Skip to content

Commit 275ed0d

Browse files
Update select statement
1 parent 740bf71 commit 275ed0d

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstHash/TimingAttackAgainstHash.ql

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,7 @@ import DataFlow::PathGraph
2525
class TimingAttackAgainsthash extends TaintTracking::Configuration {
2626
TimingAttackAgainsthash() { this = "TimingAttackAgainsthash" }
2727

28-
override predicate isSource(DataFlow::Node source) { source instanceof ProduceHashCall }
28+
override predicate isSource(DataFlow::Node source) { source instanceof ProduceCryptoCall }
2929

3030
override predicate isSink(DataFlow::Node sink) { sink instanceof NonConstantTimeComparisonSink }
3131
}
@@ -34,5 +34,5 @@ from TimingAttackAgainsthash config, DataFlow::PathNode source, DataFlow::PathNo
3434
where
3535
config.hasFlowPath(source, sink) and
3636
sink.getNode().(NonConstantTimeComparisonSink).includesUserInput()
37-
select sink.getNode(), source, sink, "Timing attack against $@ validation.", source.getNode(),
38-
"message"
37+
select sink.getNode(), source, sink, "Timing attack against $@ validation.",
38+
source.getNode().(ProduceCryptoCall).getResultType(), "message"

0 commit comments

Comments
 (0)