CodeQL library for C#

codeql/csharp-all 4.0.1-dev (changelog, source)

Module signature Configs::StateConfigSig

An input configuration for data flow using flow state.

Import path

import codeql.dataflow.DataFlow

Predicates

accessPathLimit	Gets the access path limit.
allowImplicitRead	Holds if an arbitrary number of implicit read steps of content `c` may be taken at `node`.
fieldFlowBranchLimit	Gets the virtual dispatch branching limit when calculating field flow. This can be overridden to a smaller value to improve performance (a value of 0 disables field flow), or a larger value to get more results.
getAFeature	Gets a data flow configuration feature to add restrictions to the set of valid flow paths.
includeHiddenNodes	Holds if hidden nodes should be included in the data flow graph.
isAdditionalFlowStep	Holds if data may flow from `node1` to `node2` in addition to the normal data-flow steps.
isAdditionalFlowStep	Holds if data may flow from `node1` to `node2` in addition to the normal data-flow steps. This step is only applicable in `state1` and updates the flow state to `state2`.
isBarrier	Holds if data flow through `node` is prohibited. This completely removes `node` from the data flow graph.
isBarrier	Holds if data flow through `node` is prohibited when the flow state is `state`.
isBarrierIn	Holds if data flow into `node` is prohibited.
isBarrierIn	Holds if data flow into `node` is prohibited when the target flow state is `state`.
isBarrierOut	Holds if data flow out of `node` is prohibited.
isBarrierOut	Holds if data flow out of `node` is prohibited when the originating flow state is `state`.
isSink	Holds if `sink` is a relevant data flow sink for any state.
isSink	Holds if `sink` is a relevant data flow sink accepting `state`.
isSource	Holds if `source` is a relevant data flow source with the given initial `state`.
neverSkip	Holds if `node` should never be skipped over in the `PathGraph` and in path explanations.
observeDiffInformedIncrementalMode	Holds if sources and sinks should be filtered to only include those that may lead to a flow path with either a source or a sink in the location range given by `AlertFiltering`. This only has an effect when running in diff-informed incremental mode.

Types