circle-ir 4.12.0 → 4.13.0

package/dist/analysis/passes/csharp-sanitizer-credit.js

@@ -0,0 +1,564 @@
+/**
+ * C# sanitizer and guard credit (cognium-dev C#/.NET Phase-1, #518).
+ *
+ * C# rides the text-scan propagation, which knows nothing about sanitizers, so
+ * `SinkFilterPass` Stage 15k drops a sink when the value reaching it has been
+ * made safe. This module answers that question for one sink at a time, inside
+ * the method that contains it:
+ *
+ *   - `sanitizedVarsAt`   the value passed through a sanitizer for the sink's
+ *                         type, directly or through a same-file helper;
+ *   - `guardedVarsAt`     a check that dominates the sink proves the value
+ *                         inert (allowlist, numeric parse, host allowlist);
+ *   - `fixedHostRequest`  the request URL has a constant host.
+ *
+ * Everything is matched on source text and is deliberately narrow: when a
+ * shape is not recognised the sink stays, so a miss here is a false positive,
+ * never a silently dropped finding.
+ */
+/**
+ * `Regex.Replace(x, "[^<allowlist>]", "")` — an allowlist character strip
+ * (cognium-dev#272, the LDAP-strip cluster).
+ *
+ * A **negated** class is the whole point: `[^a-zA-Z0-9]` deletes everything
+ * *not* in the set, so the surviving characters are exactly the set. That makes
+ * the result provably inert for the metacharacter-driven injection families
+ * below. A blacklist replace (`"[<>]"`) proves nothing — it enumerates what to
+ * remove and silently misses the rest — and must not match.
+ *
+ * Two conditions, both load-bearing:
+ *
+ *  (a) the pattern is a string literal beginning `[^`. A computed pattern could
+ *      be anything, including attacker-influenced.
+ *  (b) the surviving set contains **no metacharacters**. `[^a-zA-Z0-9']` would
+ *      keep the single quote alive, which breaks SQL and LDAP escaping outright
+ *      — so the class body is restricted to alphanumerics, `\w`, `\d`, `\s`,
+ *      underscore, hyphen and spaces. Anything else (quote, paren, backslash,
+ *      dot, asterisk, semicolon) fails the match and the sink still fires.
+ *
+ * The replacement must be empty or a single safe character, so
+ * `Regex.Replace(x, "[^a-z]", "';DROP")` cannot qualify.
+ */
+export const CSHARP_ALLOWLIST_STRIP_RE = /\bRegex\s*\.\s*Replace\s*\([^,]*,\s*@?"\[\^(?:[A-Za-z0-9_\- ]|\\w|\\d|\\s)+\]"\s*,\s*@?"[A-Za-z0-9_]?"\s*\)/;
+/**
+ * `new string(x.Where(char.IsLetterOrDigit).ToArray())` — the LINQ spelling of
+ * the same allowlist strip: only letters and digits survive.
+ */
+const CSHARP_ALLOWLIST_FILTER_RE = /\bnew\s+string\s*\(\s*[A-Za-z_]\w*\s*\.\s*Where\s*\(\s*char\s*\.\s*Is(?:LetterOrDigit|Digit|Letter)\s*\)\s*\.\s*ToArray\s*\(\s*\)\s*\)/;
+// C# sanitizers and the sink types each neutralises. A tainted value that
+// flows through one of these before reaching a sink of the matching type is
+// safe. Method names are C#-distinctive (see config-loader C# sanitizers).
+export const CSHARP_SANITIZER_RES = [
+    { re: /\b(?:HtmlEncode|JavaScriptStringEncode)\s*\(/, type: 'xss' },
+    // `HtmlEncoder.Default.Encode(x)` is the ASP.NET Core spelling (#520).
+    { re: /\bHtmlEncoder\s*\.\s*(?:Default\s*\.\s*)?Encode\s*\(/, type: 'xss' },
+    { re: /\bPath\s*\.\s*GetFileName\s*\(/, type: 'path_traversal' },
+    // XML-escapes `< > & " '`. A value escaped this way cannot close the quoted
+    // literal it is placed in, which is what XPath injection needs.
+    { re: /\bSecurityElement\s*\.\s*Escape\s*\(/, type: 'xpath_injection' },
+    // An allowlist strip leaves only inert characters, so it covers every family
+    // whose exploitation needs a metacharacter. Each has a fixture; see
+    // `issue-272-csharp-allowlist-strip.test.ts`.
+    { re: CSHARP_ALLOWLIST_STRIP_RE, type: 'ldap_injection' },
+    { re: CSHARP_ALLOWLIST_STRIP_RE, type: 'xpath_injection' },
+    { re: CSHARP_ALLOWLIST_STRIP_RE, type: 'command_injection' },
+    { re: CSHARP_ALLOWLIST_STRIP_RE, type: 'sql_injection' },
+    { re: CSHARP_ALLOWLIST_STRIP_RE, type: 'crlf' },
+    { re: CSHARP_ALLOWLIST_FILTER_RE, type: 'ldap_injection' },
+    { re: CSHARP_ALLOWLIST_FILTER_RE, type: 'xpath_injection' },
+    { re: CSHARP_ALLOWLIST_FILTER_RE, type: 'command_injection' },
+    { re: CSHARP_ALLOWLIST_FILTER_RE, type: 'sql_injection' },
+    { re: CSHARP_ALLOWLIST_FILTER_RE, type: 'crlf' },
+];
+/**
+ * Sink types for which a value made only of letters, digits, `_` and `-` is
+ * inert: each needs a metacharacter (quote, paren, slash, angle bracket, CR/LF)
+ * to be exploited.
