coder13 / meta

Meta (Deprecated)

Meta

Check.js:

check.js scans a file and it's required files and reports it's vulnerabilities.

It can be ran both as a command and programmatically.

To run as a command, use

check <file> [options]

To use programmatically, use

require('check');

Check has the flags: recursive (-v), pretty (-p), and verbose (-v).

Recursive will recursively check the file and it's required modules.

Pretty will use PrettyJson to ouput a more human readable version of the reports.

Verbose will print all statements it finds instead of reporting vulnerablities. this would mostly be used for debugging.

meta's Issues

TypeError: Cannot convert object to primitive value

Got this error while running against another project.

/Users/adam_baldwin/Documents/projects/Meta/check.js:556
    ce.raw = ce.name + '(' + (ce.arguments ? ce.arguments.join(','):'') + ')';
                                                          ^
TypeError: Cannot convert object to primitive value
    at Array.join (native)
    at Scope.resolveCallExpression (/Users/adam_baldwin/Documents/projects/Meta/check.js:556:56)
    at Scope.resolveStatement (/Users/adam_baldwin/Documents/projects/Meta/check.js:259:19)
    at /Users/adam_baldwin/Documents/projects/Meta/check.js:641:10
    at Array.forEach (native)
    at Scope.traverse (/Users/adam_baldwin/Documents/projects/Meta/check.js:638:23)
    at Scope.resolveFunctionExpression (/Users/adam_baldwin/Documents/projects/Meta/check.js:609:11)
    at Scope.resolveExpression (/Users/adam_baldwin/Documents/projects/Meta/check.js:472:19)
    at Scope.resolveMemberExpression (/Users/adam_baldwin/Documents/projects/Meta/check.js:579:17)
    at Scope.resolveName (/Users/adam_baldwin/Documents/projects/Meta/check.js:572:15)

TypeError: Cannot convert object to primitive value in check.js line 584

Slightly different variation.

/Users/adam_baldwin/Documents/projects/Meta/check.js:584
    return obj + (node.computed ? '[' + p + ']' : '.' + p);
               ^
TypeError: Cannot convert object to primitive value
    at Scope.resolveMemberExpression (/Users/adam_baldwin/Documents/projects/Meta/check.js:584:13)
    at Scope.resolveName (/Users/adam_baldwin/Documents/projects/Meta/check.js:572:15)
    at Scope.resolveCallExpression (/Users/adam_baldwin/Documents/projects/Meta/check.js:547:18)
    at Scope.resolveExpression (/Users/adam_baldwin/Documents/projects/Meta/check.js:418:19)
    at Scope.resolveExpression (/Users/adam_baldwin/Documents/projects/Meta/check.js:398:19)
    at Scope.track (/Users/adam_baldwin/Documents/projects/Meta/check.js:199:18)
    at /Users/adam_baldwin/Documents/projects/Meta/check.js:255:11
    at Array.forEach (native)
    at Scope.resolveStatement (/Users/adam_baldwin/Documents/projects/Meta/check.js:254:22)
    at /Users/adam_baldwin/Documents/projects/Meta/check.js:725:9

Document Work Flow

Can you document how the tool does what it does? i.e. once it has the ast, what does it do from there to identify sources and sinks and map them together?