Class ComputationallyExpensiveHashFunction :: Sink
A data flow sink for sensitive data that requires computationally expensive hashing for “use of a broken or weak cryptographic hashing algorithm on sensitive data” vulnerabilities.
Import path
import semmle.python.security.dataflow.WeakSensitiveDataHashingCustomizations
Direct supertypes
Indirect supertypes
Known direct subtypes
Predicates
| getAlgorithmName |
Gets the name of the weak hashing algorithm. |
| isComputationallyExpensive |
Holds if this sink is for a computationally expensive hash function (meaning that hash function is just weak in some other regard. |
Inherited predicates
| asCfgNode |
Gets the control-flow node corresponding to this node, if any. |
from Node |
| asExpr |
Gets the expression corresponding to this node, if any. |
from Node |
| asVar |
Gets the ESSA variable corresponding to this node, if any. |
from Node |
| getALocalSource |
Gets a local source node from which data may flow to this node in zero or more local data-flow steps. |
from Node |
| getEnclosingCallable |
Gets the enclosing callable of this node. |
from Node |
| getLocation |
Gets the location of this node |
from Node |
| getScope |
Gets the scope of this node. |
from Node |
| hasLocationInfo |
Holds if this element is at the specified location. The location spans column |
from Node |
| toString |
Gets a textual representation of this element. |
from Node |