1
0
mirror of https://github.com/securego/gosec.git synced 2025-06-14 23:45:03 +02:00

Add G204 rule for sys/execabs (#660)

* Add G204 rule for sys/execabs

* syntax error in testutils/sources.go
This commit is contained in:
Josh Kaufman
2021-07-01 11:43:25 -04:00
committed by GitHub
parent e936c84a90
commit 514f65f3c3
2 changed files with 20 additions and 0 deletions

View File

@ -1368,6 +1368,24 @@ func main() {
err = cmd.Wait()
log.Printf("Command finished with error: %v", err)
}`}, 0, gosec.NewConfig()},
{[]string{`
// exec.Command from supplemental package sys/execabs
// using variable arguments
package main
import (
"context"
"log"
"os"
exec "golang.org/x/sys/execabs"
)
func main() {
err := exec.CommandContext(context.Background(), os.Args[0], "5").Run()
if err != nil {
log.Fatal(err)
}
log.Printf("Command finished with error: %v", err)
}
`}, 1, gosec.NewConfig()},
}
// SampleCodeG301 - mkdir permission check