Skip to content

Set corresponding security signature hash and validate ECDSA security signature hash algorithm length for ECC certificates #3050

Set corresponding security signature hash and validate ECDSA security signature hash algorithm length for ECC certificates

Set corresponding security signature hash and validate ECDSA security signature hash algorithm length for ECC certificates #3050

Triggered via pull request December 17, 2024 14:53
Status Success
Total duration 32m 44s
Artifacts

codeql-analysis.yml

on: pull_request
Matrix: Analyze
Fit to window
Zoom out
Zoom in

Annotations

10 warnings
Analyze (csharp): Stack/Opc.Ua.Core/Stack/Tcp/UaSCBinaryClientChannel.cs#L656
The behavior of 'string.Format(string, object)' could vary based on the current user's locale settings. Replace this call in 'UaSCUaBinaryClientChannel.ProcessOpenSecureChannelResponse(uint, ArraySegment<byte>)' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Analyze (csharp): Stack/Opc.Ua.Core/Stack/Configuration/SecurityConfigurationManager.cs#L95
Avoid inexact read with 'System.IO.FileStream.Read(byte[], int, int)' (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca2022)
Analyze (csharp): Stack/Opc.Ua.Core/Stack/Tcp/TcpTransportListener.cs#L419
The behavior of 'Convert.ToUInt32(string)' could vary based on the current user's locale settings. Replace this call in 'TcpTransportListener.UpdateChannelLastActiveTime(string)' with a call to 'Convert.ToUInt32(string, IFormatProvider)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Analyze (csharp): Stack/Opc.Ua.Core/Stack/Tcp/UaSCBinaryClientChannel.cs#L656
The behavior of 'string.Format(string, object)' could vary based on the current user's locale settings. Replace this call in 'UaSCUaBinaryClientChannel.ProcessOpenSecureChannelResponse(uint, ArraySegment<byte>)' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Analyze (csharp): Stack/Opc.Ua.Core/Stack/Configuration/SecurityConfigurationManager.cs#L95
Avoid inexact read with 'System.IO.FileStream.Read(byte[], int, int)' (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca2022)
Analyze (csharp): Stack/Opc.Ua.Core/Stack/Tcp/TcpTransportListener.cs#L419
The behavior of 'Convert.ToUInt32(string)' could vary based on the current user's locale settings. Replace this call in 'TcpTransportListener.UpdateChannelLastActiveTime(string)' with a call to 'Convert.ToUInt32(string, IFormatProvider)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Analyze (csharp): Stack/Opc.Ua.Core/Stack/Tcp/UaSCBinaryClientChannel.cs#L656
The behavior of 'string.Format(string, object)' could vary based on the current user's locale settings. Replace this call in 'UaSCUaBinaryClientChannel.ProcessOpenSecureChannelResponse(uint, ArraySegment<byte>)' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Analyze (csharp): Stack/Opc.Ua.Core/Stack/Tcp/TcpTransportListener.cs#L419
The behavior of 'Convert.ToUInt32(string)' could vary based on the current user's locale settings. Replace this call in 'TcpTransportListener.UpdateChannelLastActiveTime(string)' with a call to 'Convert.ToUInt32(string, IFormatProvider)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Analyze (csharp): Stack/Opc.Ua.Core/Stack/Configuration/SecurityConfigurationManager.cs#L95
Avoid inexact read with 'System.IO.FileStream.Read(byte[], int, int)' (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca2022)
Analyze (csharp): Stack/Opc.Ua.Core/Stack/Tcp/UaSCBinaryClientChannel.cs#L656
The behavior of 'string.Format(string, object)' could vary based on the current user's locale settings. Replace this call in 'UaSCUaBinaryClientChannel.ProcessOpenSecureChannelResponse(uint, ArraySegment<byte>)' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)