diff --git a/python/ql/lib/semmle/python/frameworks/Cryptography.qll b/python/ql/lib/semmle/python/frameworks/Cryptography.qll index 2b891f04c0c..29b9c6b17e8 100644 --- a/python/ql/lib/semmle/python/frameworks/Cryptography.qll +++ b/python/ql/lib/semmle/python/frameworks/Cryptography.qll @@ -195,9 +195,9 @@ private module CryptographyModel { call.getArg(0), call.getArgByName("algorithm") ] and exists(DataFlow::Node modeArg | modeArg in [call.getArg(1), call.getArgByName("mode")] | - modeArg = modeClassRef(modeName).getReturn().getAUse() - or - modeArg.asExpr() instanceof None and modeName = "" + if modeArg = modeClassRef(modeName).getReturn().getAUse() + then any() + else modeName = "" ) ) }