CodeQL library for Python
codeql/python-all 1.0.3-dev (changelog, source)
Search

Predicate TypeTrackingInput::callStep

Holds if nodeFrom steps to nodeTo by being passed as a parameter in a call.

Flow into summarized library methods is not included, as that will lead to negative recursion (or, at best, terrible performance), since identifying calls to library methods is done using API graphs (which uses type tracking).

Import path

import semmle.python.dataflow.new.internal.TypeTrackingImpl
predicate callStep(Node nodeFrom, LocalSourceNode nodeTo)