circle-ir 4.15.0 → 4.16.1

package/dist/analysis/rust-literal-guard.js

@@ -0,0 +1,422 @@
+import { firstRebind } from './rust-literal-guard-rebind.js';
+const CREDITED_TYPES = [
+    'command_injection', 'path_traversal', 'sql_injection', 'ssrf', 'open_redirect',
+    'xss', 'code_injection', 'ldap_injection', 'xpath_injection', 'log_injection',
+    'trust_boundary', 'external_taint_escape',
+];
+/** `code` with comments blanked and string / char literal bodies replaced by spaces (same length). */
+function maskRust(code) {
+    const out = code.split('');
+    const n = code.length;
+    const blank = (from, to) => {
+        for (let k = from; k < to; k++)
+            if (out[k] !== '\n')
+                out[k] = ' ';
+    };
+    let i = 0;
+    while (i < n) {
+        const c = code[i];
+        if (c === '/' && code[i + 1] === '/') {
+            let j = i;
+            while (j < n && code[j] !== '\n')
+                j++;
+            blank(i, j);
+            i = j;
+        }
+        else if (c === '/' && code[i + 1] === '*') {
+            let j = i + 2;
+            let depth = 1;
+            while (j < n && depth > 0) {
+                if (code[j] === '/' && code[j + 1] === '*') {
+                    depth++;
+                    j += 2;
+                }
+                else if (code[j] === '*' && code[j + 1] === '/') {
+                    depth--;
+                    j += 2;
+                }
+                else
+                    j++;
+            }
+            blank(i, j);
+            i = j;
+        }
+        else if (c === 'r' && /^r#*"/.test(code.slice(i, i + 12)) && !/[\w]/.test(code[i - 1] ?? ' ')) {
+            const hashes = /^r(#*)"/.exec(code.slice(i, i + 12))[1].length;
+            const close = '"' + '#'.repeat(hashes);
+            const end = code.indexOf(close, i + 2 + hashes);
+            const j = end === -1 ? n : end + close.length;
+            blank(i + 2 + hashes, Math.max(i + 2 + hashes, j - close.length));
+            i = j;
+        }
+        else if (c === '"') {
+            let j = i + 1;
+            while (j < n && code[j] !== '"')
+                j += code[j] === '\\' ? 2 : 1;
+            blank(i + 1, j);
+            i = j + 1;
+        }
+        else if (c === "'") {
+            // A char literal ('x', '\n', '\u{..}'), not a lifetime ('a).
+            const m = /^'(?:\\(?:u\{[0-9a-fA-F]+\}|x[0-9a-fA-F]{2}|.)|[^\\'])'/.exec(code.slice(i, i + 14));
+            if (m) {
+                blank(i + 1, i + m[0].length - 1);
+                i += m[0].length;
+            }
+            else
+                i++;
+        }
+        else
+            i++;
+    }
+    return out.join('');
+}
+/** Index of the `}` matching the `{` at `open` in `masked`, or -1. */
+function matchBrace(masked, open) {
+    let depth = 0;
+    for (let i = open; i < masked.length; i++) {
+        if (masked[i] === '{')
+            depth++;
+        else if (masked[i] === '}' && --depth === 0)
+            return i;
+    }
+    return -1;
+}
+const STR = String.raw `"(?:[^"\\]|\\.)*"`;
+const VAR = String.raw `([A-Za-z_]\w*)(?:\s*\.\s*as_str\s*\(\s*\))?`;
+/** The guarded variable when `cond` is a literal allow-list rejection condition, else null. */
+function guardedVariable(cond) {
+    const c = cond.trim();
+    let m;
+    // `!matches!(x, "a" | "b")`
+    if ((m = new RegExp(String.raw `^!\s*matches!\s*\(\s*${VAR}\s*,\s*((?:\|\s*)?${STR}(?:\s*\|\s*${STR})*)\s*,?\s*\)$`).exec(c))) {
+        return m[1];
+    }
+    // `!["a", "b"].contains(&x)`
+    if ((m = new RegExp(String.raw `^!\s*\[\s*${STR}(?:\s*,\s*${STR})*\s*,?\s*\]\s*\.\s*contains\s*\(\s*&\s*${VAR}\s*\)$`).exec(c))) {
+        return m[1];
+    }
+    // `!(x == "a" || x == "b")`
+    if ((m = /^!\s*\(([\s\S]*)\)$/.exec(c))) {
+        return chain(m[1], '||', '==');
+    }
+    // `x != "a" && x != "b"`
+    return chain(c, '&&', '!=');
+}
+/** Terms joined by `joiner`, each `V op "lit"` or `"lit" op V` with one shared V. */
+function chain(text, joiner, op) {
+    const other = joiner === '||' ? '&&' : '||';
+    if (text.includes(other) || /[()]/.test(text.replace(/\.\s*as_str\s*\(\s*\)/g, '').replace(new RegExp(STR, 'g'), '""'))) {
+        return null;
+    }
+    let name = null;
+    const parts = text.split(joiner);
+    for (const part of parts) {
+        const t = part.trim();
+        const m = new RegExp(String.raw `^(?:${VAR}\s*${op}\s*${STR}|${STR}\s*${op}\s*${VAR})$`).exec(t);
+        if (!m)
+            return null;
+        const v = m[1] ?? m[2];
+        if (name !== null && v !== name)
+            return null;
+        name = v;
+    }
+    return name;
+}
+const KEYWORDS = new Set([
+    'let', 'mut', 'ref', 'as', 'if', 'else', 'return', 'true', 'false', 'self', 'move', 'in', 'for',
+    'while', 'loop', 'match', 'fn', 'pub', 'use', 'mod', 'const', 'static', 'unsafe', 'where', 'dyn',
+    'impl', 'break', 'continue', 'crate', 'super', 'async', 'await', 'box', 'type', 'struct', 'enum',
+    'str', 'u8', 'u16', 'u32', 'u64', 'usize', 'i8', 'i16', 'i32', 'i64', 'isize', 'bool', 'char', 'f32', 'f64',
+]);
+/**
+ * True when the (masked) `line` reads a value other than `name`: another
+ * local, a lower-case free or module-qualified call (`std::env::args()`), or
+ * an inline format argument (`{other}`). Method names, associated functions
+ * of a type (`Command::new`), macros, type names and closure parameters are
+ * not values.
