Experiment: Remove IVs from credentials

egregius313 · egregius313 · commit c689065f83a5 · 2023-10-25T14:31:55.000-04:00
diff --git a/java/ql/lib/semmle/code/java/security/SensitiveApi.qll b/java/ql/lib/semmle/code/java/security/SensitiveApi.qll
@@ -35,7 +35,7 @@ class CryptoKeySink extends CredentialsSinkNode {
 /**
  * A node representing a cryptographic initialization vector being passed to a method.
  */
-class InitializationVectorSink extends CredentialsSinkNode {
+class InitializationVectorSink extends DataFlow::Node {
   InitializationVectorSink() { sinkNode(this, "encryption-iv") }
 }
 

Original file line number	Diff line number	Diff line change
`@@ -35,7 +35,7 @@ class CryptoKeySink extends CredentialsSinkNode {`
`35`	`35`	`/**`
`36`	`36`	`* A node representing a cryptographic initialization vector being passed to a method.`
`37`	`37`	`*/`
`38`		`-class InitializationVectorSink extends CredentialsSinkNode {`
	`38`	`+class InitializationVectorSink extends DataFlow::Node {`
`39`	`39`	`InitializationVectorSink() { sinkNode(this, "encryption-iv") }`
`40`	`40`	`}`
`41`	`41`