commit bfe6988e8ec5ad9283200f46134529cac10e006c
author k4.rahul <rahul.k4@tataelxsi.co.in> Thu Apr 27 12:25:59 2023 +0530
committer elumalai <deepika.e@tataelxsi.co.in> Fri May 31 08:23:06 2024 +0200
tree 26eb2138383ad7baafc0ad0ef61e6a1fdcdaa189
parent ecf3f132b696fb51f22320a17477fa7b0a3001f1

Coverity-CWE 330: Use of Insufficiently Random Values (137944 Cryptographically weak PRNG)

Added fix for CWE 330: Use of Insufficiently Random Value (Cryptographically weak PRNG)
use SystemRandom().randint() instead of randint() to generate Cryptographically secure
random values

Change-Id: I02b5ce9bf1826f60a183d6e793cb0661dc120a43
Signed-off-by: k4.rahul <rahul.k4@tataelxsi.co.in>

osm_policy_module/common/mon_client.py

diff --git a/osm_policy_module/common/mon_client.py b/osm_policy_module/common/mon_client.py
index 0142096..e4f7533 100644
--- a/osm_policy_module/common/mon_client.py
+++ b/osm_policy_module/common/mon_client.py
@@ -23,7 +23,7 @@
 ##
 import json
 import logging
-import random
+from random import SystemRandom
 from json import JSONDecodeError
 
 import yaml
@@ -53,7 +53,7 @@
         vnfr: object = None,
         vnfd: object = None,
     ):
-        cor_id = random.randint(1, 10e7)
+        cor_id = SystemRandom().randint(1, 10e7)
         msg = self._build_create_alarm_payload(
             cor_id,
             metric_name,
@@ -111,7 +111,7 @@
     async def delete_alarm(
         self, ns_id: str, vnf_member_index: str, vdu_name: str, alarm_uuid: str
     ):
-        cor_id = random.randint(1, 10e7)
+        cor_id = SystemRandom().randint(1, 10e7)
         msg = self._build_delete_alarm_payload(
             cor_id, ns_id, vdu_name, vnf_member_index, alarm_uuid
         )