Skip to content

Commit 0406d5c

Browse files
committed
Added documentation for the isConsumedEllipticCurve workaround
1 parent f17bc7e commit 0406d5c

File tree

1 file changed

+9
-0
lines changed
  • shared/quantum/codeql/quantum/experimental

1 file changed

+9
-0
lines changed

shared/quantum/codeql/quantum/experimental/Model.qll

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1437,6 +1437,15 @@ module CryptographyBase<LocationSig Location, InputSig<Location> Input> {
14371437

14381438
class AssetNode = NodeBase;
14391439

1440+
/**
1441+
* This predicate is used to filter out elliptic curve nodes in cases where
1442+
* the algorithm instance and the curve instance are represented by the same
1443+
* algorithm value consumer (e.g. in cases where both the algorithm and the
1444+
* curve are determined by the same instance).
1445+
*
1446+
* An alternative way to handle this would be to use separate instances to
1447+
* represent the elliptic curve and the algorithm.
1448+
*/
14401449
predicate isConsumedEllipticCurveNode(EllipticCurveNode node) {
14411450
exists(AlgorithmNode other |
14421451
other.asElement() instanceof EllipticCurveConsumingAlgorithmInstance and

0 commit comments

Comments
 (0)