Skip to content

Commit 59ca3b2

Browse files
committed
Adding SslEncryptPacket sink.
1 parent 60a67dc commit 59ca3b2

File tree

1 file changed

+16
-0
lines changed
  • cpp/ql/src/experimental/campaigns/nccoe-pqc-migration/QuantumVulnerableDiscovery/WinCng

1 file changed

+16
-0
lines changed

cpp/ql/src/experimental/campaigns/nccoe-pqc-migration/QuantumVulnerableDiscovery/WinCng/WindowsCng.qll

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -95,6 +95,22 @@ class NCryptEncryptArgumentSink extends BCryptOpenAlgorithmProviderSink {
9595
}
9696
}
9797

98+
99+
/**
100+
* Argument at index 1 of call to NCryptEncrypt:
101+
* _Inout_ NCRYPT_KEY_HANDLE hKey,
102+
*/
103+
class SslEncryptPacketArgumentSink extends BCryptOpenAlgorithmProviderSink {
104+
int index;
105+
string funcName;
106+
107+
SslEncryptPacketArgumentSink() {
108+
index = 1 and
109+
funcName = "SslEncryptPacket" and
110+
isCallArgument(funcName, this.asExpr(), index)
111+
}
112+
}
113+
98114
// ----------------- Default SOURCES -----------------------
99115
/**
100116
* A string identifier of known PQC vulnerable algorithms.

0 commit comments

Comments
 (0)