Merge pull request #651 from erik-krogh/patches

various automatic patches applied to codeql-go

Author: owen-mc

ql/lib/semmle/go/concepts/GeneratedFile.qll

@@ -13,15 +13,15 @@ module GeneratedFile {
   abstract class Range extends File { }
 
   private string generatorCommentRegex() {
-    result = "Generated By\\b.*\\bDo not edit" or
     result =
-      "This (file|class|interface|art[ei]fact) (was|is|(has been)) (?:auto[ -]?)?gener(e?)ated" or
-    result = "Any modifications to this file will be lost" or
-    result =
-      "This (file|class|interface|art[ei]fact) (was|is) (?:mechanically|automatically) generated" or
-    result = "The following code was (?:auto[ -]?)?generated (?:by|from)" or
-    result = "Autogenerated by Thrift" or
-    result = "(Code g|G)enerated from .* by ANTLR"
+      [
+        "Generated By\\b.*\\bDo not edit",
+        "This (file|class|interface|art[ei]fact) (was|is|(has been)) (?:auto[ -]?)?gener(e?)ated",
+        "Any modifications to this file will be lost",
+        "This (file|class|interface|art[ei]fact) (was|is) (?:mechanically|automatically) generated",
+        "The following code was (?:auto[ -]?)?generated (?:by|from)", "Autogenerated by Thrift",
+        "(Code g|G)enerated from .* by ANTLR"
+      ]
   }
 
   private class CommentHeuristicGeneratedFile extends Range {

ql/lib/semmle/go/controlflow/ControlFlowGraphImpl.qll

@@ -489,7 +489,7 @@ module CFG {
     /**
      * A completion indicating that an expression was successfully evaluated to Boolean value `b`.
      *
-     * Note that many Boolean expressions are modelled as having completion `Done()` instead.
+     * Note that many Boolean expressions are modeled as having completion `Done()` instead.
      * Completion `Bool` is only used in contexts where the Boolean value can be determined.
      */
     Bool(boolean b) { b = true or b = false } or
@@ -652,7 +652,7 @@ module CFG {
 
     AtomicTree() {
       exists(Expr e |
-        e = this.(Expr) and
+        e = this and
         e.isConst() and
         nd = mkExprOrSkipNode(this)
       |

ql/lib/semmle/go/dataflow/SsaImpl.qll

@@ -100,7 +100,7 @@ private module Internal {
 
   /**
    * Holds if the `i`th node of basic block `bb` may induce a pseudo-definition for
-   * modelling updates to captured variable `v`. Whether the definition is actually
+   * modeling updates to captured variable `v`. Whether the definition is actually
    * introduced depends on whether `v` is live at this point in the program.
    */
   private predicate mayCapture(ReachableBasicBlock bb, int i, SsaSourceVariable v) {

ql/lib/semmle/go/dataflow/internal/TaintTrackingUtil.qll

@@ -289,7 +289,7 @@ private predicate isPossibleInputNode(DataFlow::Node inputNode, FuncDef fd) {
 private ControlFlow::Node getANonTestPassingPredecessor(
   ControlFlow::Node succ, DataFlow::Node inputNode
 ) {
-  isPossibleInputNode(inputNode, succ.getRoot().(FuncDef)) and
+  isPossibleInputNode(inputNode, succ.getRoot()) and
   result = succ.getAPredecessor() and
   not exists(Expr testExpr, DataFlow::Node switchExprNode |
     flowsToSwitchExpression(inputNode, switchExprNode) and
@@ -301,7 +301,7 @@ private ControlFlow::Node getANonTestPassingPredecessor(
 private ControlFlow::Node getANonTestPassingReachingNodeRecursive(
   ControlFlow::Node n, DataFlow::Node inputNode
 ) {
-  isPossibleInputNode(inputNode, n.getRoot().(FuncDef)) and
+  isPossibleInputNode(inputNode, n.getRoot()) and
   (
     result = n or
     result =
@@ -328,7 +328,7 @@ private ControlFlow::Node getANonTestPassingReachingNodeBase(
 private predicate mustPassConstantCaseTestToReach(
   IR::ReturnInstruction ret, DataFlow::Node inputNode
 ) {
-  isPossibleInputNode(inputNode, ret.getRoot().(FuncDef)) and
+  isPossibleInputNode(inputNode, ret.getRoot()) and
   not exists(ControlFlow::Node entry | entry = ret.getRoot().getEntryNode() |
     entry = getANonTestPassingReachingNodeBase(ret, inputNode)
   )

ql/lib/semmle/go/frameworks/Encoding.qll

@@ -1,5 +1,5 @@
 /**
- * Provides classes modelling taint propagation through marshalling and encoding functions.
+ * Provides classes modeling taint propagation through marshalling and encoding functions.
  */
 
 import go

ql/lib/semmle/go/frameworks/Protobuf.qll

@@ -60,7 +60,7 @@ module Protobuf {
   }
 
   /**
-   * Additional taint-flow step modelling flow from `MarshalInput.Message` to `MarshalOutput`,
+   * Additional taint-flow step modeling flow from `MarshalInput.Message` to `MarshalOutput`,
    * mediated by a `MarshalOptions.MarshalState` call.
    *
    * Note we can taint the whole `MarshalOutput` as it only has one field (`Buf`), and taint-

ql/lib/semmle/go/frameworks/Revel.qll

@@ -5,7 +5,7 @@
 import go
 private import semmle.go.security.OpenUrlRedirectCustomizations
 
