Skip to content

Commit 60da193

Browse files
yoffRasmusWL
andauthored
Update python/ql/src/semmle/python/frameworks/Cryptodome.qll
Co-authored-by: Rasmus Wriedt Larsen <[email protected]>
1 parent 97fadd9 commit 60da193

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

python/ql/src/semmle/python/frameworks/Cryptodome.qll

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -138,6 +138,8 @@ private module CryptodomeModel {
138138
methodName in ["update"] and
139139
result in [this.getArg(0), this.getArgByName("data")]
140140
or
141+
// although `mac_tag` is used as the parameter name in the spec above, some implementations use `received_mac_tag`, for an example, see
142+
// https://github.com/Legrandin/pycryptodome/blob/5dace638b70ac35bb5d9b565f3e75f7869c9d851/lib/Crypto/Cipher/ChaCha20_Poly1305.py#L207
141143
methodName in ["verify"] and
142144
result in [this.getArg(0), this.getArgByName(["mac_tag", "received_mac_tag"])]
143145
or

0 commit comments

Comments
 (0)