dcraddrscanner02.md

CogniCrypt (report 2) for dcraddrscanner

• Class: okio.ByteString

• Method: digest

• Line: 156

• Issue details: ConstraintError-1

  • ConstraintError violating CrySL rule for java.security.MessageDigest.

  • First parameter (with value \SHA-1) should be any of {SHA-256, SHA-384, SHA-512}.

Code

• Not available. Perhaps it resides in an external library.

Questions

1. How likely might this warning in a third-party library reveal a security threat to this app?

   a. Very unlikely;

   b. Unlikely;

   c. I cannot evaluate this;

   d. Likely;

   e. Very likely;