diff --git a/python/ql/lib/semmle/python/frameworks/Cryptography.qll b/python/ql/lib/semmle/python/frameworks/Cryptography.qll index 29b9c6b17e8..954def9e7da 100644 --- a/python/ql/lib/semmle/python/frameworks/Cryptography.qll +++ b/python/ql/lib/semmle/python/frameworks/Cryptography.qll @@ -195,8 +195,8 @@ private module CryptographyModel { call.getArg(0), call.getArgByName("algorithm") ] and exists(DataFlow::Node modeArg | modeArg in [call.getArg(1), call.getArgByName("mode")] | - if modeArg = modeClassRef(modeName).getReturn().getAUse() - then any() + if modeArg = modeClassRef(_).getReturn().getAUse() + then modeArg = modeClassRef(modeName).getReturn().getAUse() else modeName = "" ) )