+ */
+const INERT_WHEN_ALPHANUMERIC = new Set([
+    'ldap_injection', 'xpath_injection', 'command_injection', 'sql_injection',
+    'crlf', 'xss', 'path_traversal', 'code_injection',
+]);
+const IDENT = '[A-Za-z_]\\w*';
+const ASSIGN_RE = new RegExp(`^\\s*(?:var\\s+|[A-Za-z_][\\w.<>\\[\\]?]*\\s+)?(${IDENT})\\s*=(?!=)\\s*(.+?);?\\s*$`);
+const ENDS_STATEMENT_RE = /[;{}]\s*(?:\/\/.*)?$/;
+function escapeRegex(s) {
+    return s.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+}
+function mentions(text, name) {
+    return new RegExp(`(?<![\\w])${escapeRegex(name)}(?![\\w])`).test(text);
+}
+/** Text inside the parentheses opening at `open`, or null when unbalanced. */
+function insideParens(text, open) {
+    let depth = 0;
+    for (let i = open; i < text.length; i++) {
+        if (text[i] === '(')
+            depth++;
+        else if (text[i] === ')' && --depth === 0)
+            return text.slice(open + 1, i);
+    }
+    return null;
+}
+/** `if (COND) rest` at the start of `text`. */
+function leadingIf(text) {
+    const m = /^\s*(?:\}\s*)?(?:else\s+)?if\s*\(/.exec(text);
+    if (!m)
+        return null;
+    const open = m[0].length - 1;
+    const cond = insideParens(text, open);
+    if (cond === null)
+        return null;
+    return { cond: cond.trim(), rest: text.slice(open + cond.length + 2).trim() };
+}
+const EXITS_RE = /^(?:\{\s*)?(?:return\b|throw\b|continue\b|break\b)/;
+export class CSharpCredit {
+    methods;
+    lines;
+    helperCache = new Map();
+    guardHelperCache = new Map();
+    constructor(code, methods) {
+        this.methods = methods;
+        // CRLF files leave `\r` on every line, which `.` and `$` will not cross.
+        this.lines = code.split(/\r?\n/);
+    }
+    /** The innermost method containing `line`, or null. */
+    methodAt(line) {
+        let best = null;
+        for (const m of this.methods) {
+            if (line < m.start_line || line > m.end_line)
+                continue;
+            if (!best || m.end_line - m.start_line < best.end_line - best.start_line)
+                best = m;
+        }
+        return best;
+    }
+    /**
+     * Statements of lines `[from, to)`, 1-based, with a statement wrapped over
+     * several lines joined up to its `;`. `line` is where the statement starts.
+     */
+    statements(from, to) {
+        const out = [];
+        for (let i = Math.max(from, 1); i < to; i++) {
+            let text = (this.lines[i - 1] ?? '').trimEnd();
+            const first = i;
+            if (/^\s*(?:[\w.<>[\]?]+\s+)?[A-Za-z_]\w*\s*=(?!=)/.test(text) && !ENDS_STATEMENT_RE.test(text)) {
+                while (i < to - 1 && i < first + 12) {
+                    i++;
+                    text += ' ' + (this.lines[i - 1] ?? '').trim();
+                    if (ENDS_STATEMENT_RE.test(this.lines[i - 1] ?? ''))
+                        break;
+                }
+            }
+            out.push({ line: first, text });
+        }
+        return out;
+    }
+    /** Does `text` apply a built-in sanitizer for `type`? */
+    builtinSanitizes(type, text) {
+        for (const { re, type: t } of CSHARP_SANITIZER_RES) {
+            if (t === type && re.test(text))
+                return true;
+        }
+        if (type === 'ldap_injection') {
+            // RFC 4515 escaping, or stripping, of the filter metacharacters. Both
+            // parentheses must be handled: they are what lets input restructure a
+            // filter. `x.Replace("(", "\\28").Replace(")", "\\29")`.
+            if (/\.\s*Replace\s*\(\s*"\("\s*,/.test(text) && /\.\s*Replace\s*\(\s*"\)"\s*,/.test(text))
+                return true;
+        }
+        if (type === 'path_traversal') {
+            // `full.StartsWith(prefix) ? full : null` — the value is handed back
+            // only when it is under the prefix.
+            if (/\b([A-Za-z_]\w*)\s*\.\s*StartsWith\s*\([^)]*\)\s*\?\s*\1\s*:\s*null\b/.test(text))
+                return true;
+        }
+        return false;
+    }
+    /**
+     * Same-file methods that sanitize for `type`: every `return` hands back a
+     * sanitized expression. `static string Clean(string x) { return HtmlEncode(x); }`
+     * makes `Clean(input)` an xss sanitizer at its call sites.
+     */
+    helpers(type) {
+        const cached = this.helperCache.get(type);
+        if (cached)
+            return cached;
+        const set = new Set();
+        this.helperCache.set(type, set);
+        for (const m of this.methods) {
+            const returns = this.returnExprs(m);
+            if (returns.length === 0)
+                continue;
+            const ok = returns.every(r => {
+                if (this.builtinSanitizes(type, r.expr))
+                    return true;
+                const v = /^([A-Za-z_]\w*)$/.exec(r.expr.trim());
+                return !!v && this.sanitizedVarsIn(type, m.start_line, r.line, false).has(v[1]);
+            });
+            if (ok)
+                set.add(m.name);
+        }
+        return set;
+    }
+    /** Every returned expression of a method: `return e;` and expression bodies. */
+    returnExprs(m) {
+        const out = [];
+        for (const st of this.statements(m.start_line, m.end_line + 1)) {
+            for (const r of st.text.matchAll(/\breturn\s+([^;]+);/g))
+                out.push({ line: st.line, expr: r[1] });
+            if (st.line === m.start_line) {
+                const body = /\)\s*=>\s*(.+?);\s*$/.exec(st.text);
+                if (body)
+                    out.push({ line: st.line, expr: body[1] });
+            }
+        }
+        return out;
+    }
+    /** Does `text` apply a sanitizer for `type`, built in or a same-file helper? */
+    sanitizes(type, text) {
+        if (this.builtinSanitizes(type, text))
+            return true;
+        for (const name of this.helpers(type)) {
+            if (new RegExp(`(?<![\\w.])${escapeRegex(name)}\\s*\\(`).test(text))
+                return true;
+        }
+        return false;
+    }
+    sanitizedVarsIn(type, from, to, withHelpers) {
+        const sanitized = new Set();
+        for (const st of this.statements(from, to)) {
+            const m = ASSIGN_RE.exec(st.text);
+            if (!m)
+                continue;
+            const [, lhs, rhs] = m;
+            const credited = (withHelpers ? this.sanitizes(type, rhs) : this.builtinSanitizes(type, rhs)) ||
+                [...sanitized].some(v => mentions(rhs, v));
+            if (credited)
+                sanitized.add(lhs);
+            else
+                sanitized.delete(lhs);
+        }
+        return sanitized;
+    }
+    /**
+     * The variables sanitized for `type` at `sinkLine`, judged inside the method
+     * that contains the sink (cognium-dev#579). The body is read top to bottom up
+     * to the sink and the last assignment to a name decides: a sanitizer call or
+     * a derivation from a sanitized name credits it, anything else removes it.
