-
Notifications
You must be signed in to change notification settings - Fork 1.7k
Openssl acronym normalization #19785
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Conversation
…calls that return a known algorithm and calls that operate on a known algorithm. update KnownAlgorithmConstants to correct algType for signature algorithms. Update all instances and prior uses of the old mechanic to KnownAlgorithmConstants.
… that is an argument or a return.
…dd initial signature tests (no expected files yet). Add new openssl .h stubs. Clean up of OperationBase and associated uses. Update test case stubs to be closer to the actual stubs. Fix unncessary instanceof check in signatures.
…tep to handle paramgen. Remove redundant test. Overhaul of EVP update/initializer/final mechanics. Misc. updates for new API and refactoring EVPKeyGenOperation. Clean up of keygen_operaitons.ql.
… initializer subclasses.
…del update. Remove setting RSA bits as an RSA algorithm. Fix bug in hash algorithm. Add missing PKey encryption to cipher ops. Consolidate ctx initializers. Add unit tests, and alter unit test directory structure to allow for application to other APIs. Update expected files for unit tests (not all updated yet, a work in progress).
…properties that configure downstream operations. Add key size tests
…to disallow null key and IV on initializers (typically do not represent an actual key or IV).
…. Update model to account for MAC algorithms.
…n and correct handling of MACs.
… for now and noting the issue for a future PR.
…des/codeql into pawel_signatures_conversion
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
CodeQL found more than 20 potential problems in the proposed changes. Check the Files changed tab for more details.
cpp/ql/lib/experimental/quantum/OpenSSL/AlgorithmInstances/MACAlgorithmInstance.qll
Fixed
Show fixed
Hide fixed
cpp/ql/lib/experimental/quantum/OpenSSL/AlgorithmInstances/PaddingAlgorithmInstance.qll
Fixed
Show fixed
Hide fixed
...l/lib/experimental/quantum/OpenSSL/AlgorithmValueConsumers/PaddingAlgorithmValueConsumer.qll
Fixed
Show fixed
Hide fixed
* The context is the context coming into the initializer and is the output as well. | ||
* This is assumed to be the same argument. | ||
*/ | ||
Expr getContextArg() { result = this.(Call).getArgument(0) } | ||
abstract CtxPointerSource getContext(); | ||
} |
Check warning
Code scanning / CodeQL
Class QLDoc style. Warning
Crypto::AlgorithmValueConsumer getAlgorithmValueConsumer() { | ||
argToAvc(this.getAlgorithmArg(), result) | ||
} | ||
} |
Check warning
Code scanning / CodeQL
Redundant override Warning
this predicate
557cfd4
to
7c18686
Compare
Correct acronyms to pass ql-for-ql tests. Fix any additional ql-for-ql alert fails as well.