replace SHA-1 with SHA-256 (#392)

https://github.com/eclipse-jdt/eclipse.jdt.debug/security/code-scanning/121 Co-authored-by: Jörg Kubitz <[email protected]>
eclipse-jdt · Feb 14, 2024 · 954200b · 954200b
1 parent 1b877fb
commit 954200b
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/...ching/launching/org/eclipse/jdt/internal/launching/sourcelookup/advanced/FileHashing.java b/...ching/launching/org/eclipse/jdt/internal/launching/sourcelookup/advanced/FileHashing.java
@@ -161,7 +161,7 @@ public HashCode hash(File file) {
 					}
 				}
 				// don't hold cache lock while hashing file
-				HashCode hashCode = sha1(file);
+				HashCode hashCode = computeHash(file);
 				synchronized (cache) {
 					cache.put(cacheKey, hashCode);
 				}
@@ -174,10 +174,10 @@ public HashCode hash(File file) {
 
 	}
 
-	private static HashCode sha1(File file) throws IOException {
+	private static HashCode computeHash(File file) throws IOException {
 		MessageDigest digest;
 		try {
-			digest = MessageDigest.getInstance("SHA1"); //$NON-NLS-1$
+			digest = MessageDigest.getInstance("SHA-256"); //$NON-NLS-1$
 		}
 		catch (NoSuchAlgorithmException e) {
 			throw new IllegalStateException("Unsupported JVM", e); //$NON-NLS-1$