marius/Open_Ultra_SAST
1
0
Fork 0
mirror of https://github.com/norandom/OpenUltraSAST.git synced 2026-10-18 04:29:27 +00:00
Code Issues Packages Projects Releases Wiki Activity

docs(cpg): name the upstream issue for joern-parse --overlaysonly (joernio/joern#6283)

Browse Source 
Co-Authored-By: Claude Fable 5.1 <[email protected]>
Claude-Session: https://claude.ai/code/session_01T7XD7x5KonMdmGRkp63EQG
This commit is contained in:
Marius Ciepluch
2026-09-11 10:42:35 +02:00
co-authored by Claude Fable 5.1
parent 5afe6fd8b4
commit 7ce0a30161
3 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.kiro/specs/contributor-scan/tasks.md
+1 -1
View File
@@ -892,7 +892,7 @@
Three changes, each named in the log rather than silent: (1) `queries/overlay.sc` runs `importCpg` + Three changes, each named in the log rather than silent: (1) `queries/overlay.sc` runs `importCpg` +
`save` once at build time and the saved graph replaces the raw one (`joern-parse --overlaysonly` is the `save` once at build time and the saved graph replaces the raw one (`joern-parse --overlaysonly` is the
obvious tool and NPEs in 4.0.623); (2) a source file over `MAX_SOURCE_BYTES` (1 MB) is excluded from obvious tool and NPEs in 4.0.623 -- filed as joernio/joern#6283); (2) a source file over `MAX_SOURCE_BYTES` (1 MB) is excluded from
the build as a data table and reported in `unparsed`; (3) the hook half's seeds are the callback's own the build as a data table and reported in `unparsed`; (3) the hook half's seeds are the callback's own
file. The payload diff between a raw and a saved-overlay pmpro graph was checked request by request: file. The payload diff between a raw and a saved-overlay pmpro graph was checked request by request:
identical (sink, line, source kind, sanitized) sets, fewer repeated flow paths on the saved one. identical (sink, line, source kind, sanitized) sets, fewer repeated flow paths on the saved one.
src/openultrasast/cpg/backend.py
+1 -1
View File
@@ -616,7 +616,7 @@ class JoernBackend:
CVE-2022-25148 on, one hour before the switch, from a `joern-parse` build. Task 5.13. CVE-2022-25148 on, one hour before the switch, from a `joern-parse` build. Task 5.13.
`queries/overlay.sc` is that once: `importCpg`, `save`, and the saved graph replaces the raw one `queries/overlay.sc` is that once: `importCpg`, `save`, and the saved graph replaces the raw one
under the same path. (`joern-parse --overlaysonly` is the obvious tool and is broken in 4.0.623.) under the same path. (`joern-parse --overlaysonly` is the obvious tool and is broken in 4.0.623: joernio/joern#6283.)
A failure here is logged and the raw graph kept, so the scan degrades to the old cost rather than A failure here is logged and the raw graph kept, so the scan degrades to the old cost rather than
losing its graph. losing its graph.
""" """
src/openultrasast/cpg/queries/overlay.sc
+1 -1
View File
@@ -10,7 +10,7 @@
// //
// Measured after: the saved graph reloads in 8 s where the raw one took 64 s, and the request that had // Measured after: the saved graph reloads in 8 s where the raw one took 64 s, and the request that had
// timed out at 520 s answered in 39 s including the JVM. `joern-parse --overlaysonly` would be the // timed out at 520 s answered in 39 s including the JVM. `joern-parse --overlaysonly` would be the
// obvious tool and is broken in 4.0.623 (NullPointerException in a post-processing step that needs the // obvious tool and is broken in 4.0.623 -- joernio/joern#6283 (NullPointerException in a post-processing step that needs the
// frontend it did not run), so the once is this script. // frontend it did not run), so the once is this script.
// //
// `save` writes to `workspace/<cpg name>/cpg.bin` under the working directory; the driver moves that over // `save` writes to `workspace/<cpg name>/cpg.bin` under the working directory; the driver moves that over