@@ -26,23 +26,18 @@ class InsecureTlsConfig extends TaintTracking::Configuration {
2626 * Holds for enum values that represent an insecure version of TLS
2727 */
2828 override predicate isSource ( DataFlow:: Node node ) {
29- exists ( MethodRefExpr expr , EnumElementDecl enum , string enumName |
30- node .asExpr ( ) = expr and
31- expr .getMember ( ) = enum and
32- enumName = enum .getName ( ) and
33- enumName in [ "TLSv10" , "TLSv11" , "tlsProtocol10" , "tlsProtocol11" ]
34- )
29+ node .asExpr ( ) .( MethodRefExpr ) .getMember ( ) .( EnumElementDecl ) .getName ( ) =
30+ [ "TLSv10" , "TLSv11" , "tlsProtocol10" , "tlsProtocol11" ]
3531 }
3632
3733 /**
3834 * Holds for assignment of TLS-related properties of `NSURLSessionConfiguration`
3935 */
4036 override predicate isSink ( DataFlow:: Node node ) {
41- exists ( AssignExpr assign , MemberRefExpr member , string memberName |
37+ exists ( AssignExpr assign |
4238 assign .getSource ( ) = node .asExpr ( ) and
43- assign .getDest ( ) = member and
44- memberName = member .getMember ( ) .( ConcreteVarDecl ) .getName ( ) and
45- memberName in [
39+ assign .getDest ( ) .( MemberRefExpr ) .getMember ( ) .( ConcreteVarDecl ) .getName ( ) =
40+ [
4641 "tlsMinimumSupportedProtocolVersion" , "tlsMinimumSupportedProtocol" ,
4742 "tlsMaximumSupportedProtocolVersion" , "tlsMaximumSupportedProtocol"
4843 ]
0 commit comments