hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-29 02:35:15 +02:00
Code Issues Packages Projects Releases Wiki Activity

Fixing query & test

Browse Source
This commit is contained in:
Raul Garcia (MSFT)
2021-08-04 19:37:57 -07:00
parent 8544356f90
commit 7340a1293f
3 changed files with 25 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
csharp/ql/src/Security Features/InsecureRandomness.ql
View File

@@ -60,11 +60,12 @@ module Random {
any(MethodCall mc |
mc.getQualifier().getType().(RefType).hasQualifiedName("System", "Random")
or
// by using `% 87` on a `byte`, this function has a bias
// by using `% 87` on a `byte`, `System.Web.Security.Membership.GeneratePassword` has a bias
mc.getQualifier()
.getType()
.(RefType)
.hasQualifiedName("System.Web.Security", "GeneratePassword")
.hasQualifiedName("System.Web.Security", "Membership") and
mc.getTarget().hasName("GeneratePassword")
)
}
}