Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Commit b3d5f9c

Browse files
erik-krogherik-krogh
committed
support throttle like calls as partial calls
1 parent a92a701 commit b3d5f9c

5 files changed

Lines changed: 92 additions & 0 deletions

File tree

‎javascript/ql/src/semmle/javascript/dataflow/Nodes.qll‎

Lines changed: 42 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1379,6 +1379,48 @@ module PartialInvokeNode {
13791379
}
13801380
}
13811381

1382+
/**
1383+
* A partial call that behaves like a throttle call, like `require("call-limit")(fs, limit)` or `_.memoize`.
1384+
* Seen as a partial invocation that binds no arguments.
1385+
*/
1386+
private class ThrottleLikePartialCall extends PartialInvokeNode::Range, DataFlow::CallNode {
1387+
int callbackIndex;
1388+
1389+
ThrottleLikePartialCall() {
1390+
callbackIndex = 0 and
1391+
(
1392+
this = LodashUnderscore::member(["throttle", "debounce", "once", "memoize"]).getACall()
1393+
or
1394+
this =
1395+
DataFlow::moduleImport(["call-limit", "lodash.debounce", "lodash.throttle", "debounce"])
1396+
.getACall()
1397+
)
1398+
or
1399+
callbackIndex = 1 and
1400+
(
1401+
this = LodashUnderscore::member(["after", "before"]).getACall()
1402+
or
1403+
// not jQuery: https://github.com/cowboy/jquery-throttle-debounce
1404+
this = DataFlow::globalVarRef("$").getAMemberCall(["throttle", "debounce"])
1405+
)
1406+
or
1407+
callbackIndex = -1 and
1408+
this = DataFlow::moduleMember("throttle-debounce", ["debounce", "throttle"]).getACall()
1409+
}
1410+
1411+
override DataFlow::SourceNode getBoundFunction(DataFlow::Node callback, int boundArgs) {
1412+
(
1413+
callbackIndex >= 0 and
1414+
callback = getArgument(callbackIndex)
1415+
or
1416+
callbackIndex = -1 and
1417+
callback = getLastArgument()
1418+
) and
1419+
boundArgs = 0 and
1420+
result = this
1421+
}
1422+
}
1423+
13821424
/**
13831425
* A partial call through `ramda.partial`.
13841426
*/

‎javascript/ql/test/library-tests/InterProceduralFlow/DataFlow.expected‎

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -32,10 +32,18 @@
3232
| partial.js:5:15:5:24 | "tainted1" | partial.js:15:15:15:15 | x |
3333
| partial.js:5:15:5:24 | "tainted1" | partial.js:21:15:21:15 | x |
3434
| partial.js:5:15:5:24 | "tainted1" | partial.js:27:15:27:15 | x |
35+
| partial.js:5:15:5:24 | "tainted1" | partial.js:34:15:34:15 | x |
36+
| partial.js:5:15:5:24 | "tainted1" | partial.js:41:15:41:15 | x |
37+
| partial.js:5:15:5:24 | "tainted1" | partial.js:47:15:47:15 | x |
38+
| partial.js:5:15:5:24 | "tainted1" | partial.js:53:15:53:15 | x |
3539
| partial.js:6:15:6:24 | "tainted2" | partial.js:10:15:10:15 | y |
3640
| partial.js:6:15:6:24 | "tainted2" | partial.js:16:15:16:15 | y |
3741
| partial.js:6:15:6:24 | "tainted2" | partial.js:22:15:22:15 | y |
3842
| partial.js:6:15:6:24 | "tainted2" | partial.js:28:15:28:15 | y |
43+
| partial.js:6:15:6:24 | "tainted2" | partial.js:35:15:35:15 | y |
44+
| partial.js:6:15:6:24 | "tainted2" | partial.js:42:15:42:15 | y |
45+
| partial.js:6:15:6:24 | "tainted2" | partial.js:48:15:48:15 | y |
46+
| partial.js:6:15:6:24 | "tainted2" | partial.js:54:15:54:15 | y |
3947
| promises.js:2:16:2:24 | "tainted" | promises.js:7:16:7:18 | val |
4048
| promises.js:2:16:2:24 | "tainted" | promises.js:38:32:38:32 | v |
4149
| promises.js:11:22:11:31 | "resolved" | promises.js:19:20:19:20 | v |

