim();
|
|
78
|
+
ctx.addFinding({
|
|
79
|
+
id: `use-after-close-${file}-${useLine}`,
|
|
80
|
+
pass: this.name,
|
|
81
|
+
category: this.category,
|
|
82
|
+
rule_id: this.name,
|
|
83
|
+
cwe: 'CWE-672',
|
|
84
|
+
severity: 'high',
|
|
85
|
+
level: 'error',
|
|
86
|
+
message: `Use after close: \`${resourceVar}.${use.method_name}()\` at line ${useLine} ` +
|
|
87
|
+
`is called after \`${resourceVar}.close()\` at line ${closeLine}`,
|
|
88
|
+
file,
|
|
89
|
+
line: useLine,
|
|
90
|
+
snippet,
|
|
91
|
+
fix: `Do not use a resource after closing it; keep \`${resourceVar}\` open ` +
|
|
92
|
+
`until all uses are complete`,
|
|
93
|
+
evidence: { variable: resourceVar, close_line: closeLine, open_line: openLine },
|
|
94
|
+
});
|
|
95
|
+
}
|
|
96
|
+
}
|
|
97
|
+
return { useAfterCloses };
|
|
98
|
+
}
|
|
99
|
+
}
|
|
100
|
+
//# sourceMappingURL=use-after-close-pass.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"use-after-close-pass.js","sourceRoot":"","sources":["../../../src/analysis/passes/use-after-close-pass.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAIH,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC;IAClD,iBAAiB,EAAE,kBAAkB,EAAE,YAAY,EAAE,YAAY;IACjE,gBAAgB,EAAE,gBAAgB,EAAE,aAAa,EAAE,mBAAmB;IACtE,oBAAoB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,kBAAkB;IAC/E,mBAAmB,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,iBAAiB;IAC9E,gBAAgB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,kBAAkB;IAC1E,aAAa,EAAE,QAAQ,EAAE,cAAc,EAAE,gBAAgB;CAC1D,CAAC,CAAC;AAEH,MAAM,wBAAwB,GAAwB,IAAI,GAAG,CAAC;IAC5D,gBAAgB,EAAE,YAAY,EAAE,gBAAgB,EAAE,iBAAiB;IACnE,mBAAmB,EAAE,mBAAmB,EAAE,gBAAgB;IAC1D,MAAM,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,kBAAkB;CACpE,CAAC,CAAC;AAEH,MAAM,aAAa,GAAwB,IAAI,GAAG,CAAC;IACjD,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM;IAC1E,aAAa,EAAE,WAAW;CAC3B,CAAC,CAAC;AAMH,MAAM,OAAO,iBAAiB;IACnB,IAAI,GAAG,iBAAiB,CAAC;IACzB,QAAQ,GAAG,aAAsB,CAAC;IAE3C,GAAG,CAAC,GAAgB;QAClB,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC;QAE5B,IAAI,GAAG,CAAC,QAAQ,KAAK,MAAM;YAAE,OAAO,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC;QAE3D,MAAM,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;QAChC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,cAAc,GAA0C,EAAE,CAAC;QAEjE,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC;YAC9B,MAAM,aAAa,GAAG,IAAI,CAAC,cAAc,KAAK,IAAI,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC/E,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,cAAc,IAAI,wBAAwB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC7E,IAAI,CAAC,aAAa,IAAI,CAAC,SAAS;gBAAE,SAAS;YAE3C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YACpC,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YACxC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YAChC,MAAM,WAAW,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;YAErC,MAAM,UAAU,GAAG,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YAChD,IAAI,CAAC,UAAU;gBAAE,SAAS;YAC1B,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC;YAE7C,2CAA2C;YAC3C,MAAM,UAAU,GAAG,KAAK,CAAC,EAAE,CAAC,KAAK;iBAC9B,MAAM,CACL,CAAC,CAAC,EAAE,CACF,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC;gBAChC,CAAC,CAAC,QAAQ,KAAK,WAAW;gBAC1B,CAAC,CAAC,QAAQ,CAAC,IAAI,GAAG,QAAQ;gBAC1B,CAAC,CAAC,QAAQ,CAAC,IAAI,IAAI,SAAS,CAC/B;iBACA,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAExD,IAAI,CAAC,UAAU;gBAAE,SAAS,CAAC,2CAA2C;YAEtE,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;YAE3C,yDAAyD;YACzD,MAAM,cAAc,GAAG,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAC1C,CAAC,CAAC,EAAE,CACF,CAAC,CAAC,QAAQ,KAAK,WAAW;gBAC1B,CAAC,CAAC,QAAQ,CAAC,IAAI,GAAG,SAAS;gBAC3B,CAAC,CAAC,QAAQ,CAAC,IAAI,IAAI,SAAS;gBAC5B,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CACpC,CAAC;YAEF,KAAK,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;gBACjC,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAClC,cAAc,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;gBAE7E,MAAM,OAAO,GAAG,CAAC,SAAS,CAAC,OAAO,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBACtD,GAAG,CAAC,UAAU,CAAC;oBACb,EAAE,EAAE,mBAAmB,IAAI,IAAI,OAAO,EAAE;oBACxC,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,OAAO,EAAE,IAAI,CAAC,IAAI;oBAClB,GAAG,EAAE,SAAS;oBACd,QAAQ,EAAE,MAAM;oBAChB,KAAK,EAAE,OAAO;oBACd,OAAO,EACL,sBAAsB,WAAW,IAAI,GAAG,CAAC,WAAW,gBAAgB,OAAO,GAAG;wBAC9E,qBAAqB,WAAW,sBAAsB,SAAS,EAAE;oBACnE,IAAI;oBACJ,IAAI,EAAE,OAAO;oBACb,OAAO;oBACP,GAAG,EACD,kDAAkD,WAAW,UAAU;wBACvE,6BAA6B;oBAC/B,QAAQ,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE;iBAChF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,EAAE,cAAc,EAAE,CAAC;IAC5B,CAAC;CACF"}
|
|
@@ -5,10 +5,11 @@
|
|
|
5
5
|
*/
|
|
6
6
|
import type { CallInfo, TypeInfo, Taint } from '../types/index.js';
|
|
7
7
|
import type { TaintConfig, SinkPattern } from '../types/config.js';
|
|
8
|
+
import type { TypeHierarchyResolver } from '../resolution/type-hierarchy.js';
|
|
8
9
|
/**
|
|
9
10
|
* Analyze code for taint sources, sinks, and sanitizers.
|
|
10
11
|
*/
|
|
11
|
-
export declare function analyzeTaint(calls: CallInfo[], types: TypeInfo[], config?: TaintConfig): Taint;
|
|
12
|
+
export declare function analyzeTaint(calls: CallInfo[], types: TypeInfo[], config?: TaintConfig, typeHierarchy?: TypeHierarchyResolver): Taint;
|
|
12
13
|
/**
|
|
13
14
|
* Check if a variable at a given position flows to a dangerous sink argument.
|
|
14
15
|
*/
|
|
@@ -26,9 +26,9 @@ const PYTHON_TAINTED_PATTERNS = [
|
|
|
26
26
|
/**
|
|
27
27
|
* Analyze code for taint sources, sinks, and sanitizers.
|
|
28
28
|
*/
|
|
29
|
-
export function analyzeTaint(calls, types, config = getDefaultConfig()) {
|
|
29
|
+
export function analyzeTaint(calls, types, config = getDefaultConfig(), typeHierarchy) {
|
|
30
30
|
const sources = findSources(calls, types, config.sources);
|
|
31
|
-
const sinks = findSinks(calls, config.sinks);
|
|
31
|
+
const sinks = findSinks(calls, config.sinks, typeHierarchy);
|
|
32
32
|
const sanitizers = findSanitizers(calls, types, config.sanitizers);
|
|
33
33
|
return { sources, sinks, sanitizers };
|
|
34
34
|
}
|
|
@@ -258,12 +258,12 @@ function isParameterizedQueryCall(call, pattern) {
|
|
|
258
258
|
* Find taint sinks in method calls.
|
|
259
259
|
* Deduplicates sinks at the same location+line+cwe, keeping highest confidence.
|
|
260
260
|
*/
|
|
261
|
-
function findSinks(calls, patterns) {
|
|
261
|
+
function findSinks(calls, patterns, typeHierarchy) {
|
|
262
262
|
// Use a map to deduplicate by location+line+cwe
|
|
263
263
|
const sinkMap = new Map();
|
|
264
264
|
for (const call of calls) {
|
|
265
265
|
for (const pattern of patterns) {
|
|
266
|
-
if (matchesSinkPattern(call, pattern)) {
|
|
266
|
+
if (matchesSinkPattern(call, pattern, typeHierarchy)) {
|
|
267
267
|
// Skip parameterized queries (safe pattern for SQL injection)
|
|
268
268
|
if (isParameterizedQueryCall(call, pattern)) {
|
|
269
269
|
continue;
|
|
@@ -279,6 +279,7 @@ function findSinks(calls, patterns) {
|
|
|
279
279
|
location,
|
|
280
280
|
line: call.location.line,
|
|
281
281
|
confidence,
|
|
282
|
+
method: call.method_name,
|
|
282
283
|
});
|
|
283
284
|
}
|
|
284
285
|
}
|
|
@@ -382,7 +383,7 @@ function isJavaScriptTaintedArgument(argExpression, sourcePatterns) {
|
|
|
382
383
|
/**
|
|
383
384
|
* Check if a call matches a sink pattern.
