Unable to locate session.get(...) in API graph using API::Node

[Light1Smile]

Hi everyone,

I'm trying to use CodeQL to analyze async code that utilizes aiohttp.ClientSession.get(...). However, I’m having trouble locating the call to session.get(...) using the API::Node class.

The code snippet is as below:

import asyncio
import aiohttp

async def download_file(
    url: str, 
    output_path: str, 
    session: aiohttp.ClientSession,
    headers: dict[str, str],
    total_progress: tqdm
) -> None:
    async with session.get(url, headers=headers) as response:
        file_size = int(response.headers.get('content-length', 0))

my codeql query is :

import python
from API::Node an
where an.getAPredecessor*() = API::moduleImport("aiohttp")
select an

I expected this node to appear in the API graph, possibly under something like:

API::moduleImport("aiohttp").getMember("ClientSession").getReturn().getMember("get")

or

API::moduleImport("aiohttp").getMember("ClientSession").getMember("get")

But in practice, it seems that API::Node does not capture this session.get call at all. Is this normal?

[mbg]

I believe the following gets you what you want:

API::moduleImport("aiohttp").getMember("ClientSession").getInstanceFromAnnotation().getMember("get")

Since the call is on session which is an instance of ClientSession.