hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-05 05:35:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

use CompileTimeConstantExpr for FN with VarAccess, and remove KeyGeneratorInitConfiguration

Browse Source
This commit is contained in:
Jami Cogswell
2022-10-04 14:39:39 -04:00
parent 75794ec7a7
commit 7de9c05c9d
3 changed files with 227 additions and 45 deletions
Download Patch File Download Diff File Expand all files Collapse all files

22
java/ql/test/query-tests/security/CWE-326/InsufficientKeySizeTest.java
View File

@@ -97,18 +97,18 @@ public class InsufficientKeySizeTest {
// BAD: Key size is less than 128
keyGen3.init(size1); // $ hasInsufficientKeySize
int size2 = 1024;
KeyPairGenerator keyPairGen18 = KeyPairGenerator.getInstance("RSA");
// BAD: Key size is less than 2048
keyPairGen18.initialize(size2); // $ hasInsufficientKeySize
// int size2 = 1024;
// KeyPairGenerator keyPairGen18 = KeyPairGenerator.getInstance("RSA");
// // BAD: Key size is less than 2048
// keyPairGen18.initialize(size2); // $ hasInsufficientKeySize
int keysize = 64;
test(keysize);
// int keysize = 64;
// test(keysize);
}
public void test(int keySize) throws java.security.NoSuchAlgorithmException, java.security.InvalidAlgorithmParameterException {
KeyGenerator keyGen4 = KeyGenerator.getInstance("AES");
// BAD: Key size is less than 128
keyGen4.init(keySize); // $ hasInsufficientKeySize
}
// public void test(int keySize) throws java.security.NoSuchAlgorithmException, java.security.InvalidAlgorithmParameterException {
// KeyGenerator keyGen4 = KeyGenerator.getInstance("AES");
// // BAD: Key size is less than 128
// keyGen4.init(keySize); // $ hasInsufficientKeySize
// }
}