Insecure Randomness

[QiAnXinCodeSafe]

BoostMultiDex/boost_multidex/src/main/java/com/bytedance/boost_multidex/DexInstallProcessor.java

Line 26 in 29d4110

mDoCheckSum = random.nextInt(3) == 0;

Try not to use unsafe random numbers, especially when sensitive operations such as checksums are involved.Doing so allows an attacker to control the value used to seed the pseudorandom number generator, and therefore predict the sequence of values (usually integers) produced by calls to Random.nextInt(), Random.nextShort(), Random.nextLong()