PS: Allow non-read member access from 'memberEdge'.

MathiasVP · MathiasVP · commit 634f7b03da42 · 2026-01-21T17:21:47.000Z
diff --git a/powershell/ql/lib/semmle/code/powershell/ApiGraphs.qll b/powershell/ql/lib/semmle/code/powershell/ApiGraphs.qll
@@ -588,7 +588,7 @@ module API {
       )
       or
       exists(DataFlow::Node qualifier | pred = getForwardEndNode(getALocalSourceStrict(qualifier)) |
-        exists(CfgNodes::ExprNodes::MemberExprReadAccessCfgNode read |
+        exists(CfgNodes::ExprNodes::MemberExprCfgNode read |
           read.getQualifier() = qualifier.asExpr() and
           read.getLowerCaseMemberName() = name and
           succ = getForwardStartNode(DataFlow::exprNode(read))

Original file line number	Diff line number	Diff line change
`@@ -588,7 +588,7 @@ module API {`
`588`	`588`	`)`
`589`	`589`	`or`
`590`	`590`	`exists(DataFlow::Node qualifier \| pred = getForwardEndNode(getALocalSourceStrict(qualifier)) \|`
`591`		`- exists(CfgNodes::ExprNodes::MemberExprReadAccessCfgNode read \|`
	`591`	`+ exists(CfgNodes::ExprNodes::MemberExprCfgNode read \|`
`592`	`592`	`read.getQualifier() = qualifier.asExpr() and`
`593`	`593`	`read.getLowerCaseMemberName() = name and`
`594`	`594`	`succ = getForwardStartNode(DataFlow::exprNode(read))`