+ */
+function readsOtherValue(original, masked, name) {
+    for (const m of original.matchAll(new RegExp(STR, 'g'))) {
+        for (const f of m[0].matchAll(/(?<!\{)\{([A-Za-z_]\w*)(?:[:}])/g))
+            if (f[1] !== name)
+                return true;
+    }
+    const closureParams = new Set();
+    for (const m of masked.matchAll(/\|\s*([\w\s,&:()]*?)\s*\|/g)) {
+        for (const p of m[1].matchAll(/[A-Za-z_]\w*/g))
+            closureParams.add(p[0]);
+    }
+    const re = /[A-Za-z_]\w*/g;
+    let m;
+    while ((m = re.exec(masked)) !== null) {
+        const id = m[0];
+        const before = masked.slice(0, m.index);
+        const after = masked.slice(m.index + id.length);
+        if (id === name || KEYWORDS.has(id) || closureParams.has(id))
+            continue;
+        if (/\.\s*$/.test(before))
+            continue; // method or field
+        if (/^\s*!/.test(after) && !/^\s*!=/.test(after))
+            continue; // macro
+        if (/[A-Z]/.test(id[0]))
+            continue; // type, variant, constant
+        if (/(?:\blet\s+(?:mut\s+)?)$/.test(before))
+            continue; // the binding being introduced
+        if (/::\s*$/.test(before))
+            continue; // path tail (`io::stdin` handled by its head)
+        return true; // other local, free call, module path
+    }
+    return false;
+}
+/**
+ * `&mut` parameter only: the bare name passed as a call argument can be
+ * mutated by the callee (checked per line).
+ */
+function passesMutParam(line, n) {
+    if (!new RegExp(String.raw `(?<![\w.])(?:[A-Za-z_]\w*(?:\s*::\s*[A-Za-z_]\w*)*)\s*\((?:[^)]*,\s*)?${n}\b`).test(line))
+        return false;
+    // Exclude method calls on name itself (`name.foo(`), handled by firstRebind.
+    return !new RegExp(String.raw `\b${n}\s*\.\s*\w+\s*\(`).test(line) || new RegExp(String.raw `(?<![\w.])\w+\s*\(\s*${n}\b`).test(line);
+}
+export function findRustLiteralEqualityGuardSanitizers(code) {
+    const masked = maskRust(code);
+    const origLines = code.split('\n');
+    const maskedLines = masked.split('\n');
+    const lineStarts = [];
+    for (let i = 0, off = 0; i < origLines.length; i++) {
+        lineStarts.push(off);
+        off += origLines[i].length + 1;
+    }
+    const lineOf = (idx) => {
+        let lo = 0, hi = lineStarts.length - 1;
+        while (lo < hi) {
+            const mid = (lo + hi + 1) >> 1;
+            if (lineStarts[mid] <= idx)
+                lo = mid;
+            else
+                hi = mid - 1;
+        }
+        return lo; // 0-based
+    };
+    const out = [];
+    for (const ifm of masked.matchAll(/\bif\b/g)) {
+        const at = ifm.index;
+        if (/\belse\s*$/.test(masked.slice(Math.max(0, at - 12), at)))
+            continue;
+        if (/\blet\b/.test(masked.slice(at + 2, at + 8)))
+            continue; // `if let`
+        // Condition: up to the `{` that opens the block, at bracket depth 0.
+        let depth = 0;
+        let open = -1;
+        for (let i = at + 2; i < masked.length; i++) {
+            const ch = masked[i];
+            if (ch === '(' || ch === '[')
+                depth++;
+            else if (ch === ')' || ch === ']')
+                depth--;
+            else if (ch === '{' && depth === 0) {
+                open = i;
+                break;
+            }
+            else if (ch === ';' || ch === '}')
+                break;
+        }
+        if (open < 0)
+            continue;
+        const name = guardedVariable(code.slice(at + 2, open));
+        if (name === null)
+            continue;
+        const close = matchBrace(masked, open);
+        if (close < 0)
+            continue;
+        if (/^\s*else\b/.test(masked.slice(close + 1, close + 12)))
+            continue;
+        // The block must reject at its own top level (not inside an inner branch).
