hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-18 05:24:01 +02:00
Code Issues Packages Projects Releases Wiki Activity

C#: Use CSV format for CreateEncryptor and CreateDecryptor sinks.

Browse Source
This commit is contained in:
Michael Nebel
2022-06-21 15:30:20 +02:00
parent e6e82ef56d
commit 383ad51682
1 changed files with 14 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

25
csharp/ql/lib/semmle/code/csharp/security/cryptography/HardcodedSymmetricEncryptionKey.qll
View File

@@ -4,6 +4,7 @@
*/
import csharp
private import semmle.code.csharp.dataflow.ExternalFlow
module HardcodedSymmetricEncryptionKey {
private import semmle.code.csharp.frameworks.system.security.cryptography.SymmetricAlgorithm
@@ -46,22 +47,24 @@ module HardcodedSymmetricEncryptionKey {
override string getDescription() { result = "'Key' property assignment" }
}
private class SymmetricEncryptionCreateEncryptorSink extends Sink {
SymmetricEncryptionCreateEncryptorSink() {
exists(SymmetricAlgorithm ag, MethodCall mc | mc = ag.getASymmetricEncryptor() |
this.asExpr() = mc.getArgumentForName("rgbKey")
)
private class SymmetricAlgorithmCreateSinkCsv extends SinkModelCsv {
override predicate row(string row) {
row =
[
"System.Security.Cryptography;SymmetricAlgorithm;true;CreateEncryptor;(System.Byte[],System.Byte[]);;Argument[0];encryption-encryptor",
"System.Security.Cryptography;SymmetricAlgorithm;true;CreateDecryptor;(System.Byte[],System.Byte[]);;Argument[0];encryption-decryptor"
]
}
}
private class SymmetricAlgorithmCreateEncryptorSink extends Sink {
SymmetricAlgorithmCreateEncryptorSink() { sinkNode(this, "encryption-encryptor") }
override string getDescription() { result = "Encryptor(rgbKey, IV)" }
}
private class SymmetricEncryptionCreateDecryptorSink extends Sink {
SymmetricEncryptionCreateDecryptorSink() {
exists(SymmetricAlgorithm ag, MethodCall mc | mc = ag.getASymmetricDecryptor() |
this.asExpr() = mc.getArgumentForName("rgbKey")
)
}
private class SymmetricAlgorithmCreateDecryptorSink extends Sink {
SymmetricAlgorithmCreateDecryptorSink() { sinkNode(this, "encryption-decryptor") }
override string getDescription() { result = "Decryptor(rgbKey, IV)" }
}