Packages

  • package root
    Definition Classes
    root
  • package io
    Definition Classes
    root
  • package shiftleft
    Definition Classes
    io
  • package queryprimitives

    Domain specific language for querying code property graphs

    Domain specific language for querying code property graphs

    This is the API reference for the CPG query language, a language to mine code for defects and vulnerabilities both interactively on a code analysis shell (REPL), or using non-interactive scripts.

    Queries written in the CPG query language express graph traversals (see https://en.wikipedia.org/wiki/Graph_traversal). Similar to the standard graph traversal language "Gremlin" (see https://en.wikipedia.org/wiki/Gremlin_(programming_language))) these traversals are formulated as sequences of primitive language elements referred to as "steps". You can think of a step as a small program, similar to a unix shell utility, however, instead of processing lines one by one, the step processes nodes of the graph.

    Starting a traversal

    All traversals begin by selecting a set of start nodes, e.g.,

    cpg.method

    will start the traversal at all methods, while

    cpg.local

    will start at all local variables. The complete list of starting points can be found here: io.shiftleft.queryprimitives.steps.starters.Cpg

    Lazy evaluation

    Queries are lazily evaluated, e.g., cpg.method creates a traversal which you can add more steps to. You can, for example, evaluate the traversal by converting it to a list:

    cpg.method.toList

    Since toList is such a common operation, we provide the shorthand l, meaning that

    cpg.method.l

    provides the same result as the former query.

    Properties

    Nodes have "properties", key-value pairs where keys are strings and values are primitive data types such as strings, integers, or Booleans. Properties of nodes can be selected based on their key, e.g.,

    cpg.method.name

    traverses to all method names. Nodes can also be filtered based on properties, e.g.,

    cpg.method.name(".*exec.*")

    traverse to all methods where name matches the regular expression ".*exec.*". You can see a complete list of properties by browsing to the API documentation of the corresponding step. For example, you can find the properties of method nodes at io.shiftleft.queryprimitives.steps.types.structure.Method.

    Side effects

    Useful if you want to mutate something outside the traversal, or simply debug it: This prints all typeDecl names as it traverses the graph and increments i for each one.

    var i = 0
cpg.typeDecl.sideEffect{typeTemplate => println(typeTemplate.name); i = i + 1}.exec

    [advanced] Selecting multiple things from your traversal

    If you are interested in multiple things along the way of your traversal, you label anything using the as modulator, and use select at the end. Note that the compiler automatically derived the correct return type as a tuple of the labelled steps, in this case with two elements.

    cpg.method.as("method").definingTypeDecl.as("classDef").select.toList
// return type: List[(nodes.Method, nodes.TypeDecl)]

    [advanced] For comprehensions

    You can always start a new traversal from a node, e.g.,

    val someMethod = cpg.method.head
someMethod.start.parameter.toList

    You can use this e.g. in a for comprehension, which is (in this context) essentially an alternative way to select multiple intermediate things. It is more expressive, but more computationally expensive.

    val query = for {
  method <- cpg.method
  param <- method.start.parameter
} yield (method.name, param.name)

query.toList
    Definition Classes
    shiftleft
  • package steps

    Steps for traversing the code property graph

    Steps for traversing the code property graph

    All traversal start at io.shiftleft.queryprimitives.starters.Cpg.

    Definition Classes
    queryprimitives
  • package types
    Definition Classes
    steps
  • package structure
    Definition Classes
    types
  • File
  • Local
  • Member
  • Method
  • MethodInst
  • MethodParameter
  • MethodParameterOut
  • MethodReturn
  • Namespace
  • NamespaceBlock
  • Type
  • TypeDecl

class MethodParameter[Labels <: HList] extends CpgSteps[MethodParameterIn, Labels] with DeclarationBase[MethodParameterIn, Labels] with CodeAccessors[MethodParameterIn, Labels] with NameAccessors[MethodParameterIn, Labels] with OrderAccessors[MethodParameterIn, Labels] with LineNumberAccessors[MethodParameterIn, Labels] with EvalTypeAccessors[MethodParameterIn, Labels]

