C++: Add 'MAC' as additional evidence.

geoffw0 · geoffw0 · commit 3d8513c1e0fd · 2021-05-18T13:24:51.000+01:00
diff --git a/cpp/ql/src/semmle/code/cpp/security/Encryption.qll b/cpp/ql/src/semmle/code/cpp/security/Encryption.qll
@@ -64,7 +64,7 @@ predicate isInsecureEncryption(string name) { name.regexpMatch(getInsecureAlgori
  */
 bindingset[name]
 predicate isEncryptionAdditionalEvidence(string name) {
-  name.toUpperCase().matches("%" + ["CRYPT", "CODE", "CODING", "CBC", "KEY", "CIPHER"] + "%")
+  name.toUpperCase().matches("%" + ["CRYPT", "CODE", "CODING", "CBC", "KEY", "CIPHER", "MAC"] + "%")
 }
 
 /**

Original file line number	Diff line number	Diff line change
`@@ -64,7 +64,7 @@ predicate isInsecureEncryption(string name) { name.regexpMatch(getInsecureAlgori`
`64`	`64`	`*/`
`65`	`65`	`bindingset[name]`
`66`	`66`	`predicate isEncryptionAdditionalEvidence(string name) {`
`67`		`- name.toUpperCase().matches("%" + ["CRYPT", "CODE", "CODING", "CBC", "KEY", "CIPHER"] + "%")`
	`67`	`+ name.toUpperCase().matches("%" + ["CRYPT", "CODE", "CODING", "CBC", "KEY", "CIPHER", "MAC"] + "%")`
`68`	`68`	`}`
`69`	`69`
`70`	`70`	`/**`