callgraph

func AnalyzeIntraProceduralTaint ¶

func AnalyzeIntraProceduralTaint(
	functionFQN string,
	statements []*core.Statement,
	defUseChain *core.DefUseChain,
	sources []string,
	sinks []string,
	sanitizers []string,
) *core.TaintSummary

AnalyzeIntraProceduralTaint performs forward taint analysis on a function. Deprecated: Use taint.AnalyzeIntraProceduralTaint instead.

func BuildCallGraph ¶

func BuildCallGraph(codeGraph *graph.CodeGraph, registry *core.ModuleRegistry, projectRoot string) (*core.CallGraph, error)

BuildCallGraph constructs the complete call graph for a Python project. This is Pass 3 of the 3-pass algorithm:

• Pass 1: BuildModuleRegistry - map files to modules
• Pass 2: ExtractImports + ExtractCallSites - parse imports and calls
• Pass 3: BuildCallGraph - resolve calls and build graph

Algorithm:

1. For each Python file in the project: a. Extract imports to build ImportMap b. Extract call sites from AST c. Extract function definitions from main graph
2. For each call site: a. Resolve target name using ImportMap b. Find target function definition in registry c. Add edge from caller to callee d. Store detailed call site information

Parameters:

• codeGraph: the existing code graph with parsed AST nodes
• registry: module registry mapping files to modules
• projectRoot: absolute path to project root

Returns:

• CallGraph: complete call graph with edges and call sites
• error: if any step fails

Example:

Given:
  File: myapp/views.py
    def get_user():
        sanitize(data)  # call to myapp.utils.sanitize

Creates:
  edges: {"myapp.views.get_user": ["myapp.utils.sanitize"]}
  reverseEdges: {"myapp.utils.sanitize": ["myapp.views.get_user"]}
  callSites: {"myapp.views.get_user": [CallSite{Target: "sanitize", ...}]}

func BuildModuleRegistry ¶

func BuildModuleRegistry(rootPath string) (*core.ModuleRegistry, error)

BuildModuleRegistry is a convenience wrapper. Deprecated: Use registry.BuildModuleRegistry instead.

func ExtractCallSites ¶

func ExtractCallSites(filePath string, sourceCode []byte, importMap *core.ImportMap) ([]*core.CallSite, error)

ExtractCallSites extracts all function/method call sites from a Python file. Deprecated: Use resolution.ExtractCallSites instead.

func ExtractClassAttributes ¶

func ExtractClassAttributes(
	filePath string,
	sourceCode []byte,
	modulePath string,
	typeEngine *resolution.TypeInferenceEngine,
	attrRegistry *registry.AttributeRegistry,
) error

ExtractClassAttributes extracts class attributes from Python file. Deprecated: Use extraction.ExtractClassAttributes instead.

func ExtractImports ¶

func ExtractImports(filePath string, sourceCode []byte, registry *core.ModuleRegistry) (*core.ImportMap, error)

ExtractImports extracts all import statements from a Python file and builds an ImportMap. Deprecated: Use resolution.ExtractImports instead.

func ExtractStatements ¶

func ExtractStatements(filePath string, sourceCode []byte, functionNode *sitter.Node) ([]*core.Statement, error)

ExtractStatements extracts all statements from a Python function body. Deprecated: Use extraction.ExtractStatements instead.

func ExtractVariableAssignments ¶

func ExtractVariableAssignments(
	filePath string,
	sourceCode []byte,
	typeEngine *resolution.TypeInferenceEngine,
	registry *core.ModuleRegistry,
	builtinRegistry *registry.BuiltinRegistry,
) error

ExtractVariableAssignments extracts variable assignments from a Python file. Deprecated: Use extraction.ExtractVariableAssignments instead.

func GetFrameworkCategory ¶

func GetFrameworkCategory(fqn string) string

GetFrameworkCategory is a convenience wrapper. Deprecated: Use core.GetFrameworkCategory instead.

func GetFrameworkName ¶

func GetFrameworkName(fqn string) string

GetFrameworkName is a convenience wrapper. Deprecated: Use core.GetFrameworkName instead.

func InitializeCallGraph ¶

func InitializeCallGraph(codeGraph *graph.CodeGraph, projectRoot string) (*CallGraph, *ModuleRegistry, *PatternRegistry, error)

InitializeCallGraph builds the call graph from a code graph. This integrates the 3-pass algorithm into the main initialization pipeline.

