hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-16 16:53:25 +01:00
Code Issues Packages Projects Releases Wiki Activity

Crytpo: when key encapsulation or cipher operations have multiple modes at a node, the node name must reflect that it may be any mode.

Browse Source
This commit is contained in:
REDMOND\brodes
2025-10-15 11:01:49 -04:00
parent c7be23e1fe
commit 631e482fd6
1 changed files with 28 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

34
shared/quantum/codeql/quantum/experimental/Model.qll
View File

@@ -1993,9 +1993,20 @@ module CryptographyBase<LocationSig Location, InputSig<Location> Input> {
string nodeName;
CipherOperationNode() {
this.getKeyOperationSubtype() = TEncryptMode() and nodeName = "EncryptOperation"
or
this.getKeyOperationSubtype() = TDecryptMode() and nodeName = "DecryptOperation"
(
if
this.getKeyOperationSubtype() = TEncryptMode() and
this.getKeyOperationSubtype() = TDecryptMode()
then nodeName = "CipherOperation"
else (
if this.getKeyOperationSubtype() = TEncryptMode()
then nodeName = "EncryptOperation"
else (
this.getKeyOperationSubtype() = TDecryptMode() and
nodeName = "DecryptOperation"
)
)
)
}
override string getInternalType() { result = nodeName }
@@ -2005,9 +2016,20 @@ module CryptographyBase<LocationSig Location, InputSig<Location> Input> {
string nodeName;
KeyEncapsulationOperationNode() {
this.getKeyOperationSubtype() = TWrapMode() and nodeName = "WrapOperation"
or
this.getKeyOperationSubtype() = TUnwrapMode() and nodeName = "UnwrapOperation"
(
if
this.getKeyOperationSubtype() = TWrapMode() and
this.getKeyOperationSubtype() = TUnwrapMode()
then nodeName = "KeyEncapsulationOperation"
else (
if this.getKeyOperationSubtype() = TWrapMode()
then nodeName = "WrapOperation"
else (
this.getKeyOperationSubtype() = TUnwrapMode() and
nodeName = "UnwrapOperation"
)
)
)
}
override string getInternalType() { result = nodeName }