[3.1.6] | Suppress CodeQL X509RevocationMode warning (#2539)

dauinsight · web-flow · commit b48b26ee4af8 · 2024-05-28T09:36:12.000-07:00
diff --git a/src/Microsoft.Data.SqlClient/src/Microsoft/Data/SqlClient/VirtualSecureModeEnclaveProviderBase.cs b/src/Microsoft.Data.SqlClient/src/Microsoft/Data/SqlClient/VirtualSecureModeEnclaveProviderBase.cs
@@ -246,8 +246,10 @@ private bool VerifyHealthReportAgainstRootCertificate(X509Certificate2Collection
             // An Always Encrypted-enabled driver doesn't verify an expiration date or a certificate authority chain.
             // A certificate is simply used as a key pair consisting of a public and private key. This is by design.
 
+            #pragma warning disable IA5352
             // CodeQL [SM00395] By design. Always Encrypted certificates should not be checked.
             chain.ChainPolicy.RevocationMode = X509RevocationMode.NoCheck;
+            #pragma warning restore IA5352
 
             if (!chain.Build(healthReportCert))
             {

Original file line number	Diff line number	Diff line change
`@@ -246,8 +246,10 @@ private bool VerifyHealthReportAgainstRootCertificate(X509Certificate2Collection`
`246`	`246`	`// An Always Encrypted-enabled driver doesn't verify an expiration date or a certificate authority chain.`
`247`	`247`	`// A certificate is simply used as a key pair consisting of a public and private key. This is by design.`
`248`	`248`
	`249`	`+ #pragma warning disable IA5352`
`249`	`250`	`// CodeQL [SM00395] By design. Always Encrypted certificates should not be checked.`
`250`	`251`	`chain.ChainPolicy.RevocationMode = X509RevocationMode.NoCheck;`
	`252`	`+ #pragma warning restore IA5352`
`251`	`253`
`252`	`254`	`if (!chain.Build(healthReportCert))`
`253`	`255`	`{`