Skip to content

Commit 383b8a8

Browse files
Jami CogswellJami Cogswell
authored andcommitted
update select statement to be closer to cpp's
1 parent 5f39888 commit 383b8a8

File tree

1 file changed

+5
-4
lines changed

1 file changed

+5
-4
lines changed

java/ql/src/Security/CWE/CWE-326/InsufficientKeySize.ql

Lines changed: 5 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,9 +1,9 @@
11
/**
2-
* @name Insufficient key size used with a cryptographic algorithm
3-
* @description Using cryptographic algorithms with too small of a key size can
2+
* @name Use of a cryptographic algorithm with insufficient key size
3+
* @description Using cryptographic algorithms with too small a key size can
44
* allow an attacker to compromise security.
55
* @kind path-problem
6-
* @problem.severity error
6+
* @problem.severity warning
77
* @security-severity 7.5
88
* @precision high
99
* @id java/insufficient-key-size
@@ -17,5 +17,6 @@ import DataFlow::PathGraph
1717

1818
from DataFlow::PathNode source, DataFlow::PathNode sink
1919
where exists(KeySizeConfiguration cfg | cfg.hasFlowPath(source, sink))
20-
select sink.getNode(), source, sink, "This $@ is less than the recommended key size.",
20+
select sink.getNode(), source, sink,
21+
"This $@ is less than the recommended key size of " + source.getState() + " bits.",
2122
source.getNode(), "key size"

0 commit comments

Comments
 (0)