Update TimingAttack.qll

2026-05-01 19:55:15 +02:00 · 2023-02-16 01:21:50 +01:00
parent b8f9b2b424
commit fbfe23b7c4
1 changed files with 2 additions and 0 deletions
--- a/python/ql/src/experimental/semmle/python/security/TimingAttack.qll
+++ b/python/ql/src/experimental/semmle/python/security/TimingAttack.qll
@@ -308,6 +308,8 @@ private class CompareSink extends DataFlow::Node {
    ) or    
   exists(Compare compare |
      (
+        compare.getOp(0) instanceof Eq or
+        compare.getOp(0) instanceof NotEq or  
        compare.getOp(0) instanceof IsNot 
      ) and
      (