Comments (2)
hi @shivasurya , this is actually expected behavior as $X.Verify()
is a statement when written in the body of a function like that, and you are looking for it in an expression context. If you only wanted to match what you have I'd write two separate patterns, e.g.: https://semgrep.dev/playground/s/5rvrl
patterns:
- pattern: $X.Verify()
- pattern-inside: |
func $RESOLVER() {
...
}
Or if you just want inside the if blocks, you could use the deep expression operator: https://semgrep.dev/docs/writing-rules/pattern-syntax/#deep-expression-operator
func $RESOLVER() {
...
if <... $X.Verify() ...> {
...
}
...
}
I'll close this issue but would welcome ideas on how we can make this behavior more intuitive!
from semgrep.
Thanks @ievans for the quick feedback. I'm not sure if this will cover all cases in the code within function block. However, I'll try to workaround with this.
from semgrep.
Related Issues (20)
- CMake language support HOT 2
- Process .phtml files as PHP HOT 1
- Alternative to extract mode for Vue / HTML files HOT 2
- latest-nonroot docker image does not point to nonroot version HOT 1
- Generic mode (spacegrep) match for `a ...` (trailing ellipsis) is shorter than expected
- Semgrep OSS [config] HOT 1
- semgrep scan --validate fails because semgrep-core report "No such file or directory" HOT 1
- go: metavariable-type not evaluating expressions
- Semgrep scan failing with error code 7 HOT 3
- Syntax error while using as patterns in match statements [python] HOT 2
- Windows support HOT 1
- Oldest version semgrep inside container HOT 6
- Unable to configure `--project-root` HOT 1
- `.semgrepignore` is not used with absolute paths HOT 1
- Is it possible to modularise my custom queries?
- When installing semgrep version greater then 1.30.0, the process always crashes. HOT 1
- Error: semgrep-core exited with unexpected output HOT 2
- Failure to parse a Java multiline string ending in an escaped double quote, i.e. four consecutive double quotes HOT 1
- Can semgrep resolve fully qualified name for imported type in C#? HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from semgrep.