go/gosec
1
0
Fork 0
mirror of https://github.com/securego/gosec.git synced 2025-07-03 00:27:05 +02:00
Code Issues Releases Activity

Handle nil when looking up a file by position into a package (#747)

Browse Source
This commit is contained in:
Cosmin Cojocar
2021-12-22 17:50:46 +01:00
committed by GitHub
parent 3038a30e3c
commit 63a8e789a1
1 changed files with 6 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
analyzer.go
View File

@ -219,7 +219,12 @@ func (gosec *Analyzer) load(pkgPath string, conf *packages.Config) ([]*packages.
func (gosec *Analyzer) Check(pkg *packages.Package) { func (gosec *Analyzer) Check(pkg *packages.Package) {
gosec.logger.Println("Checking package:", pkg.Name) gosec.logger.Println("Checking package:", pkg.Name)
for _, file := range pkg.Syntax { for _, file := range pkg.Syntax {
checkedFile := pkg.Fset.File(file.Pos()).Name() fp := pkg.Fset.File(file.Pos())
if fp == nil {
// skip files which cannot be located
continue
}
checkedFile := fp.Name()
// Skip the no-Go file from analysis (e.g. a Cgo files is expanded in 3 different files // Skip the no-Go file from analysis (e.g. a Cgo files is expanded in 3 different files
// stored in the cache which do not need to by analyzed) // stored in the cache which do not need to by analyzed)
if filepath.Ext(checkedFile) != ".go" { if filepath.Ext(checkedFile) != ".go" {