|
|
384
385
|
*/
|
|
385
|
-
function matchesSinkPattern(call, pattern) {
|
|
386
|
+
function matchesSinkPattern(call, pattern, typeHierarchy) {
|
|
386
387
|
// Method name must match
|
|
387
388
|
// Handle fully qualified names (e.g., "java.io.FileInputStream" should match "FileInputStream")
|
|
388
389
|
const callMethodName = call.method_name;
|
|
@@ -405,6 +406,10 @@ function matchesSinkPattern(call, pattern) {
|
|
|
405
406
|
}
|
|
406
407
|
// Check receiver - if pattern has class, receiver should match
|
|
407
408
|
if (call.receiver && !receiverMightBeClass(call.receiver, pattern.class)) {
|
|
409
|
+
// Heuristic match failed; fall back to TypeHierarchyResolver if available
|
|
410
|
+
if (typeHierarchy && typeHierarchy.couldBeType(call.receiver, pattern.class)) {
|
|
411
|
+
return true;
|
|
412
|
+
}
|
|
408
413
|
return false;
|
|
409
414
|
}
|
|
410
415
|
// If no receiver but class is required, don't match
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"taint-matcher.js","sourceRoot":"","sources":["../../src/analysis/taint-matcher.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAEtD;;;GAGG;AACH,MAAM,uBAAuB,GAAuD;IAClF,EAAE,OAAO,EAAE,mBAAmB,EAAU,UAAU,EAAE,YAAY,EAAG;IACnE,EAAE,OAAO,EAAE,mBAAmB,EAAU,UAAU,EAAE,WAAW,EAAI;IACnE,EAAE,OAAO,EAAE,mBAAmB,EAAU,UAAU,EAAE,WAAW,EAAI;IACnE,EAAE,OAAO,EAAE,mBAAmB,EAAU,UAAU,EAAE,WAAW,EAAI;IACnE,EAAE,OAAO,EAAE,qBAAqB,EAAQ,UAAU,EAAE,YAAY,EAAG;IACnE,EAAE,OAAO,EAAE,uBAAuB,EAAM,UAAU,EAAE,aAAa,EAAE;IACnE,EAAE,OAAO,EAAE,sBAAsB,EAAO,UAAU,EAAE,aAAa,EAAE;IACnE,EAAE,OAAO,EAAE,kBAAkB,EAAW,UAAU,EAAE,YAAY,EAAG;IACnE,EAAE,OAAO,EAAE,mBAAmB,EAAU,UAAU,EAAE,WAAW,EAAI;IACnE,EAAE,OAAO,EAAE,mBAAmB,EAAU,UAAU,EAAE,aAAa,EAAE;IACnE,EAAE,OAAO,EAAE,oBAAoB,EAAS,UAAU,EAAE,YAAY,EAAG;IACnE,EAAE,OAAO,EAAE,2BAA2B,EAAE,UAAU,EAAE,YAAY,EAAG;IACnE,EAAE,OAAO,EAAE,0BAA0B,EAAG,UAAU,EAAE,YAAY,EAAG;CACpE,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,YAAY,CAC1B,KAAiB,EACjB,KAAiB,EACjB,SAAsB,gBAAgB,EAAE;IAExC,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7C,MAAM,UAAU,GAAG,cAAc,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IAEnE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;AACxC,CAAC;AAED;;GAEG;AACH,SAAS,WAAW,CAClB,KAAiB,EACjB,KAAiB,EACjB,QAAyB;IAEzB,MAAM,OAAO,GAAkB,EAAE,CAAC;IAElC,qBAAqB;IACrB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,oBAAoB,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC;gBACxC,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,QAAQ,EAAE,kBAAkB,CAAC,IAAI,CAAC;oBAClC,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;oBACxB,UAAU,EAAE,GAAG;iBAChB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,6BAA6B;IAC7B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;gBACtC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;oBAC/B,IAAI,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;wBAChD,IAAI,iBAAiB,CAAC,KAAK,CAAC,WAAW,EAAE,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;4BAC7D,iEAAiE;4BACjE,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC;4BAClD,OAAO,CAAC,IAAI,CAAC;gCACX,IAAI,EAAE,OAAO,CAAC,IAAI;gCAClB,QAAQ,EAAE,IAAI,OAAO,CAAC,UAAU,IAAI,KAAK,CAAC,IAAI,OAAO,MAAM,CAAC,IAAI,EAAE;gCAClE,QAAQ,EAAE,OAAO,CAAC,QAAQ;gCAC1B,IAAI,EAAE,SAAS;gCACf,UAAU,EAAE,GAAG;6BAChB,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,+EAA+E;IAC/E,wEAAwE;IACxE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,kEAAkE;YAClE,IAAI,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC;gBAAE,SAAS;YAEnD,kEAAkE;YAClE,MAAM,WAAW,GAAG,CAAC,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;YACpE,IAAI,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC;gBAAE,SAAS;YAEhD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;gBACtC,mDAAmD;gBACnD,6CAA6C;gBAC7C,8EAA8E;gBAC9E,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI;oBAC5B,CAAC,CAAC,8BAA8B,CAAC,KAAK,CAAC,IAAI,CAAC;oBAC5C,CAAC,CAAC,IAAI,CAAC,CAAC,8CAA8C;gBAExD,IAAI,WAAW,EAAE,CAAC;oBAChB,iEAAiE;oBACjE,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC;oBAClD,OAAO,CAAC,IAAI,CAAC;wBACX,IAAI,EAAE,uBAAuB;wBAC7B,QAAQ,EAAE,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,OAAO,MAAM,CAAC,IAAI,EAAE;wBAClE,QAAQ,EAAE,QAAQ;wBAClB,IAAI,EAAE,SAAS;wBACf,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,sCAAsC;qBAC3E,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,iFAAiF;IACjF,yFAAyF;IACzF,qCAAqC;IACrC,MAAM,gBAAgB,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,gBAAgB,CAAC,CAAC;IAE5F,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACjC,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;gBACnB,MAAM,UAAU,GAAG,2BAA2B,CAAC,GAAG,CAAC,UAAU,EAAE,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;gBACnH,IAAI,UAAU,CAAC,SAAS,IAAI,UAAU,CAAC,UAAU,EAAE,CAAC;oBAClD,iDAAiD;oBACjD,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,UAAU,CAAC,CAAC;oBAC3G,IAAI,CAAC,aAAa,EAAE,CAAC;wBACnB,OAAO,CAAC,IAAI,CAAC;4BACX,IAAI,EAAE,UAAU,CAAC,UAAU;4BAC3B,QAAQ,EAAE,GAAG,GAAG,CAAC,UAAU,OAAO,IAAI,CAAC,SAAS,IAAI,WAAW,EAAE;4BACjE,QAAQ,EAAE,MAAM;4BAChB,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;4BACxB,UAAU,EAAE,GAAG;yBAChB,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,2EAA2E;IAC3E,8EAA8E;IAC9E,4EAA4E;IAC5E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC,GAAG,CAAC,UAAU;gBAAE,SAAS;YAC9B,KAAK,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,uBAAuB,EAAE,CAAC;gBAC9D,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;oBACjC,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAChC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,CAC5D,CAAC;oBACF,IAAI,CAAC,aAAa,EAAE,CAAC;wBACnB,OAAO,CAAC,IAAI,CAAC;4BACX,IAAI,EAAE,UAAU;4BAChB,QAAQ,EAAE,GAAG,GAAG,CAAC,UAAU,OAAO,IAAI,CAAC,SAAS,IAAI,WAAW,EAAE;4BACjE,QAAQ,EAAE,MAAM;4BAChB,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;4BACxB,UAAU,EAAE,GAAG;yBAChB,CAAC,CAAC;oBACL,CAAC;oBACD,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,+DAA+D;IAC/D,MAAM,SAAS,GAAG,IAAI,GAAG,EAAuB,CAAC;IACjD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAC5C,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,UAAU,GAAG,QAAQ,CAAC,UAAU,EAAE,CAAC;YACzD,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;AACxC,CAAC;AAED;;;GAGG;AACH,SAAS,8BAA8B,CAAC,QAAgB;IACtD,wCAAwC;IACxC,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAE/C,kEAAkE;IAClE,sFAAsF;IACtF,uDAAuD;IACvD,MAAM,aAAa,GAAG;QACpB,kFAAkF;QAClF,oBAAoB,EAAE,qBAAqB;QAC3C,gBAAgB,EAAE,iBAAiB;QACnC,aAAa,EAAE,gBAAgB;QAC/B,mBAAmB;QACnB,OAAO,EAAE,UAAU,EAAE,cAAc;QACnC,YAAY,EAAE,kBAAkB;QAChC,wBAAwB;QACxB,aAAa,EAAE,mBAAmB;KACnC,CAAC;IAEF,IAAI,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACrC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,2CAA2C;IAC3C,MAAM,cAAc,GAAG;QACrB,eAAe;QACf,QAAQ;QACR,eAAe;QACf,QAAQ,EAAE,cAAc,EAAE,eAAe,EAAE,cAAc;QACzD,mBAAmB;QACnB,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO;QACpD,WAAW,EAAE,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS;QACrE,eAAe,EAAE,eAAe,EAAE,QAAQ,EAAE,OAAO;QACnD,mBAAmB,EAAE,sBAAsB;QAC3C,yCAAyC;QACzC,UAAU;QACV,QAAQ,EAAE,UAAU;QACpB,YAAY;QACZ,UAAU,EAAE,UAAU;QACtB,aAAa;QACb,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,aAAa;QACnD,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW;QACnC,QAAQ,EAAE,QAAQ;KACnB,CAAC;IAEF,IAAI,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,wBAAwB;IACxB,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,MAAM,WAAW,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1C,qEAAqE;QACrE,IAAI,WAAW,KAAK,QAAQ,IAAI,WAAW,KAAK,QAAQ,IAAI,WAAW,KAAK,MAAM,EAAE,CAAC;YACnF,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,wBAAwB,CAAC,IAAc,EAAE,OAAoB;IACpE,sCAAsC;IACtC,IAAI,OAAO,CAAC