Skip to content

Commit 60a67dc

Browse files
committed
Adding NCryptEncrypt sink
1 parent 2438245 commit 60a67dc

File tree

1 file changed

+15
-0
lines changed
  • cpp/ql/src/experimental/campaigns/nccoe-pqc-migration/QuantumVulnerableDiscovery/WinCng

1 file changed

+15
-0
lines changed

cpp/ql/src/experimental/campaigns/nccoe-pqc-migration/QuantumVulnerableDiscovery/WinCng/WindowsCng.qll

Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -80,6 +80,21 @@ class BCryptEncryptArgumentSink extends BCryptOpenAlgorithmProviderSink {
8080
}
8181
}
8282

83+
/**
84+
* Argument at index 0 of call to NCryptEncrypt:
85+
* [in] NCRYPT_KEY_HANDLE hKey,
86+
*/
87+
class NCryptEncryptArgumentSink extends BCryptOpenAlgorithmProviderSink {
88+
int index;
89+
string funcName;
90+
91+
NCryptEncryptArgumentSink() {
92+
index = 0 and
93+
funcName = "NCryptEncrypt" and
94+
isCallArgument(funcName, this.asExpr(), index)
95+
}
96+
}
97+
8398
// ----------------- Default SOURCES -----------------------
8499
/**
85100
* A string identifier of known PQC vulnerable algorithms.

0 commit comments

Comments
 (0)