Skip to content

Commit 2a91743

Browse files
Re-add IvParameterSpec constructor to otherApiCallableCredentialParam
Co-authored-by: Tony Torralba <[email protected]>
1 parent a28f19c commit 2a91743

File tree

1 file changed

+4
-1
lines changed

1 file changed

+4
-1
lines changed

java/ql/lib/semmle/code/java/security/SensitiveApi.qll

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -66,4 +66,7 @@ deprecated predicate javaApiCallableCryptoKeyParam(Callable c, int i) {
6666
* DEPRECATED: Use the `CredentialsSinkNode` class instead.
6767
* Holds if callable `c` from a known API expects a credential parameter at index `i`.
6868
*/
69-
deprecated predicate otherApiCallableCredentialParam(Callable c, int i) { none() }
69+
deprecated predicate otherApiCallableCredentialParam(Callable c, int i) {
70+
c.hasQualifiedName("javax.crypto.spec", "IvParameterSpec", "IvParameterSpec") and
71+
i = 0
72+
}

0 commit comments

Comments
 (0)