This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include
, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
1 | <?php |
||
2 | |||
3 | /* |
||
4 | * This file is part of the MesCryptoBundle package. |
||
5 | * |
||
6 | * (c) Francesco Cartenì <http://www.multimediaexperiencestudio.it/> |
||
7 | * |
||
8 | * For the full copyright and license information, please view the LICENSE |
||
9 | * file that was distributed with this source code. |
||
10 | */ |
||
11 | |||
12 | namespace Mes\Security\CryptoBundle; |
||
13 | |||
14 | use Defuse\Crypto\Crypto as BaseCrypto; |
||
15 | use Defuse\Crypto\File as BaseCryptoFile; |
||
16 | use Mes\Security\CryptoBundle\Model\Key; |
||
17 | use Mes\Security\CryptoBundle\Model\KeyInterface; |
||
18 | |||
19 | /** |
||
20 | * Class Encryption. |
||
21 | */ |
||
22 | final class Encryption extends AbstractEncryption |
||
23 | { |
||
24 | /** |
||
25 | * {@inheritdoc} |
||
26 | * |
||
27 | * @throws \Defuse\Crypto\Exception\EnvironmentIsBrokenException |
||
28 | */ |
||
29 | 2 | public function encryptWithKey($plaintext, KeyInterface $key) |
|
30 | { |
||
31 | 2 | return BaseCrypto::encrypt($plaintext, $this->unlockKey($key)); |
|
0 ignored issues
–
show
|
|||
32 | } |
||
33 | |||
34 | /** |
||
35 | * {@inheritdoc} |
||
36 | * |
||
37 | * @throws \Defuse\Crypto\Exception\EnvironmentIsBrokenException |
||
38 | * @throws \Defuse\Crypto\Exception\WrongKeyOrModifiedCiphertextException |
||
39 | */ |
||
40 | 5 | public function decryptWithKey($ciphertext, KeyInterface $key) |
|
41 | { |
||
42 | 5 | return BaseCrypto::decrypt($ciphertext, $this->unlockKey($key)); |
|
0 ignored issues
–
show
It seems like
$this->unlockKey($key) targeting Mes\Security\CryptoBundle\Encryption::unlockKey() can also be of type object<Defuse\Crypto\KeyProtectedByPassword> ; however, Defuse\Crypto\Crypto::decrypt() does only seem to accept object<Defuse\Crypto\Key> , maybe add an additional type check?
This check looks at variables that are passed out again to other methods. If the outgoing method call has stricter type requirements than the method itself, an issue is raised. An additional type check may prevent trouble. ![]() |
|||
43 | } |
||
44 | |||
45 | /** |
||
46 | * {@inheritdoc} |
||
47 | * |
||
48 | * @throws \Defuse\Crypto\Exception\IOException |
||
49 | * @throws \Defuse\Crypto\Exception\EnvironmentIsBrokenException |
||
50 | */ |
||
51 | 1 | public function encryptFileWithKey($inputFilename, $outputFilename, KeyInterface $key) |
|
52 | { |
||
53 | 1 | BaseCryptoFile::encryptFile($inputFilename, $outputFilename, $this->unlockKey($key)); |
|
0 ignored issues
–
show
It seems like
$this->unlockKey($key) targeting Mes\Security\CryptoBundle\Encryption::unlockKey() can also be of type object<Defuse\Crypto\KeyProtectedByPassword> ; however, Defuse\Crypto\File::encryptFile() does only seem to accept object<Defuse\Crypto\Key> , maybe add an additional type check?
This check looks at variables that are passed out again to other methods. If the outgoing method call has stricter type requirements than the method itself, an issue is raised. An additional type check may prevent trouble. ![]() |
|||
54 | 1 | } |
|
55 | |||
56 | /** |
||
57 | * {@inheritdoc} |
||
58 | * |
||
59 | * @throws \Defuse\Crypto\Exception\IOException |
||
60 | * @throws \Defuse\Crypto\Exception\EnvironmentIsBrokenException |
||
61 | * @throws \Defuse\Crypto\Exception\WrongKeyOrModifiedCiphertextException |
||
62 | */ |
||
63 | 1 | public function decryptFileWithKey($inputFilename, $outputFilename, KeyInterface $key) |
|
64 | { |
||
65 | 1 | BaseCryptoFile::decryptFile($inputFilename, $outputFilename, $this->unlockKey($key)); |
|
0 ignored issues
–
show
It seems like
$this->unlockKey($key) targeting Mes\Security\CryptoBundle\Encryption::unlockKey() can also be of type object<Defuse\Crypto\KeyProtectedByPassword> ; however, Defuse\Crypto\File::decryptFile() does only seem to accept object<Defuse\Crypto\Key> , maybe add an additional type check?