Formal method input parameter

Linear Supertypes
EvalTypeAccessors[MethodParameterIn, Labels], LineNumberAccessors[MethodParameterIn, Labels], OrderAccessors[MethodParameterIn, Labels], PropertyAccessors[MethodParameterIn, Labels], NameAccessors[MethodParameterIn, Labels], CodeAccessors[MethodParameterIn, Labels], StringPropertyAccessors[MethodParameterIn, Labels], DeclarationBase[MethodParameterIn, Labels], CpgSteps[MethodParameterIn, Labels], NodeSteps[MethodParameterIn, Labels], Steps[MethodParameterIn, Vertex, Labels], StepsRoot, AnyRef, Any
Ordering
  1. Alphabetic
  2. By Inheritance
Inherited
  1. MethodParameter
  2. EvalTypeAccessors
  3. LineNumberAccessors
  4. OrderAccessors
  5. PropertyAccessors
  6. NameAccessors
  7. CodeAccessors
  8. StringPropertyAccessors
  9. DeclarationBase
  10. CpgSteps
  11. NodeSteps
  12. Steps
  13. StepsRoot
  14. AnyRef
  15. Any
  1. Hide All
  2. Show All
Visibility
  1. Public
  2. All

Instance Constructors

  1. new MethodParameter(raw: GremlinScala[Vertex])

Type Members

  1. type EndDomain0 = MethodParameterIn
    Definition Classes
    Steps → StepsRoot
  2. type EndGraph0 = Vertex
    Definition Classes
    Steps → StepsRoot

Value Members

  1. final def !=(arg0: Any): Boolean
    Definition Classes
    AnyRef → Any
  2. final def ##(): Int
    Definition Classes
    AnyRef → Any
  3. final def ==(arg0: Any): Boolean
    Definition Classes
    AnyRef → Any
  4. def _toJson(pretty: Boolean): String
    Attributes
    protected
    Definition Classes
    CpgSteps
  5. def aggregate(into: Buffer[MethodParameterIn]): NodeSteps[MethodParameterIn, Labels]
    Definition Classes
    NodeSteps
  6. def and(andTraversals: (Steps[MethodParameterIn, Vertex, HNil]) ⇒ Steps[_, _, _]*): Steps[MethodParameterIn, Vertex, Labels]
    Definition Classes
    Steps
  7. def argument(): Expression[Labels]

    Traverse to arguments (actual parameters) associated with this formal parameter

  8. def as[NewLabels <: HList](stepLabel: StepLabel[MethodParameterIn])(implicit prependDomain: shapeless.ops.hlist.Prepend.Aux[Labels, ::[MethodParameterIn, HNil], NewLabels]): Steps[MethodParameterIn, Vertex, NewLabels]
    Definition Classes
    Steps
  9. def as[NewLabels <: HList](stepLabel: String)(implicit prependDomain: shapeless.ops.hlist.Prepend.Aux[Labels, ::[MethodParameterIn, HNil], NewLabels]): Steps[MethodParameterIn, Vertex, NewLabels]
    Definition Classes
    Steps
  10. final def asInstanceOf[T0]: T0
    Definition Classes
    Any
  11. def asOutput: MethodParameterOut[Labels]

