Skip to content

Commit f8994d0

Browse files
Clean up
1 parent 01da877 commit f8994d0

File tree

1 file changed

+4
-4
lines changed

1 file changed

+4
-4
lines changed

csharp/ql/src/experimental/Security Features/CWE-327/Azure/UnsafeUsageOfClientSideEncryptionVersion.ql

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@ import csharp
1818
*/
1919
predicate isCreatingAzureClientSideEncryptionObject(ObjectCreation oc, Class c, Expr e) {
2020
exists(Parameter p | p.hasName("version") |
21-
c.getQualifiedName() in ["Azure.Storage.ClientSideEncryptionOptions"] and
21+
c.hasQualifiedName("Azure.Storage.ClientSideEncryptionOptions") and
2222
oc.getTarget() = c.getAConstructor() and
2323
e = oc.getArgumentForParameter(p)
2424
)
@@ -28,7 +28,7 @@ predicate isCreatingAzureClientSideEncryptionObject(ObjectCreation oc, Class c,
2828
* Holds if `oc` is an object creation of the outdated type `c` = `Microsoft.Azure.Storage.Blob.BlobEncryptionPolicy`
2929
*/
3030
predicate isCreatingOutdatedAzureClientSideEncryptionObject(ObjectCreation oc, Class c) {
31-
c.getQualifiedName() in ["Microsoft.Azure.Storage.Blob.BlobEncryptionPolicy"] and
31+
c.hasQualifiedName("Microsoft.Azure.Storage.Blob.BlobEncryptionPolicy") and
3232
oc.getTarget() = c.getAConstructor()
3333
}
3434

@@ -37,7 +37,7 @@ predicate isCreatingOutdatedAzureClientSideEncryptionObject(ObjectCreation oc, C
3737
* version 2+ for client-side encryption and if the argument for the constructor `version`
3838
* is set to a secure value.
3939
*/
40-
predicate isObjectCreationSafe(Class c, Expr versionExpr, Assembly asm) {
40+
predicate isObjectCreationSafe(Expr versionExpr, Assembly asm) {
4141
// Check if the Azure.Storage assembly version has the fix
4242
exists(int versionCompare |
4343
versionCompare = asm.getVersion().compareTo("12.12.0.0") and
@@ -66,7 +66,7 @@ where
6666
(
6767
exists(Expr e2 |
6868
isCreatingAzureClientSideEncryptionObject(e, c, e2) and
69-
not isObjectCreationSafe(c, e2, asm)
69+
not isObjectCreationSafe(e2, asm)
7070
)
7171
or
7272
isCreatingOutdatedAzureClientSideEncryptionObject(e, c)

0 commit comments

Comments
 (0)