github / github/codeql

`js/weak-cryptographic-algorithm`/`BrokenCryptoAlgorithm` got 25-30x slower

Aperta
#18,604 4 commenti 0 reazioni 0 assegnatari Vedi su GitHub
question
Lingua principale
CodeQL
Stelle
10.1k
Fork
2.1k
Merge medio
2g 15h
PR unite (30g)
141

Descrizione

**Description of the issue**

Similar to

- https://github.com/github/codeql/issues/18584

this rule appears to run 20-30x slower on the same exact repo with the same hardware

```
[106/106 eval 30m34s] Evaluation done; writing results to codeql/javascript-queries/Security/CWE-327/BrokenCryptoAlgorithm.bqrs.
```

unsure root cause is the same as the other issue, but disabling rule rule like

```yaml
query-filters:
- exclude:
id: js/weak-cryptographic-algorithm
```
is a workaround

Guida per i contributori

Apri la guida per i contributori

Direzione di ricerca

Start by comparing this report with github/codeql#18584, then inspect the js/weak-cryptographic-algorithm rule and the BrokenCryptoAlgorithm.bqrs evaluation named in the report. Reproduce the timing on the same repository and hardware if available. Done means identifying and addressing the cause of the 20–30x slowdown while preserving the rule’s results; the query-filters exclusion is only a workaround.

Scritto dal modello di indicizzazione a partire dal testo della issue.

Valutazione

Ambito
performance, security
Tipo di issue
Bug
Difficoltà
4/5
Tempo stimato
3-5 giorni
Stato di attività
Attiva
Chiarezza
Abbastanza chiara
Idoneità per principianti
45/100

Ricevi le nuove issue nella tua casella

Un breve riepilogo di issue GitHub adatte ai principianti.