Skip to content

Conversation

@foodprocessor
Copy link
Contributor

What type of Pull Request is this? (check all applicable)

  • Refactor
  • Feature
  • Bug Fix
  • Optimization
  • Documentation Update

Describe your changes in brief

Checklist

  • Tested locally
  • Added new dependencies
  • Updated documentation
  • Added tests

Related Issues

  • Related Issue #
  • Closes #

…ed data but also know if the cloud connection is down.
…xist in cloud storage.

Also account for invalid entries with AttrFlagExists set, which are gaps in knowledge even when the directory is listed.
Update tests to work with sync deletion.
Create files directly in loopback whenever possible.
When timeout is zero, evict everything.
@foodprocessor foodprocessor force-pushed the network-fault-tolerance branch from fab146b to f5bc63a Compare September 27, 2025 05:07
// Compute md5 of local file
fileMD5, err := common.GetMD5(fi)
if err != nil {
log.Warn("BlockBlob::ReadToFile : Failed to generate MD5 Sum for %s", name)
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Mend Code Security Check

New finding (2 of 4)

The Mend Code Security Check of your branch failed because of a Weak Hash Strength finding in this line.

SeverityVulnerability TypeCWEFileData FlowsDetected
LowWeak Hash Strength

CWE-916

block_blob.go:1002

12025-05-16 10:36pm
Vulnerable Code

log.Warn("BlockBlob::ReadToFile : Failed to generate MD5 Sum for %s", name)

Secure Code Warrior Training Material

● Training

   ▪ Secure Code Warrior Weak Hash Strength Training

● Videos

   ▪ Secure Code Warrior Weak Hash Strength Video

● Further Reading

   ▪ OWASP Cryptographic Storage Cheat Sheet

   ▪ OWASP Transport Layer Protection Cheat Sheet

   ▪ OWASP Password Storage Cheat Sheet

   ▪ OWASP Using a broken or risky cryptographic algorithm article

Suppress Finding
  • ... as False Alarm
  • ... as Acceptable Risk

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant