From 721070a191b3278ba53c10ca07b49b5877ed2971 Mon Sep 17 00:00:00 2001 From: Geoffrey White <40627776+geoffw0@users.noreply.github.com> Date: Thu, 18 Jun 2026 23:37:12 +0100 Subject: [PATCH] Rust: Make the Seed case a tiny bit more realistic. --- .../CryptographicOperations.expected | 2 +- .../security/CWE-327/WeakSensitiveDataHashing/test.rs | 6 +++--- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/rust/ql/test/query-tests/security/CWE-327/WeakSensitiveDataHashing/CryptographicOperations.expected b/rust/ql/test/query-tests/security/CWE-327/WeakSensitiveDataHashing/CryptographicOperations.expected index 8a2657bfd0b..a190d85cce9 100644 --- a/rust/ql/test/query-tests/security/CWE-327/WeakSensitiveDataHashing/CryptographicOperations.expected +++ b/rust/ql/test/query-tests/security/CWE-327/WeakSensitiveDataHashing/CryptographicOperations.expected @@ -7,6 +7,6 @@ | test.rs:74:9:74:23 | ...::new(...) | HashingAlgorithm MD5 WEAK | | test.rs:133:26:133:40 | ...::new(...) | HashingAlgorithm MD5 WEAK | | test.rs:156:26:156:40 | ...::new(...) | HashingAlgorithm MD5 WEAK | -| test.rs:176:13:176:23 | ...::new(...) | EncryptionAlgorithm SEED | +| test.rs:176:13:176:24 | ...::new(...) | EncryptionAlgorithm SEED | | test.rs:199:22:199:32 | ...::new(...) | HashingAlgorithm SHA1 WEAK | | test.rs:211:13:211:35 | ...::compute(...) | HashingAlgorithm MD5 WEAK inputs:1 | diff --git a/rust/ql/test/query-tests/security/CWE-327/WeakSensitiveDataHashing/test.rs b/rust/ql/test/query-tests/security/CWE-327/WeakSensitiveDataHashing/test.rs index e3fc7d556d7..ff1c0e9c85f 100644 --- a/rust/ql/test/query-tests/security/CWE-327/WeakSensitiveDataHashing/test.rs +++ b/rust/ql/test/query-tests/security/CWE-327/WeakSensitiveDataHashing/test.rs @@ -165,15 +165,15 @@ struct Seed { } impl Seed { - fn new() -> Self { + fn new(seed_value: u64) -> Self { Seed { } } } fn test_seed() { // this will be misrecognized as a use of the SEED algorithm, but being a strong - // algorithm there is no query result anyway. - let _ = Seed::new(); // $ Alert[rust/summary/cryptographic-operations] + // algorithm and not sensitive data, there is no query result anyway. + let _ = Seed::new(0); // $ Alert[rust/summary/cryptographic-operations] } // ---