Merge pull request #20 from acezxn/js-audit-1

Javascript auditing support

Author: chengpeng-wang

.gitignore

@@ -172,3 +172,4 @@ cython_debug/
 #.idea/
 
 testcases/**
+.vscode

.gitmodules

@@ -10,3 +10,15 @@
 [submodule "benchmark/Go/sally"]
 	path = benchmark/Go/sally
 	url = https://github.com/uber-go/sally.git
+[submodule "benchmark/Javascript/microlight"]
+	path = benchmark/Javascript/microlight
+	url = https://github.com/asvd/microlight.git
+[submodule "benchmark/Javascript/mocha"]
+	path = benchmark/Javascript/mocha
+	url = https://github.com/mochajs/mocha.git
+[submodule "squish"]
+	path = squish
+	url = https://github.com/shgysk8zer0/squish.git
+[submodule "benchmark/Javascript/squish"]
+	path = benchmark/Javascript/squish
+	url = https://github.com/shgysk8zer0/squish.git

benchmark/Javascript/toy/NPD/case01.js

@@ -0,0 +1,15 @@
+var myname = "daniel";
+myname = null;
+
+function test2_process(data) {
+    let current = myname;
+    let value = data[0];
+    console.log(current.length)
+    return value;
+}
+    
+
+function test2_caller() {
+    let data = null;
+    return test2_process(data)
+}

benchmark/Javascript/toy/NPD/case02.js

@@ -0,0 +1,14 @@
+function func_generator(value) {
+    let fn = null;
+    if (value % 3 == 0) {
+        fn = console.log;
+    } else if (value % 3 == 1) {
+        fn = console.error;
+    }
+    return fn;
+}
+
+const print = () => {
+    func_generator(8)("Hello world!");
+    console.log("Done");
+}

benchmark/Javascript/toy/NPD/case03.js

@@ -0,0 +1,11 @@
+function getLength2(value) {
+    if (!value) {
+        return 0;
+    }
+    return value.length;
+}
+
+const print2 = () => {
+    let a = getLength2(null);
+    console.log();
+}

benchmark/Javascript/toy/NPD/case04.js

@@ -0,0 +1,17 @@
+function hello3() {
+    let output = [];
+
+    for (let i = 0; i < 5; i++) {
+        output.push(null);
+    }
+    return output;
+}
+
+function hello4() {
+    let output = hello3();
+    for (let i = 0; i < 4; i++) {
+        output[i] = i.toString();
+    }
+    return output[4] ? output[4].length : 0;
+}
+

benchmark/Javascript/toy/NPD/case05.js

@@ -0,0 +1,6 @@
+var a = console.error;
+delete a.error;
+const exec = function () {
+    a.error();
+}
+exec()

benchmark/Javascript/toy/NPD/case06.js

@@ -0,0 +1,25 @@
+const obj = {
+    greet() {
+        let obj = 1;
+        console.log("hello");
+    }
+};
+
+
+const a = obj;
+
+function call(items) {
+    a = items;
+}
+
+const exec = function () {
+    var b = null;
+    let c = 1;
+    call(b);
+
+    for (let i = 0; i < 5; i++) {
+        a.greet();
+    }
+}
+
+exec();

lib/build.py

@@ -37,10 +37,16 @@
     os.system(
         f'git clone https://github.com/tree-sitter/tree-sitter-python.git {cwd / "vendor/tree-sitter-python"}'
     )
+    
     # Checkout to specific commit for language version 14 compatibility
     os.system(
         f'cd {cwd / "vendor/tree-sitter-python"} && git checkout 710796b8b877a970297106e5bbc8e2afa47f86ec'
     )
+    
+if not (cwd / "vendor/tree-sitter-javascript/grammar.js").exists():
+    os.system(
+        f'git clone https://github.com/tree-sitter/tree-sitter-javascript.git {cwd / "vendor/tree-sitter-javascript"}'
+    )
 
 if not (cwd / "vendor/tree-sitter-go/grammar.js").exists():
     os.system(
@@ -61,6 +67,7 @@
         str(cwd / "vendor/tree-sitter-cpp"),
         str(cwd / "vendor/tree-sitter-java"), 
         str(cwd / "vendor/tree-sitter-python"), 
+        str(cwd / "vendor/tree-sitter-javascript"),
         str(cwd / "vendor/tree-sitter-go"), 
     ],
 )