Skip to content

Commit 8ea4878

Browse files
committed
python: move comment
1 parent cf4eac6 commit 8ea4878

File tree

1 file changed

+5
-4
lines changed

1 file changed

+5
-4
lines changed

python/ql/src/Security/CWE-327/PyOpenSSL.qll

Lines changed: 5 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -19,10 +19,6 @@ class PyOpenSslContextCreation extends ContextCreation, DataFlow::CallCfgNode {
1919
protocolArg = pyo.specific_version(result).getAValueReachableFromSource()
2020
or
2121
protocolArg = pyo.unspecific_version().getAValueReachableFromSource() and
22-
// PyOpenSSL also allows DTLS
23-
// see https://www.pyopenssl.org/en/stable/api/ssl.html#OpenSSL.SSL.Context
24-
// although they are not mentioned here:
25-
// https://www.pyopenssl.org/en/stable/api/ssl.html#OpenSSL.SSL.TLS_METHOD
2622
result = any(ProtocolVersion pv)
2723
)
2824
}
@@ -64,6 +60,11 @@ class PyOpenSsl extends TlsLibrary {
6460
// See
6561
// - https://www.pyopenssl.org/en/23.0.0/api/ssl.html#module-OpenSSL.SSL
6662
// - https://www.openssl.org/docs/manmaster/man3/DTLS_server_method.html#NOTES
63+
//
64+
// PyOpenSSL also allows DTLS
65+
// see https://www.pyopenssl.org/en/stable/api/ssl.html#OpenSSL.SSL.Context
66+
// although they are not mentioned here:
67+
// https://www.pyopenssl.org/en/stable/api/ssl.html#OpenSSL.SSL.TLS_METHOD
6768
result = ["TLS", "SSLv23"] + "_METHOD"
6869
or
6970
result = "TLS_" + ["CLIENT", "SERVER"] + "_METHOD"

0 commit comments

Comments
 (0)