gosec

go/gosec

Fork 0

mirror of https://github.com/securego/gosec.git synced 2026-06-20 00:15:59 +02:00

Commit Graph

Author	SHA1	Message	Date
Cosmin Cojocar	8aec3f48a2	fix: skip SSA analysis on ill-typed packages to prevent panic (#1607 ) Packages with type errors (pkg.IllTyped == true) have partial type information that can cause nil pointer dereferences inside the SSA builder (golang.org/x/tools/go/ssa.emitConv). Add a pkg.IllTyped guard in buildSSA that returns a clean error instead of letting the SSA builder panic. AST-based rules continue to run normally on the affected package. Fixes #1604	2026-03-13 12:24:16 +01:00
Cosmin Cojocar	078a62afc3	Expand analyzer-core test coverage for orchestration, go/analysis adapter logic, and taint integration (#1537 ) Signed-off-by: Cosmin Cojocar <cosmin@cojocar.ch>	2026-02-21 12:35:16 +01:00

Author

SHA1

Message

Date

Cosmin Cojocar

8aec3f48a2

fix: skip SSA analysis on ill-typed packages to prevent panic (#1607 )

Packages with type errors (pkg.IllTyped == true) have partial type
information that can cause nil pointer dereferences inside the SSA
builder (golang.org/x/tools/go/ssa.emitConv).

Add a pkg.IllTyped guard in buildSSA that returns a clean error
instead of letting the SSA builder panic. AST-based rules continue
to run normally on the affected package.

Fixes #1604

2026-03-13 12:24:16 +01:00

Cosmin Cojocar

078a62afc3

Expand analyzer-core test coverage for orchestration, go/analysis adapter logic, and taint integration (#1537 )

Signed-off-by: Cosmin Cojocar <cosmin@cojocar.ch>

2026-02-21 12:35:16 +01:00