mirror of
https://github.com/securego/gosec.git
synced 2024-12-26 04:25:52 +00:00
81cda2f91f
* This change does not exclude analyzers for inline comment * Changed the expected issues count for G103, G109 samples for test. Previously G115 has been included in the issue count * Show analyzers IDs(G115, G602) in gosec usage help * See #1175
65 lines
1.2 KiB
Go
65 lines
1.2 KiB
Go
package testutils
|
|
|
|
import "github.com/securego/gosec/v2"
|
|
|
|
// SampleCodeG103 find instances of unsafe blocks for auditing purposes
|
|
var SampleCodeG103 = []CodeSample{
|
|
{[]string{`
|
|
package main
|
|
|
|
import (
|
|
"fmt"
|
|
"unsafe"
|
|
)
|
|
|
|
type Fake struct{}
|
|
|
|
func (Fake) Good() {}
|
|
|
|
func main() {
|
|
unsafeM := Fake{}
|
|
unsafeM.Good()
|
|
intArray := [...]int{1, 2}
|
|
fmt.Printf("\nintArray: %v\n", intArray)
|
|
intPtr := &intArray[0]
|
|
fmt.Printf("\nintPtr=%p, *intPtr=%d.\n", intPtr, *intPtr)
|
|
addressHolder := uintptr(unsafe.Pointer(intPtr))
|
|
intPtr = (*int)(unsafe.Pointer(addressHolder))
|
|
fmt.Printf("\nintPtr=%p, *intPtr=%d.\n\n", intPtr, *intPtr)
|
|
}
|
|
`}, 2, gosec.NewConfig()},
|
|
{[]string{`
|
|
package main
|
|
|
|
import (
|
|
"fmt"
|
|
"unsafe"
|
|
)
|
|
|
|
func main() {
|
|
chars := [...]byte{1, 2}
|
|
charsPtr := &chars[0]
|
|
str := unsafe.String(charsPtr, len(chars))
|
|
fmt.Printf("%s\n", str)
|
|
ptr := unsafe.StringData(str)
|
|
fmt.Printf("ptr: %p\n", ptr)
|
|
}
|
|
`}, 2, gosec.NewConfig()},
|
|
{[]string{`
|
|
package main
|
|
|
|
import (
|
|
"fmt"
|
|
"unsafe"
|
|
)
|
|
|
|
func main() {
|
|
chars := [...]byte{1, 2}
|
|
charsPtr := &chars[0]
|
|
slice := unsafe.Slice(charsPtr, len(chars))
|
|
fmt.Printf("%v\n", slice)
|
|
ptr := unsafe.SliceData(slice)
|
|
fmt.Printf("ptr: %p\n", ptr)
|
|
}
|
|
`}, 2, gosec.NewConfig()},
|
|
}
|