This check looks at variables that are passed out again to other methods. If the outgoing method call has stricter type requirements than the method itself, an issue is raised. An additional type check may prevent trouble. ![]() |
|||
66 | 1 | } |
|
67 | |||
68 | /** |
||
69 | * {@inheritdoc} |
||
70 | * |
||
71 | * @throws \Defuse\Crypto\Exception\EnvironmentIsBrokenException |
||
72 | */ |
||
73 | 1 | public function encryptWithPassword($plaintext, $password) |
|
74 | { |
||
75 | 1 | return BaseCrypto::encryptWithPassword($plaintext, $password); |
|
76 | } |
||
77 | |||
78 | /** |
||
79 | * {@inheritdoc} |
||
80 | * |
||
81 | * @throws \Defuse\Crypto\Exception\EnvironmentIsBrokenException |
||
82 | * @throws \Defuse\Crypto\Exception\WrongKeyOrModifiedCiphertextException |
||
83 | */ |
||
84 | 2 | public function decryptWithPassword($ciphertext, $password) |
|
85 | { |
||
86 | 2 | return BaseCrypto::decryptWithPassword($ciphertext, $password); |
|
87 | } |
||
88 | |||
89 | /** |
||
90 | * {@inheritdoc} |
||
91 | * |
||
92 | * @throws \Defuse\Crypto\Exception\IOException |
||
93 | * @throws \Defuse\Crypto\Exception\EnvironmentIsBrokenException |
||
94 | */ |
||
95 | 1 | public function encryptFileWithPassword($inputFilename, $outputFilename, $password) |
|
96 | { |
||
97 | 1 | BaseCryptoFile::encryptFileWithPassword($inputFilename, $outputFilename, $password); |
|
98 | 1 | } |
|
99 | |||
100 | /** |
||
101 | * {@inheritdoc} |
||
102 | * |
||
103 | * @throws \Defuse\Crypto\Exception\IOException |
||
104 | * @throws \Defuse\Crypto\Exception\EnvironmentIsBrokenException |
||
105 | * @throws \Defuse\Crypto\Exception\WrongKeyOrModifiedCiphertextException |
||
106 | */ |
||
107 | 2 | public function decryptFileWithPassword($inputFilename, $outputFilename, $password) |
|
108 | { |
||
109 | 2 | BaseCryptoFile::decryptFileWithPassword($inputFilename, $outputFilename, $password); |
|
110 | 1 | } |
|
111 | |||
112 | /** |
||
113 | * {@inheritdoc} |
||
114 | * |
||
115 | * @throws \Defuse\Crypto\Exception\IOException |
||
116 | * @throws \Defuse\Crypto\Exception\EnvironmentIsBrokenException |
||
117 | */ |
||
118 | 2 | public function encryptResourceWithKey($inputHandle, $outputHandle, KeyInterface $key) |
|
119 | { |
||
120 | 2 | BaseCryptoFile::encryptResource($inputHandle, $outputHandle, $this->unlockKey($key)); |
|
0 ignored issues
–
show
It seems like
$this->unlockKey($key) targeting Mes\Security\CryptoBundle\Encryption::unlockKey() can also be of type object<Defuse\Crypto\KeyProtectedByPassword> ; however, Defuse\Crypto\File::encryptResource() does only seem to accept object<Defuse\Crypto\Key> , maybe add an additional type check?
This check looks at variables that are passed out again to other methods. If the outgoing method call has stricter type requirements than the method itself, an issue is raised. An additional type check may prevent trouble. ![]() |
|||
121 | 1 | } |
|
122 | |||
123 | /** |
||
124 | * {@inheritdoc} |
||
125 | * |
||
126 | * @throws \Defuse\Crypto\Exception\IOException |
||
127 | * @throws \Defuse\Crypto\Exception\EnvironmentIsBrokenException |
||
128 | * @throws \Defuse\Crypto\Exception\WrongKeyOrModifiedCiphertextException |
||
129 | */ |
||
130 | 1 | public function decryptResourceWithKey($inputHandle, $outputHandle, KeyInterface $key) |
|
131 | { |
||
132 | 1 | BaseCryptoFile::decryptResource($inputHandle, $outputHandle, $this->unlockKey($key)); |
|
0 ignored issues
–
show
It seems like
$this->unlockKey($key) targeting Mes\Security\CryptoBundle\Encryption::unlockKey() can also be of type object<Defuse\Crypto\KeyProtectedByPassword> ; however, Defuse\Crypto\File::decryptResource() does only seem to accept object<Defuse\Crypto\Key> , maybe add an additional type check?
This check looks at variables that are passed out again to other methods. If the outgoing method call has stricter type requirements than the method itself, an issue is raised. An additional type check may prevent trouble. ![]() |
|||
133 | 1 | } |
|
134 | |||
135 | /** |
||
136 | * {@inheritdoc} |
||
137 | * |
||
138 | * @throws \Defuse\Crypto\Exception\IOException |
||
139 | * @throws \Defuse\Crypto\Exception\EnvironmentIsBrokenException |
||
140 | */ |
||
141 | 1 | public function encryptResourceWithPassword($inputHandle, $outputHandle, $password) |
|
142 | { |
||
143 | 1 | BaseCryptoFile::encryptResourceWithPassword($inputHandle, $outputHandle, $password); |
|
144 | 1 | } |
|
145 | |||
146 | /** |
||
147 | * {@inheritdoc} |
||
148 | * |
||
149 | * @throws \Defuse\Crypto\Exception\IOException |
||
150 | * @throws \Defuse\Crypto\Exception\EnvironmentIsBrokenException |
||
151 | * @throws \Defuse\Crypto\Exception\WrongKeyOrModifiedCiphertextException |
||
152 | */ |
||
153 | 1 | public function decryptResourceWithPassword($inputHandle, $outputHandle, $password) |
|
154 | { |
||
155 | 1 | BaseCryptoFile::decryptResourceWithPassword($inputHandle, $outputHandle, $password); |
|
156 | 1 | } |
|
157 | |||
158 | /** |
||
159 | * @param Key|KeyInterface $key The KeyInterface instance to unlock used for Defuse encryption system |
||
160 | * |
||
161 | * @return \Defuse\Crypto\Key|\Defuse\Crypto\KeyProtectedByPassword The Defuse key |
||
162 | */ |
||
163 | 12 | private function unlockKey(Key $key) |
|
164 | { |
||
165 | 12 | return $key->unlock() |
|
166 | 11 | ->getRawKey(); |
|
167 | } |
||
168 | } |
||
169 |
This check looks at variables that are passed out again to other methods.
If the outgoing method call has stricter type requirements than the method itself, an issue is raised.
An additional type check may prevent trouble.