    Traverse to corresponding formal output parameter

  12. def clone(): Steps[MethodParameterIn, Vertex, Labels]
    Definition Classes
    Steps → AnyRef
  13. def code(value: String*): Steps[MethodParameterIn, Vertex, Labels]
    Definition Classes
    CodeAccessors
  14. def code(value: String): Steps[MethodParameterIn, Vertex, Labels]
    Definition Classes
    CodeAccessors
  15. def code(): Steps[String, String, Labels]
    Definition Classes
    CodeAccessors
  16. def codeExact(values: String*): Steps[MethodParameterIn, Vertex, Labels]
    Definition Classes
    CodeAccessors
  17. def codeExact(value: String): Steps[MethodParameterIn, Vertex, Labels]
    Definition Classes
    CodeAccessors
  18. def codeNot(values: String*): Steps[MethodParameterIn, Vertex, Labels]
    Definition Classes
    CodeAccessors
  19. def codeNot(value: String): Steps[MethodParameterIn, Vertex, Labels]
    Definition Classes
    CodeAccessors
  20. val converter: Converter[MethodParameterIn] { type GraphType = gremlin.scala.Vertex }
    Definition Classes
    MethodParameter → EvalTypeAccessors → PropertyAccessors → StringPropertyAccessors → Steps
  21. def count(): Long
    Definition Classes
    Steps
  22. def dedup(): Steps[MethodParameterIn, Vertex, Labels]
    Definition Classes
    Steps
  23. def emit(emitTraversal: (Steps[MethodParameterIn, Vertex, HNil]) ⇒ Steps[_, _, _]): Steps[MethodParameterIn, Vertex, Labels]
    Definition Classes
    Steps
  24. def emit(): Steps[MethodParameterIn, Vertex, Labels]
    Definition Classes
    Steps
  25. final def eq(arg0: AnyRef): Boolean
    Definition Classes
    AnyRef
  26. def equals(arg0: Any): Boolean
    Definition Classes
    AnyRef → Any
  27. def evalType(_values: String*): Steps[MethodParameterIn, Vertex, Labels]
    Definition Classes
    EvalTypeAccessors
  28. def evalType(_value: String): Steps[MethodParameterIn, Vertex, Labels]
    Definition Classes
    EvalTypeAccessors
  29. def evalType(): Steps[String, String, Labels]
    Definition Classes
    EvalTypeAccessors
  30. def evalTypeExact(_values: String*): Steps[MethodParameterIn, Vertex, Labels]
    Definition Classes
    EvalTypeAccessors
  31. def evalTypeExact(_value: String): Steps[MethodParameterIn, Vertex, Labels]
    Definition Classes
    EvalTypeAccessors
  32. def evalTypeNot(_values: String*): Steps[MethodParameterIn, Vertex, Labels]
    Definition Classes
    EvalTypeAccessors
  33. def evalTypeNot(_value: String): Steps[MethodParameterIn, Vertex, Labels]
    Definition Classes
    EvalTypeAccessors
  34. def exec(): Unit
    Definition Classes
    Steps
  35. def file: File[Labels]

    Traverse to source file

    Traverse to source file

    Definition Classes
    CpgSteps
  36. def filter(predicate: (Steps[MethodParameterIn, Vertex, Labels]) ⇒ Steps[_, _, _]): Steps[MethodParameterIn, Vertex, Labels]
    Definition Classes
    Steps
  37. def filterNot(predicate: (Steps[MethodParameterIn, Vertex, Labels]) ⇒ Steps[_, _, _]): Steps[MethodParameterIn, Vertex, Labels]
    Definition Classes
    Steps
  38. def filterOnEnd(predicate: (MethodParameterIn) ⇒ Boolean): NodeSteps[MethodParameterIn, Labels]
    Definition Classes
    NodeSteps
  39. def finalize(): Unit
    Attributes
    protected[java.lang]
    Definition Classes
    AnyRef
    Annotations
    @throws( classOf[java.lang.Throwable] )
  40. def flatMap[NewSteps <: StepsRoot](fun: (MethodParameterIn) ⇒ NewSteps)(implicit constr: Aux[gremlin.scala.dsl.Steps.flatMap.NewSteps.EndDomain0, Labels, gremlin.scala.dsl.Steps.flatMap.NewSteps.EndGraph0, NewSteps], newConverter: Converter[gremlin.scala.dsl.Steps.flatMap.NewSteps.EndDomain0]): NewSteps
    Definition Classes
    Steps
  41. final def getClass(): Class[_]
    Definition Classes
    AnyRef → Any
    Annotations
    @native()
  42. implicit val graph: Graph
    Definition Classes
    CpgSteps
  43. def hashCode(): Int
    Definition Classes
    AnyRef → Any
    Annotations
    @native()
  44. def head(): MethodParameterIn
    Definition Classes
    Steps
  45. def headOption(): Option[MethodParameterIn]
    Definition Classes
    Steps
  46. def id(ids: AnyRef*): NodeSteps[MethodParameterIn, Labels]
    Definition Classes
    NodeSteps
  47. def index(num: Int): MethodParameter[Labels]

