@@ -26,23 +26,18 @@ class InsecureTlsConfig extends TaintTracking::Configuration {
26
26
* Holds for enum values that represent an insecure version of TLS
27
27
*/
28
28
override predicate isSource ( DataFlow:: Node node ) {
29
- exists ( MethodRefExpr expr , EnumElementDecl enum , string enumName |
30
- node .asExpr ( ) = expr and
31
- expr .getMember ( ) = enum and
32
- enumName = enum .getName ( ) and
33
- enumName in [ "TLSv10" , "TLSv11" , "tlsProtocol10" , "tlsProtocol11" ]
34
- )
29
+ node .asExpr ( ) .( MethodRefExpr ) .getMember ( ) .( EnumElementDecl ) .getName ( ) =
30
+ [ "TLSv10" , "TLSv11" , "tlsProtocol10" , "tlsProtocol11" ]
35
31
}
36
32
37
33
/**
38
34
* Holds for assignment of TLS-related properties of `NSURLSessionConfiguration`
39
35
*/
40
36
override predicate isSink ( DataFlow:: Node node ) {
41
- exists ( AssignExpr assign , MemberRefExpr member , string memberName |
37
+ exists ( AssignExpr assign |
42
38
assign .getSource ( ) = node .asExpr ( ) and
43
- assign .getDest ( ) = member and
44
- memberName = member .getMember ( ) .( ConcreteVarDecl ) .getName ( ) and
45
- memberName in [
39
+ assign .getDest ( ) .( MemberRefExpr ) .getMember ( ) .( ConcreteVarDecl ) .getName ( ) =
40
+ [
46
41
"tlsMinimumSupportedProtocolVersion" , "tlsMinimumSupportedProtocol" ,
47
42
"tlsMaximumSupportedProtocolVersion" , "tlsMaximumSupportedProtocol"
48
43
]
0 commit comments