Networks/Reticulum-Go
2
1
Fork 0
Code Issues 5 Pull Requests 1 Actions Packages Projects 1 Releases 1 Wiki Activity

fix: add security comment for Unix timestamp handling in CreatePacket function

Browse Source
This commit is contained in:
ivan
2025-11-20 18:04:22 -06:00
parent 2a2d6d6515
commit 4859f5513a
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
pkg/announce/announce.go
View File

@@ -355,6 +355,7 @@ func (a *Announce) CreatePacket() []byte {
} }
// Add 5 bytes of timestamp // Add 5 bytes of timestamp
timeBytes := make([]byte, 8) timeBytes := make([]byte, 8)
// #nosec G115 - Unix timestamp is always positive, no overflow risk
binary.BigEndian.PutUint64(timeBytes, uint64(time.Now().Unix())) binary.BigEndian.PutUint64(timeBytes, uint64(time.Now().Unix()))
copy(randomHash[5:], timeBytes[:5]) copy(randomHash[5:], timeBytes[:5])