From 8d5a0131c48d0812d1dd53b1af8e24ae4e51c4ba Mon Sep 17 00:00:00 2001
From: Kate Murphy <katejm@google.com>
Date: Fri, 12 Oct 2018 15:57:41 -0400
Subject: [PATCH] ext: Use SHA256 instead of SHA1 for fingerprinting

To make static analysis tools happy.

The current use of SHA1 for fingerprinting is safe. However, there is very
little downside to switching to SHA256.
---
 ext/vulnsrc/debian/debian.go | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/ext/vulnsrc/debian/debian.go b/ext/vulnsrc/debian/debian.go
index c5322593..31154dfb 100644
--- a/ext/vulnsrc/debian/debian.go
+++ b/ext/vulnsrc/debian/debian.go
@@ -17,7 +17,7 @@
 package debian
 
 import (
-	"crypto/sha1"
+	"crypto/sha256"
 	"encoding/hex"
 	"encoding/json"
 	"fmt"
@@ -67,7 +67,7 @@ func (u *updater) Update(datastore database.Datastore) (resp vulnsrc.UpdateRespo
 		return resp, err
 	}
 
-	// Get the SHA-1 of the latest update's JSON data
+	// Get the hash of the latest update's JSON data
 	latestHash, ok, err := tx.FindKeyValue(updaterFlag)
 	if err != nil {
 		return resp, err
@@ -119,9 +119,9 @@ func buildResponse(jsonReader io.Reader, latestKnownHash string) (resp vulnsrc.U
 		}
 	}()
 
-	// Create a TeeReader so that we can unmarshal into JSON and write to a SHA-1
+	// Create a TeeReader so that we can unmarshal into JSON and write to a hash
 	// digest at the same time.
-	jsonSHA := sha1.New()
+	jsonSHA := sha256.New()
 	teedJSONReader := io.TeeReader(jsonReader, jsonSHA)
 
 	// Unmarshal JSON.