Python: Correctly locate stores to built-ins

tausbn · web-flow · commit ff2b6b9737b6 · 2021-05-12T18:07:18.000Z
diff --git a/python/ql/src/semmle/python/ApiGraphs.qll b/python/ql/src/semmle/python/ApiGraphs.qll
@@ -422,7 +422,7 @@ module API {
      */
     private predicate possible_builtin_defined_in_module(string name, Module m) {
       exists(NameNode n |
-        n.isGlobal() and
+        not exists(LocalVariable v | n.defines(v)) and
         n.isStore() and
         name = n.getId() and
         name = builtin_name() and