,IAAI,KAAK,eAAe;QAAE,OAAO,KAAK,CAAC;IAEnD,mDAAmD;IACnD,oDAAoD;IACpD,wBAAwB;IACxB,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAE5C,yDAAyD;IACzD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC;IAC7D,IAAI,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IAE7B,kDAAkD;IAClD,IAAI,SAAS,CAAC,UAAU,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,SAAS,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;QACzC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,SAAS,SAAS,CAAC,KAAiB,EAAE,QAAuB;IAC3D,gDAAgD;IAChD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAqB,CAAC;IAE7C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC;gBACtC,8DAA8D;gBAC9D,IAAI,wBAAwB,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC;oBAC5C,SAAS;gBACX,CAAC;gBAED,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;gBAC1C,MAAM,GAAG,GAAG,GAAG,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;gBAC/D,MAAM,UAAU,GAAG,uBAAuB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBAE1D,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAClC,IAAI,CAAC,QAAQ,IAAI,UAAU,GAAG,QAAQ,CAAC,UAAU,EAAE,CAAC;oBAClD,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE;wBACf,IAAI,EAAE,OAAO,CAAC,IAAI;wBAClB,GAAG,EAAE,OAAO,CAAC,GAAG;wBAChB,QAAQ;wBACR,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;wBACxB,UAAU;qBACX,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;AACtC,CAAC;AAED;;GAEG;AACH,SAAS,oBAAoB,CAAC,IAAc,EAAE,OAAsB;IAClE,wBAAwB;IACxB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,IAAI,IAAI,CAAC,WAAW,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;YACxC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,wCAAwC;QACxC,IAAI,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,KAAK,aAAa,EAAE,CAAC;YACrD,kFAAkF;YAClF,gFAAgF;YAChF,4EAA4E;YAC5E,wDAAwD;YACxD,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACnB,OAAO,KAAK,CAAC;YACf,CAAC;YACD,4DAA4D;YAC5D,4DAA4D;YAC5D,2BAA2B;YAC3B,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxD,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAED,OAAO,OAAO,CAAC,cAAc,KAAK,IAAI,CAAC;IACzC,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,SAAS,2BAA2B,CAClC,aAAqB,EACrB,cAAgC;IAEhC,4EAA4E;IAC5E,MAAM,aAAa,GAAuD,EAAE,CAAC;IAC7E,MAAM,iBAAiB,GAAuD,EAAE,CAAC;IAEjF,IAAI,cAAc,EAAE,CAAC;QACnB,qCAAqC;QACrC,KAAK,MAAM,EAAE,IAAI,cAAc,EAAE,CAAC;YAChC,IAAI,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC,gBAAgB,EAAE,CAAC;gBACpD,iDAAiD;gBACjD,MAAM,UAAU,GAAG,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,MAAM,EAAE,CAAC,QAAQ,KAAK,CAAC,CAAC;gBACnE,aAAa,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;gBACjE,mFAAmF;gBACnF,MAAM,cAAc,GAAG,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC,MAAM,MAAM,EAAE,CAAC,QAAQ,KAAK,CAAC,CAAC;gBACzE,iBAAiB,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC;IACH,CAAC;IAED,4DAA4D;IAC5D,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,YAAY,GAAG;YACnB,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,YAA0B,EAAE;YAChE,EAAE,IAAI,EAAE,aAAa,EAAE,UAAU,EAAE,YAA0B,EAAE;YAC/D,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,WAAyB,EAAE;YAC7D,EAAE,IAAI,EAAE,eAAe,EAAE,UAAU,EAAE,aAA2B,EAAE;YAClE,EAAE,IAAI,EAAE,eAAe,EAAE,UAAU,EAAE,aAA2B,EAAE;YAClE,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,WAAyB,EAAE;YAC5D,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,WAAyB,EAAE;YAC7D,EAAE,IAAI,EAAE,mBAAmB,EAAE,UAAU,EAAE,WAAyB,EAAE;YACpE,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,YAA0B,EAAE;YAC9D,EAAE,IAAI,EAAE,aAAa,EAAE,UAAU,EAAE,YAA0B,EAAE;YAC/D,EAAE,IAAI,EAAE,kBAAkB,EAAE,UAAU,EAAE,YAA0B,EAAE;YACpE,EAAE,IAAI,EAAE,iBAAiB,EAAE,UAAU,EAAE,YAA0B,EAAE;YACnE,EAAE,IAAI,EAAE,gBAAgB,EAAE,UAAU,EAAE,WAAyB,EAAE;YACjE,EAAE,IAAI,EAAE,mBAAmB,EAAE,UAAU,EAAE,aAA2B,EAAE;YACtE,EAAE,IAAI,EAAE,eAAe,EAAE,UAAU,EAAE,WAAyB,EAAE;YAChE,EAAE,IAAI,EAAE,gBAAgB,EAAE,UAAU,EAAE,UAAwB,EAAE;YAChE,EAAE,IAAI,EAAE,aAAa,EAAE,UAAU,EAAE,YAA0B,EAAE;YAC/D,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,YAA0B,EAAE;YAChE,EAAE,IAAI,EAAE,eAAe,EAAE,UAAU,EAAE,WAAyB,EAAE;SACjE,CAAC;QAEF,KAAK,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,YAAY,EAAE,CAAC;YAChD,aAAa,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,MAAM,CAAC,IAAI,IAAI,KAAK,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;YACvE,iBAAiB,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;IAED,kEAAkE;IAClE,KAAK,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,aAAa,EAAE,CAAC;QACpD,IAAI,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;YAChC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;QACzC,CAAC;IACH,CAAC;IAED,gFAAgF;IAChF,KAAK,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,iBAAiB,EAAE,CAAC;QACxD,IAAI,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;YAChC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;QACzC,CAAC;IACH,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;AAChD,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB,CAAC,IAAc,EAAE,OAAoB;IAC9D,yBAAyB;IACzB,gGAAgG;IAChG,MAAM,cAAc,GAAG,IAAI,CAAC,WAAW,CAAC;IACxC,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC;IAErC,eAAe;IACf,IAAI,aAAa,GAAG,cAAc,KAAK,aAAa,CAAC;IAErD,uEAAuE;IACvE,IAAI,CAAC,aAAa,IAAI,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACnD,MAAM,UAAU,GAAG,cAAc,CAAC,SAAS,CAAC,cAAc,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QACjF,aAAa,GAAG,UAAU,KAAK,aAAa,CAAC;IAC/C,CAAC;IAED,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,2BAA2B;IAC3B,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,IAAI,OAAO,CAAC,KAAK,KAAK,aAAa,EAAE,CAAC;YACpC,mDAAmD;YACnD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,+DAA+D;QAC/D,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzE,OAAO,KAAK,CAAC;QACf,CAAC;QAED,oDAAoD;QACpD,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,6DAA6D;IAC7D,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB,CAAC,WAAqB,EAAE,gBAAwB;IACxE,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAC9B,mEAAmE;QACnE,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACzC,IAAI,OAAO,KAAK,gBAAgB,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,SAAS,oBAAoB,CAAC,QAAgB,EAAE,SAAiB;IAC/D,eAAe;IACf,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,8FAA8F;IAC9F,oEAAoE;IACpE,MAAM,aAAa,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IAC7C,MAAM,UAAU,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;IAC3C,IAAI,aAAa,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,aAAa,CAAC,QAAQ,CAAC,GAAG,GAAG,UAAU,CAAC,EAAE,CAAC;QACnF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,0DAA0D;IAC1D,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACtD,MAAM,QAAQ,GAAG,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QACnE,IAAI,QAAQ,CAAC,WAAW,EAAE,KAAK,UAAU,EAAE,CAAC;YAC1C,OAAO,IAAI,CAAC;QACd,CAAC;QACD,qDAAqD;QACrD,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAChD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,4CAA4C;IAC5C,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACrD,MAAM,eAAe,GAAG,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QACvD,IAAI,eAAe,EAAE,CAAC;YACpB,MAAM,UAAU,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC;YACtC,MAAM,kBAAkB,GAA6B;gBACnD,WAAW,EAAE,CAAC,aAAa,CAAC;gBAC5B,iBAAiB,EAAE,CAAC,cAAc,EAAE,qBAAqB,CAAC;gBAC1D,WAAW,EAAE,CAAC,gBAAgB,CAAC;gBAC/B,gBAAgB,EAAE,CAAC,aAAa,EAAE,oBAAoB,CAAC;gBACvD,eAAe,EAAE,CAAC,YAAY,CAAC;gBAC/B,iBAAiB,EAAE,CAAC,WAAW,CAAC;gBAChC,kBAAkB,EAAE,CAAC,mBAAmB,CAAC;gBACzC,YAAY,EAAE,CAAC,SAAS,CAAC;aAC1B,CAAC;YACF,MAAM,aAAa,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;YACrD,IAAI,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,aAAa,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