+        // Strip nested braces and braceless closure bodies (`|…| expr`) so a
+        // `return` inside a closure does not count as the guard rejecting.
+        const body = masked.slice(open + 1, close).split('');
+        for (let i = 0, d = 0; i < body.length; i++) {
+            if (body[i] === '{') {
+                d++;
+                body[i] = ' ';
+            }
+            else if (body[i] === '}') {
+                d--;
+                body[i] = ' ';
+            }
+            else if (d > 0 && body[i] !== '\n')
+                body[i] = ' ';
+        }
+        let bodyText = body.join('');
+        bodyText = bodyText.replace(/\|\s*[\w\s,&:()]*?\s*\|\s*[^;{}]*/g, ' ');
+        if (!/(?<![\w.#])(?:return\b|panic\s*!|unreachable\s*!|bail\s*!|(?:std\s*::\s*)?process\s*::\s*exit\s*\()/.test(bodyText))
+            continue;
+        // Credit region: after the guard block to the end of the enclosing block.
+        let end = masked.length;
+        for (let i = close + 1, d = 0; i < masked.length; i++) {
+            if (masked[i] === '{')
+                d++;
+            else if (masked[i] === '}' && --d < 0) {
+                end = i;
+                break;
+            }
+        }
+        // Is the guarded binding a `&mut` parameter of the enclosing function?
+        let mutParam = false;
+        {
+            const before = masked.slice(0, at);
+            let fnOpen = -1;
+            for (const m of before.matchAll(/\bfn\s+\w+\s*(?:<[^>]*>)?\s*\(/g))
+                fnOpen = m.index + m[0].length - 1;
+            if (fnOpen >= 0) {
+                let depth = 1, fnClose = -1;
+                for (let i = fnOpen + 1; i < at; i++) {
+                    if (masked[i] === '(')
+                        depth++;
+                    else if (masked[i] === ')' && --depth === 0) {
+                        fnClose = i;
+                        break;
+                    }
+                }
+                if (fnClose > fnOpen) {
+                    const params = masked.slice(fnOpen + 1, fnClose);
+                    mutParam = new RegExp(String.raw `\b${name}\s*:\s*&(?:\s*'\w+)?\s*mut\b`).test(params);
+                }
+            }
+        }
+        // Could the binding be `mut`? Any `mut name` / `name: &mut` before the
+        // guard counts (wider than needed, which only ends the credit sooner).
+        const mutBinding = mutParam || new RegExp(String.raw `\bmut\s+${name}\b|\b${name}\s*:\s*&(?:\s*'\w+)?\s*mut\b`).test(masked.slice(0, at));
+        // Whole lines after the guard's closing line, up to the line before the
+        // enclosing block's closing brace (or the end of the file).
+        const firstLine = lineOf(close) + 1;
+        const lastLine = end === masked.length ? origLines.length - 1 : lineOf(end) - 1;
+        let stop = lastLine + 1;
+        // A rebind or mutation ends the credit (scanned over the whole region, so a
+        // pattern or parameter list wrapped over lines is seen in one piece);
+        // inside a later loop it ends at the loop.
+        let rebindLine = lastLine + 1;
+        const rb = firstRebind(masked, close + 1, end, name, { mutBinding });
+        if (rb >= 0)
+            rebindLine = lineOf(rb);
+        if (mutParam) {
+            for (let l = firstLine; l < rebindLine && l <= lastLine; l++) {
+                if (passesMutParam(maskedLines[l], name)) {
+                    rebindLine = l;
+                    break;
+                }
+            }
+        }
+        if (rebindLine <= lastLine) {
+            const l = rebindLine;
+            stop = l;
+            for (const lp of masked.slice(close + 1, end).matchAll(/\b(?:for|while|loop)\b[^{;]*\{/g)) {
+                const lpOpen = close + 1 + lp.index + lp[0].length - 1;
+                const lpClose = matchBrace(masked, lpOpen);
+                const lpLine = lineOf(lpOpen);
+                if (lpClose >= 0 && lineOf(lpClose) >= l && lpLine <= l)
+                    stop = Math.min(stop, lpLine);
+            }
+        }
+        const mention = new RegExp(String.raw `(?<![\w.])${name}\b`);
+        for (let l = firstLine; l < stop && l <= lastLine; l++) {
+            if (!mention.test(maskedLines[l]))
+                continue;
+            // Evaluate "reads another value" over the whole statement that contains
+            // this mention (up to a terminating `;` or the matching close of the
+            // enclosing call), not only the single line the name sits on.
+            // The line itself is checked too, so a second statement on the same
+            // line (`a(tool); b(other);`) also ends the credit for that line.
