Skip to content

Commit 1199240

Browse files
Be precise when checking for Cipher.ENCRYPT_MODE
1 parent 4e69081 commit 1199240

File tree

1 file changed

+5
-1
lines changed

1 file changed

+5
-1
lines changed

java/ql/src/experimental/semmle/code/java/security/StaticInitializationVectorQuery.qll

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -102,7 +102,11 @@ private class EncryptionModeConfig extends TaintTracking2::Configuration {
102102
EncryptionModeConfig() { this = "EncryptionModeConfig" }
103103

104104
override predicate isSource(DataFlow::Node source) {
105-
source.asExpr().(VarAccess).getVariable().hasName("ENCRYPT_MODE")
105+
source
106+
.asExpr()
107+
.(FieldRead)
108+
.getField()
109+
.hasQualifiedName("javax.crypto", "Cipher", "ENCRYPT_MODE")
106110
}
107111

108112
override predicate isSink(DataFlow::Node sink) {

0 commit comments

Comments
 (0)