feat(model): Make passthrough models more precise

.github/workflows/ci-analyzer-owasp.yaml

@@ -21,7 +21,7 @@ concurrency:
   cancel-in-progress: true
 
 env:
-  EXPECTED_TRACES: 4112
+  EXPECTED_TRACES: 2633
 
 jobs:
   owasp:

model/go/config/builtin.yaml

@@ -7,18 +7,6 @@ passThrough:
   copy:
   - from: arg(0)
     to: result
-- function:
-    package: <builtin>
-    name: append
-    receiver: false
-  taintCopyOnly: true
-  copy:
-  - from:
-    - arg(0)
-    - '[*]'
-    to:
-    - result
-    - '[*]'
 - function:
     package: <builtin>
     name: append
@@ -45,18 +33,6 @@ passThrough:
   copy:
   - from: arg(1)
     to: arg(0)
-- function:
-    package: <builtin>
-    name: copy
-    receiver: false
-  taintCopyOnly: true
-  copy:
-  - from:
-    - arg(1)
-    - '[*]'
-    to:
-    - arg(0)
-    - '[*]'
 - function:
     package: <builtin>
     name: max
@@ -83,3 +59,15 @@ passThrough:
     to:
     - result
     - .<pointer>#<deref>
+- function:
+    package: <builtin>
+    name: append
+    receiver: false
+  taintCopyOnly: true
+  copy:
+  - from:
+    - arg(1)
+    - '[*]'
+    to:
+    - result
+    - '[*]'

model/go/config/errors.yaml

@@ -35,3 +35,7 @@ passThrough:
   copy:
   - from: arg(*)
     to: result
+  - from:
+      - arg(0)
+      - '[*]'
+    to: result

model/go/config/github.com.astaxie.beego.utils.yaml

@@ -7,3 +7,7 @@ passThrough:
   copy:
   - from: arg(*)
     to: result(0)
+  - from:
+      - arg(0)
+      - '[*]'
+    to: result(0)

model/go/config/github.com.beego.beego.utils.yaml

@@ -7,3 +7,7 @@ passThrough:
   copy:
   - from: arg(*)
     to: result(0)
+  - from:
+      - arg(0)
+      - '[*]'
+    to: result(0)

model/go/config/github.com.beego.beego.v2.core.utils.yaml

@@ -7,3 +7,7 @@ passThrough:
   copy:
   - from: arg(*)
     to: result(0)
+  - from:
+      - arg(0)
+      - '[*]'
+    to: result(0)

model/go/config/github.com.davecgh.go-spew.spew.yaml

@@ -7,24 +7,40 @@ passThrough:
   copy:
   - from: arg(*)
     to: result
+  - from:
+      - arg(0)
+      - '[*]'
+    to: result
 - function:
     package: github.com/davecgh/go-spew/spew
     name: Sprint
     receiver: false
   copy:
   - from: arg(*)
     to: result
+  - from:
+      - arg(0)
+      - '[*]'
+    to: result
 - function:
     package: github.com/davecgh/go-spew/spew
     name: Sprintln
     receiver: false
   copy:
   - from: arg(*)
     to: result
+  - from:
+      - arg(0)
+      - '[*]'
+    to: result
 - function:
     package: github.com/davecgh/go-spew/spew
     name: Sprintf
     receiver: false
   copy:
   - from: arg(*)
     to: result
+  - from:
+      - arg(1)
+      - '[*]'
+    to: result

model/go/config/go.uber.org.zap.yaml

@@ -104,3 +104,7 @@ passThrough:
   copy:
   - from: arg(*)
     to: result
+  - from:
+      - arg(0)
+      - '[*]'
+    to: result

model/go/config/html.template.yaml

@@ -51,17 +51,29 @@ passThrough:
   copy:
   - from: arg(*)
     to: result
+  - from:
+      - arg(0)
+      - '[*]'
+    to: result
 - function:
     package: html/template
     name: JSEscaper
     receiver: false
   copy:
   - from: arg(*)
     to: result
+  - from:
+      - arg(0)
+      - '[*]'
+    to: result
 - function:
     package: html/template
     name: URLQueryEscaper
     receiver: false
   copy:
   - from: arg(*)
     to: result
+  - from:
+      - arg(0)
+      - '[*]'
+    to: result

model/go/config/io.yaml

@@ -147,6 +147,10 @@ passThrough:
   copy:
   - from: arg(*)
     to: result
+  - from:
+      - arg(0)
+      - '[*]'
+    to: result
 - function:
     package: io
     name: MultiWriter

