go/gosec
1
0
Fork 0
mirror of https://github.com/securego/gosec.git synced 2025-12-01 22:41:54 +02:00
Code Issues Releases Activity

Fix additional crash condition

Browse Source 
A var GenDecl may not have a value assigned. This error case must be
handled.
This commit is contained in:
Grant Murphy
2016-11-14 15:15:17 -08:00
parent 5012c34d48
commit c7bb2dd3b7
2 changed files with 14 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
rules/hardcoded_credentials.go
View File

@@ -58,7 +58,7 @@ func (r *Credentials) matchGenDecl(decl *ast.GenDecl, ctx *gas.Context) (*gas.Is
for _, spec := range decl.Specs {
if valueSpec, ok := spec.(*ast.ValueSpec); ok {
for index, ident := range valueSpec.Names {
if r.pattern.MatchString(ident.Name) {
if r.pattern.MatchString(ident.Name) && valueSpec.Values != nil {
// const foo, bar = "same value"
if len(valueSpec.Values) <= index {
index = len(valueSpec.Values) - 1