+            const stmt = statementSpan(code, masked, lineStarts[l], end);
+            if (readsOtherValue(stmt.orig, stmt.masked, name))
+                continue;
+            if (readsOtherValue(origLines[l], maskedLines[l], name))
+                continue;
+            out.push({
+                type: 'rust_literal_equality_guard',
+                method: 'guard',
+                line: l + 1,
+                sanitizes: CREDITED_TYPES,
+            });
+        }
+    }
+    return out;
+}
+/**
+ * Exact text of the statement that contains `lineStart` (absolute index),
+ * clipped to `endIdx`. Walks back to the previous `;` / `{` / `}` at depth 0
+ * and forward to a terminating `;` (or unmatched closer), so a multi-line
+ * `format!(…, tool, extra)` is considered as one statement without pulling in
+ * the enclosing function signature.
+ */
+function statementSpan(code, masked, lineStart, endIdx) {
+    // Walk back to the previous statement boundary at bracket depth 0.
+    let start = lineStart;
+    let depth = 0;
+    for (let i = lineStart - 1; i >= 0; i--) {
+        const ch = masked[i];
+        if (ch === ')' || ch === ']')
+            depth++;
+        else if (ch === '(' || ch === '[') {
+            if (depth === 0) {
+                start = i + 1;
+                break;
+            }
+            depth--;
+        }
+        else if (ch === '}') {
+            if (depth === 0) {
+                start = i + 1;
+                break;
+            }
+            depth++; // matching an earlier `{` when walking back through nested blocks
+        }
+        else if (ch === '{') {
+            if (depth === 0) {
+                start = i + 1;
+                break;
+            }
+            depth--;
+        }
+        else if (ch === ';' && depth === 0) {
+            start = i + 1;
+            break;
+        }
+        if (i === 0)
+            start = 0;
+    }
+    // Walk forward to terminating `;` at depth 0, or stop at `endIdx` / unmatched `}`.
+    depth = 0;
+    let stop = Math.min(endIdx, masked.length);
+    for (let i = start; i < stop; i++) {
+        const ch = masked[i];
+        if (ch === '(' || ch === '[')
+            depth++;
+        else if (ch === ')' || ch === ']') {
+            if (depth === 0) {
+                stop = i;
+                break;
+            }
+            depth--;
+        }
+        else if (ch === '{')
+            depth++;
+        else if (ch === '}') {
+            if (depth === 0) {
+                stop = i;
+                break;
+            }
+            depth--;
+        }
+        else if (ch === ';' && depth === 0) {
+            stop = i + 1;
+            break;
+        }
+    }
+    return {
+        orig: code.slice(start, stop),
+        masked: masked.slice(start, stop),
+    };
+}
+//# sourceMappingURL=rust-literal-guard.js.map

package/dist/analysis/rust-literal-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rust-literal-guard.js","sourceRoot":"","sources":["../../src/analysis/rust-literal-guard.ts"],"names":[],"mappings":"AA+BA,OAAO,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAE7D,MAAM,cAAc,GAAG;IACrB,mBAAmB,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,EAAE,eAAe;IAC/E,KAAK,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,eAAe;IAC7E,gBAAgB,EAAE,uBAAuB;CAC1C,CAAC;AAEF,sGAAsG;AACtG,SAAS,QAAQ,CAAC,IAAY;IAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC3B,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;IACtB,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,EAAU,EAAE,EAAE;QACzC,KAAK,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE;YAAE,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;gBAAE,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC;IACpE,CAAC,CAAC;IACF,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACb,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACrC,IAAI,CAAC,GAAG,CAAC,CAAC;YACV,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI;gBAAE,CAAC,EAAE,CAAC;YACtC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACZ,CAAC,GAAG,CAAC,CAAC;QACR,CAAC;aAAM,IAAI,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YAC5C,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;gBAC1B,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;oBAAC,KAAK,EAAE,CAAC;oBAAC,CAAC,IAAI,CAAC,CAAC;gBAAC,CAAC;qBAC3D,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;oBAAC,KAAK,EAAE,CAAC;oBAAC,CAAC,IAAI,CAAC,CAAC;gBAAC,CAAC;;oBAChE,CAAC,EAAE,CAAC;YACX,CAAC;YACD,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACZ,CAAC,GAAG,CAAC,CAAC;QACR,CAAC;aAAM,IAAI,CAAC,KAAK,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YAChG,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YAChE,MAAM,KAAK,GAAG,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACvC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC;YAChD,MAAM,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC;YAC9C,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;YAClE,CAAC,GAAG,CAAC,CAAC;QACR,CAAC;aAAM,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACrB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG;gBAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/D,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;YAChB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACZ,CAAC;aAAM,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACrB,6DAA6D;YAC7D,MAAM,CAAC,GAAG,yDAAyD,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YAChG,IAAI,CAAC,EAAE,CAAC;gBAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;gBAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YAAC,CAAC;;gBAAM,CAAC,EAAE,CAAC;QAC3E,CAAC;;YAAM,CAAC,EAAE,CAAC;IACb,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACtB,CAAC;AAED,sEAAsE;AACtE,SAAS,UAAU,CAAC,MAAc,EAAE,IAAY;IAC9C,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1C,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG;YAAE,KAAK,EAAE,CAAC;aAC1B,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,EAAE,KAAK,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,CAAC,CAAC,CAAC;AACZ,CAAC;AAED,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAA,mBAAmB,CAAC;AAC1C,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAA,6CAA6C,CAAC;AAEpE,+FAA+F;AAC/F,SAAS,eAAe,CAAC,IAAY;IACnC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IACtB,IAAI,CAAyB,CAAC;IAE9B,4BAA4B;IAC5B,IAAI,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,wBAAwB,GAAG,qBAAqB,GAAG,cAAc,GAAG,gBAAgB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7H,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IACd,CAAC;IACD,6BAA6B;IAC7B,IAAI,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,aAAa,GAAG,aAAa,GAAG,2CAA2C,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/H,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IACd,CAAC;IACD,4BAA4B;IAC5B,IAAI,CAAC,CAAC,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACxC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACjC,CAAC;IACD,yBAAyB;IACzB,OAAO,KAAK,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED,qFAAqF;AACrF,SAAS,KAAK,CAAC,IAAY,EAAE,MAAmB,EAAE,EAAe;IAC/D,MAAM,KAAK,GAAG,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5C,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,wBAAwB,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;QACxH,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,IAAI,GAAkB,IAAI,CAAC;IAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACtB,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,OAAO,GAAG,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChG,IAAI,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACpB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACvB,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAC7C,IAAI,GAAG,CAAC,CAAC;IACX,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC;IACvB,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK;IAC/F,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK;IAChG,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM;IAChG,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK;CAC5G,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,SAAS,eAAe,CAAC,QAAgB,EAAE,MAAc,EAAE,IAAY;IACrE,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;QACxD,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,kCAAkC,CAAC;YAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC;IACpG,CAAC;IACD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;IACxC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,4BAA4B,CAAC,EAAE,CAAC;QAC9D,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC;YAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,EAAE,GAAG,eAAe,CAAC;IAC3B,IAAI,CAAyB,CAAC;IAC9B,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACtC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAChB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC;QAChD,IAAI,EAAE,KAAK,IAAI,IAAI,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,SAAS;QACvE,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,SAAS,CAAuB,kBAAkB;QAC7E,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,SAAS,CAAC,QAAQ;QACpE,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAAE,SAAS,CAA0B,0BAA0B;QACtF,IAAI,0BAA0B,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,SAAS,CAAM,+BAA+B;QAC3F,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,SAAS,CAAwB,8CAA8C;QAC1G,OAAO,IAAI,CAAC,CAAgD,sCAAsC;IACpG,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,SAAS,cAAc,CAAC,IAAY,EAAE,CAAS;IAC7C,IAAI,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,yEAAyE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACnI,6EAA6E;IAC7E,OAAO,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,KAAK,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,wBAAwB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACtI,CAAC;AAED,MAAM,UAAU,sCAAsC,CAAC,IAAY;IACjE,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAAC,GAAG,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IAAC,CAAC;IAC7G,MAAM,MAAM,GAAG,CAAC,GAAW,EAAU,EAAE;QACrC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC;QACvC,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC;YACf,MAAM,GAAG,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;YAC/B,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG;gBAAE,EAAE,GAAG,GAAG,CAAC;;gBAAM,EAAE,GAAG,GAAG,GAAG,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO,EAAE,CAAC,CAAC,UAAU;IACvB,CAAC,CAAC;IAEF,MAAM,GAAG,GAAqB,EAAE,CAAC;IACjC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7C,MAAM,EAAE,GAAG,GAAG,CAAC,KAAM,CAAC;QACtB,IAAI,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YAAE,SAAS;QACxE,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;YAAE,SAAS,CAAC,WAAW;QACvE,qEAAqE;QACrE,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC;QACd,KAAK,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5C,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;YACrB,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG;gBAAE,KAAK,EAAE,CAAC;iBACjC,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG;gBAAE,KAAK,EAAE,CAAC;iBACtC,IAAI,EAAE,KAAK,GAAG,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBAAC,IAAI,GAAG,CAAC,CAAC;gBAAC,MAAM;YAAC,CAAC;iBACnD,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG;gBAAE,MAAM;QAC3C,CAAC;QACD,IAAI,IAAI,GAAG,CAAC;YAAE,SAAS;QACvB,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QACvD,IAAI,IAAI,KAAK,IAAI;YAAE,SAAS;QAC5B,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACvC,IAAI,KAAK,GAAG,CAAC;YAAE,SAAS;QACxB,IAAI,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,EAAE,CAAC,CAAC;YAAE,SAAS;QAErE,2EAA2E;QAC3E,qEAAqE;QACrE,mEAAmE;QACnE,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACrD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5C,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBAAC,CAAC,EAAE,CAAC;gBAAC,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC;YAAC,CAAC;iBACvC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBAAC,CAAC,EAAE,CAAC;gBAAC,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC;YAAC,CAAC;iBAC5C,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI;gBAAE,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC;QACpD,CAAC;QACD,IAAI,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC7B,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