1
0
mirror of https://github.com/securego/gosec.git synced 2025-07-13 01:00:25 +02:00

Modify rule for integer overflow to have more acurate results (#434)

Signed-off-by: Hiroki Suezawa <suezawa@gmail.com>
This commit is contained in:
Hiroki Suezawa
2020-01-21 18:13:12 +09:00
committed by Cosmin Cojocar
parent a4d7b3628b
commit 459e2d3e91
2 changed files with 25 additions and 13 deletions

View File

@ -525,7 +525,6 @@ func main() {
// SampleCodeG109 - Potential Integer OverFlow
SampleCodeG109 = []CodeSample{
// Bind to all networks explicitly
{[]string{`
package main
@ -592,6 +591,22 @@ func test() {
bigValue := 30
value := int32(bigValue)
fmt.Println(value)
}`}, 0, gosec.NewConfig()}, {[]string{`
package main
import (
"fmt"
"strconv"
)
func main() {
value := 10
if value == 10 {
value, _ := strconv.Atoi("2147483648")
fmt.Println(value)
}
v := int32(value)
fmt.Println(v)
}`}, 0, gosec.NewConfig()}}
// SampleCodeG110 - potential DoS vulnerability via decompression bomb