hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-16 16:53:25 +01:00
Code Issues Packages Projects Releases Wiki Activity

Fix diff-informed predicates

Browse Source
This commit is contained in:
Owen Mansel-Chan
2025-11-03 17:20:19 +00:00
committed by Owen Mansel-Chan
parent 7d7af193dc
commit adbc1efe59
2 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
go/ql/lib/semmle/go/frameworks/CryptoLibraries.qll
View File

@@ -21,8 +21,6 @@ private module HashConfig implements DataFlow::ConfigSig {
predicate isSource(DataFlow::Node source) { source instanceof HashAlgorithmInit }
predicate isSink(DataFlow::Node sink) { any() }
predicate observeDiffInformedIncrementalMode() { any() }
}
/** Tracks the flow of hash algorithms. */
@@ -50,8 +48,6 @@ private module EncryptionConfig implements DataFlow::ConfigSig {
predicate isAdditionalFlowStep(DataFlow::Node node1, DataFlow::Node node2) {
any(BlockModeInit nbcm).step(node1, node2)
}
predicate observeDiffInformedIncrementalMode() { any() }
}
/**

4
go/ql/src/Security/CWE-327/WeakSensitiveDataHashing.ql
View File

@@ -39,6 +39,8 @@ module NormalHashFunctionFlow {
// make sinks barriers so that we only report the closest instance
isSink(node)
}
predicate observeDiffInformedIncrementalMode() { any() }
}
import TaintTracking::Global<Config>
@@ -70,6 +72,8 @@ module ComputationallyExpensiveHashFunctionFlow {
// make sinks barriers so that we only report the closest instance
isSink(node)
}
predicate observeDiffInformedIncrementalMode() { any() }
}
import TaintTracking::Global<Config>