+     * Class fields are the caller's concern: they can be sanitized in one method
+     * and read in another.
+     */
+    sanitizedVarsAt(type, sinkLine) {
+        return this.sanitizedVarsIn(type, this.methodAt(sinkLine)?.start_line ?? 1, sinkLine, true);
+    }
+    /**
+     * The text of the statement at `line` that a sink call can be in: for
+     * `if (COND) sink(x);` that is `sink(x);`, without the condition. A name
+     * that only appears in the condition is not something the sink receives.
+     */
+    sinkText(line) {
+        const text = this.lines[line - 1] ?? '';
+        const guarded = leadingIf(text);
+        return guarded && guarded.rest !== '' ? guarded.rest : text;
+    }
+    // -------------------------------------------------------------------------
+    // Guards
+    // -------------------------------------------------------------------------
+    /** Variables a condition proves to hold only letters, digits, `_` and `-`. */
+    allowlistVars(cond) {
+        const out = [];
+        const anchored = new RegExp(`\\bRegex\\s*\\.\\s*IsMatch\\s*\\(\\s*(${IDENT})\\s*,\\s*@?"\\^\\[(?:[A-Za-z0-9_\\- ]|\\\\w|\\\\d)+\\](?:[+*]|\\{\\d+(?:,\\d*)?\\})\\$"`, 'g');
+        for (const m of cond.matchAll(anchored))
+            out.push(m[1]);
+        const methodGroup = new RegExp(`(${IDENT})\\s*\\.\\s*All\\s*\\(\\s*char\\s*\\.\\s*Is(?:LetterOrDigit|Digit|Letter)\\s*\\)`, 'g');
+        for (const m of cond.matchAll(methodGroup))
+            out.push(m[1]);
+        const lambda = new RegExp(`(${IDENT})\\s*\\.\\s*All\\s*\\(\\s*(${IDENT})\\s*=>`, 'g');
+        for (const m of cond.matchAll(lambda)) {
+            const open = cond.indexOf('(', m.index + m[1].length);
+            const body = insideParens(cond, open)?.replace(new RegExp(`^\\s*${m[2]}\\s*=>`), '') ?? '';
+            const c = escapeRegex(m[2]);
+            const residue = body
+                .replace(new RegExp(`char\\s*\\.\\s*Is(?:LetterOrDigit|Digit|Letter)\\s*\\(\\s*${c}\\s*\\)`, 'g'), '')
+                .replace(new RegExp(`${c}\\s*==\\s*'[_\\-]'`, 'g'), '')
+                .replace(/\|\||\s/g, '');
+            if (residue === '')
+                out.push(m[1]);
+        }
+        return out;
+    }
+    /** Variables a condition proves to be numeric (`int.TryParse(x, out _)`). */
+    numericVars(cond, parsedFrom) {
+        const out = [];
+        const tryParse = new RegExp(`\\b(?:int|long|short|byte|uint|ulong|decimal|double|float|Int32|Int64|Guid)\\s*\\.\\s*TryParse\\s*\\(\\s*(${IDENT})\\s*,`, 'g');
+        for (const m of cond.matchAll(tryParse))
+            out.push(m[1]);
+        for (const [parsed, from] of parsedFrom) {
+            if (new RegExp(`(?<![\\w])${escapeRegex(parsed)}\\s*(?:!=\\s*null|\\.\\s*HasValue)\\b`).test(cond))
+                out.push(from);
+        }
+        return out;
+    }
+    /** Variables whose host a condition compares against a constant or an allowlist. */
+    hostVars(cond, hostOf) {
+        const out = [];
+        const compares = (expr) => {
+            const e = escapeRegex(expr).replace(/\\ /g, '\\s*');
+            return (new RegExp(`${e}\\s*==\\s*@?"[^"]+"`).test(cond) ||
+                new RegExp(`@?"[^"]+"\\s*==\\s*${e}`).test(cond) ||
+                new RegExp(`${e}\\s*\\.\\s*Equals\\s*\\(`).test(cond) ||
+                new RegExp(`\\.\\s*Contains\\s*\\(\\s*${e}\\s*[),]`).test(cond) ||
+                new RegExp(`\\bIndexOf\\s*\\([^()]*,\\s*${e}\\s*\\)\\s*>=\\s*0`).test(cond));
+        };
+        const direct = new RegExp(`new\\s+(?:System\\s*\\.\\s*)?Uri\\s*\\(\\s*(${IDENT})\\s*\\)\\s*\\.\\s*Host\\b`, 'g');
+        for (const m of cond.matchAll(direct)) {
+            if (compares(m[0]))
+                out.push(m[1]);
+        }
+        for (const [hostVar, from] of hostOf) {
+            if (mentions(cond, hostVar) && compares(hostVar))
+                out.push(from);
+        }
+        return out;
+    }
+    /**
+     * Same-file methods that are guards of `kind` on one of their parameters:
+     * `static bool IsAllowed(string c) { return Array.IndexOf(Allowed, new Uri(c).Host) >= 0; }`.
+     * Maps the method name to the position of the validated parameter.