;gBACtE,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;IACH,CAAC;IAED,8CAA8C;IAC9C,IAAI,UAAU,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;QACvC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,kCAAkC;IAClC,IAAI,UAAU,CAAC,UAAU,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,uBAAuB;IACvB,MAAM,cAAc,GAA6B;QAC/C,eAAe;QACf,OAAO,EAAE,CAAC,oBAAoB,EAAE,gBAAgB,CAAC;QACjD,QAAQ,EAAE,CAAC,qBAAqB,EAAE,iBAAiB,CAAC;QACpD,OAAO,EAAE,CAAC,aAAa,CAAC;QAExB,WAAW;QACX,IAAI,EAAE,CAAC,WAAW,EAAE,mBAAmB,CAAC;QACxC,IAAI,EAAE,CAAC,YAAY,CAAC;QACpB,EAAE,EAAE,CAAC,eAAe,CAAC;QACrB,EAAE,EAAE,CAAC,mBAAmB,CAAC;QACzB,EAAE,EAAE,CAAC,WAAW,CAAC;QACjB,QAAQ,EAAE,CAAC,cAAc,CAAC;QAE1B,MAAM;QACN,MAAM,EAAE,CAAC,aAAa,CAAC;QACvB,GAAG,EAAE,CAAC,aAAa,EAAE,cAAc,CAAC;QACpC,MAAM,EAAE,CAAC,gBAAgB,CAAC;QAE1B,kBAAkB;QAClB,OAAO,EAAE,CAAC,SAAS,CAAC;QACpB,EAAE,EAAE,CAAC,gBAAgB,CAAC;QAEtB,YAAY;QACZ,MAAM,EAAE,CAAC,cAAc,CAAC;QAExB,OAAO;QACP,GAAG,EAAE,CAAC,SAAS,EAAE,gBAAgB,EAAE,YAAY,EAAE,mBAAmB,EAAE,aAAa,CAAC;QACpF,OAAO,EAAE,CAAC,SAAS,EAAE,gBAAgB,EAAE,YAAY,EAAE,mBAAmB,EAAE,aAAa,CAAC;QACxF,MAAM,EAAE,CAAC,YAAY,EAAE,mBAAmB,CAAC;QAC3C,OAAO,EAAE,CAAC,aAAa,CAAC;QACxB,GAAG,EAAE,CAAC,mBAAmB,CAAC;QAC1B,EAAE,EAAE,CAAC,gBAAgB,CAAC;QACtB,EAAE,EAAE,CAAC,YAAY,CAAC;QAClB,EAAE,EAAE,CAAC,aAAa,CAAC;QAEnB,YAAY;QACZ,KAAK,EAAE,CAAC,OAAO,CAAC;QAChB,EAAE,EAAE,CAAC,OAAO,CAAC;QACb,GAAG,EAAE,CAAC,UAAU,EAAE,iBAAiB,CAAC;QACpC,QAAQ,EAAE,CAAC,UAAU,CAAC;QACtB,OAAO,EAAE,CAAC,iBAAiB,EAAE,kBAAkB,CAAC;QAChD,MAAM,EAAE,CAAC,WAAW,EAAE,WAAW,EAAE,iBAAiB,CAAC;QACrD,SAAS,EAAE,CAAC,WAAW,CAAC;QACxB,SAAS,EAAE,CAAC,WAAW,CAAC;QACxB,WAAW,EAAE,CAAC,aAAa,EAAE,oBAAoB,CAAC;QAClD,EAAE,EAAE,CAAC,oBAAoB,CAAC;QAC1B,YAAY,EAAE,CAAC,cAAc,CAAC;QAC9B,IAAI,EAAE,CAAC,cAAc,CAAC;QAEtB,sBAAsB;QACtB,GAAG,EAAE,CAAC,KAAK,CAAC;QACZ,GAAG,EAAE,CAAC,KAAK,CAAC;QACZ,MAAM,EAAE,CAAC,YAAY,EAAE,WAAW,CAAC;QACnC,UAAU,EAAE,CAAC,YAAY,CAAC;QAC1B,SAAS,EAAE,CAAC,WAAW,CAAC;QACxB,YAAY,EAAE,CAAC,cAAc,CAAC;QAC9B,IAAI,EAAE,CAAC,cAAc,CAAC;QAEtB,kBAAkB;QAClB,GAAG,EAAE,CAAC,mBAAmB,CAAC;QAC1B,WAAW,EAAE,CAAC,mBAAmB,CAAC;QAClC,OAAO,EAAE,CAAC,SAAS,CAAC;QACpB,MAAM,EAAE,CAAC,cAAc,CAAC;QACxB,YAAY,EAAE,CAAC,cAAc,CAAC;QAE9B,QAAQ;QACR,KAAK,EAAE,CAAC,OAAO,CAAC;QAEhB,6BAA6B;QAC7B,IAAI,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,cAAc,CAAC;QACtD,QAAQ,EAAE,CAAC,UAAU,EAAE,cAAc,CAAC;QACtC,QAAQ,EAAE,CAAC,UAAU,EAAE,cAAc,CAAC;QACtC,YAAY,EAAE,CAAC,cAAc,CAAC;QAC9B,OAAO,EAAE,CAAC,SAAS,EAAE,aAAa,CAAC;QACnC,WAAW,EAAE,CAAC,aAAa,CAAC;QAC5B,SAAS,EAAE,CAAC,WAAW,EAAE,eAAe,CAAC;QACzC,EAAE,EAAE,CAAC,WAAW,EAAE,eAAe,CAAC;QAElC,cAAc;QACd,QAAQ,EAAE,CAAC,UAAU,CAAC;QACtB,KAAK,EAAE,CAAC,UAAU,EAAE,iBAAiB,EAAE,UAAU,CAAC;QAClD,QAAQ,EAAE,CAAC,UAAU,CAAC;QAEtB,sDAAsD;QACtD,EAAE,EAAE,CAAC,eAAe,EAAE,cAAc,CAAC;QACrC,MAAM,EAAE,CAAC,eAAe,EAAE,cAAc,CAAC;QACzC,MAAM,EAAE,CAAC,eAAe,EAAE,cAAc,CAAC;QACzC,IAAI,EAAE,CAAC,eAAe,EAAE,cAAc,CAAC;QACvC,MAAM,EAAE,CAAC,eAAe,EAAE,cAAc,CAAC;QACzC,GAAG,EAAE,CAAC,eAAe,EAAE,cAAc,CAAC;QACtC,QAAQ,EAAE,CAAC,eAAe,EAAE,cAAc,CAAC;QAC3C,YAAY,EAAE,CAAC,cAAc,CAAC;QAC9B,aAAa,EAAE,CAAC,eAAe,CAAC;QAEhC,sDAAsD;QACtD,MAAM,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,SAAS,CAAC;QACtD,UAAU,EAAE,CAAC,KAAK,EAAE,SAAS,CAAC;QAC9B,IAAI,EAAE,CAAC,KAAK,EAAE,SAAS,CAAC;QACxB,OAAO,EAAE,CAAC,KAAK,EAAE,SAAS,CAAC;QAC3B,MAAM,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,YAAY,CAAC;QACxC,KAAK,EAAE,CAAC,YAAY,EAAE,KAAK,CAAC;QAC5B,GAAG,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,SAAS,CAAC;QACnD,QAAQ,EAAE,CAAC,KAAK,EAAE,SAAS,CAAC;QAE5B,sCAAsC;QACtC,GAAG,EAAE,CAAC,SAAS,EAAE,oBAAoB,CAAC;QACtC,GAAG,EAAE,CAAC,UAAU,EAAE,qBAAqB,CAAC;QACxC,GAAG,EAAE,CAAC,SAAS,EAAE,aAAa,CAAC;QAC/B,MAAM,EAAE,CAAC,QAAQ,CAAC;QAClB,EAAE,EAAE,CAAC,IAAI,CAAC;QACV,IAAI,EAAE,CAAC,MAAM,CAAC;QACd,IAAI,EAAE,CAAC,MAAM,CAAC;QACd,KAAK,EAAE,CAAC,OAAO,CAAC;QAChB,aAAa,EAAE,CAAC,eAAe,CAAC;QAChC,MAAM,EAAE,CAAC,QAAQ,CAAC;QAClB,IAAI,EAAE,CAAC,eAAe,CAAC;QACvB,KAAK,EAAE,CAAC,eAAe,CAAC;QACxB,EAAE,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC;QACnC,IAAI,EAAE,CAAC,MAAM,EAAE,YAAY,CAAC;QAC5B,KAAK,EAAE,CAAC,OAAO,CAAC;QAChB,IAAI,EAAE,CAAC,MAAM,CAAC;QACd,MAAM,EAAE,CAAC,QAAQ,CAAC;QAClB,KAAK,EAAE,CAAC,OAAO,CAAC;QAChB,KAAK,EAAE,CAAC,OAAO,CAAC;KACjB,CAAC;IAEF,MAAM,QAAQ,GAAG,cAAc,CAAC,aAAa,CAAC,CAAC;IAC/C,IAAI,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACxE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB,CAAC,IAAc;IACxC,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC;IACvD,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC;IACtC,CAAC;IAED,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,KAAK,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IACrC,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED;;GAEG;AACH,SAAS,uBAAuB,CAAC,IAAc,EAAE,OAAoB;IACnE,IAAI,UAAU,GAAG,GAAG,CAAC,CAAC,kBAAkB;IAExC,uDAAuD;IACvD,IAAI,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QACnC,IAAI,oBAAoB,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACvD,UAAU,IAAI,GAAG,CAAC;QACpB,CAAC;IACH,CAAC;IAED,mDAAmD;IACnD,IAAI,OAAO,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;QACpC,UAAU,IAAI,GAAG,CAAC;IACpB,CAAC;IAED,OAAO,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;AACnC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CACnC,WAAmB,EACnB,OAAoB;IAEpB,OAAO,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACrD,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CACrB,KAAiB,EACjB,KAAiB,EACjB,QAA4B;IAE5B,MAAM,UAAU,GAAqB,EAAE,CAAC;IAExC,iFAAiF;IACjF,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC3C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,IAAI,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC7C,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;IACH,CAAC;IAED,2CAA2C;IAC3C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,+DAA+D;QAC/D,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YAC3C,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,mBAAmB;gBACzB,MAAM,EAAE,qBAAqB,CAAC,IAAI,CAAC;gBACnC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;gBACxB,SAAS,EAAE,CAAC,KAAK,EAAE,eAAe,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,CAAC,EAAE,gCAAgC;aACrH,CAAC,CAAC;YACH,SAAS,CAAC,qDAAqD;QACjE,CAAC;QAED,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,uBAAuB,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC;gBAC3C,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,sBAAsB,CAAC,OAAO,CAAC;oBACrC,MAAM,EAAE,qBAAqB,CAAC,IAAI,CAAC;oBACnC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;oBACxB,SAAS,EAAE,OAAO,CAAC,OAAO;iBAC3B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,uDAAuD;IACvD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;gBACtC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;oBAC/B,IAAI,OAAO,CAAC,UAAU,IAAI,iBAAiB,CAAC,KAAK,CAAC,WAAW,EAAE,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;wBACnF,UAAU,CAAC,IAAI,CAAC;4BACd,IAAI,EAAE,YAAY;4BAClB,MAAM,EAAE,IAAI,OAAO,CAAC,UAAU,IAAI,KAAK,CAAC,IAAI,OAAO,MAAM,CAAC,IAAI,EAAE;4BAChE,IAAI,EAAE,MAAM,CAAC,UAAU;4BACvB,SAAS,EAAE,OAAO,CAAC,OAAO;yBAC3B,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;GAEG;AACH,SAAS,uBAAuB,CAAC,IAAc,EAAE,OAAyB;IACxE,wBAAwB;IACxB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,IAAI,IAAI,CAAC,WAAW,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;YACxC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,wCAAwC;QACxC,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAClB,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC1E,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,SAAS,sBAAsB,CAAC,OAAyB;IACvD,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QACvB,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,OAAO,aAAa,CAAC;IACvB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,SAAS,qBAAqB,CAAC,IAAc;IAC3C,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,OAAO,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC;IAClD,CAAC;IACD,OAAO,GAAG,IAAI,CAAC,WAAW,IAAI,CAAC;AACjC,CAAC"}
