4 commits

Author	SHA1	Message	Date
Morgen Malinoski	a018cf0fbb	Feature: G602 Slice Bound Checking (#973) ... * Added slice bounds testing for slice expressions. * Added checking slice index. * Added test for reassigning slice. * Store capacities on reslicing. * Scope change clears map. Func name used to track slices. * Map CallExpr to check bounds when passing to functions. * Fixed linter errors. * Updated rulelist with CWE mapping. * Added comment for NewSliceBoundCheck. * Addressed nil cap runtime error. * Replaced usage of nil in call arg map with dummy callexprs. * Updated comments, wrapped error return, addressed other review concerns.	2023-06-21 09:56:36 +02:00
Cosmin Cojocar	d5a9c73723	Remove rule G307 which checks when an error is not handled when a file or socket connection is closed (#935) ... * Remove read only types from unsafe defer rules * Remove rule G307 which checks when an error is not handled when a file or socket connection is closed This doesn't seem to bring much value from security perspective, and it caused a lot of controversy since is a very common pattern in Go. * Mentioned in documentation that rule G307 is retired * Clean up the test for rule G307	2023-02-24 14:04:13 +01:00
Cosmin Cojocar	f850069114	Use the gosec issue in the go analysers	2023-02-16 09:45:28 +01:00
Cosmin Cojocar	de2c6a36fa	Extract the issue in its own package	2023-02-16 09:45:28 +01:00

Renamed from issue.go (Browse further)