phylum-dev/vuln-reach

Parameter identifier in `catch` clause ignored

andreaphylum opened this issue · 0 comments

We currently do not adequately address the parameter identifier in a catch block. The scope it belongs to is the body child node of the catch_clause.

How to reproduce

Load the following module

try { } catch(foo) { }

It should error with

Generic("All identifiers should have an access scope: {Node identifier (...)} foo")