,oCAAoC,EAAE,GAAG,CAAC,CAAC;QACvE,IAAI,CAAC,qGAAqG,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,SAAS;QAEpI,0EAA0E;QAC1E,IAAI,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC;QACxB,KAAK,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtD,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG;gBAAE,CAAC,EAAE,CAAC;iBACtB,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAC,GAAG,GAAG,CAAC,CAAC;gBAAC,MAAM;YAAC,CAAC;QAC5D,CAAC;QACD,uEAAuE;QACvE,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,CAAC;YACC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACnC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC;YAChB,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,iCAAiC,CAAC;gBAAE,MAAM,GAAG,CAAC,CAAC,KAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;YACxG,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;gBAChB,IAAI,KAAK,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC;gBAC5B,KAAK,IAAI,CAAC,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;oBACrC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG;wBAAE,KAAK,EAAE,CAAC;yBAC1B,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,EAAE,KAAK,KAAK,CAAC,EAAE,CAAC;wBAAC,OAAO,GAAG,CAAC,CAAC;wBAAC,MAAM;oBAAC,CAAC;gBACtE,CAAC;gBACD,IAAI,OAAO,GAAG,MAAM,EAAE,CAAC;oBACrB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC;oBACjD,QAAQ,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,KAAK,IAAI,8BAA8B,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACxF,CAAC;YACH,CAAC;QACH,CAAC;QACD,uEAAuE;QACvE,uEAAuE;QACvE,MAAM,UAAU,GAAG,QAAQ,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,WAAW,IAAI,QAAQ,IAAI,8BAA8B,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACzI,wEAAwE;QACxE,4DAA4D;QAC5D,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,QAAQ,GAAG,GAAG,KAAK,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChF,IAAI,IAAI,GAAG,QAAQ,GAAG,CAAC,CAAC;QACxB,4EAA4E;QAC5E,sEAAsE;QACtE,2CAA2C;QAC3C,IAAI,UAAU,GAAG,QAAQ,GAAG,CAAC,CAAC;QAC9B,MAAM,EAAE,GAAG,WAAW,CAAC,MAAM,EAAE,KAAK,GAAG,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;QACrE,IAAI,EAAE,IAAI,CAAC;YAAE,UAAU,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;QACrC,IAAI,QAAQ,EAAE,CAAC;YACb,KAAK,IAAI,CAAC,GAAG,SAAS,EAAE,CAAC,GAAG,UAAU,IAAI,CAAC,IAAI,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC7D,IAAI,cAAc,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC;oBAAC,UAAU,GAAG,CAAC,CAAC;oBAAC,MAAM;gBAAC,CAAC;YACtE,CAAC;QACH,CAAC;QACD,IAAI,UAAU,IAAI,QAAQ,EAAE,CAAC;YAC3B,MAAM,CAAC,GAAG,UAAU,CAAC;YACrB,IAAI,GAAG,CAAC,CAAC;YACT,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,iCAAiC,CAAC,EAAE,CAAC;gBAC1F,MAAM,MAAM,GAAG,KAAK,GAAG,CAAC,GAAG,EAAE,CAAC,KAAM,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;gBACxD,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBAC3C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC9B,IAAI,OAAO,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,MAAM,IAAI,CAAC;oBAAE,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACzF,CAAC;QACH,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,aAAa,IAAI,IAAI,CAAC,CAAC;QAC5D,KAAK,IAAI,CAAC,GAAG,SAAS,EAAE,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC;YACvD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;gBAAE,SAAS;YAC5C,wEAAwE;YACxE,qEAAqE;YACrE,8DAA8D;YAC9D,oEAAoE;YACpE,kEAAkE;YAClE,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAC7D,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC;gBAAE,SAAS;YAC5D,IAAI,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC;gBAAE,SAAS;YAClE,GAAG,CAAC,IAAI,CAAC;gBACP,IAAI,EAAE,6BAA6B;gBACnC,MAAM,EAAE,OAAO;gBACf,IAAI,EAAE,CAAC,GAAG,CAAC;gBACX,SAAS,EAAE,cAA6C;aACzD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;GAMG;AACH,SAAS,aAAa,CACpB,IAAY,EACZ,MAAc,EACd,SAAiB,EACjB,MAAc;IAEd,mEAAmE;IACnE,IAAI,KAAK,GAAG,SAAS,CAAC;IACtB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,IAAI,CAAC,GAAG,SAAS,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACrB,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG;YAAE,KAAK,EAAE,CAAC;aACjC,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YAClC,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBAAC,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC;gBAAC,MAAM;YAAC,CAAC;YAC1C,KAAK,EAAE,CAAC;QACV,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACtB,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBAAC,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC;gBAAC,MAAM;YAAC,CAAC;YAC1C,KAAK,EAAE,CAAC,CAAC,kEAAkE;QAC7E,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACtB,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBAAC,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC;gBAAC,MAAM;YAAC,CAAC;YAC1C,KAAK,EAAE,CAAC;QACV,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;YACrC,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,MAAM;QACR,CAAC;QACD,IAAI,CAAC,KAAK,CAAC;YAAE,KAAK,GAAG,CAAC,CAAC;IACzB,CAAC;IACD,mFAAmF;IACnF,KAAK,GAAG,CAAC,CAAC;IACV,IAAI,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3C,KAAK,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACrB,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG;YAAE,KAAK,EAAE,CAAC;aACjC,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YAClC,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBAAC,IAAI,GAAG,CAAC,CAAC;gBAAC,MAAM;YAAC,CAAC;YACrC,KAAK,EAAE,CAAC;QACV,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG;YAAE,KAAK,EAAE,CAAC;aAC1B,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACpB,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBAAC,IAAI,GAAG,CAAC,CAAC;gBAAC,MAAM;YAAC,CAAC;YACrC,KAAK,EAAE,CAAC;QACV,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;YAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;YAAC,MAAM;QAAC,CAAC;IAChE,CAAC;IACD,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC;QAC7B,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC;KAClC,CAAC;AACJ,CAAC"}

package/dist/analysis/scalar-derivation.d.ts

@@ -22,4 +22,12 @@ export declare function isScalarDerivation(rhs: string, language: string): boole
  * by a whole-expression measure or test. Taint does not flow into these defs.
