ruby: inline expectations tests for CryptographicOperation concept

Author: alexrford

ruby/ql/test/library-tests/concepts/CryptographicOperation.expected

@@ -0,0 +1,34 @@
+import ruby
+import codeql.ruby.Concepts
+import TestUtilities.InlineExpectationsTest
+
+class CryptographicOperationTest extends InlineExpectationsTest {
+  CryptographicOperationTest() { this = "CryptographicOperationTest" }
+
+  override string getARelevantTag() {
+    result in [
+    "CryptographicOperation", "CryptographicOperationInput", "CryptographicOperationAlgorithm",
+    "CryptographicOperationBlockMode"
+    ]
+  }
+
+  override predicate hasActualResult(Location location, string element, string tag, string value) {
+    exists(location.getFile().getRelativePath()) and
+    exists(Cryptography::CryptographicOperation cryptoOperation |
+      location = cryptoOperation.getLocation() and
+      (
+       element = cryptoOperation.toString() and
+       value = "" and
+       tag = "CryptographicOperation"
+       or
+       element = cryptoOperation.toString() and
+       value = cryptoOperation.getAlgorithm().getName() and
+       tag = "CryptographicOperationAlgorithm"
+       or
+       element = cryptoOperation.toString() and
+       value = cryptoOperation.getBlockMode() and
+       tag = "CryptographicOperationBlockMode"
+    )
+    )
+  }
+}

ruby/ql/test/library-tests/concepts/CryptographicOperation.ql

@@ -0,0 +1,7 @@
+require 'openssl'
+
+strong = OpenSSL::Cipher.new 'AES-128-CBC' # $ CryptographicOperation CryptographicOperationAlgorithm=AES CryptographicOperationBlockMode=CBC
+
+weak_algorithm = OpenSSL::Cipher::DES.new # $ CryptographicOperation CryptographicOperationAlgorithm=DES CryptographicOperationBlockMode=CBC
+
+weak_block_mode = OpenSSL::Cipher::AES.new(128, :ecb) # $ CryptographicOperation CryptographicOperationAlgorithm=AES CryptographicOperationBlockMode=ECB