    Traverse to all numth parameters

  48. def indexFrom(num: Int): MethodParameter[Labels]

    Traverse to all parameters with index greater or equal than num

  49. def indexTo(num: Int): MethodParameter[Labels]

    Traverse to all parameters with index smaller or equal than num

  50. def isDefined: Boolean
    Definition Classes
    Steps
  51. final def isInstanceOf[T0]: Boolean
    Definition Classes
    Any
  52. def iterate(): Unit
    Definition Classes
    Steps
  53. def l: List[MethodParameterIn]
    Definition Classes
    Steps
  54. def lineNumber(value: Integer*): Steps[MethodParameterIn, Vertex, Labels]
    Definition Classes
    LineNumberAccessors
  55. def lineNumber(value: Integer): Steps[MethodParameterIn, Vertex, Labels]
    Definition Classes
    LineNumberAccessors
  56. def lineNumber(): Steps[Integer, Integer, Labels]
    Definition Classes
    LineNumberAccessors
  57. def lineNumberNot(values: Integer*): Steps[MethodParameterIn, Vertex, Labels]
    Definition Classes
    LineNumberAccessors
  58. def lineNumberNot(value: Integer): Steps[MethodParameterIn, Vertex, Labels]
    Definition Classes
    LineNumberAccessors
  59. def map[NewEndDomain, NewEndGraph, NewSteps <: StepsRoot](fun: (MethodParameterIn) ⇒ NewEndDomain)(implicit newConverter: Aux[NewEndDomain, NewEndGraph], constr: Aux[NewEndDomain, Labels, NewEndGraph, NewSteps]): NewSteps
    Definition Classes
    Steps
  60. def method: Method[Labels]

    Traverse to method associated with this formal parameter

  61. def name(value: String*): Steps[MethodParameterIn, Vertex, Labels]

    Traverse to nodes where the name matches at least one of the regular expressions in values

    Traverse to nodes where the name matches at least one of the regular expressions in values

    Definition Classes
    NameAccessors
  62. def name(value: String): Steps[MethodParameterIn, Vertex, Labels]

    Traverse to nodes where the name matches the regular expression value

    Traverse to nodes where the name matches the regular expression value

    Definition Classes
    NameAccessors
  63. def name(): Steps[String, String, Labels]

    Traverse to name

    Traverse to name

    Definition Classes
    NameAccessors
  64. def nameExact(values: String*): Steps[MethodParameterIn, Vertex, Labels]

    Traverse to nodes where name matches one of the elements in values exactly.

    Traverse to nodes where name matches one of the elements in values exactly.

    Definition Classes
    NameAccessors
  65. def nameExact(value: String): Steps[MethodParameterIn, Vertex, Labels]

    Traverse to nodes where name matches value exactly.

    Traverse to nodes where name matches value exactly.

    Definition Classes
    NameAccessors
  66. def nameNot(values: String*): Steps[MethodParameterIn, Vertex, Labels]

    Traverse to nodes where name does not match any of the regular expressions in values.

    Traverse to nodes where name does not match any of the regular expressions in values.

    Definition Classes
    NameAccessors
  67. def nameNot(value: String): Steps[MethodParameterIn, Vertex, Labels]

    Traverse to nodes where name does not match the regular expression value.

    Traverse to nodes where name does not match the regular expression value.