-/** Provides classes and methods modelling the Revel web framework. */
+/** Provides classes and methods modeling the Revel web framework. */
 module Revel {
   /** Gets the package name `github.com/revel/revel`. */
   string packagePath() { result = package(["github.com/revel", "github.com/robfig"], "revel") }

ql/lib/semmle/go/frameworks/SQL.qll

@@ -143,15 +143,7 @@ module SQL {
           or
           exists(string tp, string m | f.(Method).hasQualifiedName(gopgorm(), tp, m) |
             tp = "Query" and
-            (
-              m = "ColumnExpr" or
-              m = "For" or
-              m = "Having" or
-              m = "Where" or
-              m = "WhereIn" or
-              m = "WhereInMulti" or
-              m = "WhereOr"
-            ) and
+            m = ["ColumnExpr", "For", "Having", "Where", "WhereIn", "WhereInMulti", "WhereOr"] and
             arg = 0
             or
             tp = "Query" and

ql/lib/semmle/go/frameworks/Stdlib.qll

@@ -174,11 +174,7 @@ module URL {
   class UrlGetter extends TaintTracking::FunctionModel, Method {
     UrlGetter() {
       exists(string m | hasQualifiedName("net/url", "URL", m) |
-        m = "EscapedPath" or
-        m = "Hostname" or
-        m = "Port" or
-        m = "Query" or
-        m = "RequestURI"
+        m = ["EscapedPath", "Hostname", "Port", "Query", "RequestURI"]
       )
     }
 

ql/lib/semmle/go/frameworks/SystemCommandExecutors.qll

@@ -126,47 +126,14 @@ private class ShellLike extends DataFlow::Node {
 }
 
 private string getASudoCommand() {
-  result = "sudo" or
-  result = "sudo_root" or
-  result = "su" or
-  result = "sudoedit" or
-  result = "doas" or
-  result = "access" or
-  result = "vsys" or
-  result = "userv" or
-  result = "sus" or
-  result = "super" or
-  result = "priv" or
-  result = "calife" or
-  result = "ssu" or
-  result = "su1" or
-  result = "op" or
-  result = "sudowin" or
-  result = "sudown" or
-  result = "chroot" or
-  result = "fakeroot" or
-  result = "fakeroot-sysv" or
-  result = "fakeroot-tcp" or
-  result = "fstab-decode" or
-  result = "jrunscript" or
-  result = "nohup" or
-  result = "parallel" or
-  result = "find" or
-  result = "pkexec" or
-  result = "sg" or
-  result = "sem" or
-  result = "runcon" or
-  result = "runuser" or
-  result = "stdbuf" or
-  result = "system" or
-  result = "timeout" or
-  result = "xargs" or
-  result = "time" or
-  result = "awk" or
-  result = "gawk" or
-  result = "mawk" or
-  result = "nawk" or
-  result = "git"
+  result =
+    [
+      "sudo", "sudo_root", "priv", "calife", "ssu", "su1", "op", "sudowin", "sudown", "chroot",
+      "fakeroot", "fakeroot-sysv", "su", "fakeroot-tcp", "fstab-decode", "jrunscript", "nohup",
+      "parallel", "find", "pkexec", "sg", "sem", "runcon", "sudoedit", "runuser", "stdbuf",
+      "system", "timeout", "xargs", "time", "awk", "gawk", "mawk", "nawk", "doas", "git", "access",
+      "vsys", "userv", "sus", "super"
+    ]
 }
 
 /**
@@ -213,31 +180,12 @@ private predicate isSudoOrSimilar(DataFlow::Node node) {
 }
 
 private string getAShellCommand() {
-  result = "bash" or
-  result = "sh" or
-  result = "sh.distrib" or
-  result = "rbash" or
-  result = "dash" or
-  result = "zsh" or
-  result = "csh" or
-  result = "tcsh" or
-  result = "fish" or
-  result = "pwsh" or
-  result = "elvish" or
-  result = "oh" or
-  result = "ion" or
-  result = "ksh" or
-  result = "rksh" or
-  result = "tksh" or
-  result = "mksh" or
-  result = "nu" or
-  result = "oksh" or
-  result = "osh" or
-  result = "shpp" or
-  result = "xiki" or
-  result = "xonsh" or
-  result = "yash" or
-  result = "env"
+  result =
+    [
+      "bash", "sh", "elvish", "oh", "ion", "ksh", "rksh", "tksh", "mksh", "nu", "oksh", "osh",
+      "sh.distrib", "shpp", "xiki", "xonsh", "yash", "env", "rbash", "dash", "zsh", "csh", "tcsh",
+      "fish", "pwsh"
+    ]
 }
 
 /**
@@ -252,12 +200,7 @@ private predicate isShell(DataFlow::Node node) {
 }
 
 private string getAnInterpreterName() {
-  result = "python" or
-  result = "php" or
-  result = "ruby" or
-  result = "perl" or
-  result = "node" or
-  result = "nodejs"
+  result = ["python", "php", "ruby", "perl", "node", "nodejs"]
 }
 
 /**