  */
 export declare function scalarDerivedDefIds(defs: readonly DFGDef[], code: string, language: string): Set<number>;
+/**
+ * DFG def ids of a Go local initialised by `make(<type>, <len>[, <cap>])` whose
+ * every size argument is an integer literal or a variable rejected above a
+ * constant earlier in the same function (`if n > K { return }`). The buffer
+ * holds zero values; its size is bounded, so the request text that chose the
+ * size does not reach a sink through it. An unbounded size is not credited.
+ */
+export declare function boundedMakeDefIds(defs: readonly DFGDef[], code: string, language: string): Set<number>;
 //# sourceMappingURL=scalar-derivation.d.ts.map

package/dist/analysis/scalar-derivation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scalar-derivation.d.ts","sourceRoot":"","sources":["../../src/analysis/scalar-derivation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAyGhD,wEAAwE;AACxE,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAkBzE;AAgBD;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAaxG"}
+{"version":3,"file":"scalar-derivation.d.ts","sourceRoot":"","sources":["../../src/analysis/scalar-derivation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAyGhD,wEAAwE;AACxE,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAkBzE;AAgBD;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAaxG;AA0ID;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAsBtG"}

package/dist/analysis/scalar-derivation.js

@@ -193,4 +193,176 @@ export function scalarDerivedDefIds(defs, code, language) {
     }
     return out;
 }
+/** An integer literal, optionally with `_` separators or a hex/binary/octal prefix. */
+const GO_INT_LITERAL = /^(?:0[xX][0-9a-fA-F_]+|0[bB][01_]+|0[oO]?[0-7_]+|[1-9][0-9_]*|0)$/;
+/** Braces in a Go line, with string, rune and raw-string literals blanked out. */
+function goBraceText(text) {
+    return text.replace(/"(?:[^"\\]|\\.)*"|'(?:[^'\\]|\\.)*'|`[^`]*`/g, '""');
+}
+/**
+ * Names `n` bounded by `if <... n > K | n >= K ...> { ...; return|panic|continue }`
+ * in `lines[from .. to)` where the guard still dominates line `to`. The condition
+ * may join the bound with `||` only: under `&&` the branch would not reject every
+ * large value. K is an integer literal or a name in `consts` (a same-file integer
+ * `const`, see `goIntConstNames`).
+ *
+ * A guard only holds while the block it sits in is open: once the brace depth
+ * falls below the guard's depth (the enclosing `if`, loop, closure or `else`
+ * branch closed), or a new `case`/`default` clause of the same switch starts,
+ * other paths reach `to` without passing the guard. A write to `n` after the
+ * guard (`n = …`, `n op= …`, `n++`, `n--`, or `&n` handed to a callee such as
+ * `fmt.Sscanf`) voids every bound on it.
+ */
+function goUpperBoundGuardedAt(lines, from, to, name, consts) {
+    const esc = name.replace(/[$]/g, '\\$');
+    const bound = new RegExp(`^\\(*\\s*${esc}\\s*>=?\\s*([\\w]+)\\s*\\)*$`);
+    const reassign = new RegExp(`(?:^|[\\s,;(])${esc}(?:\\s*,\\s*\\w+)*\\s*(?::=|=(?!=)|\\+=|-=|\\*=|/=|%=|&=|\\|=|\\^=|&\\^=|<<=|>>=)` +
+        `|(?<![\\w.])${esc}\\s*(?:\\+\\+|--)` +
+        `|(?<![&\\w])&\\s*${esc}\\b`);
+    // Depth (in braces) of each guard still in force, in source order.
+    let guards = [];
+    let depth = 0;
+    for (let i = from; i < to; i++) {
+        const text = lines[i].replace(/\s*\/\/.*$/, '').trim();
+        if (guards.length > 0 && reassign.test(text))
+            guards = [];
+        const ifm = /^if\s+(.+?)\s*\{$/.exec(text);
+        if (ifm && i + 1 < to) {
+            const cond = ifm[1];
+            if (!cond.includes('&&')) {
+                const parts = cond.split('||').map((p) => p.trim());
+                const hit = parts.some((p) => {
+                    const m = bound.exec(p);
+                    return m !== null && (GO_INT_LITERAL.test(m[1]) || consts.has(m[1]));
+                });
+                if (hit) {
+                    // The guard block must end in an exit before its closing brace.
