hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-21 03:06:31 +01:00
Code Issues Packages Projects Releases Wiki Activity

Update TimingAttackAgainstHeader.ql

Browse Source
This commit is contained in:
Ahmed Farid
2022-02-21 23:32:52 +01:00
committed by Chris Smowton
parent 36cf1010f8
commit e79c0eaa71
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
java/ql/src/experimental/Security/CWE/CWE-208/TimingAttackAgainstHeader.ql
View File

@@ -26,6 +26,7 @@ private class NonConstantTimeEqualsCall extends MethodAccess {
private predicate isNonConstantEqualsCallArgument(Expr e) { private predicate isNonConstantEqualsCallArgument(Expr e) {
exists(NonConstantTimeEqualsCall call | exists(NonConstantTimeEqualsCall call |
e = [call.getQualifier(), call.getAnArgument()] e = [call.getQualifier(), call.getAnArgument()]
)
} }
class ClientSuppliedIpTokenCheck extends DataFlow::Node { class ClientSuppliedIpTokenCheck extends DataFlow::Node {