+     */
+    guardHelpers(kind) {
+        const cached = this.guardHelperCache.get(kind);
+        if (cached)
+            return cached;
+        const map = new Map();
+        this.guardHelperCache.set(kind, map);
+        for (const m of this.methods) {
+            const signature = this.lines[m.start_line - 1] ?? '';
+            const open = signature.indexOf('(', signature.indexOf(m.name));
+            const params = open === -1 ? null : insideParens(signature, open);
+            if (!params)
+                continue;
+            const names = params.split(',').map(p => p.trim().split(/\s+/).pop() ?? '');
+            const returns = this.returnExprs(m);
+            if (returns.length !== 1)
+                continue;
+            const proven = this.provenBy(kind, returns[0].expr, new Map(), new Map(), false);
+            const pos = names.findIndex(n => proven.includes(n));
+            if (pos !== -1)
+                map.set(m.name, pos);
+        }
+        return map;
+    }
+    provenBy(kind, cond, parsedFrom, hostOf, withHelpers) {
+        const out = kind === 'allowlist' ? this.allowlistVars(cond)
+            : kind === 'numeric' ? this.numericVars(cond, parsedFrom)
+                : this.hostVars(cond, hostOf);
+        if (withHelpers) {
+            for (const [name, pos] of this.guardHelpers(kind)) {
+                for (const call of cond.matchAll(new RegExp(`(?<![\\w.])${escapeRegex(name)}\\s*\\(`, 'g'))) {
+                    const args = insideParens(cond, call.index + call[0].length - 1)?.split(',') ?? [];
+                    const arg = args[pos]?.trim();
+                    if (arg && new RegExp(`^${IDENT}$`).test(arg))
+                        out.push(arg);
+                }
+            }
+        }
+        return out;
+    }
+    /**
+     * The variables a check dominating `sinkLine` proves safe for `type`.
+     *
+     * Recognised checks:
+     *   - allowlist: anchored `Regex.IsMatch(x, "^[A-Za-z0-9_]+$")`, `x.All(char.IsLetterOrDigit)`;
+     *   - numeric:   `int.TryParse(x, out _)`, or `p != null` where `p = int.Parse(x)`;
+     *   - host (ssrf only): `new Uri(x).Host == "api.example.com"`, an allowlist
+     *     `Contains` / `IndexOf` of that host.
+     * directly, through a `bool` or host variable, or through a same-file helper.
+     *
+     * A check dominates the sink when the sink is the body of the `if`, is
+     * inside its block, or follows an early exit on the negated check
+     * (`if (!ok) return;`).
+     */
+    guardedVarsAt(type, sinkLine) {
+        const kinds = [];
+        if (INERT_WHEN_ALPHANUMERIC.has(type))
+            kinds.push('allowlist', 'numeric');
+        if (type === 'ssrf')
+            kinds.push('host');
+        const proven = new Set();
+        if (kinds.length === 0)
+            return proven;
+        const scopeStart = this.methodAt(sinkLine)?.start_line ?? 1;
+        const before = this.statements(scopeStart, sinkLine);
+        const boolOf = new Map(); // b = <condition>
+        const parsedFrom = new Map(); // p = int.Parse(x)
+        const hostOf = new Map(); // h = new Uri(x).Host
+        const parseAnywhere = new RegExp(`(${IDENT})\\s*=\\s*(?:\\([^)]*\\)\\s*)?(?:int|long|short|byte|uint|ulong|decimal|double|float|Int32|Int64)\\s*\\.\\s*Parse\\s*\\(\\s*(${IDENT})\\s*[,)]`, 'g');
+        for (const st of before) {
+            // `try { p = int.Parse(x); }` keeps the assignment off the line start.
+            for (const p of st.text.matchAll(parseAnywhere))
+                parsedFrom.set(p[1], p[2]);
+            const m = ASSIGN_RE.exec(st.text);
+            if (!m)
+                continue;
+            const [, lhs, rhs] = m;
+            const parse = new RegExp(`^(?:\\([^)]*\\)\\s*)?(?:int|long|short|byte|uint|ulong|decimal|double|float|Int32|Int64)\\s*\\.\\s*Parse\\s*\\(\\s*(${IDENT})\\s*[,)]`).exec(rhs);
+            if (parse)
+                parsedFrom.set(lhs, parse[1]);
+            const host = new RegExp(`^new\\s+(?:System\\s*\\.\\s*)?Uri\\s*\\(\\s*(${IDENT})\\s*\\)\\s*\\.\\s*Host$`).exec(rhs.trim());
+            if (host)
+                hostOf.set(lhs, host[1]);
+            boolOf.set(lhs, rhs);
+        }
+        const credit = (cond) => {
+            // A bare variable stands for the condition it was assigned.
+            const resolved = new RegExp(`^${IDENT}$`).test(cond) ? boolOf.get(cond) ?? cond : cond;
+            for (const kind of kinds) {
+                for (const v of this.provenBy(kind, resolved, parsedFrom, hostOf, true))
+                    proven.add(v);
+            }
+        };
+        // (i) the sink is the body of an `if` on its own line.
+        const own = leadingIf(this.lines[sinkLine - 1] ?? '');
+        if (own && !own.cond.startsWith('!'))
+            credit(own.cond);
+        // (ii) the sink is inside the block of an `if`.
+        let depth = 0;
+        for (let i = sinkLine - 1; i >= scopeStart; i--) {
+            const text = this.lines[i - 1] ?? '';
+            for (let c = text.length - 1; c >= 0; c--) {
+                if (text[c] === '}')
+                    depth++;
+                else if (text[c] === '{') {
+                    if (depth > 0) {
+                        depth--;
+                        continue;
+                    }
+                    let header = text.slice(0, c);
+                    for (let h = i - 1; header.trim() === '' && h >= scopeStart; h--)
+                        header = this.lines[h - 1] ?? '';
+                    const enclosing = leadingIf(header);
+                    if (enclosing && !enclosing.cond.startsWith('!'))
+                        credit(enclosing.cond);
+                }
+            }
+        }
+        // (iii) an early exit on the negated check, earlier in the method.
+        for (let i = scopeStart; i < sinkLine; i++) {
+            const guard = leadingIf(this.lines[i - 1] ?? '');
+            if (!guard)
+                continue;
+            let rest = guard.rest;
+            for (let n = i + 1; rest === '' && n < sinkLine; n++)
+                rest = (this.lines[n - 1] ?? '').trim();
+            if (!EXITS_RE.test(rest))
+                continue;
+            if (guard.cond.startsWith('!')) {
+                // `!(a == b)` drops the wrapping parentheses with the `!`; `!F(x)` keeps its call.
