瀏覽代碼

linting: suppress false positive for G404 (gosec)

The linter falsely detects this as using "math/rand":

    libnetwork/networkdb/cluster.go:721:14: G404: Use of weak random number generator (math/rand instead of crypto/rand) (gosec)
       val, err := rand.Int(rand.Reader, big.NewInt(int64(n)))
                   ^

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
Sebastiaan van Stijn 2 年之前
父節點
當前提交
561a010161
共有 1 個文件被更改,包括 1 次插入1 次删除
  1. 1 1
      libnetwork/networkdb/cluster.go

+ 1 - 1
libnetwork/networkdb/cluster.go

@@ -718,7 +718,7 @@ func randomOffset(n int) int {
 		return 0
 		return 0
 	}
 	}
 
 
-	val, err := rand.Int(rand.Reader, big.NewInt(int64(n)))
+	val, err := rand.Int(rand.Reader, big.NewInt(int64(n))) // #nosec G404 -- False positive; see https://github.com/securego/gosec/issues/862
 	if err != nil {
 	if err != nil {
 		logrus.Errorf("Failed to get a random offset: %v", err)
 		logrus.Errorf("Failed to get a random offset: %v", err)
 		return 0
 		return 0