Hi all,

I've written a path-problem query for python to track certain data flows I'm interested at that have the input parameters (sys.argv, argparse, etc.) as sources and certain APIs as sinks. Without getting into the details of what's the source and what's the sink (I can share, but probably not needed), the body of the query looks like:

module MyFlow= TaintTracking::Global<MyTaintAnalysis>;import MyFlow::PathGraphfrom MyFlow::PathNodesource, MyFlow::PathNodesinkwhere MyFlow::flowPath(source,sink)selectsink.getNode(),source,sink,"Input arg flowing from "+source.getNode()+" into sink API"

For each node in the PathGraph I would like to obtain the parent expression, if any. For instance, let's consider the following example:

1x=sys.argv[1]2print("no data flow")3y=x+"A"4print(y)

If I look into the Sarif generated with the query above I'll get the line of each node and thestartColumn,endColumn of the variable involved in the Path that is reached by the taint, e.g.,x (line 1),x (line 3),y (line 4). I would like to obtain the parent expression for each node, e.g.,x = sys.argv[1] ,y=x + "A" andprint(y) . Is there a way to do so ? Thank you