Python: restrict LibraryLambdaMethod

yoff · yoff · commit 453ab9ca7b29 · 2023-12-14T10:27:15.000+01:00
diff --git a/python/ql/lib/semmle/python/dataflow/new/FlowSummary.qll b/python/ql/lib/semmle/python/dataflow/new/FlowSummary.qll
@@ -96,9 +96,7 @@ private module LibraryCallbackSummaries {
     LibraryLambdaMethod() { this = "<library method accepting a callback>" }
 
     final override CallCfgNode getACall() {
-      exists(ExtractedDataFlowCall call | result.getNode() = call.getNode() |
-        not exists(call.getCallable())
-      )
+      not exists(NormalCall call | result.getNode() = call.getNode())
     }
 
     final override ArgumentNode getACallback() { none() }

Original file line number	Diff line number	Diff line change
`@@ -96,9 +96,7 @@ private module LibraryCallbackSummaries {`
`96`	`96`	`LibraryLambdaMethod() { this = "<library method accepting a callback>" }`
`97`	`97`
`98`	`98`	`final override CallCfgNode getACall() {`
`99`		`- exists(ExtractedDataFlowCall call \| result.getNode() = call.getNode() \|`
`100`		`- not exists(call.getCallable())`
`101`		`- )`
	`99`	`+ not exists(NormalCall call \| result.getNode() = call.getNode())`
`102`	`100`	`}`
`103`	`101`
`104`	`102`	`final override ArgumentNode getACallback() { none() }`