|
|
1
|
+
{"version":3,"file":"taint-matcher.js","sourceRoot":"","sources":["../../src/analysis/taint-matcher.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAEtD;;;GAGG;AACH,MAAM,uBAAuB,GAAuD;IAClF,EAAE,OAAO,EAAE,mBAAmB,EAAU,UAAU,EAAE,YAAY,EAAG;IACnE,EAAE,OAAO,EAAE,mBAAmB,EAAU,UAAU,EAAE,WAAW,EAAI;IACnE,EAAE,OAAO,EAAE,mBAAmB,EAAU,UAAU,EAAE,WAAW,EAAI;IACnE,EAAE,OAAO,EAAE,mBAAmB,EAAU,UAAU,EAAE,WAAW,EAAI;IACnE,EAAE,OAAO,EAAE,qBAAqB,EAAQ,UAAU,EAAE,YAAY,EAAG;IACnE,EAAE,OAAO,EAAE,uBAAuB,EAAM,UAAU,EAAE,aAAa,EAAE;IACnE,EAAE,OAAO,EAAE,sBAAsB,EAAO,UAAU,EAAE,aAAa,EAAE;IACnE,EAAE,OAAO,EAAE,kBAAkB,EAAW,UAAU,EAAE,YAAY,EAAG;IACnE,EAAE,OAAO,EAAE,mBAAmB,EAAU,UAAU,EAAE,WAAW,EAAI;IACnE,EAAE,OAAO,EAAE,mBAAmB,EAAU,UAAU,EAAE,aAAa,EAAE;IACnE,EAAE,OAAO,EAAE,oBAAoB,EAAS,UAAU,EAAE,YAAY,EAAG;IACnE,EAAE,OAAO,EAAE,2BAA2B,EAAE,UAAU,EAAE,YAAY,EAAG;IACnE,EAAE,OAAO,EAAE,0BAA0B,EAAG,UAAU,EAAE,YAAY,EAAG;CACpE,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,YAAY,CAC1B,KAAiB,EACjB,KAAiB,EACjB,SAAsB,gBAAgB,EAAE,EACxC,aAAqC;IAErC,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;IAC5D,MAAM,UAAU,GAAG,cAAc,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IAEnE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;AACxC,CAAC;AAED;;GAEG;AACH,SAAS,WAAW,CAClB,KAAiB,EACjB,KAAiB,EACjB,QAAyB;IAEzB,MAAM,OAAO,GAAkB,EAAE,CAAC;IAElC,qBAAqB;IACrB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,oBAAoB,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC;gBACxC,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,QAAQ,EAAE,kBAAkB,CAAC,IAAI,CAAC;oBAClC,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;oBACxB,UAAU,EAAE,GAAG;iBAChB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,6BAA6B;IAC7B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;gBACtC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;oBAC/B,IAAI,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;wBAChD,IAAI,iBAAiB,CAAC,KAAK,CAAC,WAAW,EAAE,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;4BAC7D,iEAAiE;4BACjE,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC;4BAClD,OAAO,CAAC,IAAI,CAAC;gCACX,IAAI,EAAE,OAAO,CAAC,IAAI;gCAClB,QAAQ,EAAE,IAAI,OAAO,CAAC,UAAU,IAAI,KAAK,CAAC,IAAI,OAAO,MAAM,CAAC,IAAI,EAAE;gCAClE,QAAQ,EAAE,OAAO,CAAC,QAAQ;gCAC1B,IAAI,EAAE,SAAS;gCACf,UAAU,EAAE,GAAG;6BAChB,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,+EAA+E;IAC/E,wEAAwE;IACxE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,kEAAkE;YAClE,IAAI,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC;gBAAE,SAAS;YAEnD,kEAAkE;YAClE,MAAM,WAAW,GAAG,CAAC,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;YACpE,IAAI,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC;gBAAE,SAAS;YAEhD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;gBACtC,mDAAmD;gBACnD,6CAA6C;gBAC7C,8EAA8E;gBAC9E,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI;oBAC5B,CAAC,CAAC,8BAA8B,CAAC,KAAK,CAAC,IAAI,CAAC;oBAC5C,CAAC,CAAC,IAAI,CAAC,CAAC,8CAA8C;gBAExD,IAAI,WAAW,EAAE,CAAC;oBAChB,iEAAiE;oBACjE,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC;oBAClD,OAAO,CAAC,IAAI,CAAC;wBACX,IAAI,EAAE,uBAAuB;wBAC7B,QAAQ,EAAE,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,OAAO,MAAM,CAAC,IAAI,EAAE;wBAClE,QAAQ,EAAE,QAAQ;wBAClB,IAAI,EAAE,SAAS;wBACf,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,sCAAsC;qBAC3E,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,iFAAiF;IACjF,yFAAyF;IACzF,qCAAqC;IACrC,MAAM,gBAAgB,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,gBAAgB,CAAC,CAAC;IAE5F,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACjC,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;gBACnB,MAAM,UAAU,GAAG,2BAA2B,CAAC,GAAG,CAAC,UAAU,EAAE,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;gBACnH,IAAI,UAAU,CAAC,SAAS,IAAI,UAAU,CAAC,UAAU,EAAE,CAAC;oBAClD,iDAAiD;oBACjD,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,UAAU,CAAC,CAAC;oBAC3G,IAAI,CAAC,aAAa,EAAE,CAAC;wBACnB,OAAO,CAAC,IAAI,CAAC;4BACX,IAAI,EAAE,UAAU,CAAC,UAAU;4BAC3B,QAAQ,EAAE,GAAG,GAAG,CAAC,UAAU,OAAO,IAAI,CAAC,SAAS,IAAI,WAAW,EAAE;4BACjE,QAAQ,EAAE,MAAM;4BAChB,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;4BACxB,UAAU,EAAE,GAAG;yBAChB,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,2EAA2E;IAC3E,8EAA8E;IAC9E,4EAA4E;IAC5E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC,GAAG,CAAC,UAAU;gBAAE,SAAS;YAC9B,KAAK,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,uBAAuB,EAAE,CAAC;gBAC9D,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;oBACjC,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAChC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,CAC5D,CAAC;oBACF,IAAI,CAAC,aAAa,EAAE,CAAC;wBACnB,OAAO,CAAC,IAAI,CAAC;4BACX,IAAI,EAAE,UAAU;4BAChB,QAAQ,EAAE,GAAG,GAAG,CAAC,UAAU,OAAO,IAAI,CAAC,SAAS,IAAI,WAAW,EAAE;4BACjE,QAAQ,EAAE,MAAM;4BAChB,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;4BACxB,UAAU,EAAE,GAAG;yBAChB,CAAC,CAAC;oBACL,CAAC;oBACD,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,+DAA+D;IAC/D,MAAM,SAAS,GAAG,IAAI,GAAG,EAAuB,CAAC;IACjD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAC5C,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,UAAU,GAAG,QAAQ,CAAC,UAAU,EAAE,CAAC;YACzD,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;AACxC,CAAC;AAED;;;GAGG;AACH,SAAS,8BAA8B,CAAC,QAAgB;IACtD,wCAAwC;IACxC,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAE/C,kEAAkE;IAClE,sFAAsF;IACtF,uDAAuD;IACvD,MAAM,aAAa,GAAG;QACpB,kFAAkF;QAClF,oBAAoB,EAAE,qBAAqB;QAC3C,gBAAgB,EAAE,iBAAiB;QACnC,aAAa,EAAE,gBAAgB;QAC/B,mBAAmB;QACnB,OAAO,EAAE,UAAU,EAAE,cAAc;QACnC,YAAY,EAAE,kBAAkB;QAChC,wBAAwB;QACxB,aAAa,EAAE,mBAAmB;KACnC,CAAC;IAEF,IAAI,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACrC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,2CAA2C;IAC3C,MAAM,cAAc,GAAG;QACrB,eAAe;QACf,QAAQ;QACR,eAAe;QACf,QAAQ,EAAE,cAAc,EAAE,eAAe,EAAE,cAAc;QACzD,mBAAmB;QACnB,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO;QACpD,WAAW,EAAE,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS;QACrE,eAAe,EAAE,eAAe,EAAE,QAAQ,EAAE,OAAO;QACnD,mBAAmB,EAAE,sBAAsB;QAC3C,yCAAyC;QACzC,UAAU;QACV,QAAQ,EAAE,UAAU;QACpB,YAAY;QACZ,UAAU,EAAE,UAAU;QACtB,aAAa;QACb,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,aAAa;QACnD,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW;QACnC,QAAQ,EAAE,QAAQ;KACnB,CAAC;IAEF,IAAI,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,wBAAwB;IACxB,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,MAAM,WAAW,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1C,qEAAqE;QACrE,IAAI,WAAW,KAAK,QAAQ,IAAI,WAAW,KAAK,QAAQ,IAAI,WAAW,KAAK,MAAM,EAAE,CAAC;YACnF,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,wBAAwB,CAAC,IAAc,EAAE,OAAoB;IACpE,sCAAsC;IACtC,IAAI,OAAO,CAAC,IAAI,KAAK,eAAe;QAAE,OAAO,KAAK,CAAC;IAEnD,mDAAmD;IACnD,oDAAoD;IACpD,wBAAwB;IACxB,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAE5C,yDAAyD;IACzD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC;IAC7D,IAAI,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IAE7B,kDAAkD;IAClD,IAAI,SAAS,CAAC,UAAU,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,SAAS,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;QACzC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,SAAS,SAAS,CAAC,KAAiB,EAAE,QAAuB,EAAE,aAAqC;IAClG,gDAAgD;IAChD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAqB,CAAC;IAE7C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