Info Call to Random API

Description

List of all calls to methods that return pseudo-random values.

Recommendation

Do not seed Random with the current time because that value is more predictable to an attacker than the default seed.

The java.util.Random class must not be used either for security-critical applications or for protecting sensitive data. Use a more secure random number generator, such as the java.security.SecureRandom class.

Technical details

Method com.splunk.mint.aa.a() calling method java.util.Random.<init>()


    private static final String a()
    {
        byte[] v2_4 = new StringBuilder().append(Long.valueOf(new java.util.Date().getTime()).toString()).append(new Object().toString()).append(String.valueOf(System.nanoTime())).append(Integer.toString(((int) (new java.util.Random(System.currentTimeMillis()).nextDouble() * 65535.0)))).append("android_id").toString();
        try {
            String v1_8 = java.security.MessageDigest.getInstance("MD5");
        } catch (String v1) {
            try {
                v1_8 = java.security.MessageDigest.getInstance("SHA-1");
            } catch (String v1) {
                v1_8 = 0;
            }
        }
        String v0_1;
        if (v1_8 == null) {
            v0_1 = "12345678901234567890123456789012";
        } else {
            try {
                String v0_2 = v1_8.digest(v2_4.getBytes("UTF-8"));
            } catch (String v1_10) {
                v1_10.printStackTrace();
            }
            v0_1 = new String(ark>com.splunk.mint.aaark>.a(v0_2));
        }
        return v0_1;
    }

Method com.korvac.liquid.presentation.wallet.card.AddCardFragment.a() calling method java.util.Random.<init>()


    private void a(com.korvac.liquid.model.AddCard p15)
    {
        String v10_2;
        retrofit2.Call v0_3 = this.getResources().getStringArray(2131689472);
        String v12 = v0_3[new java.util.Random().nextInt(v0_3.length)];
        String v4 = this.et_fragment_add_card_card_no.getCardNumber();
        retrofit2.Call v0_1 = com.korvac.liquid.util.g.a();
        String v5_2 = new StringBuilder().append("20").append(this.et_fragment_add_card_expiry.getText().toString().replace("/", "").substring(2, 4)).append(this.et_fragment_add_card_expiry.getText().toString().replace("/", "").substring(0, 2)).toString();
        android.util.Log.d("format", v5_2);
        retrofit2.Call v0_5 = ((com.korvac.liquid.network.a.c) v0_1.create(com.korvac.liquid.network.a.c));
        ark>com.korvac.liquid.presentation.wallet.card.AddCardFragmentark>$8 v1_9 = this.n();
        String v2_11 = this.o();
        String v3_6 = this.et_fragment_add_card_card_name.getText().toString();
        String v6_3 = this.et_fragment_add_card_cvv.getText().toString();
        String v7 = p15.getCURRENCY();
        String v8 = p15.getCARDTYPE();
        String v9_1 = String.valueOf(p15.getBRANDID());
        if (!this.switchCardDefault.isChecked()) {
            v10_2 = "N";
        } else {
            v10_2 = "Y";
        }
        v0_5.a(v1_9, v2_11, v3_6, v4, v5_2, v6_3, v7, v8, v9_1, v10_2, p15.getBANK(), v12, p15.getCARDCATEGORY()).enqueue(new ark>com.korvac.liquid.presentation.wallet.card.AddCardFragmentark>$8(this, this));
        return;
    }

Method com.google.firebase.iid.f.a() calling method java.util.Random.<init>()


    private void a(String p5)
    {
        if ("com.google.android.gsf".equals(ark>com.google.firebase.iid.fark>.a)) {
            this.m = (this.m + 1);
            if (this.m >= 3) {
                if (this.m == 3) {
                    this.n = (new java.util.Random().nextInt(1000) + 1000);
                }
                this.n = (this.n * 2);
                this.o = (android.os.SystemClock.elapsedRealtime() + ((long) this.n));
                android.util.Log.w("InstanceID/Rpc", new StringBuilder((String.valueOf(p5).length() + 31)).append("Backoff due to ").append(p5).append(" for ").append(this.n).toString());
            }
        }
        return;
    }

Method com.google.android.gms.tagmanager.zzq.<init>() calling method java.util.Random.<init>()


    public zzq(android.content.Context p2, String p3)
    {
        this(p2, p3, new java.util.Random());
        return;
    }

