hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-26 17:25:19 +02:00
Code Issues Packages Projects Releases Wiki Activity

Crypto: Overhaul/refactor of EVPInitialzers. Update cipher operation to disallow null key and IV on initializers (typically do not represent an actual key or IV).

Browse Source
This commit is contained in:
REDMOND\brodes
2025-06-12 00:41:15 -04:00
parent 8f25380655
commit 20e2c7cefd
9 changed files with 186 additions and 141 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
cpp/ql/test/experimental/library-tests/quantum/node_edges.expected
View File

@@ -1,30 +1,22 @@
| openssl_basic.c:23:37:23:51 | KeyOperationAlgorithm | Mode | openssl_basic.c:23:37:23:51 | ModeOfOperation |
| openssl_basic.c:23:37:23:51 | KeyOperationAlgorithm | Padding | openssl_basic.c:23:37:23:51 | KeyOperationAlgorithm |
| openssl_basic.c:23:62:23:65 | Key | Source | openssl_basic.c:23:62:23:65 | Key |
| openssl_basic.c:23:68:23:71 | Nonce | Source | openssl_basic.c:23:68:23:71 | Nonce |
| openssl_basic.c:31:49:31:51 | Key | Source | openssl_basic.c:179:43:179:76 | Constant |
| openssl_basic.c:31:54:31:55 | Nonce | Source | openssl_basic.c:180:42:180:59 | Constant |
| openssl_basic.c:35:54:35:62 | Message | Source | openssl_basic.c:181:49:181:87 | Constant |
| openssl_basic.c:40:13:40:31 | EncryptOperation | Algorithm | openssl_basic.c:23:37:23:51 | KeyOperationAlgorithm |
| openssl_basic.c:40:13:40:31 | EncryptOperation | Input | openssl_basic.c:35:54:35:62 | Message |
| openssl_basic.c:40:13:40:31 | EncryptOperation | Key | openssl_basic.c:23:62:23:65 | Key |
| openssl_basic.c:40:13:40:31 | EncryptOperation | Key | openssl_basic.c:31:49:31:51 | Key |
| openssl_basic.c:40:13:40:31 | EncryptOperation | Nonce | openssl_basic.c:23:68:23:71 | Nonce |
| openssl_basic.c:40:13:40:31 | EncryptOperation | Nonce | openssl_basic.c:31:54:31:55 | Nonce |
| openssl_basic.c:40:13:40:31 | EncryptOperation | Output | openssl_basic.c:35:36:35:45 | KeyOperationOutput |
| openssl_basic.c:40:13:40:31 | EncryptOperation | Output | openssl_basic.c:40:38:40:53 | KeyOperationOutput |
| openssl_basic.c:69:33:69:47 | KeyOperationAlgorithm | Mode | openssl_basic.c:69:33:69:47 | ModeOfOperation |
| openssl_basic.c:69:33:69:47 | KeyOperationAlgorithm | Padding | openssl_basic.c:69:33:69:47 | KeyOperationAlgorithm |
| openssl_basic.c:69:58:69:61 | Key | Source | openssl_basic.c:69:58:69:61 | Key |
| openssl_basic.c:69:64:69:67 | Nonce | Source | openssl_basic.c:69:64:69:67 | Nonce |
| openssl_basic.c:77:45:77:47 | Key | Source | openssl_basic.c:179:43:179:76 | Constant |
| openssl_basic.c:77:50:77:51 | Nonce | Source | openssl_basic.c:180:42:180:59 | Constant |
| openssl_basic.c:81:49:81:58 | Message | Source | openssl_basic.c:81:49:81:58 | Message |
| openssl_basic.c:90:11:90:29 | DecryptOperation | Algorithm | openssl_basic.c:69:33:69:47 | KeyOperationAlgorithm |
| openssl_basic.c:90:11:90:29 | DecryptOperation | Input | openssl_basic.c:81:49:81:58 | Message |
| openssl_basic.c:90:11:90:29 | DecryptOperation | Key | openssl_basic.c:69:58:69:61 | Key |
| openssl_basic.c:90:11:90:29 | DecryptOperation | Key | openssl_basic.c:77:45:77:47 | Key |
| openssl_basic.c:90:11:90:29 | DecryptOperation | Nonce | openssl_basic.c:69:64:69:67 | Nonce |
| openssl_basic.c:90:11:90:29 | DecryptOperation | Nonce | openssl_basic.c:77:50:77:51 | Nonce |
| openssl_basic.c:90:11:90:29 | DecryptOperation | Output | openssl_basic.c:81:32:81:40 | KeyOperationOutput |
| openssl_basic.c:90:11:90:29 | DecryptOperation | Output | openssl_basic.c:90:36:90:50 | KeyOperationOutput |

