Update java/ql/src/experimental/Security/CWE/CWE-327/Azure/UnsafeUsageOfClientSideEncryptionVersion.ql

raulgarciamsft · yo-h · web-flow · commit eefa6595038e · 2022-07-16T08:23:59.000-07:00
Co-authored-by: yo-h &lt;55373593+yo-h@users.noreply.github.com&gt;
diff --git a/java/ql/src/experimental/Security/CWE/CWE-327/Azure/UnsafeUsageOfClientSideEncryptionVersion.ql b/java/ql/src/experimental/Security/CWE/CWE-327/Azure/UnsafeUsageOfClientSideEncryptionVersion.ql
@@ -74,7 +74,7 @@ private class EncryptedBlobClientBuilderSafeEncryptionVersionConfig extends Data
  */
 predicate isCreatingSafeAzureClientSideEncryptionObject(Call call, Class c, Expr versionArg) {
   isCreatingAzureClientSideEncryptionObjectNewVersion(call, c, versionArg) and
-  exists(EncryptedBlobClientBuilderEncryptionVersionConfig config, DataFlow::Node sink |
+  exists(EncryptedBlobClientBuilderSafeEncryptionVersionConfig config, DataFlow::Node sink |
     sink.asExpr() = versionArg
   |
     config.hasFlow(_, sink)

Original file line number	Diff line number	Diff line change
`@@ -74,7 +74,7 @@ private class EncryptedBlobClientBuilderSafeEncryptionVersionConfig extends Data`
`74`	`74`	`*/`
`75`	`75`	`predicate isCreatingSafeAzureClientSideEncryptionObject(Call call, Class c, Expr versionArg) {`
`76`	`76`	`isCreatingAzureClientSideEncryptionObjectNewVersion(call, c, versionArg) and`
`77`		`- exists(EncryptedBlobClientBuilderEncryptionVersionConfig config, DataFlow::Node sink \|`
	`77`	`+ exists(EncryptedBlobClientBuilderSafeEncryptionVersionConfig config, DataFlow::Node sink \|`
`78`	`78`	`sink.asExpr() = versionArg`
`79`	`79`	`\|`
`80`	`80`	`config.hasFlow(_, sink)`