This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include
, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
1 | <?php |
||
2 | |||
3 | /* |
||
4 | * This file is part of the MesCryptoBundle package. |
||
5 | * |
||
6 | * (c) Francesco Cartenì <http://www.multimediaexperiencestudio.it/> |
||
7 | * |
||
8 | * For the full copyright and license information, please view the LICENSE |
||
9 | * file that was distributed with this source code. |
||
10 | */ |
||
11 | |||
12 | namespace Mes\Security\CryptoBundle; |
||
13 | |||
14 | use Defuse\Crypto\Crypto as BaseCrypto; |
||
15 | use Defuse\Crypto\File as BaseCryptoFile; |
||
16 | use Mes\Security\CryptoBundle\Model\Key; |
||
17 | use Mes\Security\CryptoBundle\Model\KeyInterface; |
||
18 | |||
19 | /** |
||
20 | * Class Encryption. |
||
21 | */ |
||
22 | final class Encryption extends AbstractEncryption |
||
23 | { |
||
24 | /** |
||
25 | * {@inheritdoc} |
||
26 | * |
||
27 | * @throws \Defuse\Crypto\Exception\EnvironmentIsBrokenException |
||
28 | */ |
||
29 | 2 | public function encryptWithKey($plaintext, KeyInterface $key) |
|
30 | { |
||
31 | 2 | return BaseCrypto::encrypt($plaintext, $this->unlockKey($key)); |
|
0 ignored issues
–
show
It seems like
$this->unlockKey($key) targeting Mes\Security\CryptoBundle\Encryption::unlockKey() can also be of type object<Defuse\Crypto\KeyProtectedByPassword> ; however, Defuse\Crypto\Crypto::encrypt() does only seem to accept object<Defuse\Crypto\Key> , maybe add an additional type check?
This check looks at variables that are passed out again to other methods. If the outgoing method call has stricter type requirements than the method itself, an issue is raised. An additional type check may prevent trouble. ![]() |
|||
32 | } |
||
33 | |||
34 | /** |
||
35 | * {@inheritdoc} |
||
36 | * |
||
37 | * @throws \Defuse\Crypto\Exception\EnvironmentIsBrokenException |
||
38 | * @throws \Defuse\Crypto\Exception\WrongKeyOrModifiedCiphertextException |
||
39 | */ |
||
40 | 5 | public function decryptWithKey($ciphertext, KeyInterface $key) |
|
41 | { |
||
42 | 5 | return BaseCrypto::decrypt($ciphertext, $this->unlockKey($key)); |
|
0 ignored issues
–
show
$key of type object<Mes\Security\Cryp...dle\Model\KeyInterface> is not a sub-type of object<Mes\Security\CryptoBundle\Model\Key> . It seems like you assume a concrete implementation of the interface Mes\Security\CryptoBundle\Model\KeyInterface to be always present.
This check looks for parameters that are defined as one type in their type hint or doc comment but seem to be used as a narrower type, i.e an implementation of an interface or a subclass. Consider changing the type of the parameter or doing an instanceof check before assuming your parameter is of the expected type. ![]() It seems like
$this->unlockKey($key) targeting Mes\Security\CryptoBundle\Encryption::unlockKey() can also be of type object<Defuse\Crypto\KeyProtectedByPassword> ; however, Defuse\Crypto\Crypto::decrypt() does only seem to accept object<Defuse\Crypto\Key> , maybe add an additional type check?
This check looks at variables that are passed out again to other methods. If the outgoing method call has stricter type requirements than the method itself, an issue is raised. An additional type check may prevent trouble. ![]() |
|||
43 | } |
||
44 | |||
45 | /** |
||
46 | * {@inheritdoc} |
||
47 | * |
||
48 | * @throws \Defuse\Crypto\Exception\IOException |
||
49 | * @throws \Defuse\Crypto\Exception\EnvironmentIsBrokenException |
||
50 | */ |
||
51 | 1 | public function encryptFileWithKey($inputFilename, $outputFilename, KeyInterface $key) |
|
52 | { |
||
53 | 1 | BaseCryptoFile::encryptFile($inputFilename, $outputFilename, $this->unlockKey($key)); |
|
0 ignored issues
–
show
$key of type object<Mes\Security\Cryp...dle\Model\KeyInterface> is not a sub-type of object<Mes\Security\CryptoBundle\Model\Key> . It seems like you assume a concrete implementation of the interface Mes\Security\CryptoBundle\Model\KeyInterface to be always present.
This check looks for parameters that are defined as one type in their type hint or doc comment but seem to be used as a narrower type, i.e an implementation of an interface or a subclass. Consider changing the type of the parameter or doing an instanceof check before assuming your parameter is of the expected type. ![]() It seems like
$this->unlockKey($key) targeting Mes\Security\CryptoBundle\Encryption::unlockKey() can also be of type object<Defuse\Crypto\KeyProtectedByPassword> ; however, Defuse\Crypto\File::encryptFile() does only seem to accept object<Defuse\Crypto\Key> , maybe add an additional type check?
