iframe-proxy | Sunbelt Computer Software

21 lines (19 loc) · 700 Bytes

 * @name Use of a predictable seed in a secure random number generator
 * @description Using a predictable seed in a pseudo-random number generator can lead to predictability of the numbers generated by it.
 * @kind problem
 * @problem.severity error
 * @security-severity 9.8
 * @precision high
 * @id java/predictable-seed
 * @tags security
 *       external/cwe/cwe-335
 *       external/cwe/cwe-337
import java
import semmle.code.java.security.RandomQuery
from GetRandomData da, VarRead use, PredictableSeedExpr source
  da.getQualifier() = use and
  unsafelySeeded(use, source)
select da, "Usage of a SecureRandom number generator seeded with a $@.", source, "predictable value"

Sunbelt Computer Software

PL/B Language Development and Support

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Sunbelt Computer Software

PL/B Language Development and Support

Uh oh!

FilesExpand file tree

PredictableSeed.ql

Latest commit

History

PredictableSeed.ql

File metadata and controls