+                const inner = guard.cond.slice(1).trim();
+                const wrapped = inner.startsWith('(') && insideParens(inner, 0)?.length === inner.length - 2;
+                credit(wrapped ? inner.slice(1, -1) : inner);
+            }
+            else if (/!=/.test(guard.cond) && !/[|&]/.test(guard.cond))
+                credit(guard.cond.replace('!=', '=='));
+        }
+        return proven;
+    }
+    /**
+     * `StringBuilder`s that hold only safe text at `sinkLine`: every write to
+     * the builder before the sink is made of string literals and `credited`
+     * names. One write with anything else and the builder is not credited, so
+     * `sb.Append(validated); sb.Append(raw);` stays tainted.
+     *
+     * This is how a guard on a value reaches a sink that receives the builder
+     * the value was appended to (`if (parsed != null) { sb.Append(data); Compile(sb.ToString()); }`).
+     */
+    safeBuilders(credited, sinkLine) {
+        const scopeStart = this.methodAt(sinkLine)?.start_line ?? 1;
+        const onlySafe = (expr) => {
+            const idents = expr
+                .replace(/\$?@?"(?:[^"\\]|\\.)*"/g, ' ')
+                .replace(/'(?:[^'\\]|\\.)'/g, ' ')
+                .replace(/\.\s*[A-Za-z_]\w*\s*\(\s*\)/g, ' ') // x.ToString()
+                .match(/[A-Za-z_]\w*/g) ?? [];
+            return idents.every(id => credited.has(id));
+        };
+        const state = new Map(); // builder -> still safe
+        const declRe = new RegExp(`\\b(?:StringBuilder|var)\\s+(${IDENT})\\s*=\\s*new\\s+(?:System\\s*\\.\\s*Text\\s*\\.\\s*)?StringBuilder\\s*\\(`);
+        const writeRe = new RegExp(`^\\s*(${IDENT})\\s*\\.\\s*(?:Append|AppendLine|AppendFormat|Insert)\\s*\\(`);
+        for (const st of this.statements(scopeStart, sinkLine)) {
+            const decl = declRe.exec(st.text);
+            if (decl) {
+                const args = insideParens(st.text, decl.index + decl[0].length - 1) ?? '';
+                state.set(decl[1], onlySafe(args));
+                continue;
+            }
+            const write = writeRe.exec(st.text);
+            if (write && state.has(write[1])) {
+                const args = insideParens(st.text, write[0].length - 1);
+                if (args === null || !onlySafe(args))
+                    state.set(write[1], false);
+            }
+        }
+        return new Set([...state].filter(([, safe]) => safe).map(([name]) => name));
+    }
+    /**
+     * True when what leaves on `line` has been sanitized or validated for some
+     * sink type. Used for the untyped "tainted data reaches an external call"
+     * fallback, which has no sink type of its own to ask about.
+     */
+    creditedOnLine(line) {
+        const text = this.sinkText(line);
+        const types = new Set(CSHARP_SANITIZER_RES.map(r => r.type));
+        for (const t of INERT_WHEN_ALPHANUMERIC)
+            types.add(t);
+        types.add('ssrf');
+        for (const type of types) {
+            if (this.sanitizes(type, text))
+                return true;
+            const credited = new Set([...this.sanitizedVarsAt(type, line), ...this.guardedVarsAt(type, line)]);
+            for (const v of this.safeBuilders(credited, line))
+                credited.add(v);
+            for (const v of credited)
+                if (mentions(text, v))
+                    return true;
+        }
+        return this.fixedHostRequest(line);
+    }
+    // -------------------------------------------------------------------------
+    // SSRF: constant host
+    // -------------------------------------------------------------------------
+    /**
+     * True when the request on `sinkLine` goes to a constant host: the URL
+     * argument starts with a string literal holding the whole authority, as in
+     * `GetAsync("https://api.internal.example.com/?x=" + v)`. Input can then only
+     * extend the path or query. The literal must be the first operand of the
+     * argument, and must end the authority (`/`, `?` or `#` after the host), or
+     * `"https://api.example.com" + x` would let `x = ".evil.org"` move the host.
+     */
+    fixedHostRequest(sinkLine) {
+        const fixedLiteral = '\\$?@?"https?:\\/\\/[A-Za-z0-9.\\-]+(?::\\d+)?[\\/?#][^"]*"';
+        const text = this.lines[sinkLine - 1] ?? '';
+        const argStart = `\\(\\s*(?:new\\s+(?:System\\s*\\.\\s*)?Uri\\s*\\(\\s*)?`;
+        if (new RegExp(argStart + fixedLiteral).test(text))
+            return true;
+        // The URL was built into a variable first.
+        const scopeStart = this.methodAt(sinkLine)?.start_line ?? 1;
+        const fixed = new Set();
+        for (const st of this.statements(scopeStart, sinkLine)) {
+            const m = ASSIGN_RE.exec(st.text);
+            if (!m)
+                continue;
+            if (new RegExp('^(?:new\\s+(?:System\\s*\\.\\s*)?Uri\\s*\\(\\s*)?' + fixedLiteral).test(m[2].trim()))
+                fixed.add(m[1]);
+            else
+                fixed.delete(m[1]);
+        }
+        for (const v of fixed) {
+            if (new RegExp(argStart + escapeRegex(v) + '\\s*[,)]').test(text))
+                return true;
+        }
+        return false;
+    }
+}
+//# sourceMappingURL=csharp-sanitizer-credit.js.map

