Skip to content

Set corresponding security signature hash and validate ECDSA security signature hash algorithm length for ECC certificates #3048

Set corresponding security signature hash and validate ECDSA security signature hash algorithm length for ECC certificates

Set corresponding security signature hash and validate ECDSA security signature hash algorithm length for ECC certificates #3048

Triggered via pull request December 17, 2024 10:10
Status Success
Total duration 26m 52s
Artifacts

codeql-analysis.yml

on: pull_request
Matrix: Analyze
Fit to window
Zoom out
Zoom in

Annotations

10 warnings
Analyze (csharp): Stack/Opc.Ua.Core/Stack/Tcp/UaSCBinaryClientChannel.cs#L656
The behavior of 'string.Format(string, object)' could vary based on the current user's locale settings. Replace this call in 'UaSCUaBinaryClientChannel.ProcessOpenSecureChannelResponse(uint, ArraySegment<byte>)' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Analyze (csharp): Stack/Opc.Ua.Core/Stack/Tcp/TcpTransportListener.cs#L419
The behavior of 'Convert.ToUInt32(string)' could vary based on the current user's locale settings. Replace this call in 'TcpTransportListener.UpdateChannelLastActiveTime(string)' with a call to 'Convert.ToUInt32(string, IFormatProvider)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Analyze (csharp): Stack/Opc.Ua.Core/Stack/Configuration/SecurityConfigurationManager.cs#L95
Avoid inexact read with 'System.IO.FileStream.Read(byte[], int, int)' (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca2022)
Analyze (csharp): Stack/Opc.Ua.Core/Stack/Tcp/UaSCBinaryClientChannel.cs#L656
The behavior of 'string.Format(string, object)' could vary based on the current user's locale settings. Replace this call in 'UaSCUaBinaryClientChannel.ProcessOpenSecureChannelResponse(uint, ArraySegment<byte>)' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Analyze (csharp): Stack/Opc.Ua.Core/Stack/Configuration/SecurityConfigurationManager.cs#L95
Avoid inexact read with 'System.IO.FileStream.Read(byte[], int, int)' (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca2022)
Analyze (csharp): Stack/Opc.Ua.Core/Stack/Tcp/TcpTransportListener.cs#L419
The behavior of 'Convert.ToUInt32(string)' could vary based on the current user's locale settings. Replace this call in 'TcpTransportListener.UpdateChannelLastActiveTime(string)' with a call to 'Convert.ToUInt32(string, IFormatProvider)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Analyze (csharp): Stack/Opc.Ua.Core/Stack/Tcp/UaSCBinaryClientChannel.cs#L656
The behavior of 'string.Format(string, object)' could vary based on the current user's locale settings. Replace this call in 'UaSCUaBinaryClientChannel.ProcessOpenSecureChannelResponse(uint, ArraySegment<byte>)' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Analyze (csharp): Stack/Opc.Ua.Core/Stack/Tcp/TcpTransportListener.cs#L419
The behavior of 'Convert.ToUInt32(string)' could vary based on the current user's locale settings. Replace this call in 'TcpTransportListener.UpdateChannelLastActiveTime(string)' with a call to 'Convert.ToUInt32(string, IFormatProvider)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Analyze (csharp): Stack/Opc.Ua.Core/Stack/Configuration/SecurityConfigurationManager.cs#L95
Avoid inexact read with 'System.IO.FileStream.Read(byte[], int, int)' (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca2022)
Analyze (csharp): Stack/Opc.Ua.Core/Stack/Tcp/UaSCBinaryClientChannel.cs#L656
The behavior of 'string.Format(string, object)' could vary based on the current user's locale settings. Replace this call in 'UaSCUaBinaryClientChannel.ProcessOpenSecureChannelResponse(uint, ArraySegment<byte>)' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)