,kBAAkB,CAAC,IAAI,EAAE,OAAO,EAAE,aAAa,CAAC,EAAE,CAAC;gBACrD,8DAA8D;gBAC9D,IAAI,wBAAwB,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC;oBAC5C,SAAS;gBACX,CAAC;gBAED,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;gBAC1C,MAAM,GAAG,GAAG,GAAG,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;gBAC/D,MAAM,UAAU,GAAG,uBAAuB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBAE1D,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAClC,IAAI,CAAC,QAAQ,IAAI,UAAU,GAAG,QAAQ,CAAC,UAAU,EAAE,CAAC;oBAClD,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE;wBACf,IAAI,EAAE,OAAO,CAAC,IAAI;wBAClB,GAAG,EAAE,OAAO,CAAC,GAAG;wBAChB,QAAQ;wBACR,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;wBACxB,UAAU;wBACV,MAAM,EAAE,IAAI,CAAC,WAAW;qBACzB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;AACtC,CAAC;AAED;;GAEG;AACH,SAAS,oBAAoB,CAAC,IAAc,EAAE,OAAsB;IAClE,wBAAwB;IACxB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,IAAI,IAAI,CAAC,WAAW,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;YACxC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,wCAAwC;QACxC,IAAI,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,KAAK,aAAa,EAAE,CAAC;YACrD,kFAAkF;YAClF,gFAAgF;YAChF,4EAA4E;YAC5E,wDAAwD;YACxD,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACnB,OAAO,KAAK,CAAC;YACf,CAAC;YACD,4DAA4D;YAC5D,4DAA4D;YAC5D,2BAA2B;YAC3B,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxD,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAED,OAAO,OAAO,CAAC,cAAc,KAAK,IAAI,CAAC;IACzC,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,SAAS,2BAA2B,CAClC,aAAqB,EACrB,cAAgC;IAEhC,4EAA4E;IAC5E,MAAM,aAAa,GAAuD,EAAE,CAAC;IAC7E,MAAM,iBAAiB,GAAuD,EAAE,CAAC;IAEjF,IAAI,cAAc,EAAE,CAAC;QACnB,qCAAqC;QACrC,KAAK,MAAM,EAAE,IAAI,cAAc,EAAE,CAAC;YAChC,IAAI,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC,gBAAgB,EAAE,CAAC;gBACpD,iDAAiD;gBACjD,MAAM,UAAU,GAAG,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,MAAM,EAAE,CAAC,QAAQ,KAAK,CAAC,CAAC;gBACnE,aAAa,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;gBACjE,mFAAmF;gBACnF,MAAM,cAAc,GAAG,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC,MAAM,MAAM,EAAE,CAAC,QAAQ,KAAK,CAAC,CAAC;gBACzE,iBAAiB,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC;IACH,CAAC;IAED,4DAA4D;IAC5D,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,YAAY,GAAG;YACnB,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,YAA0B,EAAE;YAChE,EAAE,IAAI,EAAE,aAAa,EAAE,UAAU,EAAE,YAA0B,EAAE;YAC/D,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,WAAyB,EAAE;YAC7D,EAAE,IAAI,EAAE,eAAe,EAAE,UAAU,EAAE,aAA2B,EAAE;YAClE,EAAE,IAAI,EAAE,eAAe,EAAE,UAAU,EAAE,aAA2B,EAAE;YAClE,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,WAAyB,EAAE;YAC5D,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,WAAyB,EAAE;YAC7D,EAAE,IAAI,EAAE,mBAAmB,EAAE,UAAU,EAAE,WAAyB,EAAE;YACpE,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,YAA0B,EAAE;YAC9D,EAAE,IAAI,EAAE,aAAa,EAAE,UAAU,EAAE,YAA0B,EAAE;YAC/D,EAAE,IAAI,EAAE,kBAAkB,EAAE,UAAU,EAAE,YAA0B,EAAE;YACpE,EAAE,IAAI,EAAE,iBAAiB,EAAE,UAAU,EAAE,YAA0B,EAAE;YACnE,EAAE,IAAI,EAAE,gBAAgB,EAAE,UAAU,EAAE,WAAyB,EAAE;YACjE,EAAE,IAAI,EAAE,mBAAmB,EAAE,UAAU,EAAE,aAA2B,EAAE;YACtE,EAAE,IAAI,EAAE,eAAe,EAAE,UAAU,EAAE,WAAyB,EAAE;YAChE,EAAE,IAAI,EAAE,gBAAgB,EAAE,UAAU,EAAE,UAAwB,EAAE;YAChE,EAAE,IAAI,EAAE,aAAa,EAAE,UAAU,EAAE,YAA0B,EAAE;YAC/D,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,YAA0B,EAAE;YAChE,EAAE,IAAI,EAAE,eAAe,EAAE,UAAU,EAAE,WAAyB,EAAE;SACjE,CAAC;QAEF,KAAK,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,YAAY,EAAE,CAAC;YAChD,aAAa,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,MAAM,CAAC,IAAI,IAAI,KAAK,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;YACvE,iBAAiB,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;IAED,kEAAkE;IAClE,KAAK,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,aAAa,EAAE,CAAC;QACpD,IAAI,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;YAChC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;QACzC,CAAC;IACH,CAAC;IAED,gFAAgF;IAChF,KAAK,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,iBAAiB,EAAE,CAAC;QACxD,IAAI,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;YAChC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;QACzC,CAAC;IACH,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;AAChD,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB,CAAC,IAAc,EAAE,OAAoB,EAAE,aAAqC;IACrG,yBAAyB;IACzB,gGAAgG;IAChG,MAAM,cAAc,GAAG,IAAI,CAAC,WAAW,CAAC;IACxC,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC;IAErC,eAAe;IACf,IAAI,aAAa,GAAG,cAAc,KAAK,aAAa,CAAC;IAErD,uEAAuE;IACvE,IAAI,CAAC,aAAa,IAAI,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACnD,MAAM,UAAU,GAAG,cAAc,CAAC,SAAS,CAAC,cAAc,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QACjF,aAAa,GAAG,UAAU,KAAK,aAAa,CAAC;IAC/C,CAAC;IAED,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,2BAA2B;IAC3B,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,IAAI,OAAO,CAAC,KAAK,KAAK,aAAa,EAAE,CAAC;YACpC,mDAAmD;YACnD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,+DAA+D;QAC/D,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzE,0EAA0E;YAC1E,IAAI,aAAa,IAAI,aAAa,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC7E,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,oDAAoD;QACpD,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,6DAA6D;IAC7D,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB,CAAC,WAAqB,EAAE,gBAAwB;IACxE,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAC9B,mEAAmE;QACnE,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACzC,IAAI,OAAO,KAAK,gBAAgB,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,SAAS,oBAAoB,CAAC,QAAgB,EAAE,SAAiB;IAC/D,eAAe;IACf,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,8FAA8F;IAC9F,oEAAoE;IACpE,MAAM,aAAa,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IAC7C,MAAM,UAAU,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;IAC3C,IAAI,aAAa,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,aAAa,CAAC,QAAQ,CAAC,GAAG,GAAG,UAAU,CAAC,EAAE,CAAC;QACnF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,0DAA0D;IAC1D,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACtD,MAAM,QAAQ,GAAG,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QACnE,IAAI,QAAQ,CAAC,WAAW,EAAE,KAAK,UAAU,EAAE,CAAC;YAC1C,OAAO,IAAI,CAAC;QACd,CAAC;QACD,qDAAqD;QACrD,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAChD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,4CAA4C;IAC5C,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACrD,MAAM,eAAe,GAAG,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QACvD,IAAI,eAAe,EAAE,CAAC;YACpB,MAAM,UAAU,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC;YACtC,MAAM,kBAAkB,GAA6B;gBACnD,WAAW,EAAE,CAAC,aAAa,CAAC;gBAC5B,iBAAiB,EAAE,CAAC,cAAc,EAAE,qBAAqB,CAAC;gBAC1D,WAAW,EAAE,CAAC,gBAAgB,CAAC;gBAC/B,gBAAgB,EAAE,CAAC,aAAa,EAAE,oBAAoB,CAAC;gBACvD,eAAe,EAAE,CAAC,YAAY,CAAC;gBAC/B,iBAAiB,EAAE,CAAC,WAAW,CAAC;gBAChC,kBAAkB,EAAE,CAAC,mBAAmB,CAAC;gBACzC,YAAY,EAAE,CAAC,SAAS,CAAC;aAC1B,CAAC;YACF,MAAM,aAAa,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;YACrD,IAAI,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,aAAa,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;gBACtE,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;IACH,CAAC;IAED,8CAA8C;IAC9C,IAAI,UAAU,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;QACvC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,kCAAkC;IAClC,IAAI,UAAU,CAAC,UAAU,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,uBAAuB;IACvB,MAAM,cAAc,GAA6B;QAC/C,eAAe;QACf,OAAO,EAAE,CAAC,oBAAoB,EAAE,gBAAgB,CAAC;QACjD,QAAQ,EAAE,CAAC,qBAAqB