Skip to content

Commit 0fd684c

Browse files
Add more source of crypto call
1 parent cf83b07 commit 0fd684c

File tree

1 file changed

+7
-0
lines changed

1 file changed

+7
-0
lines changed

python/ql/src/experimental/semmle/python/security/TimingAttack.qll

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -122,6 +122,13 @@ private class ProduceCiphertextCall extends ProduceCryptoCall {
122122
.getMember(["DES", "DES3", "ARC2", "ARC4", "Blowfish", "PKCS1_v1_5"])
123123
.getMember(["ARC4Cipher", "new", "PKCS115_Cipher"])
124124
.getMember("encrypt")
125+
.getACall() or
126+
this =
127+
cryptographylib()
128+
.getMember("ciphers")
129+
.getMember("Cipher")
130+
.getReturn()
131+
.getMember("finalize")
125132
.getACall()
126133
}
127134

0 commit comments

Comments
 (0)