Kotlin: test name-based destructuring

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Author: andersfugmann

java/ql/test-kotlin2/library-tests/name-based-destructuring/test.expected

@@ -0,0 +1,4 @@
+selectedProperty
+| test.kt:10:10:10:17 | currency | test.kt:10:10:10:17 | getCurrency(...) | test.kt:3:36:3:55 | getCurrency |
+#select
+| test.kt:14:28:14:35 | source(...) | test.kt:11:10:11:17 | currency |

java/ql/test-kotlin2/library-tests/name-based-destructuring/test.kt

@@ -0,0 +1,14 @@
+// codeql-extractor-kotlin-options: -XXLanguage:+FullValueClasses -XXLanguage:+NameBasedDestructuring -XXLanguage:+EnableNameBasedDestructuringShortForm
+
+value class Money(val amount: Int, val currency: String)
+
+fun source(): String = ""
+
+fun sink(value: String) {}
+
+fun test(money: Money) {
+    val (currency) = money
+    sink(currency)
+}
+
+fun flow() = test(Money(0, source()))

java/ql/test-kotlin2/library-tests/name-based-destructuring/test.ql

@@ -0,0 +1,22 @@
+import java
+import semmle.code.java.dataflow.TaintTracking
+
+query predicate selectedProperty(
+  LocalVariableDeclExpr variable, MethodCall initializer, Method getter
+) {
+  variable.getVariable().hasName("currency") and
+  initializer = variable.getInit() and
+  getter = initializer.getMethod()
+}
+
+module Config implements DataFlow::ConfigSig {
+  predicate isSource(DataFlow::Node n) { n.asExpr().(MethodCall).getMethod().hasName("source") }
+
+  predicate isSink(DataFlow::Node n) { n.asExpr().(Argument).getCall().getCallee().hasName("sink") }
+}
+
+module Flow = TaintTracking::Global<Config>;
+
+from DataFlow::Node source, DataFlow::Node sink
+where Flow::flow(source, sink)
+select source, sink

java/ql/test-kotlin2/library-tests/name-based-destructuring/test.qlref

@@ -0,0 +1 @@
+test.ql