budget-watch03.md

CogniCrypt (report 5) for BudgetWatch

• Class: com.google.common.hash.AbstractStreamingHashFunction

• Method: hashObject

• Line: 37

• Issue details: IncompleteOperationError-2

  • IncompleteOperationError violating CrySL rule for java.security.MessageDigest.

  • Operation on object of type java.security.MessageDigest object not completed. Expected call to digest, update.

Code

• Not available (Perhaps it resides in an external library).

Questions

1. How likely might this warning in a third-party library reveal a security threat to this app? a. Very unlikely; b. Unlikely; c. I cannot evaluate this; d. Likely; e. Very likely;