evp_cipher_asn1_to_param
API Overview
EVP_CIPHER_asn1_to_param is an API in openssl. This rule belongs to the return value check type. This rule is generated using AURC.
Rule Description
tip
EVP_CIPHER_param_to_asn1() and EVP_CIPHER_asn1_to_param() return greater than zero for success and zero or a negative number on failure.
info
- Tags: return value check
- Parameter Index: N/A
- CWE Type: CWE-253
Rule Code
import cpp
class OpenSSLFunctionCall extends FunctionCall {
OpenSSLFunctionCall() {
this.getTarget().hasName("EVP_CIPHER_asn1_to_param")
}
}
from OpenSSLFunctionCall call, UnaryOperation uop
where
uop.getOperator() = "!" and
uop.getOperand() = call.getAnAccess()
select uop, "This negation checks the return value of EVP_CIPHER_asn1_to_param."