    Definition Classes
    NameAccessors
  68. final def ne(arg0: AnyRef): Boolean
    Definition Classes
    AnyRef
  69. final def notify(): Unit
    Definition Classes
    AnyRef
    Annotations
    @native()
  70. final def notifyAll(): Unit
    Definition Classes
    AnyRef
    Annotations
    @native()
  71. def onRaw(fun: (GremlinScala[Vertex]) ⇒ GremlinScala[Vertex]): Steps[MethodParameterIn, Vertex, Labels]
    Definition Classes
    Steps
  72. def or(orTraversals: (Steps[MethodParameterIn, Vertex, HNil]) ⇒ Steps[_, _, _]*): Steps[MethodParameterIn, Vertex, Labels]
    Definition Classes
    Steps
  73. def order(value: Integer*): Steps[MethodParameterIn, Vertex, Labels]
    Definition Classes
    OrderAccessors
  74. def order(value: Integer): Steps[MethodParameterIn, Vertex, Labels]
    Definition Classes
    OrderAccessors
  75. def order(): Steps[Integer, Integer, Labels]
    Definition Classes
    OrderAccessors
  76. def orderBy[A](fun: (MethodParameterIn) ⇒ A): Steps[MethodParameterIn, Vertex, Labels]
    Definition Classes
    Steps
  77. def orderNot[Out](values: Integer*): Steps[MethodParameterIn, Vertex, Labels]
    Definition Classes
    OrderAccessors
  78. def orderNot(value: Integer): Steps[MethodParameterIn, Vertex, Labels]
    Definition Classes
    OrderAccessors
  79. def p(): Unit
    Definition Classes
    Steps
  80. def property[P](property: Key[P]): Steps[P, P, Labels]
    Definition Classes
    PropertyAccessors
  81. def propertyFilter[Out, P](property: Key[P], value: P): Steps[MethodParameterIn, Vertex, Labels]
    Definition Classes
    PropertyAccessors
  82. def propertyFilterMultiple[Out, P](property: Key[P], values: P*): Steps[MethodParameterIn, Vertex, Labels]
    Definition Classes
    PropertyAccessors
  83. def propertyFilterNot[Out, P](property: Key[P], value: P): Steps[MethodParameterIn, Vertex, Labels]
    Definition Classes
    PropertyAccessors
  84. def propertyFilterNotMultiple[Out, P](property: Key[P], values: P*): Steps[MethodParameterIn, Vertex, Labels]
    Definition Classes
    PropertyAccessors
  85. val raw: GremlinScala[Vertex]
    Definition Classes
    CpgSteps → NodeSteps → Steps → StepsRoot
  86. def repeat[NewEndDomain >: MethodParameterIn](repeatTraversal: (Steps[MethodParameterIn, Vertex, HNil]) ⇒ Steps[NewEndDomain, Vertex, _])(implicit newConverter: Aux[NewEndDomain, Vertex]): Steps[NewEndDomain, Vertex, Labels]
    Definition Classes
    Steps
  87. def s(): Stream[MethodParameterIn]
    Definition Classes
    Steps
  88. def select[StepLabelsTuple <: Product, StepLabels <: HList, H0, T0 <: HList, SelectedTypes <: HList, SelectedTypesTuple <: Product, SelectedGraphTypesTuple <: Product, LabelNames <: HList, Z](stepLabelsTuple: StepLabelsTuple)(implicit toHList: Aux[StepLabelsTuple, StepLabels], hasOne: Aux[StepLabels, H0, T0], hasTwo: IsHCons[T0], extractLabelType: Aux[StepLabels, SelectedTypes], tupler: shapeless.ops.hlist.Tupler.Aux[SelectedTypes, SelectedTypesTuple], conv: Aux[SelectedTypesTuple, SelectedGraphTypesTuple], stepLabelToString: Aux[GetLabelName.type, StepLabels, LabelNames], trav: Aux[LabelNames, List, String], folder: Aux[StepLabels, (HNil, Map[String, Any]), combineLabelWithValue.type, (SelectedTypes, Z)]): Steps[SelectedTypesTuple, SelectedGraphTypesTuple, Labels]
    Definition Classes
    Steps
  89. def select[Label, LabelGraph](label: StepLabel[Label])(implicit conv1: Aux[Label, LabelGraph]): Steps[Label, LabelGraph, Labels]
    Definition Classes
    Steps
  90. def select[LabelsGraph <: HList, LabelsGraphTuple, LabelsTuple]()(implicit conv1: Aux[Labels, LabelsGraph], tupler1: shapeless.ops.hlist.Tupler.Aux[LabelsGraph, LabelsGraphTuple], tupler2: shapeless.ops.hlist.Tupler.Aux[Labels, LabelsTuple], conv2: Aux[LabelsTuple, LabelsGraphTuple]): Steps[LabelsTuple, LabelsGraphTuple, Labels]
    Definition Classes
    Steps
  91. def sideEffect(fun: (MethodParameterIn) ⇒ Any): NodeSteps[MethodParameterIn, Labels]
    Definition Classes
    NodeSteps
  92. def stringProperty(property: Key[String]): Steps[String, String, Labels]
    Attributes
    protected
    Definition Classes
    StringPropertyAccessors
  93. def stringPropertyFilter(property: Key[String], value: String): Steps[MethodParameterIn, Vertex, Labels]
    Attributes
    protected
    Definition Classes
    StringPropertyAccessors
  94. def stringPropertyFilterExact[Out](property: Key[String], _value: String): Steps[MethodParameterIn, Vertex, Labels]
    Attributes
    protected
    Definition Classes
    StringPropertyAccessors
  95. def stringPropertyFilterExactMultiple[Out](property: Key[String], values: String*): Steps[MethodParameterIn, Vertex, Labels]
    Attributes
    protected
    Definition Classes
    StringPropertyAccessors
  96. def stringPropertyFilterMultiple(property: Key[String], values: String*): Steps[MethodParameterIn, Vertex, Labels]
    Attributes
    protected
    Definition Classes
    StringPropertyAccessors
  97. def stringPropertyFilterNot[Out](property: Key[String], value: String): Steps[MethodParameterIn, Vertex, Labels]
    Attributes
    protected
    Definition Classes
    StringPropertyAccessors
  98. def stringPropertyFilterNotMultiple[Out](property: Key[String], values: String*): Steps[MethodParameterIn, Vertex, Labels]
    Attributes
    protected
    Definition Classes
    StringPropertyAccessors
  99. final def synchronized[T0](arg0: ⇒ T0): T0
    Definition Classes
    AnyRef
  100. def times(maxLoops: Int): Steps[MethodParameterIn, Vertex, Labels]
    Definition Classes
    Steps
  101. def toBuffer(): Buffer[MethodParameterIn]
    Definition Classes
    Steps
  102. def toJson: String

