Java/MaybeBrokenCryptoAlgorithmQuery

java/ql/src/Security/CWE/CWE-327/MaybeBrokenCryptoAlgorithm.ql
This commit is contained in:
Nora Dimitrijević
2025-10-09 14:00:05 +02:00
parent eebff9c282
commit 247ae1d23c

View File

@@ -81,7 +81,9 @@ module InsecureCryptoConfig implements DataFlow::ConfigSig {
predicate observeDiffInformedIncrementalMode() { any() }
Location getASelectedSinkLocation(DataFlow::Node sink) {
exists(CryptoAlgoSpec c | result = c.getLocation() | sink.asExpr() = c.getAlgoSpec())
exists(CryptoAlgoSpec c | result = sink.getLocation() or result = c.getLocation() |
sink.asExpr() = c.getAlgoSpec()
)
}
}