codeql/python/ql/src/Variables/MonkeyPatched.qll at codeql-cli-2.27.1 · github/codeql · GitHub

25 lines (24 loc) · 843 Bytes

import python

private import LegacyPointsTo

predicate monkey_patched_builtin(string name) {

exists(AttrNode attr, SubscriptNode subscr, StringLiteral s |

subscr.isStore() and

subscr.getIndex().getNode() = s and

s.getText() = name and

subscr.getObject() = attr and

attr.getObject("__dict__").(ControlFlowNodeWithPointsTo).pointsTo(Module::builtinModule())

)

exists(CallNode call, ControlFlowNodeWithPointsTo bltn, StringLiteral s |

call.getArg(0) = bltn and

bltn.pointsTo(Module::builtinModule()) and

call.getArg(1).getNode() = s and

s.getText() = name and

call.getFunction().(ControlFlowNodeWithPointsTo).pointsTo(Value::named("setattr"))

)

exists(AttrNode attr |

attr.isStore() and

attr.getObject(name).(ControlFlowNodeWithPointsTo).pointsTo(Module::builtinModule())

)

}

Expand file tree