C++: Catch another encryption clue.

2025-12-20 10:46:30 +01:00 · 2022-01-21 15:32:25 +00:00
parent 97447d0b3a
commit 0b98397e9b
3 changed files with 10 additions and 2 deletions
--- a/cpp/ql/src/Security/CWE/CWE-311/CleartextTransmission.ql
+++ b/cpp/ql/src/Security/CWE/CWE-311/CleartextTransmission.ql
@@ -171,6 +171,11 @@ class Encrypted extends Expr {
        this = fc.getAnArgument()
      )
    )
+    or
+    exists(Type t |
+      this.getType().refersTo(t) and
+      t.getName().toLowerCase().regexpMatch(".*(crypt|encode|decode|hash|securezero).*")
+    )
  }
 }