go/gosec
1
0
Fork 0
mirror of https://github.com/securego/gosec.git synced 2025-11-27 22:28:20 +02:00
Code Issues Releases Activity

Fix crash when parsing the TLS min version value (#724)

Browse Source
This commit is contained in:
Cosmin Cojocar
2021-11-09 21:59:53 +01:00
committed by GitHub
parent 40fa36d1de
commit 55c6ceaaa6
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
rules/tls.go
View File

@@ -88,7 +88,7 @@ func (t *insecureConfigTLS) processTLSConfVal(n *ast.KeyValueExpr, c *gosec.Cont
case "MinVersion": case "MinVersion":
if d, ok := n.Value.(*ast.Ident); ok { if d, ok := n.Value.(*ast.Ident); ok {
if vs, ok := d.Obj.Decl.(*ast.ValueSpec); ok { if vs, ok := d.Obj.Decl.(*ast.ValueSpec); ok && len(vs.Values) > 0 {
if s, ok := vs.Values[0].(*ast.SelectorExpr); ok { if s, ok := vs.Values[0].(*ast.SelectorExpr); ok {
x := s.X.(*ast.Ident).Name x := s.X.(*ast.Ident).Name
sel := s.Sel.Name sel := s.Sel.Name