Skip to content

Commit f2688c4

Browse files
Update select statement
1 parent 275ed0d commit f2688c4

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstHash/PossibleTimingAttackAgainstHash.ql

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -25,12 +25,12 @@ import DataFlow::PathGraph
2525
class PossibleTimingAttackAgainstHash extends TaintTracking::Configuration {
2626
PossibleTimingAttackAgainstHash() { this = "PossibleTimingAttackAgainstHash" }
2727

28-
override predicate isSource(DataFlow::Node source) { source instanceof ProduceHashCall }
28+
override predicate isSource(DataFlow::Node source) { source instanceof ProduceCryptoCall }
2929

3030
override predicate isSink(DataFlow::Node sink) { sink instanceof NonConstantTimeComparisonSink }
3131
}
3232

3333
from PossibleTimingAttackAgainstHash config, DataFlow::PathNode source, DataFlow::PathNode sink
3434
where config.hasFlowPath(source, sink)
3535
select sink.getNode(), source, sink, "Possible Timing attack against $@ validation.",
36-
source.getNode(), "message"
36+
source.getNode().(ProduceCryptoCall).getResultType(), "message"

0 commit comments

Comments
 (0)