Algorithm:

1. Build module registry from project directory
2. Build call graph from code graph using registry
3. Load default security patterns
4. Return integrated result

Parameters:

• codeGraph: the parsed code graph from Initialize()
• projectRoot: absolute path to project root directory

Returns:

• CallGraph: complete call graph with edges and call sites
• ModuleRegistry: module path mappings
• PatternRegistry: loaded security patterns
• error: if any step fails

func IsDjangoORMPattern ¶

func IsDjangoORMPattern(target string) (bool, string)

IsDjangoORMPattern checks if a call target matches Django ORM pattern. Deprecated: Use resolution.IsDjangoORMPattern instead.

func IsORMPattern ¶

func IsORMPattern(target string) (bool, string, string)

IsORMPattern detects if target is any recognized ORM pattern. Deprecated: Use resolution.IsORMPattern instead.

func IsSQLAlchemyORMPattern ¶

func IsSQLAlchemyORMPattern(target string) (bool, string)

IsSQLAlchemyORMPattern checks if a call target matches SQLAlchemy ORM pattern. Deprecated: Use resolution.IsSQLAlchemyORMPattern instead.

func ParseChain ¶

func ParseChain(target string) []resolution.ChainStep

ParseChain parses a method chain into individual steps. Deprecated: Use resolution.ParseChain instead.

func ParsePythonFile ¶

func ParsePythonFile(sourceCode []byte) (*sitter.Tree, error)

ParsePythonFile parses a Python source file using tree-sitter. Deprecated: Use extraction.ParsePythonFile instead.

func PrintAttributeFailureStats ¶

func PrintAttributeFailureStats()

PrintAttributeFailureStats prints statistics about attribute resolution failures. Deprecated: Use resolution.PrintAttributeFailureStats instead.

func ResolveAttributePlaceholders ¶

func ResolveAttributePlaceholders(
	attrRegistry *registry.AttributeRegistry,
	typeEngine *resolution.TypeInferenceEngine,
	moduleRegistry *core.ModuleRegistry,
	codeGraph *graph.CodeGraph,
)

ResolveAttributePlaceholders resolves __ATTR__ placeholders in call targets. Deprecated: Use resolution.ResolveAttributePlaceholders instead.

func ResolveChainedCall ¶

func ResolveChainedCall(
	target string,
	typeEngine *resolution.TypeInferenceEngine,
	builtins *registry.BuiltinRegistry,
	moduleRegistry *core.ModuleRegistry,
	codeGraph *graph.CodeGraph,
	callerFQN string,
	currentModule string,
	callGraph *core.CallGraph,
) (string, bool, *core.TypeInfo)

ResolveChainedCall resolves a method chain by walking each step and tracking types. Deprecated: Use resolution.ResolveChainedCall instead.

func ResolveDjangoORMCall ¶

func ResolveDjangoORMCall(target string, modulePath string, registry *core.ModuleRegistry, codeGraph *graph.CodeGraph) (string, bool)

ResolveDjangoORMCall resolves Django ORM call to a synthetic FQN. Deprecated: Use resolution.ResolveDjangoORMCall instead.

func ResolveORMCall ¶

func ResolveORMCall(target string, modulePath string, registry *core.ModuleRegistry, codeGraph *graph.CodeGraph) (string, bool)

ResolveORMCall detects and resolves ORM calls. Deprecated: Use resolution.ResolveORMCall instead.

func ResolveSQLAlchemyORMCall ¶

func ResolveSQLAlchemyORMCall(target string, modulePath string) (string, bool)

ResolveSQLAlchemyORMCall resolves SQLAlchemy ORM call to a synthetic FQN. Deprecated: Use resolution.ResolveSQLAlchemyORMCall instead.

func ResolveSelfAttributeCall ¶

func ResolveSelfAttributeCall(
	target string,
	callerFQN string,
	typeEngine *resolution.TypeInferenceEngine,
	builtins *registry.BuiltinRegistry,
	callGraph *core.CallGraph,
) (string, bool, *core.TypeInfo)

ResolveSelfAttributeCall resolves self.attr.method() calls using attribute registry. Deprecated: Use resolution.ResolveSelfAttributeCall instead.

func ValidateDjangoModel ¶

func ValidateDjangoModel(modelName string, codeGraph *graph.CodeGraph) bool

ValidateDjangoModel validates that a Django model exists in the code graph. Deprecated: Use resolution.ValidateDjangoModel instead.