Update TimingAttackAgainstHeader.ql

ahmed-farid-dev · smowton · commit 2eee6b4f698b · 2022-02-25T17:33:07.000Z
diff --git a/java/ql/src/experimental/Security/CWE/CWE-208/TimingAttackAgainstHeader.ql b/java/ql/src/experimental/Security/CWE/CWE-208/TimingAttackAgainstHeader.ql
@@ -34,7 +34,7 @@ private class NonConstantTimeEqualsCall extends MethodAccess {
 
 private predicate isNonConstantEqualsCallArgument(Expr e) {
   exists(NonConstantTimeEqualsCall call |
-    e = [call.getQualifier(), call.getAnArgument()]
+    e = [call.getQualifier(), call.getArgument(0)]
   )
 }
 

Original file line number	Diff line number	Diff line change
`@@ -34,7 +34,7 @@ private class NonConstantTimeEqualsCall extends MethodAccess {`
`34`	`34`
`35`	`35`	`private predicate isNonConstantEqualsCallArgument(Expr e) {`
`36`	`36`	`exists(NonConstantTimeEqualsCall call \|`
`37`		`- e = [call.getQualifier(), call.getAnArgument()]`
	`37`	`+ e = [call.getQualifier(), call.getArgument(0)]`
`38`	`38`	`)`
`39`	`39`	`}`
`40`	`40`