hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-23 20:26:32 +01:00
Code Issues Packages Projects Releases Wiki Activity

Update TimingAttack.qll

Browse Source
This commit is contained in:
Ahmed Farid
2022-07-20 13:03:55 +01:00
committed by GitHub
parent 238d3250c3
commit ee743e61e9
1 changed files with 22 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files

37
python/ql/src/experimental/Security/CWE-208/TimingAttack.qll
View File

@@ -5,6 +5,27 @@ private import semmle.python.dataflow.new.TaintTracking3
private import semmle.python.ApiGraphs private import semmle.python.ApiGraphs
private import semmle.python.dataflow.new.RemoteFlowSources private import semmle.python.dataflow.new.RemoteFlowSources
class ProduceHashCall extends DataFlow::CallCfgNode {
ProduceHashCall() {
this = API::moduleImport("hmac").getMember("digest").getACall() or
this =
API::moduleImport("hmac")
.getMember("new")
.getReturn()
.getMember(["digest", "hexdigest"])
.getACall() or
this =
API::moduleImport("hashlib")
.getMember([
"new", "sha1", "sha224", "sha256", "sha384", "sha512", "blake2b", "blake2s", "md5"
])
.getReturn()
.getMember(["digest", "hexdigest"])
.getACall()
}
}
/** A data flow sink for comparison. */ /** A data flow sink for comparison. */
class CompareSink extends DataFlow::Node { class CompareSink extends DataFlow::Node {
CompareSink() { CompareSink() {
@@ -126,21 +147,7 @@ class UserInputMsgConfig extends TaintTracking::Configuration {
override predicate isSource(DataFlow::Node source) { source instanceof RemoteFlowSource } override predicate isSource(DataFlow::Node source) { source instanceof RemoteFlowSource }
override predicate isSink(DataFlow::Node sink) { override predicate isSink(DataFlow::Node sink) {
sink = API::moduleImport("hmac").getMember("digest").getACall() or sink = any(CryptographicOperation cryptography).getAnInput()
sink =
API::moduleImport("hmac")
.getMember("new")
.getReturn()
.getMember(["digest", "hexdigest"])
.getACall() or
sink =
API::moduleImport("hashlib")
.getMember([
"new", "sha1", "sha224", "sha256", "sha384", "sha512", "blake2b", "blake2s", "md5"
])
.getReturn()
.getMember(["digest", "hexdigest"])
.getACall()
} }
} }