model/go/config/net.url.yaml

@@ -192,3 +192,7 @@ passThrough:
   copy:
   - from: arg(*)
     to: result(0)
+  - from:
+      - arg(1)
+      - '[*]'
+    to: result(0)

model/go/config/path.filepath.yaml

@@ -102,3 +102,7 @@ passThrough:
   copy:
   - from: arg(*)
     to: result
+  - from:
+      - arg(0)
+      - '[*]'
+    to: result

model/go/config/path.yaml

@@ -44,3 +44,7 @@ passThrough:
   copy:
   - from: arg(*)
     to: result
+  - from:
+      - arg(0)
+      - '[*]'
+    to: result

model/go/config/reflect.yaml

@@ -303,3 +303,7 @@ passThrough:
   copy:
   - from: arg(*)
     to: result
+  - from:
+      - arg(1)
+      - '[*]'
+    to: result

model/go/config/slices.yaml

@@ -6,48 +6,32 @@ passThrough:
     receiver: false
   taintCopyOnly: true
   copy:
-  - from:
-    - arg(0)
-    - '[*]'
-    to:
-    - result
-    - '[*]'
+  - from: arg(0)
+    to: result
 - function:
     package: slices
     name: Clone
     receiver: false
   taintCopyOnly: true
   copy:
-  - from:
-    - arg(0)
-    - '[*]'
-    to:
-    - result
-    - '[*]'
+  - from: arg(0)
+    to: result
 - function:
     package: slices
     name: Compact
     receiver: false
   taintCopyOnly: true
   copy:
-  - from:
-    - arg(0)
-    - '[*]'
-    to:
-    - result
-    - '[*]'
+  - from: arg(0)
+    to: result
 - function:
     package: slices
     name: CompactFunc
     receiver: false
   taintCopyOnly: true
   copy:
-  - from:
-    - arg(0)
-    - '[*]'
-    to:
-    - result
-    - '[*]'
+  - from: arg(0)
+    to: result
 - function:
     package: slices
     name: Concat
@@ -67,48 +51,32 @@ passThrough:
     receiver: false
   taintCopyOnly: true
   copy:
-  - from:
-    - arg(0)
-    - '[*]'
-    to:
-    - result
-    - '[*]'
+  - from: arg(0)
+    to: result
 - function:
     package: slices
     name: DeleteFunc
     receiver: false
   taintCopyOnly: true
   copy:
-  - from:
-    - arg(0)
-    - '[*]'
-    to:
-    - result
-    - '[*]'
+  - from: arg(0)
+    to: result
 - function:
     package: slices
     name: Grow
     receiver: false
   taintCopyOnly: true
   copy:
-  - from:
-    - arg(0)
-    - '[*]'
-    to:
-    - result
-    - '[*]'
+  - from: arg(0)
+    to: result
 - function:
     package: slices
     name: Insert
     receiver: false
   taintCopyOnly: true
   copy:
-  - from:
-    - arg(0)
-    - '[*]'
-    to:
-    - result
-    - '[*]'
+  - from: arg(0)
+    to: result
 - function:
     package: slices
     name: Insert
@@ -167,24 +135,16 @@ passThrough:
     receiver: false
   taintCopyOnly: true
   copy:
-  - from:
-    - arg(0)
-    - '[*]'
-    to:
-    - result
-    - '[*]'
+  - from: arg(0)
+    to: result
 - function:
     package: slices
     name: Replace
     receiver: false
   taintCopyOnly: true
   copy:
-  - from:
-    - arg(0)
-    - '[*]'
-    to:
-    - result
-    - '[*]'
+  - from: arg(0)
+    to: result
 - function:
     package: slices
     name: Replace

model/go/config/strings.yaml

@@ -260,3 +260,7 @@ passThrough:
   copy:
   - from: arg(*)
     to: result
+  - from:
+      - arg(0)
+      - '[*]'
+    to: result

model/go/config/text.template.yaml

@@ -35,17 +35,29 @@ passThrough:
   copy:
   - from: arg(*)
     to: result
+  - from:
+      - arg(0)
+      - '[*]'
+    to: result
 - function:
     package: text/template
     name: JSEscaper
     receiver: false
   copy:
   - from: arg(*)
     to: result
+  - from:
+      - arg(0)
+      - '[*]'
+    to: result
 - function:
     package: text/template
     name: URLQueryEscaper
     receiver: false
   copy:
   - from: arg(*)
     to: result
+  - from:
+      - arg(0)
+      - '[*]'
+    to: result