package/dist/analysis/passes/csharp-sanitizer-credit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"csharp-sanitizer-credit.js","sourceRoot":"","sources":["../../../src/analysis/passes/csharp-sanitizer-credit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,MAAM,yBAAyB,GACpC,6GAA6G,CAAC;AAEhH;;;GAGG;AACH,MAAM,0BAA0B,GAC9B,wIAAwI,CAAC;AAE3I,0EAA0E;AAC1E,4EAA4E;AAC5E,2EAA2E;AAC3E,MAAM,CAAC,MAAM,oBAAoB,GAAwC;IACvE,EAAE,EAAE,EAAE,8CAA8C,EAAE,IAAI,EAAE,KAAK,EAAE;IACnE,uEAAuE;IACvE,EAAE,EAAE,EAAE,sDAAsD,EAAE,IAAI,EAAE,KAAK,EAAE;IAC3E,EAAE,EAAE,EAAE,gCAAgC,EAAE,IAAI,EAAE,gBAAgB,EAAE;IAChE,4EAA4E;IAC5E,gEAAgE;IAChE,EAAE,EAAE,EAAE,sCAAsC,EAAE,IAAI,EAAE,iBAAiB,EAAE;IACvE,6EAA6E;IAC7E,oEAAoE;IACpE,8CAA8C;IAC9C,EAAE,EAAE,EAAE,yBAAyB,EAAE,IAAI,EAAE,gBAAgB,EAAE;IACzD,EAAE,EAAE,EAAE,yBAAyB,EAAE,IAAI,EAAE,iBAAiB,EAAE;IAC1D,EAAE,EAAE,EAAE,yBAAyB,EAAE,IAAI,EAAE,mBAAmB,EAAE;IAC5D,EAAE,EAAE,EAAE,yBAAyB,EAAE,IAAI,EAAE,eAAe,EAAE;IACxD,EAAE,EAAE,EAAE,yBAAyB,EAAE,IAAI,EAAE,MAAM,EAAE;IAC/C,EAAE,EAAE,EAAE,0BAA0B,EAAE,IAAI,EAAE,gBAAgB,EAAE;IAC1D,EAAE,EAAE,EAAE,0BAA0B,EAAE,IAAI,EAAE,iBAAiB,EAAE;IAC3D,EAAE,EAAE,EAAE,0BAA0B,EAAE,IAAI,EAAE,mBAAmB,EAAE;IAC7D,EAAE,EAAE,EAAE,0BAA0B,EAAE,IAAI,EAAE,eAAe,EAAE;IACzD,EAAE,EAAE,EAAE,0BAA0B,EAAE,IAAI,EAAE,MAAM,EAAE;CACjD,CAAC;AAEF;;;;GAIG;AACH,MAAM,uBAAuB,GAAwB,IAAI,GAAG,CAAC;IAC3D,gBAAgB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,eAAe;IACzE,MAAM,EAAE,KAAK,EAAE,gBAAgB,EAAE,gBAAgB;CAClD,CAAC,CAAC;AAQH,MAAM,KAAK,GAAG,eAAe,CAAC;AAC9B,MAAM,SAAS,GAAG,IAAI,MAAM,CAAC,mDAAmD,KAAK,6BAA6B,CAAC,CAAC;AACpH,MAAM,iBAAiB,GAAG,sBAAsB,CAAC;AAEjD,SAAS,WAAW,CAAC,CAAS;IAC5B,OAAO,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,IAAY;IAC1C,OAAO,IAAI,MAAM,CAAC,aAAa,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1E,CAAC;AAED,8EAA8E;AAC9E,SAAS,YAAY,CAAC,IAAY,EAAE,IAAY;IAC9C,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG;YAAE,KAAK,EAAE,CAAC;aACxB,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,EAAE,KAAK,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,+CAA+C;AAC/C,SAAS,SAAS,CAAC,IAAY;IAC7B,MAAM,CAAC,GAAG,mCAAmC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzD,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IAC7B,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACtC,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/B,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;AAChF,CAAC;AAED,MAAM,QAAQ,GAAG,oDAAoD,CAAC;AAItE,MAAM,OAAO,YAAY;IAKoB,OAAO;IAJjC,KAAK,CAAW;IAChB,WAAW,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC7C,gBAAgB,GAAG,IAAI,GAAG,EAAkC,CAAC;IAE9E,YAAY,IAAY,EAAmB,OAAqC;uBAArC,OAAO;QAChD,yEAAyE;QACzE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;IAED,uDAAuD;IAC/C,QAAQ,CAAC,IAAY;QAC3B,IAAI,IAAI,GAAyB,IAAI,CAAC;QACtC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC7B,IAAI,IAAI,GAAG,CAAC,CAAC,UAAU,IAAI,IAAI,GAAG,CAAC,CAAC,QAAQ;gBAAE,SAAS;YACvD,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,UAAU,GAAG,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,UAAU;gBAAE,IAAI,GAAG,CAAC,CAAC;QACrF,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;OAGG;IACK,UAAU,CAAC,IAAY,EAAE,EAAU;QACzC,MAAM,GAAG,GAA0C,EAAE,CAAC;QACtD,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5C,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;YAC/C,MAAM,KAAK,GAAG,CAAC,CAAC;YAChB,IAAI,+CAA+C,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChG,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,GAAG,EAAE,EAAE,CAAC;oBACpC,CAAC,EAAE,CAAC;oBACJ,IAAI,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;oBAC/C,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;wBAAE,MAAM;gBAC7D,CAAC;YACH,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAClC,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,yDAAyD;IACjD,gBAAgB,CAAC,IAAY,EAAE,IAAY;QACjD,KAAK,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,oBAAoB,EAAE,CAAC;YACnD,IAAI,CAAC,KAAK,IAAI,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC;QAC/C,CAAC;QACD,IAAI,IAAI,KAAK,gBAAgB,EAAE,CAAC;YAC9B,sEAAsE;YACtE,sEAAsE;YACtE,yDAAyD;YACzD,IAAI,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC;QAC1G,CAAC;QACD,IAAI,IAAI,KAAK,gBAAgB,EAAE,CAAC;YAC9B,qEAAqE;YACrE,oCAAoC;YACpC,IAAI,uEAAuE,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC;QACtG,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;OAIG;IACK,OAAO,CAAC,IAAY;QAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;QAC9B,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAChC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;YACpC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YACnC,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;gBAC3B,IAAI,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;oBAAE,OAAO,IAAI,CAAC;gBACrD,MAAM,CAAC,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;gBACjD,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAClF,CAAC,CAAC,CAAC;YACH,IAAI,EAAE;gBAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,gFAAgF;IACxE,WAAW,CAAC,CAAgB;QAClC,MAAM,GAAG,GAA0C,EAAE,CAAC;QACtD,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,EAAE,CAAC;YAC/D,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAClG,IAAI,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC,UAAU,EAAE,CAAC;gBAC7B,MAAM,IAAI,GAAG,sBAAsB,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;gBAClD,IAAI,IAAI;oBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,gFAAgF;IAChF,SAAS,CAAC,IAAY,EAAE,IAAY;QAClC,IAAI,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACnD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,IAAI,IAAI,MAAM,CAAC,cAAc,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC;QACnF,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,eAAe,CAAC,IAAY,EAAE,IAAY,EAAE,EAAU,EAAE,WAAoB;QAClF,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;QACpC,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;YAC3C,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;YAClC,IAAI,CAAC,CAAC;gBAAE,SAAS;YACjB,MAAM,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;YACvB,MAAM,QAAQ,GACZ,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;gBAC5E,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;YAC7C,IAAI,QAAQ;gBAAE,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;;gBAC5B,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;;;OAOG;IACH,eAAe,CAAC,IAAY,EAAE,QAAgB;QAC5C,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,UAAU,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC9F,CAAC;IAED;;;;OAIG;IACH,QAAQ,CAAC,IAAY;QACnB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAChC,OAAO,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9D,CAAC;IAED,4EAA4E;IAC5E,SAAS;IACT,4EAA4E;IAE5E,8EAA8E;IACtE,aAAa,CAAC,IAAY;QAChC,MAAM,GAAG,GAAa,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,IAAI,MAAM,CACzB,yCAAyC,KAAK,0FAA0F,EAAE,GAAG,CAAC,CAAC;QACjJ,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACxD,MAAM,WAAW,GAAG,IAAI,MAAM,CAAC,IAAI,KAAK,kFAAkF,EAAE,GAAG,CAAC,CAAC;QACjI,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