This check looks at variables that are passed out again to other methods. If the outgoing method call has stricter type requirements than the method itself, an issue is raised. An additional type check may prevent trouble. ![]() |
|||
54 | 1 | } |
|
55 | |||
56 | /** |
||
57 | * {@inheritdoc} |
||
58 | * |
||
59 | * @throws \Defuse\Crypto\Exception\IOException |
||
60 | * @throws \Defuse\Crypto\Exception\EnvironmentIsBrokenException |
||
61 | * @throws \Defuse\Crypto\Exception\WrongKeyOrModifiedCiphertextException |
||
62 | */ |
||
63 | 1 | public function decryptFileWithKey($inputFilename, $outputFilename, KeyInterface $key) |
|
64 | { |
||
65 | 1 | BaseCryptoFile::decryptFile($inputFilename, $outputFilename, $this->unlockKey($key)); |
|
0 ignored issues
–
show
$key of type object<Mes\Security\Cryp...dle\Model\KeyInterface> is not a sub-type of object<Mes\Security\CryptoBundle\Model\Key> . It seems like you assume a concrete implementation of the interface Mes\Security\CryptoBundle\Model\KeyInterface to be always present.
This check looks for parameters that are defined as one type in their type hint or doc comment but seem to be used as a narrower type, i.e an implementation of an interface or a subclass. Consider changing the type of the parameter or doing an instanceof check before assuming your parameter is of the expected type. ![]() It seems like
$this->unlockKey($key) targeting Mes\Security\CryptoBundle\Encryption::unlockKey() can also be of type object<Defuse\Crypto\KeyProtectedByPassword> ; however, Defuse\Crypto\File::decryptFile() does only seem to accept object<Defuse\Crypto\Key> , maybe add an additional type check?
This check looks at variables that are passed out again to other methods. If the outgoing method call has stricter type requirements than the method itself, an issue is raised. An additional type check may prevent trouble. ![]() |
|||
66 | 1 | } |
|
67 | |||
68 | /** |
||
69 | * {@inheritdoc} |
||
70 | * |
||
71 | * @throws \Defuse\Crypto\Exception\EnvironmentIsBrokenException |
||
72 | */ |
||
73 | 1 | public function encryptWithPassword($plaintext, $password) |
|
74 | { |
||
75 | 1 | return BaseCrypto::encryptWithPassword($plaintext, $password); |
|
76 | } |
||
77 | |||
78 | /** |
||
79 | * {@inheritdoc} |
||
80 | * |
||
81 | * @throws \Defuse\Crypto\Exception\EnvironmentIsBrokenException |
||
82 | * @throws \Defuse\Crypto\Exception\WrongKeyOrModifiedCiphertextException |
||
83 | */ |
||
84 | 2 | public function decryptWithPassword($ciphertext, $password) |
|
85 | { |
||
86 | 2 | return BaseCrypto::decryptWithPassword($ciphertext, $password); |
|
87 | } |
||
88 | |||
89 | /** |
||
90 | * {@inheritdoc} |
||
91 | * |
||
92 | * @throws \Defuse\Crypto\Exception\IOException |
||
93 | * @throws \Defuse\Crypto\Exception\EnvironmentIsBrokenException |
||
94 | */ |
||
95 | 1 | public function encryptFileWithPassword($inputFilename, $outputFilename, $password) |
|
96 | { |
||
97 | 1 | BaseCryptoFile::encryptFileWithPassword($inputFilename, $outputFilename, $password); |
|
98 | 1 | } |
|
99 | |||
100 | /** |
||
101 | * {@inheritdoc} |
||
102 | * |
||
103 | * @throws \Defuse\Crypto\Exception\IOException |
||
104 | * @throws \Defuse\Crypto\Exception\EnvironmentIsBrokenException |
||
105 | * @throws \Defuse\Crypto\Exception\WrongKeyOrModifiedCiphertextException |
||
106 | */ |
||
107 | 2 | public function decryptFileWithPassword($inputFilename, $outputFilename, $password) |
|
108 | { |
||
109 | 2 | BaseCryptoFile::decryptFileWithPassword($inputFilename, $outputFilename, $password); |
|
110 | 1 | } |
|
111 | |||
112 | /** |
||
113 | * {@inheritdoc} |
||
114 | * |
||
115 | * @throws \Defuse\Crypto\Exception\IOException |
||
116 | * @throws \Defuse\Crypto\Exception\EnvironmentIsBrokenException |
||
117 | */ |
||
118 | 2 | public function encryptResourceWithKey($inputHandle, $outputHandle, KeyInterface $key) |
|
119 | { |
||
120 | 2 | BaseCryptoFile::encryptResource($inputHandle, $outputHandle, $this->unlockKey($key)); |
|
0 ignored issues
–
show
$key of type object<Mes\Security\Cryp...dle\Model\KeyInterface> is not a sub-type of object<Mes\Security\CryptoBundle\Model\Key> . It seems like you assume a concrete implementation of the interface Mes\Security\CryptoBundle\Model\KeyInterface to be always present.
