Describe the bug
Given PHP file content, with source point set as $_FILES and sink point as move_uploaded_file, the data flow corresponding to the sink point at a specific location cannot be found.
To Reproduce
- Import test.php file into Joern terminal
- Set source and sink,
def source = cpg.call.code(".*\\$_FILES.*").argument.l def sink = cpg.call.name("move_uploaded_file").argument.l
- run command
sink.reachableByFlows(source).p
Actual Result
The move_uploaded_file location at line 41 cannot be detected, while the move_uploaded_file location at line 59 can be detected.
Screenshots below:
- See error
Expected behavior
Both move_uploaded_file locations at line 41 and line 59 should be detected, showing corresponding data flows.
testphp.zip