Updated change note

This commit is contained in:
Tony Torralba
2024-01-12 08:55:24 +01:00
parent 12c5b46a0a
commit 31c11add85

View File

@@ -1,4 +1,4 @@
---
category: minorAnalysis
---
* The query `go/insecure-randomness` now recognizes the selection of candidates from a predefined set using a weak RNG when the result is used in a sensitive operation.
* The query `go/insecure-randomness` now recognizes the selection of candidates from a predefined set using a weak RNG when the result is used in a sensitive operation. Also, false positives have been reduced by adding more sink exclusions for functions in the `crypto` package not related to cryptographic operations.