,EAAE,iBAAiB,CAAC;QACpD,OAAO,EAAE,CAAC,aAAa,CAAC;QAExB,WAAW;QACX,IAAI,EAAE,CAAC,WAAW,EAAE,mBAAmB,CAAC;QACxC,IAAI,EAAE,CAAC,YAAY,CAAC;QACpB,EAAE,EAAE,CAAC,eAAe,CAAC;QACrB,EAAE,EAAE,CAAC,mBAAmB,CAAC;QACzB,EAAE,EAAE,CAAC,WAAW,CAAC;QACjB,QAAQ,EAAE,CAAC,cAAc,CAAC;QAE1B,MAAM;QACN,MAAM,EAAE,CAAC,aAAa,CAAC;QACvB,GAAG,EAAE,CAAC,aAAa,EAAE,cAAc,CAAC;QACpC,MAAM,EAAE,CAAC,gBAAgB,CAAC;QAE1B,kBAAkB;QAClB,OAAO,EAAE,CAAC,SAAS,CAAC;QACpB,EAAE,EAAE,CAAC,gBAAgB,CAAC;QAEtB,YAAY;QACZ,MAAM,EAAE,CAAC,cAAc,CAAC;QAExB,OAAO;QACP,GAAG,EAAE,CAAC,SAAS,EAAE,gBAAgB,EAAE,YAAY,EAAE,mBAAmB,EAAE,aAAa,CAAC;QACpF,OAAO,EAAE,CAAC,SAAS,EAAE,gBAAgB,EAAE,YAAY,EAAE,mBAAmB,EAAE,aAAa,CAAC;QACxF,MAAM,EAAE,CAAC,YAAY,EAAE,mBAAmB,CAAC;QAC3C,OAAO,EAAE,CAAC,aAAa,CAAC;QACxB,GAAG,EAAE,CAAC,mBAAmB,CAAC;QAC1B,EAAE,EAAE,CAAC,gBAAgB,CAAC;QACtB,EAAE,EAAE,CAAC,YAAY,CAAC;QAClB,EAAE,EAAE,CAAC,aAAa,CAAC;QAEnB,YAAY;QACZ,KAAK,EAAE,CAAC,OAAO,CAAC;QAChB,EAAE,EAAE,CAAC,OAAO,CAAC;QACb,GAAG,EAAE,CAAC,UAAU,EAAE,iBAAiB,CAAC;QACpC,QAAQ,EAAE,CAAC,UAAU,CAAC;QACtB,OAAO,EAAE,CAAC,iBAAiB,EAAE,kBAAkB,CAAC;QAChD,MAAM,EAAE,CAAC,WAAW,EAAE,WAAW,EAAE,iBAAiB,CAAC;QACrD,SAAS,EAAE,CAAC,WAAW,CAAC;QACxB,SAAS,EAAE,CAAC,WAAW,CAAC;QACxB,WAAW,EAAE,CAAC,aAAa,EAAE,oBAAoB,CAAC;QAClD,EAAE,EAAE,CAAC,oBAAoB,CAAC;QAC1B,YAAY,EAAE,CAAC,cAAc,CAAC;QAC9B,IAAI,EAAE,CAAC,cAAc,CAAC;QAEtB,sBAAsB;QACtB,GAAG,EAAE,CAAC,KAAK,CAAC;QACZ,GAAG,EAAE,CAAC,KAAK,CAAC;QACZ,MAAM,EAAE,CAAC,YAAY,EAAE,WAAW,CAAC;QACnC,UAAU,EAAE,CAAC,YAAY,CAAC;QAC1B,SAAS,EAAE,CAAC,WAAW,CAAC;QACxB,YAAY,EAAE,CAAC,cAAc,CAAC;QAC9B,IAAI,EAAE,CAAC,cAAc,CAAC;QAEtB,kBAAkB;QAClB,GAAG,EAAE,CAAC,mBAAmB,CAAC;QAC1B,WAAW,EAAE,CAAC,mBAAmB,CAAC;QAClC,OAAO,EAAE,CAAC,SAAS,CAAC;QACpB,MAAM,EAAE,CAAC,cAAc,CAAC;QACxB,YAAY,EAAE,CAAC,cAAc,CAAC;QAE9B,QAAQ;QACR,KAAK,EAAE,CAAC,OAAO,CAAC;QAEhB,6BAA6B;QAC7B,IAAI,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,cAAc,CAAC;QACtD,QAAQ,EAAE,CAAC,UAAU,EAAE,cAAc,CAAC;QACtC,QAAQ,EAAE,CAAC,UAAU,EAAE,cAAc,CAAC;QACtC,YAAY,EAAE,CAAC,cAAc,CAAC;QAC9B,OAAO,EAAE,CAAC,SAAS,EAAE,aAAa,CAAC;QACnC,WAAW,EAAE,CAAC,aAAa,CAAC;QAC5B,SAAS,EAAE,CAAC,WAAW,EAAE,eAAe,CAAC;QACzC,EAAE,EAAE,CAAC,WAAW,EAAE,eAAe,CAAC;QAElC,cAAc;QACd,QAAQ,EAAE,CAAC,UAAU,CAAC;QACtB,KAAK,EAAE,CAAC,UAAU,EAAE,iBAAiB,EAAE,UAAU,CAAC;QAClD,QAAQ,EAAE,CAAC,UAAU,CAAC;QAEtB,sDAAsD;QACtD,EAAE,EAAE,CAAC,eAAe,EAAE,cAAc,CAAC;QACrC,MAAM,EAAE,CAAC,eAAe,EAAE,cAAc,CAAC;QACzC,MAAM,EAAE,CAAC,eAAe,EAAE,cAAc,CAAC;QACzC,IAAI,EAAE,CAAC,eAAe,EAAE,cAAc,CAAC;QACvC,MAAM,EAAE,CAAC,eAAe,EAAE,cAAc,CAAC;QACzC,GAAG,EAAE,CAAC,eAAe,EAAE,cAAc,CAAC;QACtC,QAAQ,EAAE,CAAC,eAAe,EAAE,cAAc,CAAC;QAC3C,YAAY,EAAE,CAAC,cAAc,CAAC;QAC9B,aAAa,EAAE,CAAC,eAAe,CAAC;QAEhC,sDAAsD;QACtD,MAAM,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,SAAS,CAAC;QACtD,UAAU,EAAE,CAAC,KAAK,EAAE,SAAS,CAAC;QAC9B,IAAI,EAAE,CAAC,KAAK,EAAE,SAAS,CAAC;QACxB,OAAO,EAAE,CAAC,KAAK,EAAE,SAAS,CAAC;QAC3B,MAAM,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,YAAY,CAAC;QACxC,KAAK,EAAE,CAAC,YAAY,EAAE,KAAK,CAAC;QAC5B,GAAG,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,SAAS,CAAC;QACnD,QAAQ,EAAE,CAAC,KAAK,EAAE,SAAS,CAAC;QAE5B,sCAAsC;QACtC,GAAG,EAAE,CAAC,SAAS,EAAE,oBAAoB,CAAC;QACtC,GAAG,EAAE,CAAC,UAAU,EAAE,qBAAqB,CAAC;QACxC,GAAG,EAAE,CAAC,SAAS,EAAE,aAAa,CAAC;QAC/B,MAAM,EAAE,CAAC,QAAQ,CAAC;QAClB,EAAE,EAAE,CAAC,IAAI,CAAC;QACV,IAAI,EAAE,CAAC,MAAM,CAAC;QACd,IAAI,EAAE,CAAC,MAAM,CAAC;QACd,KAAK,EAAE,CAAC,OAAO,CAAC;QAChB,aAAa,EAAE,CAAC,eAAe,CAAC;QAChC,MAAM,EAAE,CAAC,QAAQ,CAAC;QAClB,IAAI,EAAE,CAAC,eAAe,CAAC;QACvB,KAAK,EAAE,CAAC,eAAe,CAAC;QACxB,EAAE,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC;QACnC,IAAI,EAAE,CAAC,MAAM,EAAE,YAAY,CAAC;QAC5B,KAAK,EAAE,CAAC,OAAO,CAAC;QAChB,IAAI,EAAE,CAAC,MAAM,CAAC;QACd,MAAM,EAAE,CAAC,QAAQ,CAAC;QAClB,KAAK,EAAE,CAAC,OAAO,CAAC;QAChB,KAAK,EAAE,CAAC,OAAO,CAAC;KACjB,CAAC;IAEF,MAAM,QAAQ,GAAG,cAAc,CAAC,aAAa,CAAC,CAAC;IAC/C,IAAI,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACxE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB,CAAC,IAAc;IACxC,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC;IACvD,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC;IACtC,CAAC;IAED,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,KAAK,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IACrC,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED;;GAEG;AACH,SAAS,uBAAuB,CAAC,IAAc,EAAE,OAAoB;IACnE,IAAI,UAAU,GAAG,GAAG,CAAC,CAAC,kBAAkB;IAExC,uDAAuD;IACvD,IAAI,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QACnC,IAAI,oBAAoB,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACvD,UAAU,IAAI,GAAG,CAAC;QACpB,CAAC;IACH,CAAC;IAED,mDAAmD;IACnD,IAAI,OAAO,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;QACpC,UAAU,IAAI,GAAG,CAAC;IACpB,CAAC;IAED,OAAO,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;AACnC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CACnC,WAAmB,EACnB,OAAoB;IAEpB,OAAO,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACrD,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CACrB,KAAiB,EACjB,KAAiB,EACjB,QAA4B;IAE5B,MAAM,UAAU,GAAqB,EAAE,CAAC;IAExC,iFAAiF;IACjF,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC3C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,IAAI,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC7C,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;IACH,CAAC;IAED,2CAA2C;IAC3C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,+DAA+D;QAC/D,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YAC3C,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,mBAAmB;gBACzB,MAAM,EAAE,qBAAqB,CAAC,IAAI,CAAC;gBACnC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;gBACxB,SAAS,EAAE,CAAC,KAAK,EAAE,eAAe,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,CAAC,EAAE,gCAAgC;aACrH,CAAC,CAAC;YACH,SAAS,CAAC,qDAAqD;QACjE,CAAC;QAED,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,uBAAuB,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC;gBAC3C,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,sBAAsB,CAAC,OAAO,CAAC;oBACrC,MAAM,EAAE,qBAAqB,CAAC,IAAI,CAAC;oBACnC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;oBACxB,SAAS,EAAE,OAAO,CAAC,OAAO;iBAC3B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,uDAAuD;IACvD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;gBACtC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;oBAC/B,IAAI,OAAO,CAAC,UAAU,IAAI,iBAAiB,CAAC,KAAK,CAAC,WAAW,EAAE,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;wBACnF,UAAU,CAAC,IAAI,CAAC;4BACd,IAAI,EAAE,YAAY;4BAClB,MAAM,EAAE,IAAI,OAAO,CAAC,UAAU,IAAI,KAAK,CAAC,IAAI,OAAO,MAAM,CAAC,IAAI,EAAE;4BAChE,IAAI,EAAE,MAAM,CAAC,UAAU;4BACvB,SAAS,EAAE,OAAO,CAAC,OAAO;yBAC3B,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;GAEG;AACH,SAAS,uBAAuB,CAAC,IAAc,EAAE,OAAyB;IACxE,wBAAwB;IACxB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,IAAI,IAAI,CAAC,WAAW,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;YACxC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,wCAAwC;QACxC,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAClB,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC1E,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,SAAS,sBAAsB,CAAC,OAAyB;IACvD,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QACvB,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,OAAO,aAAa,CAAC;IACvB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,SAAS,qBAAqB,CAAC,IAAc;IAC3C,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,OAAO,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC;IAClD,CAAC;IACD,OAAO,GAAG,IAAI,CAAC,WAAW,IAAI,CAAC;AACjC,CAAC"}
|
package/dist/analyzer.d.ts
CHANGED
|
@@ -4,7 +4,7 @@
|
|
|
4
4
|
* Main entry point for analyzing source code and producing Circle-IR output.