+                    let inner = 1;
+                    let last = '';
+                    let j = i + 1;
+                    for (; j < to; j++) {
+                        const t = lines[j].replace(/\s*\/\/.*$/, '').trim();
+                        for (const ch of goBraceText(t))
+                            inner += ch === '{' ? 1 : ch === '}' ? -1 : 0;
+                        if (inner <= 0)
+                            break;
+                        if (t)
+                            last = t;
+                    }
+                    if (inner <= 0 && /^(?:return\b|panic\(|continue\b)/.test(last)) {
+                        // The block opened and closed on lines i..j; depth is unchanged.
+                        guards.push(depth);
+                        i = j;
+                        continue;
+                    }
+                }
+            }
+        }
+        if (guards.length > 0 && /^(?:case\b.*|default\s*):$/.test(text)) {
+            guards = guards.filter((d) => d < depth);
+        }
+        for (const ch of goBraceText(text)) {
+            if (ch === '{')
+                depth++;
+            else if (ch === '}') {
+                depth--;
+                if (guards.length > 0)
+                    guards = guards.filter((d) => d <= depth);
+            }
+        }
+    }
+    return guards.length > 0;
+}
+/**
+ * Names declared exactly once in the file, as a package- or function-level
+ * `const NAME [type] = <integer literal>` (alone or inside a `const ( … )` block),
+ * and never otherwise defined: no `:=` or `var` of the same name, no parameter,
+ * result or range variable of that name, no second `const` of it. A name that
+ * could be shadowed by a variable is not a constant bound.
+ */
+function goIntConstNames(lines) {
+    const decl = /^(?:const\s+)?([A-Za-z_]\w*)(?:\s+[\w.]+)?\s*=\s*([\w]+)\s*$/;
+    const found = new Map();
+    let inBlock = false;
+    const declLines = new Set();
+    for (let i = 0; i < lines.length; i++) {
+        const text = lines[i].replace(/\s*\/\/.*$/, '').trim();
+        if (inBlock) {
+            if (text === ')') {
+                inBlock = false;
+                continue;
+            }
+            const m = decl.exec(text);
+            if (m && GO_INT_LITERAL.test(m[2]) && !/^const\b/.test(text)) {
+                found.set(m[1], (found.get(m[1]) ?? 0) + 1);
+                declLines.add(i);
+            }
+            continue;
+        }
+        if (/^const\s*\($/.test(text)) {
+            inBlock = true;
+            continue;
+        }
+        if (/^const\s/.test(text)) {
+            const m = decl.exec(text);
+            if (m && GO_INT_LITERAL.test(m[2])) {
+                found.set(m[1], (found.get(m[1]) ?? 0) + 1);
+                declLines.add(i);
+            }
+        }
+    }
+    const out = new Set();
+    for (const [name, count] of found) {
+        if (count !== 1)
+            continue;
+        const esc = name.replace(/[$]/g, '\\$');
+        const other = new RegExp(`(?:^|[\\s,(])${esc}(?:\\s*,\\s*[\\w]+)*\\s*(?::=|=(?!=))` +
+            `|\\b(?:var|const|type|func)\\s+${esc}\\b` +
+            `|[(,]\\s*${esc}(?:\\s*,\\s*\\w+)*\\s+[\\w*\\[.]`);
+        const shadowed = lines.some((l, i) => {
+            if (declLines.has(i))
+                return false;
+            const t = l.replace(/\s*\/\/.*$/, '');
+            return new RegExp(`(?<![\\w.])${esc}(?![\\w])`).test(t) && other.test(t);
+        });
+        if (!shadowed)
+            out.add(name);
+    }
+    return out;
+}
+/**
+ * DFG def ids of a Go local initialised by `make(<type>, <len>[, <cap>])` whose
+ * every size argument is an integer literal or a variable rejected above a
+ * constant earlier in the same function (`if n > K { return }`). The buffer
+ * holds zero values; its size is bounded, so the request text that chose the
+ * size does not reach a sink through it. An unbounded size is not credited.
+ */
+export function boundedMakeDefIds(defs, code, language) {
+    const out = new Set();
+    if (language !== 'go')
+        return out;
+    const lines = code.split('\n');
+    const consts = goIntConstNames(lines);
+    for (const def of defs) {
+        if (def.kind !== 'local')
+            continue;
+        const text = lines[def.line - 1];
+        if (text === undefined)
+            continue;
+        const rhs = initializerOf(text, def.variable, 'go');
+        const mk = rhs === null ? null : /^make\(\s*(\[\][\w.*]+|map\[[^\]]+\][\w.*]+)\s*,\s*([^()]*?)\s*\)$/.exec(rhs);
+        if (!mk)
+            continue;
+        const sizes = mk[2].split(',').map((s) => s.trim());
+        if (sizes.length > 2 || sizes.some((s) => s === ''))
+            continue;
+        let fnStart = def.line - 1;
+        while (fnStart > 0 && !/^func\b/.test(lines[fnStart]))
+            fnStart--;
+        const ok = sizes.every((s) => GO_INT_LITERAL.test(s) || (/^[A-Za-z_]\w*$/.test(s) && goUpperBoundGuardedAt(lines, fnStart, def.line - 1, s, consts)));
+        if (ok)
+            out.add(def.id);
+    }
+    return out;
+}
 //# sourceMappingURL=scalar-derivation.js.map