hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-25 16:55:19 +02:00
Code Issues Packages Projects Releases Wiki Activity

Update ruby/ql/src/experimental/cwe-208/UnsafeHmacComparison.ql

Browse Source 
Co-authored-by: Alex Ford <alexrford@users.noreply.github.com>
This commit is contained in:
Brandon Stewart
2023-08-10 09:21:16 -04:00
committed by GitHub
parent 7882cf0bf0
commit b899b648e5
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
ruby/ql/src/experimental/cwe-208/UnsafeHmacComparison.ql
View File

@@ -38,6 +38,7 @@ private module UnsafeHmacComparison {
import DataFlow::Global<Config>
}
private import UnsafeHmacComparison::PathGraph
from UnsafeHmacComparison::PathNode source, UnsafeHmacComparison::PathNode sink
where UnsafeHmacComparison::flowPath(source, sink)
select sink.getNode(), source, sink, "This comparison is potentially vulnerable to a timing attack."