File tree Expand file tree Collapse file tree 1 file changed +1
-7
lines changed
java/ql/src/experimental/Security/CWE/CWE-208 Expand file tree Collapse file tree 1 file changed +1
-7
lines changed Original file line number Diff line number Diff line change @@ -28,12 +28,6 @@ private predicate isNonConstantEqualsCallArgument(Expr e) {
28
28
e = [ call .getQualifier ( ) , call .getAnArgument ( ) ]
29
29
}
30
30
31
-
32
- class NonConstantTimeComparisonSink extends DataFlow:: Node {
33
- NonConstantTimeComparisonSink ( ) {
34
- isNonConstantEqualsCallArgument ( this .asExpr ( ) )
35
- }
36
- }
37
31
class ClientSuppliedIpTokenCheck extends DataFlow:: Node {
38
32
ClientSuppliedIpTokenCheck ( ) {
39
33
exists ( MethodAccess ma |
@@ -52,7 +46,7 @@ class NonConstantTimeComparisonConfig extends TaintTracking::Configuration {
52
46
53
47
override predicate isSource ( DataFlow:: Node source ) { source instanceof ClientSuppliedIpTokenCheck }
54
48
55
- override predicate isSink ( DataFlow:: Node sink ) { sink instanceof NonConstantTimeComparisonSink }
49
+ override predicate isSink ( DataFlow:: Node sink ) { isNonConstantEqualsCallArgument ( sink . asExpr ( ) ) }
56
50
}
57
51
58
52
from DataFlow:: PathNode source , DataFlow:: PathNode sink , NonConstantTimeComparisonConfig conf
You can’t perform that action at this time.
0 commit comments