Handle the ValueSpec when trying to resolve an AST tree node

Signed-off-by: Cosmin Cojocar <cosmin.cojocar@gmx.ch>

resolve.go

@@ -14,10 +14,11 @@
 
 package gosec
 
-import "go/ast"
+import (
+	"go/ast"
+)
 
 func resolveIdent(n *ast.Ident, c *Context) bool {
-
 	if n.Obj == nil || n.Obj.Kind != ast.Var {
 		return true
 	}
@@ -27,7 +28,22 @@ func resolveIdent(n *ast.Ident, c *Context) bool {
 	return false
 }
 
+func resolveValueSpec(n *ast.ValueSpec, c *Context) bool {
+	if len(n.Values) == 0 {
+		return false
+	}
+	for _, value := range n.Values {
+		if !TryResolve(value, c) {
+			return false
+		}
+	}
+	return true
+}
+
 func resolveAssign(n *ast.AssignStmt, c *Context) bool {
+	if len(n.Rhs) == 0 {
+		return false
+	}
 	for _, arg := range n.Rhs {
 		if !TryResolve(arg, c) {
 			return false
@@ -37,6 +53,9 @@ func resolveAssign(n *ast.AssignStmt, c *Context) bool {
 }
 
 func resolveCompLit(n *ast.CompositeLit, c *Context) bool {
+	if len(n.Elts) == 0 {
+		return false
+	}
 	for _, arg := range n.Elts {
 		if !TryResolve(arg, c) {
 			return false
@@ -61,22 +80,18 @@ func TryResolve(n ast.Node, c *Context) bool {
 	switch node := n.(type) {
 	case *ast.BasicLit:
 		return true
-
 	case *ast.CompositeLit:
 		return resolveCompLit(node, c)
-
 	case *ast.Ident:
 		return resolveIdent(node, c)
-
+	case *ast.ValueSpec:
+		return resolveValueSpec(node, c)
 	case *ast.AssignStmt:
 		return resolveAssign(node, c)
-
 	case *ast.CallExpr:
 		return resolveCallExpr(node, c)
-
 	case *ast.BinaryExpr:
 		return resolveBinExpr(node, c)
 	}
-
 	return false
 }