Skip to content

Commit 295fd68

Browse files
Make java/non-constant-time-crypto-comparison a warning
1 parent c977fd0 commit 295fd68

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

java/ql/src/experimental/Security/CWE/CWE-208/NonConstantTimeCryptoComparison.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@
44
* Otherwise, an attacker may be able to implement a timing attack.
55
* A successful attack may result in leaking secrets or authentication bypass.
66
* @kind path-problem
7-
* @problem.severity error
7+
* @problem.severity warning
88
* @precision high
99
* @id java/non-constant-time-crypto-comparison
1010
* @tags security

0 commit comments

Comments
 (0)