Swift: Update swift/summary/query-sinks.

Author: geoffw0

swift/ql/lib/codeql/swift/security/WeakPasswordHashingQuery.qll

@@ -13,7 +13,7 @@ import codeql.swift.security.WeakPasswordHashingExtensions
  * A taint tracking configuration from password expressions to inappropriate
  * hashing sinks.
  */
-module WeakHashingPasswordConfig implements DataFlow::ConfigSig {
+module WeakPasswordHashingConfig implements DataFlow::ConfigSig {
   predicate isSource(DataFlow::Node node) {
     exists(SensitiveExpr se |
       node.asExpr() = se and
@@ -40,4 +40,4 @@ module WeakHashingPasswordConfig implements DataFlow::ConfigSig {
   }
 }
 
-module WeakHashingFlow = TaintTracking::Global<WeakHashingPasswordConfig>;
+module WeakPasswordHashingFlow = TaintTracking::Global<WeakPasswordHashingConfig>;

swift/ql/src/queries/Security/CWE-328/WeakPasswordHashing.ql

@@ -14,11 +14,11 @@
 
 import swift
 import codeql.swift.security.WeakPasswordHashingQuery
-import WeakHashingFlow::PathGraph
+import WeakPasswordHashingFlow::PathGraph
 
-from WeakHashingFlow::PathNode source, WeakHashingFlow::PathNode sink, string algorithm
+from WeakPasswordHashingFlow::PathNode source, WeakPasswordHashingFlow::PathNode sink, string algorithm
 where
-  WeakHashingFlow::flowPath(source, sink) and
+WeakPasswordHashingFlow::flowPath(source, sink) and
   algorithm = sink.getNode().(WeakPasswordHashingSink).getAlgorithm()
 select sink.getNode(), source, sink,
   "Insecure hashing algorithm (" + algorithm + ") depends on $@.", source.getNode(),

swift/ql/src/queries/Summary/QuerySinks.ql

@@ -30,7 +30,8 @@ import codeql.swift.security.CleartextLoggingQuery
 import codeql.swift.security.CleartextStoragePreferencesQuery
 import codeql.swift.security.HardcodedEncryptionKeyQuery
 import codeql.swift.security.ECBEncryptionQuery
-import codeql.swift.security.WeakSensitiveDataHashingQuery
+import codeql.swift.security.WeakSensitiveDataHashingQuery as WeakSensitiveDataHashingQuery
+import codeql.swift.security.WeakPasswordHashingQuery as WeakPasswordHashingQuery
 import codeql.swift.security.XXEQuery
 import codeql.swift.security.InsecureTLSQuery
 import codeql.swift.security.ConstantSaltQuery
@@ -65,7 +66,9 @@ string queryForSink(DataFlow::Node sink) {
   or
   EcbEncryptionConfig::isSink(sink) and result = "swift/ecb-encryption"
   or
-  WeakHashingConfig::isSink(sink) and result = "swift/weak-sensitive-data-hashing"
+  WeakSensitiveDataHashingQuery::WeakSensitiveDataHashingConfig::isSink(sink) and result = "swift/weak-sensitive-data-hashing"
+  or
+  WeakPasswordHashingQuery::WeakPasswordHashingConfig::isSink(sink) and result = "swift/weak-password-hashing"
   or
   XxeConfig::isSink(sink) and result = "swift/xxe"
   or