diff --git a/testutils/source.go b/testutils/source.go index 5794268..d76fdf6 100644 --- a/testutils/source.go +++ b/testutils/source.go @@ -1891,13 +1891,15 @@ import "crypto/rand" func main() { good, _ := rand.Read(nil) println(good) -}`}, 0, gosec.NewConfig()}, {[]string{` +}`}, 0, gosec.NewConfig()}, + {[]string{` package main import "math/rand" func main() { bad := rand.Int() println(bad) -}`}, 1, gosec.NewConfig()}, {[]string{` +}`}, 1, gosec.NewConfig()}, + {[]string{` package main import ( "crypto/rand" @@ -1908,6 +1910,25 @@ func main() { println(good) bad := mrand.Int31() println(bad) +}`}, 1, gosec.NewConfig()}, + {[]string{` +package main +import ( + "math/rand" +) +func main() { + gen := rand.New(rand.NewSource(10.4)) + bad := gen.Int() + println(bad) +}`}, 1, gosec.NewConfig()}, + {[]string{` +package main +import ( + "math/rand" +) +func main() { + bad := rand.Intn(10) + println(bad) }`}, 1, gosec.NewConfig()}} // SampleCodeG501 - Blacklisted import MD5