Swift: Model RNCryptor.

geoffw0 · geoffw0 · commit 28a707a95625 · 2023-01-17T16:04:58.000Z
diff --git a/swift/ql/src/queries/Security/CWE-321/HardcodedEncryptionKey.ql b/swift/ql/src/queries/Security/CWE-321/HardcodedEncryptionKey.ql
@@ -46,6 +46,14 @@ class EncryptionKeySink extends Expr {
       fName.matches("init(key:%") and
       call.getArgument(0).getExpr() = this
     )
+    or
+    // RNCryptor
+    exists(ClassOrStructDecl c, MethodDecl f, CallExpr call |
+      c.getFullName() = ["RNCryptor", "RNEncryptor", "RNDecryptor"] and
+      c.getAMember() = f and
+      call.getStaticTarget() = f and
+      call.getArgumentWithLabel("encryptionKey").getExpr() = this
+    )
   }
 }
 

Original file line number	Diff line number	Diff line change
`@@ -46,6 +46,14 @@ class EncryptionKeySink extends Expr {`
`46`	`46`	`fName.matches("init(key:%") and`
`47`	`47`	`call.getArgument(0).getExpr() = this`
`48`	`48`	`)`
	`49`	`+ or`
	`50`	`+ // RNCryptor`
	`51`	`+ exists(ClassOrStructDecl c, MethodDecl f, CallExpr call \|`
	`52`	`+ c.getFullName() = ["RNCryptor", "RNEncryptor", "RNDecryptor"] and`
	`53`	`+ c.getAMember() = f and`
	`54`	`+ call.getStaticTarget() = f and`
	`55`	`+ call.getArgumentWithLabel("encryptionKey").getExpr() = this`
	`56`	`+ )`
`49`	`57`	`}`
`50`	`58`	`}`
`51`	`59`