Skip to content

Python: Add jump steps for global variable nested field access #20162

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 11 commits into
base: main
Choose a base branch
from
Open

Python: Add jump steps for global variable nested field access #20162

Changes from 1 commit
Commits
Show all changes
11 commits
Select commit Hold shift + click to select a range
4ab9283
Python: Updated PathInjection tests to use inline test expectations
Napalys Aug 4, 2025
104e20e
Python: Added extra test cases for path injection with FastAPI
Napalys Aug 4, 2025
a1b1021
Python: Added extra test for global variable nested attribute reads/w…
Napalys Aug 4, 2025
1c4a48e
Python: Add global variable nested field jump steps
Napalys Aug 4, 2025
8617ba2
Python: Keep track of access path
tausbn Aug 6, 2025
11185c3
Python: Rewrite access path computation
tausbn Aug 7, 2025
7fa224c
Python: Update `globalVariableAttrPathAtDepth` base case
Napalys Aug 7, 2025
2a0431f
Python: Add `AttrWrite.writes` and `AttrRead.reads`
tausbn Aug 8, 2025
485f397
Python: Use `AttrWrite.writes`
tausbn Aug 8, 2025
c9f495e
Python: Updated doc string and removed redundant predicate.
Napalys Aug 11, 2025
a2edf10
Python: Add change note
Napalys Aug 11, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Python: Add change note
  • Loading branch information
@Napalys
Napalys committed Aug 11, 2025
commit a2edf108fb81aa791f493751a817579f1e806d45
4 changes: 4 additions & 0 deletions python/ql/lib/change-notes/2025-08-11-jump-step-global-nested.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,4 @@
---
category: minorAnalysis
---
* Data flow tracking through global variables now supports nested field access patterns such as `global_var.obj.field`. This improves the precision of taint tracking analysis when data flows through complex global variable structures.