hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-28 18:25:24 +02:00
Code Issues Packages Projects Releases Wiki Activity

Update python/ql/src/semmle/python/frameworks/Cryptodome.qll

Browse Source 
Co-authored-by: Rasmus Wriedt Larsen <rasmuswriedtlarsen@gmail.com>
This commit is contained in:
yoff
2021-05-19 08:08:59 +02:00
committed by GitHub
parent 97fadd9970
commit 60da193620
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
python/ql/src/semmle/python/frameworks/Cryptodome.qll
View File

@@ -138,6 +138,8 @@ private module CryptodomeModel {
methodName in ["update"] and
result in [this.getArg(0), this.getArgByName("data")]
or
// although `mac_tag` is used as the parameter name in the spec above, some implementations use `received_mac_tag`, for an example, see
// https://github.com/Legrandin/pycryptodome/blob/5dace638b70ac35bb5d9b565f3e75f7869c9d851/lib/Crypto/Cipher/ChaCha20_Poly1305.py#L207
methodName in ["verify"] and
result in [this.getArg(0), this.getArgByName(["mac_tag", "received_mac_tag"])]
or