Method com.google.android.gms.internal.zzaue.zzMi() calling method java.util.Random.<init>()


    public long zzMi()
    {
        try {
            Throwable v0_2;
            if (this.zzbve.get() != 0) {
                try {
                    this.zzbve.compareAndSet(-1, 1);
                    v0_2 = this.zzbve.getAndIncrement();
                } catch (Throwable v0_3) {
                    throw v0_3;
                }
            } else {
                Throwable v0_7 = new java.util.Random((System.nanoTime() ^ this.zznq().currentTimeMillis())).nextLong();
                int v3_1 = (this.zzbvf + 1);
                this.zzbvf = v3_1;
                v0_2 = (v0_7 + ((long) v3_1));
            }
        } catch (Throwable v0_8) {
            throw v0_8;
        }
        return v0_2;
    }

Method com.google.android.gms.iid.zzc.zzeJ() calling method java.util.Random.<init>()


    private void zzeJ(String p5)
    {
        if ("com.google.android.gsf".equals(com.google.android.gms.iid.zzc.zzbhq)) {
            this.zzbhz = (this.zzbhz + 1);
            if (this.zzbhz >= 3) {
                if (this.zzbhz == 3) {
                    this.zzbhA = (new java.util.Random().nextInt(1000) + 1000);
                }
                this.zzbhA = (this.zzbhA * 2);
                this.zzbhB = (android.os.SystemClock.elapsedRealtime() + ((long) this.zzbhA));
                android.util.Log.w("InstanceID/Rpc", new StringBuilder((String.valueOf(p5).length() + 31)).append("Backoff due to ").append(p5).append(" for ").append(this.zzbhA).toString());
            }
        }
        return;
    }

Method com.google.android.gms.analytics.Tracker.<init>() calling method java.util.Random.<init>()


    Tracker(com.google.android.gms.internal.zzrw p5, String p6, com.google.android.gms.internal.zzsv p7)
    {
        super(p5);
        super.zzFs = new java.util.HashMap();
        super.zzabs = new java.util.HashMap();
        if (p6 != null) {
            super.zzFs.put("&tid", p6);
        }
        super.zzFs.put("useSecure", "1");
        super.zzFs.put("&a", Integer.toString((new java.util.Random().nextInt(2147483647) + 1)));
        if (p7 != null) {
            super.zzabt = p7;
        } else {
            super.zzabt = new com.google.android.gms.internal.zzsv("tracking", super.zznq());
        }
        super.zzabu = new com.google.android.gms.analytics.Tracker$zza(super, p5);
        return;
    }

Method com.facebook.internal.x.a() calling method java.util.Random.<init>()


    public static String a(int p3)
    {
        return new java.math.BigInteger((p3 * 5), new java.util.Random()).toString(32);
    }

Method com.crashlytics.android.answers.RandomBackoff.<init>() calling method java.util.Random.<init>()


    public RandomBackoff(io.fabric.sdk.android.services.concurrency.a.a p3, double p4)
    {
        this(p3, p4, new java.util.Random());
        return;
    }

Method com.google.android.gms.internal.zzaue.zzmr() calling method java.security.SecureRandom.<init>()


    protected void zzmr()
    {
        com.google.android.gms.internal.zzati$zza v2_4 = new java.security.SecureRandom();
        long v0 = v2_4.nextLong();
        if (v0 == 0) {
            v0 = v2_4.nextLong();
            if (v0 == 0) {
                this.zzJt().zzLc().log("Utils falling back to Random for random id");
            }
        }
        this.zzbve.set(v0);
        return;
    }

Method com.google.android.gms.internal.zzatl.zzLi() calling method java.security.SecureRandom.<init>()


    private java.security.SecureRandom zzLi()
    {
        this.zzmq();
        if (this.zzbso == null) {
            this.zzbso = new java.security.SecureRandom();
        }
        return this.zzbso;
    }

Method com.google.android.gms.auth.api.credentials.PasswordSpecification.<init>() calling method java.security.SecureRandom.<init>()


    PasswordSpecification(int p2, String p3, java.util.List p4, java.util.List p5, int p6, int p7)
    {
        this.mVersionCode = p2;
        this.zzaiA = p3;
        this.zzaiB = java.util.Collections.unmodifiableList(p4);
        this.zzaiC = java.util.Collections.unmodifiableList(p5);
        this.zzaiD = p6;
        this.zzaiE = p7;
        this.zzaiF = this.zzqy();
        this.zzzI = new java.security.SecureRandom();
        return;
    }