mirror of
https://github.com/github/codeql.git
synced 2026-06-28 16:17:03 +02:00
26 lines
759 B
Python
26 lines
759 B
Python
from Cryptodome.Hash import MD5, SHA256
|
|
from my_module import get_password, get_certificate # $ Source
|
|
|
|
|
|
def get_badly_hashed_certificate():
|
|
dangerous = get_certificate() # $ Source
|
|
hasher = MD5.new()
|
|
hasher.update(dangerous) # $ Alert # NOT OK
|
|
return hasher.hexdigest()
|
|
|
|
|
|
def get_badly_hashed_password():
|
|
dangerous = get_password() # $ Source
|
|
hasher = MD5.new()
|
|
hasher.update(dangerous) # $ Alert # NOT OK
|
|
return hasher.hexdigest()
|
|
|
|
|
|
def get_badly_hashed_password2():
|
|
dangerous = get_password() # $ Source
|
|
# Although SHA-256 is a strong cryptographic hash functions,
|
|
# it is not suitable for password hashing.
|
|
hasher = SHA256.new()
|
|
hasher.update(dangerous) # $ Alert # NOT OK
|
|
return hasher.hexdigest()
|