hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-01 03:35:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

C++: performance tweaks for InsufficientKeySize

Browse Source
This commit is contained in:
Robert Marsh
2022-03-02 15:59:42 -05:00
parent a60fe9f4b8
commit 9fb94d85b4
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
cpp/ql/src/Security/CWE/CWE-326/InsufficientKeySize.ql
View File

@@ -31,7 +31,10 @@ class KeyStrengthFlow extends DataFlow::Configuration {
KeyStrengthFlow() { this = "KeyStrengthFlow" }
override predicate isSource(DataFlow::Node node) {
node.asInstruction().(IntegerConstantInstruction).getValue() != "0"
exists(int bits |
node.asInstruction().(IntegerConstantInstruction).getValue().toInt() = bits and
bits < getMinimumKeyStrength(_, _) and
bits > 0 // exclude sentinel values
}
override predicate isSink(DataFlow::Node node) {