|
|
5
5
|
* This is the core static analyzer. LLM-based verification and discovery are out of scope for this library.
|
|
6
6
|
*
|
|
7
|
-
* The analysis pipeline runs
|
|
7
|
+
* The analysis pipeline runs thirty-six sequential passes over a shared CodeGraph:
|
|
8
8
|
* 1. TaintMatcherPass — config-based source/sink extraction
|
|
9
9
|
* 2. ConstantPropagationPass — dead-code detection, symbol table, field taint
|
|
10
10
|
* 3. LanguageSourcesPass — language-specific sources/sinks (JS, Python, getters)
|
|
@@ -30,8 +30,17 @@
|
|
|
30
30
|
* 23. DeepInheritancePass — class inheritance depth > 5 (CWE-1086)
|
|
31
31
|
* 24. RedundantLoopPass — loop-invariant .length/.size()/Math.* (CWE-1050)
|
|
32
32
|
* 25. UnboundedCollectionPass — collection grows in loop with no size limit (CWE-770)
|
|
33
|
-
* 26. SerialAwaitPass
|
|
34
|
-
* 27. ReactInlineJsxPass
|
|
33
|
+
* 26. SerialAwaitPass — independent sequential awaits in JS/TS (performance)
|
|
34
|
+
* 27. ReactInlineJsxPass — inline objects/functions in JSX props (performance)
|
|
35
|
+
* 28. SwallowedExceptionPass — catch blocks with no throw/log/return (CWE-390)
|
|
36
|
+
* 29. BroadCatchPass — catch(Exception) / bare except (CWE-396)
|
|
37
|
+
* 30. UnhandledExceptionPass — throw/raise outside any try/catch (CWE-390)
|
|
38
|
+
* 31. DoubleClosePass — resource closed twice in same method (CWE-675)
|
|
39
|
+
* 32. UseAfterClosePass — method call on resource after close() (CWE-672)
|
|
40
|
+
* 33. MissingGuardDomPass — sensitive op not dominated by auth check (CWE-285)
|
|
41
|
+
* 34. CleanupVerifyPass — close() does not post-dominate acquisition (CWE-772)
|
|
42
|
+
* 35. MissingOverridePass — overriding method lacks @Override (Java)
|
|
43
|
+
* 36. UnusedInterfaceMethodPass — interface method never called in file
|
|
35
44
|
*/
|
|
36
45
|
import type { CircleIR, AnalysisResponse, ProjectAnalysis } from './types/index.js';
|
|
37
46
|
import type { TaintConfig } from './types/config.js';
|
package/dist/analyzer.js
CHANGED
|
@@ -4,7 +4,7 @@
|
|
|
4
4
|
* Main entry point for analyzing source code and producing Circle-IR output.
|
|
5
5
|
* This is the core static analyzer. LLM-based verification and discovery are out of scope for this library.
|
|
6
6
|
*
|
|
7
|
-
* The analysis pipeline runs
|
|
7
|
+
* The analysis pipeline runs thirty-six sequential passes over a shared CodeGraph:
|
|
8
8
|
* 1. TaintMatcherPass — config-based source/sink extraction
|
|
9
9
|
* 2. ConstantPropagationPass — dead-code detection, symbol table, field taint
|
|
10
10
|
* 3. LanguageSourcesPass — language-specific sources/sinks (JS, Python, getters)
|
|
@@ -30,8 +30,17 @@
|
|
|
30
30
|
* 23. DeepInheritancePass — class inheritance depth > 5 (CWE-1086)
|
|
31
31
|
* 24. RedundantLoopPass — loop-invariant .length/.size()/Math.* (CWE-1050)
|
|
32
32
|
* 25. UnboundedCollectionPass — collection grows in loop with no size limit (CWE-770)
|
|
33
|
-
* 26. SerialAwaitPass
|
|
34
|
-
* 27. ReactInlineJsxPass
|
|
33
|
+
* 26. SerialAwaitPass — independent sequential awaits in JS/TS (performance)
|
|
34
|
+
* 27. ReactInlineJsxPass — inline objects/functions in JSX props (performance)
|
|
35
|
+
* 28. SwallowedExceptionPass — catch blocks with no throw/log/return (CWE-390)
|
|
36
|
+
* 29. BroadCatchPass — catch(Exception) / bare except (CWE-396)
|
|
37
|
+
* 30. UnhandledExceptionPass — throw/raise outside any try/catch (CWE-390)
|
|
38
|
+
* 31. DoubleClosePass — resource closed twice in same method (CWE-675)
|
|
39
|
+
* 32. UseAfterClosePass — method call on resource after close() (CWE-672)
|
|
40
|
+
* 33. MissingGuardDomPass — sensitive op not dominated by auth check (CWE-285)
|
|
41
|
+
* 34. CleanupVerifyPass — close() does not post-dominate acquisition (CWE-772)
|
|
42
|
+
* 35. MissingOverridePass — overriding method lacks @Override (Java)
|
|
43
|
+
* 36. UnusedInterfaceMethodPass — interface method never called in file
|
|
35
44
|
*/
|
|
36
45
|
import { initParser, parse, extractMeta, extractTypes, extractCalls, extractImports, extractExports, buildCFG, buildDFG, collectAllNodes, } from './core/index.js';
|
|
37
46
|
import { analyzeTaint, getDefaultConfig, detectUnresolved, analyzeConstantPropagation, isFalsePositive, } from './analysis/index.js';
|
|
@@ -67,6 +76,15 @@ import { RedundantLoopPass } from './analysis/passes/redundant-loop-pass.js';
|
|
|
67
76
|
import { UnboundedCollectionPass } from './analysis/passes/unbounded-collection-pass.js';
|
|
68
77
|
import { SerialAwaitPass } from './analysis/passes/serial-await-pass.js';
|
|
69
78
|
import { ReactInlineJsxPass } from './analysis/passes/react-inline-jsx-pass.js';
|
|
79
|
+
import { SwallowedExceptionPass } from './analysis/passes/swallowed-exception-pass.js';
|
|
80
|
+
import { BroadCatchPass } from './analysis/passes/broad-catch-pass.js';
|
|
81
|
+
import { UnhandledExceptionPass } from './analysis/passes/unhandled-exception-pass.js';
|
|
82
|
+
import { DoubleClosePass } from './analysis/passes/double-close-pass.js';
|
|
83
|
+
import { UseAfterClosePass } from './analysis/passes/use-after-close-pass.js';
|
|
84
|
+
import { MissingGuardDomPass } from './analysis/passes/missing-guard-dom-pass.js';
|
|
85
|
+
import { CleanupVerifyPass } from './analysis/passes/cleanup-verify-pass.js';
|
|
86
|
+
import { MissingOverridePass } from './analysis/passes/missing-override-pass.js';
|
|
87
|
+
import { UnusedInterfaceMethodPass } from './analysis/passes/unused-interface-method-pass.js';
|
|
70
88
|
// Project-level pass imports
|
|
71
89
|
import { ImportGraph } from './graph/import-graph.js';
|
|
72
90
|
import { CircularDependencyPass } from './analysis/passes/circular-dependency-pass.js';
|
|
@@ -244,6 +262,15 @@ export async function analyze(code, filePath, language, options = {}) {
|
|
|
244
262
|
.add(new UnboundedCollectionPass())
|
|
245
263
|
.add(new SerialAwaitPass())
|
|
246
264
|
.add(new ReactInlineJsxPass())
|
|
265
|
+
.add(new SwallowedExceptionPass())
|
|
266
|
+
.add(new BroadCatchPass())
|
|
267
|
+
.add(new UnhandledExceptionPass())
|
|
268
|
+
.add(new DoubleClosePass())
|
|
269
|
+
.add(new UseAfterClosePass())
|
|
270
|
+
.add(new MissingGuardDomPass())
|
|
271
|
+
.add(new CleanupVerifyPass())
|
|
272
|
+
.add(new MissingOverridePass())
|
|
273
|
+
.add(new UnusedInterfaceMethodPass())
|
|
247
274
|
.run(graph, code, language, config);
|
|
248
275
|
const sinkFilter = results.get('sink-filter');
|
|
249
276
|
const interProc = results.get('interprocedural');
|