Skip to content

Commit 952e417

Browse files
committed
Rust: Tweak some wording.
1 parent e564c41 commit 952e417

File tree

2 files changed

+4
-4
lines changed

2 files changed

+4
-4
lines changed

rust/ql/lib/codeql/rust/security/HardcodedCryptographicValueExtensions.qll

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -80,7 +80,7 @@ module HardcodedCryptographicValue {
8080
}
8181

8282
/**
83-
* A sink for hardcoded cryptographic value from model data.
83+
* An externally modeled sink for hardcoded cryptographic value vulnerabilities.
8484
*/
8585
private class ModelsAsDataSinks extends Sink {
8686
CryptographicValueKind kind;

rust/ql/src/queries/security/CWE-798/HardcodedCryptographicValue.qhelp

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -12,18 +12,18 @@ Hardcoded passwords, keys, initialization vectors and salts should not be used f
1212
Attackers can easily recover hardcoded values if they have access to the source code or compiled executable.
1313
</li>
1414
<li>
15-
Some hardcoded values may be easily guessable.
15+
Some hardcoded values are easily guessable.
1616
</li>
1717
<li>
18-
Hardcoded values may leave cryptographic operations vulnerable to dictionary attacks, rainbow tables, and other forms of cryptanalysis.
18+
Use of hardcoded values may leave cryptographic operations vulnerable to dictionary attacks, rainbow tables, and other forms of cryptanalysis.
1919
</li>
2020
</ul>
2121

2222
</overview>
2323
<recommendation>
2424

2525
<p>
26-
Use randomly generated key material, initialization vectors and salts. Use strong passwords that are not hardcoded in source code.
26+
Use randomly generated key material, initialization vectors and salts. Use strong passwords that are not hardcoded.
2727
</p>
2828

2929
</recommendation>

0 commit comments

Comments
 (0)