actions/gosec
1
0
Fork 0
mirror of https://github.com/securego/gosec.git synced 2024-11-05 19:45:51 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Backport test case for 1.5

Browse source 
Go 1.5 does not have a rand.Read function so need to adjust test
definitions accordingly.
This commit is contained in:
Grant Murphy 2017-01-13 13:31:22 -08:00
parent f9868aa8c8
commit a7ec9ccc63
2 changed files with 8 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
rules/rand.go
View file

@ -22,21 +22,23 @@ import (
type WeakRand struct {
gas.MetaData
funcName string
funcNames []string
packagePath string
}
func (w *WeakRand) Match(n ast.Node, c *gas.Context) (*gas.Issue, error) {
if _, matched := gas.MatchCallByPackage(n, c, w.packagePath, w.funcName); matched {
for _, funcName := range w.funcNames {
if _, matched := gas.MatchCallByPackage(n, c, w.packagePath, funcName); matched {
return gas.NewIssue(c, n, w.What, w.Severity, w.Confidence), nil
}
}
return nil, nil
}
func NewWeakRandCheck(conf map[string]interface{}) (gas.Rule, []ast.Node) {
return &WeakRand{
funcName: "Read",
funcNames: []string{"Read", "Int"},
packagePath: "math/rand",
MetaData: gas.MetaData{
Severity: gas.High,

4
rules/rand_test.go
View file

@ -51,7 +51,7 @@ func TestRandBad(t *testing.T) {
import "math/rand"
func main() {
bad, _ := rand.Read(nil)
bad := rand.Int()
println(bad)
}`, analyzer)
@ -77,7 +77,7 @@ func TestRandRenamed(t *testing.T) {
func main() {
good, _ := rand.Read(nil)
println(good)
i := mrand.Int()
i := mrand.Int31()
println(i)
}`, analyzer)