Skip to content

Commit 2369bfd

Browse files
committed
Added documentation for the isConsumedEllipticCurve workaround
1 parent c1ad99b commit 2369bfd

File tree

1 file changed

+9
-0
lines changed
  • shared/quantum/codeql/quantum/experimental

1 file changed

+9
-0
lines changed

shared/quantum/codeql/quantum/experimental/Model.qll

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1420,6 +1420,15 @@ module CryptographyBase<LocationSig Location, InputSig<Location> Input> {
14201420

14211421
class AssetNode = NodeBase;
14221422

1423+
/**
1424+
* This predicate is used to filter out elliptic curve nodes in cases where
1425+
* the algorithm instance and the curve instance are represented by the same
1426+
* algorithm value consumer (e.g. in cases where both the algorithm and the
1427+
* curve are determined by the same instance).
1428+
*
1429+
* An alternative way to handle this would be to use separate instances to
1430+
* represent the elliptic curve and the algorithm.
1431+
*/
14231432
predicate isConsumedEllipticCurveNode(EllipticCurveNode node) {
14241433
exists(AlgorithmNode other |
14251434
other.asElement() instanceof EllipticCurveConsumingAlgorithmInstance and

0 commit comments

Comments
 (0)