    Execute traversal and convert the result to json.

    Execute traversal and convert the result to json.

    Definition Classes
    CpgSteps
  103. def toJsonPretty: String
    Definition Classes
    CpgSteps
  104. def toList(): List[MethodParameterIn]
    Definition Classes
    Steps
  105. def toMaps(): Steps[Map[String, AnyRef], Map[String, AnyRef], Labels]
    Definition Classes
    CpgSteps
  106. def toSet(): Set[MethodParameterIn]
    Definition Classes
    Steps
  107. def toStream(): Stream[MethodParameterIn]
    Definition Classes
    Steps
  108. def toString(): String
    Definition Classes
    Steps → AnyRef → Any
  109. def typ: Type[Labels]

    Traverse to parameter type

  110. def until(untilTraversal: (Steps[MethodParameterIn, Vertex, HNil]) ⇒ Steps[_, _, _]): Steps[MethodParameterIn, Vertex, Labels]
    Definition Classes
    Steps
  111. final def wait(): Unit
    Definition Classes
    AnyRef
    Annotations
    @throws( ... )
  112. final def wait(arg0: Long, arg1: Int): Unit
    Definition Classes
    AnyRef
    Annotations
    @throws( ... )
  113. final def wait(arg0: Long): Unit
    Definition Classes
    AnyRef
    Annotations
    @native() @throws( ... )
  114. def walkIn(edgeType: String): GremlinScala[Vertex]
    Definition Classes
    NodeSteps

Inherited from EvalTypeAccessors[MethodParameterIn, Labels]

Inherited from LineNumberAccessors[MethodParameterIn, Labels]

Inherited from OrderAccessors[MethodParameterIn, Labels]

Inherited from PropertyAccessors[MethodParameterIn, Labels]

Inherited from NameAccessors[MethodParameterIn, Labels]

Inherited from CodeAccessors[MethodParameterIn, Labels]

Inherited from StringPropertyAccessors[MethodParameterIn, Labels]

Inherited from DeclarationBase[MethodParameterIn, Labels]

Inherited from CpgSteps[MethodParameterIn, Labels]

Inherited from NodeSteps[MethodParameterIn, Labels]

Inherited from Steps[MethodParameterIn, Vertex, Labels]

Inherited from StepsRoot

Inherited from AnyRef

Inherited from Any

Ungrouped