File tree Expand file tree Collapse file tree 1 file changed +2
-6
lines changed
python/ql/src/Security/CWE-327 Expand file tree Collapse file tree 1 file changed +2
-6
lines changed Original file line number Diff line number Diff line change @@ -3,7 +3,7 @@ import TlsLibraryModel
3
3
4
4
/**
5
5
* Configuration to determine the state of a context being used to create
6
- * a conection . There is one configuration for each pair of `TlsLibrary` and `ProtocolVersion`,
6
+ * a connection . There is one configuration for each pair of `TlsLibrary` and `ProtocolVersion`,
7
7
* such that a single configuration only tracks contexts where a specific `ProtocolVersion` is allowed.
8
8
*
9
9
* The state is in terms of whether a specific protocol is allowed. This is
@@ -73,11 +73,8 @@ predicate unsafe_connection_creation_with_context(
73
73
boolean specific
74
74
) {
75
75
// Connection created from a context allowing `insecure_version`.
76
- exists ( InsecureContextConfiguration c |
77
- c .hasFlow ( contextOrigin , connectionCreation )
78
- |
76
+ exists ( InsecureContextConfiguration c | c .hasFlow ( contextOrigin , connectionCreation ) |
79
77
insecure_version = c .getTrackedVersion ( ) and
80
- contextOrigin instanceof ProtocolUnrestriction and
81
78
specific = false
82
79
)
83
80
or
@@ -104,6 +101,5 @@ predicate unsafe_connection_creation_without_context(
104
101
105
102
/** Holds if `contextCreation` is creating a context ties to a specific insecure version. */
106
103
predicate unsafe_context_creation ( DataFlow:: CallCfgNode contextCreation , string insecure_version ) {
107
- contextCreation instanceof ContextCreation and
108
104
exists ( TlsLibrary l | contextCreation = l .insecure_context_creation ( insecure_version ) )
109
105
}
You can’t perform that action at this time.
0 commit comments