Skip to content

Conversation

cosnicolaou
Copy link
Contributor

No description provided.

scn.DataSourceName, scn.TLSDisable, scn.TLSServerName,
scn.RootCertPath, scn.ClientCertPath, scn.ClientKeyPath,
}
hashAcc := make([]byte, 0, len(fieldsToHash)*sha256.Size)

Check failure

Code scanning / CodeQL

Size computation for allocation may overflow

This operation, which is used in an [allocation](1), involves a [potentially large value](2) and might overflow.
ServerName: cfg.TLSServerName,
// SSLv3 is more vulnerable than TLSv1.0, see https://en.wikipedia.org/wiki/POODLE
// TODO(ivanpi): Increase when Cloud SQL starts supporting higher TLS versions.
MinVersion: tls.VersionTLS10,

Check failure

Code scanning / CodeQL

Insecure TLS configuration

Using insecure TLS version VersionTLS10 for MinVersion.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant