Python: Highlight shortcomings of hashlib.new modeling

Author: RasmusWL

python/ql/test/library-tests/frameworks/stdlib/test_md5.py

@@ -27,3 +27,12 @@
 hasher.update(b"secret") # $ CryptographicOperation CryptographicOperationInput=b"secret" CryptographicOperationAlgorithm=MD5
 hasher.update(b" message") # $ CryptographicOperation CryptographicOperationInput=b" message" CryptographicOperationAlgorithm=MD5
 print(hasher.hexdigest())
+
+
+def foo(arg):
+    hasher = hashlib.new(arg)
+    hasher.update(b"secret") # $ MISSING: CryptographicOperation CryptographicOperationInput=b"secret" CryptographicOperationAlgorithm=MD5
+    hasher.update(b" message") # $ MISSING: CryptographicOperation CryptographicOperationInput=b" message" CryptographicOperationAlgorithm=MD5
+    print(hasher.hexdigest())
+
+foo("md5")