simplify StdLibRegExpInterpretation to only consider re.compile, because the rest is handled by RegexExecution

erik-krogh · erik-krogh · commit a64848c022a1 · 2023-05-01T10:42:14.000+02:00
diff --git a/python/ql/lib/semmle/python/regex.qll b/python/ql/lib/semmle/python/regex.qll
@@ -33,7 +33,7 @@ private import semmle.python.ApiGraphs
 class StdLibRegExpInterpretation extends RegExpInterpretation::Range {
   StdLibRegExpInterpretation() {
     this =
-      API::moduleImport("re").getMember(any(string name | name != "escape")).getACall().getArg(0)
+      API::moduleImport("re").getMember("compile").getACall().getParameter(0, "pattern").asSink()
   }
 }
 

Original file line number	Diff line number	Diff line change
`@@ -33,7 +33,7 @@ private import semmle.python.ApiGraphs`
`33`	`33`	`class StdLibRegExpInterpretation extends RegExpInterpretation::Range {`
`34`	`34`	`StdLibRegExpInterpretation() {`
`35`	`35`	`this =`
`36`		`- API::moduleImport("re").getMember(any(string name \| name != "escape")).getACall().getArg(0)`
	`36`	`+ API::moduleImport("re").getMember("compile").getACall().getParameter(0, "pattern").asSink()`
`37`	`37`	`}`
`38`	`38`	`}`
`39`	`39`