Add Client::Watch

egregius313 · egregius313 · commit 84131dd068aa · 2025-02-13T11:30:16.000-05:00
diff --git a/go/ql/lib/ext/go.mongodb.org.mongo-driver.mongo.model.yml b/go/ql/lib/ext/go.mongodb.org.mongo-driver.mongo.model.yml
@@ -3,6 +3,7 @@ extensions:
       pack: codeql/go-all
       extensible: sourceModel
     data:
+      - ["go.mongodb.org/mongo-driver/mongo", "Client", True, "Watch", "", "", "ReturnValue[0]", "database", "manual"]
       - ["go.mongodb.org/mongo-driver/mongo", "Collection", True, "Aggregate", "", "", "ReturnValue[0]", "database", "manual"]
       - ["go.mongodb.org/mongo-driver/mongo", "Collection", True, "Distinct", "", "", "ReturnValue[0]", "database", "manual"]
       - ["go.mongodb.org/mongo-driver/mongo", "Collection", True, "Find", "", "", "ReturnValue[0]", "database", "manual"]
diff --git a/go/ql/test/library-tests/semmle/go/dataflow/flowsources/local/database/test_mongo_driver_mongo.go b/go/ql/test/library-tests/semmle/go/dataflow/flowsources/local/database/test_mongo_driver_mongo.go
@@ -104,3 +104,16 @@ func test_mongo_driver_mongo_database(db *mongo.Database, ctx context.Context, p
 		sink(userCs) // $ hasTaintFlow="userCs"
 	}
 }
+
+func test_mongo_driver_mongo_Client(client *mongo.Client, ctx context.Context) {
+	changestream, err := client.Watch(ctx, nil) // $ source
+	if err != nil {
+		return
+	}
+
+	for changestream.Next(ctx) {
+		var user User
+		changestream.Decode(&user)
+		sink(user) // $ hasTaintFlow="user"
+	}
+}
