phylum-dev / vuln-reach

A library for building tools to determine if vulnerabilities are reachable in a code base.

Home Page:https://phylum.io

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Parameter identifier in `catch` clause ignored

andreaphylum opened this issue · comments

We currently do not adequately address the parameter identifier in a catch block. The scope it belongs to is the body child node of the catch_clause.

How to reproduce

Load the following module

try { } catch(foo) { }

It should error with

Generic("All identifiers should have an access scope: {Node identifier (...)} foo")