,KAAK,8BAA8B,KAAK,SAAS,EAAE,GAAG,CAAC,CAAC;QACtF,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YACtD,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;YAC3F,MAAM,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5B,MAAM,OAAO,GAAG,IAAI;iBACjB,OAAO,CAAC,IAAI,MAAM,CAAC,6DAA6D,CAAC,SAAS,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;iBACrG,OAAO,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,oBAAoB,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;iBACtD,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YAC3B,IAAI,OAAO,KAAK,EAAE;gBAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACrC,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,6EAA6E;IACrE,WAAW,CAAC,IAAY,EAAE,UAA+B;QAC/D,MAAM,GAAG,GAAa,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,IAAI,MAAM,CACzB,6GAA6G,KAAK,QAAQ,EAAE,GAAG,CAAC,CAAC;QACnI,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACxD,KAAK,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,UAAU,EAAE,CAAC;YACxC,IAAI,IAAI,MAAM,CAAC,aAAa,WAAW,CAAC,MAAM,CAAC,uCAAuC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,oFAAoF;IAC5E,QAAQ,CAAC,IAAY,EAAE,MAA2B;QACxD,MAAM,GAAG,GAAa,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAW,EAAE;YACzC,MAAM,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACpD,OAAO,CACL,IAAI,MAAM,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;gBAChD,IAAI,MAAM,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;gBAChD,IAAI,MAAM,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;gBACrD,IAAI,MAAM,CAAC,6BAA6B,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;gBAC/D,IAAI,MAAM,CAAC,+BAA+B,CAAC,oBAAoB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAC5E,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,+CAA+C,KAAK,4BAA4B,EAAE,GAAG,CAAC,CAAC;QACjH,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACtC,IAAI,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACrC,CAAC;QACD,KAAK,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,MAAM,EAAE,CAAC;YACrC,IAAI,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnE,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;;;OAIG;IACK,YAAY,CAAC,IAAe;QAClC,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;QACtC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACrC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC7B,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YACrD,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YAC/D,MAAM,MAAM,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YAClE,IAAI,CAAC,MAAM;gBAAE,SAAS;YACtB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5E,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;YACpC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YACnC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,GAAG,EAAE,EAAE,IAAI,GAAG,EAAE,EAAE,KAAK,CAAC,CAAC;YACjF,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YACrD,IAAI,GAAG,KAAK,CAAC,CAAC;gBAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACvC,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAEO,QAAQ,CACd,IAAe,EACf,IAAY,EACZ,UAA+B,EAC/B,MAA2B,EAC3B,WAAoB;QAEpB,MAAM,GAAG,GACP,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC;YAC/C,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,UAAU,CAAC;gBACzD,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAChC,IAAI,WAAW,EAAE,CAAC;YAChB,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;gBAClD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,cAAc,WAAW,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;oBAC5F,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;oBACnF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC;oBAC9B,IAAI,GAAG,IAAI,IAAI,MAAM,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;wBAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC/D,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,aAAa,CAAC,IAAY,EAAE,QAAgB;QAC1C,MAAM,KAAK,GAAgB,EAAE,CAAC;QAC9B,IAAI,uBAAuB,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QAC1E,IAAI,IAAI,KAAK,MAAM;YAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;QACjC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,MAAM,CAAC;QAEtC,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,UAAU,IAAI,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC,CAAK,kBAAkB;QAChE,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC,CAAC,mBAAmB;QACjE,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC,CAAK,sBAAsB;QACpE,MAAM,aAAa,GAAG,IAAI,MAAM,CAC9B,IAAI,KAAK,gIAAgI,KAAK,WAAW,EAAE,GAAG,CAAC,CAAC;QAClK,KAAK,MAAM,EAAE,IAAI,MAAM,EAAE,CAAC;YACxB,uEAAuE;YACvE,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC;gBAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5E,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;YAClC,IAAI,CAAC,CAAC;gBAAE,SAAS;YACjB,MAAM,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;YACvB,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,uHAAuH,KAAK,WAAW,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC5K,IAAI,KAAK;gBAAE,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YACzC,MAAM,IAAI,GAAG,IAAI,MAAM,CAAC,gDAAgD,KAAK,0BAA0B,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;YAC1H,IAAI,IAAI;gBAAE,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACnC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACvB,CAAC;QAED,MAAM,MAAM,GAAG,CAAC,IAAY,EAAQ,EAAE;YACpC,4DAA4D;YAC5D,MAAM,QAAQ,GAAG,IAAI,MAAM,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YACvF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC;oBAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACzF,CAAC;QACH,CAAC,CAAC;QAEF,uDAAuD;QACvD,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACtD,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAEvD,gDAAgD;QAChD,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,IAAI,CAAC,GAAG,QAAQ,GAAG,CAAC,EAAE,CAAC,IAAI,UAAU,EAAE,CAAC,EAAE,EAAE,CAAC;YAChD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YACrC,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC1C,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG;oBAAE,KAAK,EAAE,CAAC;qBACxB,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;oBACzB,