Skip to content

Commit 648c2d0

Browse files
committed
Swift: Simplify InsecureTLS.ql.
1 parent caf9ac5 commit 648c2d0

File tree

1 file changed

+5
-10
lines changed

1 file changed

+5
-10
lines changed

swift/ql/src/queries/Security/CWE-757/InsecureTLS.ql

Lines changed: 5 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -26,23 +26,18 @@ class InsecureTlsConfig extends TaintTracking::Configuration {
2626
* Holds for enum values that represent an insecure version of TLS
2727
*/
2828
override predicate isSource(DataFlow::Node node) {
29-
exists(MethodRefExpr expr, EnumElementDecl enum, string enumName |
30-
node.asExpr() = expr and
31-
expr.getMember() = enum and
32-
enumName = enum.getName() and
33-
enumName in ["TLSv10", "TLSv11", "tlsProtocol10", "tlsProtocol11"]
34-
)
29+
node.asExpr().(MethodRefExpr).getMember().(EnumElementDecl).getName() =
30+
["TLSv10", "TLSv11", "tlsProtocol10", "tlsProtocol11"]
3531
}
3632

3733
/**
3834
* Holds for assignment of TLS-related properties of `NSURLSessionConfiguration`
3935
*/
4036
override predicate isSink(DataFlow::Node node) {
41-
exists(AssignExpr assign, MemberRefExpr member, string memberName |
37+
exists(AssignExpr assign |
4238
assign.getSource() = node.asExpr() and
43-
assign.getDest() = member and
44-
memberName = member.getMember().(ConcreteVarDecl).getName() and
45-
memberName in [
39+
assign.getDest().(MemberRefExpr).getMember().(ConcreteVarDecl).getName() =
40+
[
4641
"tlsMinimumSupportedProtocolVersion", "tlsMinimumSupportedProtocol",
4742
"tlsMaximumSupportedProtocolVersion", "tlsMaximumSupportedProtocol"
4843
]

0 commit comments

Comments
 (0)