hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-01 19:55:15 +02:00
Code Issues Packages Projects Releases Wiki Activity

Crypto: Update KDF iteration and count to be path problems

Browse Source
This commit is contained in:
REDMOND\brodes
2025-10-13 15:30:53 -04:00
parent 76128ed8dc
commit 7847e92670
3 changed files with 102 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
shared/quantum/codeql/quantum/experimental/Model.qll
View File

@@ -1580,6 +1580,8 @@ module CryptographyBase<LocationSig Location, InputSig<Location> Input> {
result = instance.getKeySizeConsumer().getConsumer().getAKnownSourceNode()
}
ConsumerInputDataFlowNode getKeySizeConsumer() { result = instance.getKeySizeConsumer() }
/**
* Gets the key artifact produced by this operation.
*/
@@ -1753,11 +1755,19 @@ module CryptographyBase<LocationSig Location, InputSig<Location> Input> {
}
GenericSourceNode getIterationCount() {
result.asElement() = kdfInstance.getIterationCountConsumer().getConsumer().getAGenericSource()
result.asElement() = this.getIterationCountConsumer().getConsumer().getAGenericSource()
}
GenericSourceNode getOutputKeySize() {
result.asElement() = kdfInstance.getOutputKeySizeConsumer().getConsumer().getAGenericSource()
result.asElement() = this.getOutputKeySizeConsumer().getConsumer().getAGenericSource()
}
ConsumerInputDataFlowNode getIterationCountConsumer() {
result = kdfInstance.getIterationCountConsumer()
}
ConsumerInputDataFlowNode getOutputKeySizeConsumer() {
result = kdfInstance.getOutputKeySizeConsumer()
}
override predicate isCandidateAlgorithmNode(AlgorithmNode node) {