This check looks for parameters that are defined as one type in their type hint or doc comment but seem to be used as a narrower type, i.e an implementation of an interface or a subclass. Consider changing the type of the parameter or doing an instanceof check before assuming your parameter is of the expected type. ![]() It seems like
$this->unlockKey($key) targeting Mes\Security\CryptoBundle\Encryption::unlockKey() can also be of type object<Defuse\Crypto\KeyProtectedByPassword> ; however, Defuse\Crypto\File::encryptResource() does only seem to accept object<Defuse\Crypto\Key> , maybe add an additional type check?
This check looks at variables that are passed out again to other methods. If the outgoing method call has stricter type requirements than the method itself, an issue is raised. An additional type check may prevent trouble. ![]() |
|||
121 | 1 | } |
|
122 | |||
123 | /** |
||
124 | * {@inheritdoc} |
||
125 | * |
||
126 | * @throws \Defuse\Crypto\Exception\IOException |
||
127 | * @throws \Defuse\Crypto\Exception\EnvironmentIsBrokenException |
||
128 | * @throws \Defuse\Crypto\Exception\WrongKeyOrModifiedCiphertextException |
||
129 | */ |
||
130 | 1 | public function decryptResourceWithKey($inputHandle, $outputHandle, KeyInterface $key) |
|
131 | { |
||
132 | 1 | BaseCryptoFile::decryptResource($inputHandle, $outputHandle, $this->unlockKey($key)); |
|
0 ignored issues
–
show
$key of type object<Mes\Security\Cryp...dle\Model\KeyInterface> is not a sub-type of object<Mes\Security\CryptoBundle\Model\Key> . It seems like you assume a concrete implementation of the interface Mes\Security\CryptoBundle\Model\KeyInterface to be always present.
This check looks for parameters that are defined as one type in their type hint or doc comment but seem to be used as a narrower type, i.e an implementation of an interface or a subclass. Consider changing the type of the parameter or doing an instanceof check before assuming your parameter is of the expected type. ![]() It seems like
$this->unlockKey($key) targeting Mes\Security\CryptoBundle\Encryption::unlockKey() can also be of type object<Defuse\Crypto\KeyProtectedByPassword> ; however, Defuse\Crypto\File::decryptResource() does only seem to accept object<Defuse\Crypto\Key> , maybe add an additional type check?
This check looks at variables that are passed out again to other methods. If the outgoing method call has stricter type requirements than the method itself, an issue is raised. An additional type check may prevent trouble. ![]() |
|||
133 | 1 | } |
|
134 | |||
135 | /** |
||
136 | * {@inheritdoc} |
||
137 | * |
||
138 | * @throws \Defuse\Crypto\Exception\IOException |
||
139 | * @throws \Defuse\Crypto\Exception\EnvironmentIsBrokenException |
||
140 | */ |
||
141 | 1 | public function encryptResourceWithPassword($inputHandle, $outputHandle, $password) |
|
142 | { |
||
143 | 1 | BaseCryptoFile::encryptResourceWithPassword($inputHandle, $outputHandle, $password); |
|
144 | 1 | } |
|
145 | |||
146 | /** |
||
147 | * {@inheritdoc} |
||
148 | * |
||
149 | * @throws \Defuse\Crypto\Exception\IOException |
||
150 | * @throws \Defuse\Crypto\Exception\EnvironmentIsBrokenException |
||
151 | * @throws \Defuse\Crypto\Exception\WrongKeyOrModifiedCiphertextException |
||
152 | */ |
||
153 | 1 | public function decryptResourceWithPassword($inputHandle, $outputHandle, $password) |
|
154 | { |
||
155 | 1 | BaseCryptoFile::decryptResourceWithPassword($inputHandle, $outputHandle, $password); |
|
156 | 1 | } |
|
157 | |||
158 | /** |
||
159 | * @param Key|KeyInterface $key The KeyInterface instance to unlock used for Defuse encryption system |
||
160 | * |
||
161 | * @return \Defuse\Crypto\Key|\Defuse\Crypto\KeyProtectedByPassword The Defuse key |
||
162 | */ |
||
163 | 12 | private function unlockKey(Key $key) |
|
164 | { |
||
165 | 12 | return $key->unlock() |
|
166 | 11 | ->getRawKey(); |
|
167 | } |
||
168 | } |
||
169 |
This check looks for parameters that are defined as one type in their type hint or doc comment but seem to be used as a narrower type, i.e an implementation of an interface or a subclass.
Consider changing the type of the parameter or doing an instanceof check before assuming your parameter is of the expected type.