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;wBAAC,KAAK,EAAE,CAAC;wBAAC,SAAS;oBAAC,CAAC;oBACrC,IAAI,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;oBAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,UAAU,EAAE,CAAC,EAAE;wBAAE,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;oBACnG,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;oBACpC,IAAI,SAAS,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;wBAAE,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;gBAC3E,CAAC;YACH,CAAC;QACH,CAAC;QAED,mEAAmE;QACnE,KAAK,IAAI,CAAC,GAAG,UAAU,EAAE,CAAC,GAAG,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3C,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACjD,IAAI,CAAC,KAAK;gBAAE,SAAS;YACrB,IAAI,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;YACtB,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,KAAK,EAAE,IAAI,CAAC,GAAG,QAAQ,EAAE,CAAC,EAAE;gBAAE,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAC9F,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,SAAS;YACnC,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/B,mFAAmF;gBACnF,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBACzC,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;gBAC7F,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YAC/C,CAAC;iBACI,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QACrG,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;;;;OAQG;IACH,YAAY,CAAC,QAA6B,EAAE,QAAgB;QAC1D,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,UAAU,IAAI,CAAC,CAAC;QAC5D,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAW,EAAE;YACzC,MAAM,MAAM,GAAG,IAAI;iBAChB,OAAO,CAAC,yBAAyB,EAAE,GAAG,CAAC;iBACvC,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC;iBACjC,OAAO,CAAC,8BAA8B,EAAE,GAAG,CAAC,CAAG,eAAe;iBAC9D,KAAK,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;YAChC,OAAO,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9C,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,IAAI,GAAG,EAAmB,CAAC,CAAG,wBAAwB;QACpE,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,gCAAgC,KAAK,4EAA4E,CAAC,CAAC;QAC7I,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,SAAS,KAAK,8DAA8D,CAAC,CAAC;QACzG,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,CAAC;YACvD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;YAClC,IAAI,IAAI,EAAE,CAAC;gBACT,MAAM,IAAI,GAAG,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC1E,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;gBACnC,SAAS;YACX,CAAC;YACD,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;YACpC,IAAI,KAAK,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjC,MAAM,IAAI,GAAG,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;gBACxD,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;oBAAE,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;QACD,OAAO,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9E,CAAC;IAED;;;;OAIG;IACH,cAAc,CAAC,IAAY;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7D,KAAK,MAAM,CAAC,IAAI,uBAAuB;YAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACtD,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAClB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC5C,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;YACnG,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC;gBAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACnE,KAAK,MAAM,CAAC,IAAI,QAAQ;gBAAE,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;oBAAE,OAAO,IAAI,CAAC;QAC/D,CAAC;QACD,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;IAED,4EAA4E;IAC5E,sBAAsB;IACtB,4EAA4E;IAE5E;;;;;;;OAOG;IACH,gBAAgB,CAAC,QAAgB;QAC/B,MAAM,YAAY,GAAG,6DAA6D,CAAC;QACnF,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5C,MAAM,QAAQ,GAAG,yDAAyD,CAAC;QAC3E,IAAI,IAAI,MAAM,CAAC,QAAQ,GAAG,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAChE,2CAA2C;QAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,UAAU,IAAI,CAAC,CAAC;QAC5D,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;QAChC,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,CAAC;YACvD,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;YAClC,IAAI,CAAC,CAAC;gBAAE,SAAS;YACjB,IAAI,IAAI,MAAM,CAAC,mDAAmD,GAAG,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;;gBACjH,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1B,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,IAAI,IAAI,MAAM,CAAC,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC;QACjF,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}

package/dist/analysis/passes/interprocedural-pass.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"interprocedural-pass.d.ts","sourceRoot":"","sources":["../../../src/analysis/passes/interprocedural-pass.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,mBAAmB,EAAwB,MAAM,sBAAsB,CAAC;AAChH,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAS9E,MAAM,WAAW,yBAAyB;IACxC,8DAA8D;IAC9D,eAAe,EAAE,SAAS,EAAE,CAAC;IAC7B,8DAA8D;IAC9D,eAAe,EAAE,aAAa,EAAE,CAAC;IACjC,6DAA6D;IAC7D,eAAe,CAAC,EAAE,mBAAmB,CAAC;CACvC;AAED;;;;;GAKG;AACH,MAAM,WAAW,sBAAsB;IACrC;;;;;;;;;;OAUG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAChC;AAED,qBAAa,mBAAoB,YAAW,YAAY,CAAC,yBAAyB,CAAC;IACjF,QAAQ,CAAC,IAAI,qBAAqB;IAClC,QAAQ,CAAC,QAAQ,EAAG,UAAU,CAAU;IAExC,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAU;IAE/C,YAAY,OAAO,CAAC,EAAE,sBAAsB,EAE3C;IAED,GAAG,CAAC,GAAG,EAAE,WAAW,GAAG,yBAAyB,CA+Q/C;CACF"}
+{"version":3,"file":"interprocedural-pass.d.ts","sourceRoot":"","sources":["../../../src/analysis/passes/interprocedural-pass.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,mBAAmB,EAAwB,MAAM,sBAAsB,CAAC;AAChH,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAU9E,MAAM,WAAW,yBAAyB;IACxC,8DAA8D;IAC9D,eAAe,EAAE,SAAS,EAAE,CAAC;IAC7B,8DAA8D;IAC9D,eAAe,EAAE,aAAa,EAAE,CAAC;IACjC,6DAA6D;IAC7D,eAAe,CAAC,EAAE,mBAAmB,CAAC;CACvC;AAED;;;;;GAKG;AACH,MAAM,WAAW,sBAAsB;IACrC;;;;;;;;;;OAUG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAChC;AAED,qBAAa,mBAAoB,YAAW,YAAY,CAAC,yBAAyB,CAAC;IACjF,QAAQ,CAAC,IAAI,qBAAqB;IAClC,QAAQ,CAAC,QAAQ,EAAG,UAAU,CAAU;IAExC,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAU;IAE/C,YAAY,OAAO,CAAC,EAAE,sBAAsB,EAE3C;IAED,GAAG,CAAC,GAAG,EAAE,WAAW,GAAG,yBAAyB,CAyS/C;CACF"}