add a runsImmediately predicate to CodeExecution (name chosen by Copilot)

Author: erik-krogh

ruby/ql/lib/codeql/ruby/Concepts.qll

@@ -701,6 +701,9 @@ module SystemCommandExecution {
 class CodeExecution extends DataFlow::Node instanceof CodeExecution::Range {
   /** Gets the argument that specifies the code to be executed. */
   DataFlow::Node getCode() { result = super.getCode() }
+
+  /** Holds if this execution immediately runs the input as code, as opposed to loading some code using the input as a "path". */
+  predicate runsImmediately() { super.runsImmediately() }
 }
 
 /** Provides a class for modeling new dynamic code execution APIs. */
@@ -714,6 +717,9 @@ module CodeExecution {
   abstract class Range extends DataFlow::Node {
     /** Gets the argument that specifies the code to be executed. */
     abstract DataFlow::Node getCode();
+
+    /** Holds if this execution immediately runs the input as code, as opposed to loading some code using the input as a "path". */
+    predicate runsImmediately() { any() }
   }
 }
 

ruby/ql/lib/codeql/ruby/frameworks/ActiveJob.qll

@@ -25,6 +25,8 @@ module ActiveJob {
       }
 
       override DataFlow::Node getCode() { result = this.getArgument(0) }
+
+      override predicate runsImmediately() { none() }
     }
   }
 }

ruby/ql/lib/codeql/ruby/frameworks/ActiveStorage.qll

@@ -221,5 +221,7 @@ module ActiveStorage {
     }
 
     override DataFlow::Node getCode() { result = this.getArgument(0) }
+
+    override predicate runsImmediately() { none() }
   }
 }

ruby/ql/lib/codeql/ruby/frameworks/ActiveSupport.qll

@@ -35,6 +35,8 @@ module ActiveSupport {
         }
 
         override DataFlow::Node getCode() { result = this.getReceiver() }
+
+        override predicate runsImmediately() { none() }
       }
 
       /**

ruby/ql/lib/codeql/ruby/frameworks/core/Kernel.qll

@@ -166,6 +166,8 @@ module Kernel {
     SendCallCodeExecution() { this.getMethodName() = "send" }
 
     override DataFlow::Node getCode() { result = this.getArgument(0) }
+
+    override predicate runsImmediately() { none() }
   }
 
   private class TapSummary extends SimpleSummarizedCallable {

ruby/ql/lib/codeql/ruby/frameworks/core/Module.qll

@@ -42,5 +42,7 @@ module Module {
     }
 
     override DataFlow::Node getCode() { result = this.getArgument(0) }
+
+    override predicate runsImmediately() { none() }
   }
 }