Fix false positive and add test.

2026-04-30 11:15:13 +02:00 · 2019-03-21 14:10:05 +01:00
parent 9cb35a8ca9
commit 5eb63ae048
3 changed files with 4 additions and 0 deletions
--- a/python/ql/src/Security/CWE-327/InsecureDefaultProtocol.ql
+++ b/python/ql/src/Security/CWE-327/InsecureDefaultProtocol.ql
@@ -27,6 +27,7 @@ CallNode unsafe_call(string method_name) {
    or
    result = ssl_Context_class().getACall() and
    not exists(result.getArgByName("protocol")) and
+    not exists(result.getArg(0)) and
    method_name = "ssl.SSLContext"
 }