2
cpp/ql/test/experimental/library-tests/quantum/node_properties.expected
View File

@@ -4,7 +4,6 @@
| openssl_basic.c:23:37:23:51 | KeyOperationAlgorithm | Structure | Block | openssl_basic.c:23:37:23:51 | openssl_basic.c:23:37:23:51 |
| openssl_basic.c:23:37:23:51 | ModeOfOperation | Name | GCM | openssl_basic.c:23:37:23:51 | openssl_basic.c:23:37:23:51 |
| openssl_basic.c:23:37:23:51 | ModeOfOperation | RawName | EVP_aes_256_gcm | openssl_basic.c:23:37:23:51 | openssl_basic.c:23:37:23:51 |
| openssl_basic.c:23:62:23:65 | Key | KeyType | Unknown | openssl_basic.c:23:62:23:65 | openssl_basic.c:23:62:23:65 |
| openssl_basic.c:31:49:31:51 | Key | KeyType | Unknown | openssl_basic.c:31:49:31:51 | openssl_basic.c:31:49:31:51 |
| openssl_basic.c:40:13:40:31 | EncryptOperation | KeyOperationSubtype | Encrypt | openssl_basic.c:40:13:40:31 | openssl_basic.c:40:13:40:31 |
| openssl_basic.c:69:33:69:47 | KeyOperationAlgorithm | KeySize | 256 | openssl_basic.c:69:33:69:47 | openssl_basic.c:69:33:69:47 |
@@ -13,7 +12,6 @@
| openssl_basic.c:69:33:69:47 | KeyOperationAlgorithm | Structure | Block | openssl_basic.c:69:33:69:47 | openssl_basic.c:69:33:69:47 |
| openssl_basic.c:69:33:69:47 | ModeOfOperation | Name | GCM | openssl_basic.c:69:33:69:47 | openssl_basic.c:69:33:69:47 |
| openssl_basic.c:69:33:69:47 | ModeOfOperation | RawName | EVP_aes_256_gcm | openssl_basic.c:69:33:69:47 | openssl_basic.c:69:33:69:47 |
| openssl_basic.c:69:58:69:61 | Key | KeyType | Unknown | openssl_basic.c:69:58:69:61 | openssl_basic.c:69:58:69:61 |
| openssl_basic.c:77:45:77:47 | Key | KeyType | Unknown | openssl_basic.c:77:45:77:47 | openssl_basic.c:77:45:77:47 |
| openssl_basic.c:90:11:90:29 | DecryptOperation | KeyOperationSubtype | Decrypt | openssl_basic.c:90:11:90:29 | openssl_basic.c:90:11:90:29 |
| openssl_basic.c:116:38:116:47 | HashAlgorithm | DigestSize | 256 | openssl_basic.c:116:38:116:47 | openssl_basic.c:116:38:116:47 |

4
cpp/ql/test/experimental/library-tests/quantum/nodes.expected
View File

@@ -1,7 +1,5 @@
| openssl_basic.c:23:37:23:51 | KeyOperationAlgorithm |
| openssl_basic.c:23:37:23:51 | ModeOfOperation |
| openssl_basic.c:23:62:23:65 | Key |
| openssl_basic.c:23:68:23:71 | Nonce |
| openssl_basic.c:31:49:31:51 | Key |
| openssl_basic.c:31:54:31:55 | Nonce |
| openssl_basic.c:35:36:35:45 | KeyOperationOutput |
@@ -10,8 +8,6 @@
| openssl_basic.c:40:38:40:53 | KeyOperationOutput |
| openssl_basic.c:69:33:69:47 | KeyOperationAlgorithm |
| openssl_basic.c:69:33:69:47 | ModeOfOperation |
| openssl_basic.c:69:58:69:61 | Key |
| openssl_basic.c:69:64:69:67 | Nonce |
| openssl_basic.c:77:45:77:47 | Key |
| openssl_basic.c:77:50:77:51 | Nonce |
| openssl_basic.c:81:32:81:40 | KeyOperationOutput |