diff --git a/java/ql/lib/semmle/code/java/security/InsufficientKeySize.qll b/java/ql/lib/semmle/code/java/security/InsufficientKeySize.qll index e559437307f..b156b594a70 100644 --- a/java/ql/lib/semmle/code/java/security/InsufficientKeySize.qll +++ b/java/ql/lib/semmle/code/java/security/InsufficientKeySize.qll @@ -38,7 +38,7 @@ private module Asymmetric { Sink() { exists(KeyPairGenInit kpgInit, KeyPairGen kpg | algoName in ["RSA", "DSA", "DH"] and - kpg.getAlgoName().matches(algoName) and + kpg.getAlgoName() = algoName and DataFlow::localExprFlow(kpg, kpgInit.getQualifier()) and this.asExpr() = kpgInit.getKeySizeArg() )