‎javascript/ql/test/library-tests/InterProceduralFlow/GermanFlow.expected‎

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -33,10 +33,18 @@
3333
| partial.js:5:15:5:24 | "tainted1" | partial.js:15:15:15:15 | x |
3434
| partial.js:5:15:5:24 | "tainted1" | partial.js:21:15:21:15 | x |
3535
| partial.js:5:15:5:24 | "tainted1" | partial.js:27:15:27:15 | x |
36+
| partial.js:5:15:5:24 | "tainted1" | partial.js:34:15:34:15 | x |
37+
| partial.js:5:15:5:24 | "tainted1" | partial.js:41:15:41:15 | x |
38+
| partial.js:5:15:5:24 | "tainted1" | partial.js:47:15:47:15 | x |
39+
| partial.js:5:15:5:24 | "tainted1" | partial.js:53:15:53:15 | x |
3640
| partial.js:6:15:6:24 | "tainted2" | partial.js:10:15:10:15 | y |
3741
| partial.js:6:15:6:24 | "tainted2" | partial.js:16:15:16:15 | y |
3842
| partial.js:6:15:6:24 | "tainted2" | partial.js:22:15:22:15 | y |
3943
| partial.js:6:15:6:24 | "tainted2" | partial.js:28:15:28:15 | y |
44+
| partial.js:6:15:6:24 | "tainted2" | partial.js:35:15:35:15 | y |
45+
| partial.js:6:15:6:24 | "tainted2" | partial.js:42:15:42:15 | y |
46+
| partial.js:6:15:6:24 | "tainted2" | partial.js:48:15:48:15 | y |
47+
| partial.js:6:15:6:24 | "tainted2" | partial.js:54:15:54:15 | y |
4048
| promises.js:2:16:2:24 | "tainted" | promises.js:7:16:7:18 | val |
4149
| promises.js:2:16:2:24 | "tainted" | promises.js:38:32:38:32 | v |
4250
| promises.js:11:22:11:31 | "resolved" | promises.js:19:20:19:20 | v |

‎javascript/ql/test/library-tests/InterProceduralFlow/TaintTracking.expected‎

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -38,10 +38,18 @@
3838
| partial.js:5:15:5:24 | "tainted1" | partial.js:15:15:15:15 | x |
3939
| partial.js:5:15:5:24 | "tainted1" | partial.js:21:15:21:15 | x |
4040
| partial.js:5:15:5:24 | "tainted1" | partial.js:27:15:27:15 | x |
41+
| partial.js:5:15:5:24 | "tainted1" | partial.js:34:15:34:15 | x |
42+
| partial.js:5:15:5:24 | "tainted1" | partial.js:41:15:41:15 | x |
43+
| partial.js:5:15:5:24 | "tainted1" | partial.js:47:15:47:15 | x |
44+
| partial.js:5:15:5:24 | "tainted1" | partial.js:53:15:53:15 | x |
4145
| partial.js:6:15:6:24 | "tainted2" | partial.js:10:15:10:15 | y |
4246
| partial.js:6:15:6:24 | "tainted2" | partial.js:16:15:16:15 | y |
4347
| partial.js:6:15:6:24 | "tainted2" | partial.js:22:15:22:15 | y |
4448
| partial.js:6:15:6:24 | "tainted2" | partial.js:28:15:28:15 | y |
49+
| partial.js:6:15:6:24 | "tainted2" | partial.js:35:15:35:15 | y |
50+
| partial.js:6:15:6:24 | "tainted2" | partial.js:42:15:42:15 | y |
51+
| partial.js:6:15:6:24 | "tainted2" | partial.js:48:15:48:15 | y |
52+
| partial.js:6:15:6:24 | "tainted2" | partial.js:54:15:54:15 | y |
4553
| promises.js:2:16:2:24 | "tainted" | promises.js:7:16:7:18 | val |
4654
| promises.js:2:16:2:24 | "tainted" | promises.js:38:32:38:32 | v |
4755
| promises.js:11:22:11:31 | "resolved" | promises.js:19:20:19:20 | v |

‎javascript/ql/test/library-tests/InterProceduralFlow/partial.js‎

Lines changed: 26 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -28,3 +28,29 @@ function f4(x, y) {
2828
let sink2 = y;
2929
}
3030
R.partial(f4, [source1])(source2);
31+
32+
const limit = require('call-limit')
33+
function f5(x, y) {
34+
let sink1 = x;
35+
let sink2 = y;
36+
}
37+
const limited = limit(f5, 5)
38+
limited(source1, source2);
39+
40+
function f6(x, y) {
41+
let sink1 = x;
42+
let sink2 = y;
43+
}
44+
_.throttle(f6, 100)(source1, source2);
45+
46+
function f7(x, y) {
47+
let sink1 = x;
48+
let sink2 = y;
49+
}
50+
_.after(3, f7)(source1, source2);
51+
52+
function f8(x, y) {
53+
let sink1 = x;
54+
let sink2 = y;
55+
}
56+
require("throttle-debounce").debounce(1000, false, f8)(source1, source2);

0 commit comments

Comments
 (0)