actions/gosec
1
0
Fork 0
mirror of https://github.com/securego/gosec.git synced 2024-11-05 19:45:51 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
gosec/rules
History
Vladimir Severov 9c19cb6501
Add check for usage of Rat.SetString in math/big with an overflow error (#819) 
* Add check for usage of Rat.SetString in math/big with an overflow error

Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7
has an overflow that can lead to Uncontrolled Memory Consumption.

It is the CVE-2022-23772.

* Use ContainsPkgCallExpr instead of manual parsing
2022-06-03 00:19:51 +02:00
..
archive.go feat: adds support for path.Join and for tar archives in G305 2020-08-03 09:17:45 +02:00
bad_defer.go Fix https://github.com/securego/gosec/issues/714 (#733) 2021-11-24 16:34:42 +01:00
bind.go Handle properly the gosec module version v2 2020-04-06 09:06:23 -07:00
blocklist.go Rename file for consistency 2020-06-29 13:52:47 +02:00
decompression-bomb.go Add io.CopyBuffer function to rule G110 2020-07-29 14:25:45 +02:00
directory-traversal.go Fix use rule IDs to retrieve the rule config 2022-03-28 20:28:02 +02:00
errors.go Fix use rule IDs to retrieve the rule config 2022-03-28 20:28:02 +02:00
fileperms.go Fix use rule IDs to retrieve the rule config 2022-03-28 20:28:02 +02:00
hardcoded_credentials.go Fix use rule IDs to retrieve the rule config 2022-03-28 20:28:02 +02:00
implicit_aliasing.go Improve the SQL concatenation and string formatting rules to be applied only in the database/sql context 2020-05-27 10:16:56 +02:00
integer_overflow.go Handle properly the gosec module version v2 2020-04-06 09:06:23 -07:00
math_big_rat.go Add check for usage of Rat.SetString in math/big with an overflow error (#819) 2022-06-03 00:19:51 +02:00
pprof.go Handle properly the gosec module version v2 2020-04-06 09:06:23 -07:00
rand.go Fix lint and fail on error in the ci build 2021-05-31 10:44:12 +02:00
readfile.go Add os.Create to the readfile rule (#761) 2022-01-12 19:33:17 +01:00
rsa.go Handle properly the gosec module version v2 2020-04-06 09:06:23 -07:00
rulelist.go Add check for usage of Rat.SetString in math/big with an overflow error (#819) 2022-06-03 00:19:51 +02:00
rules_suite_test.go Update to ginkgo v2 (#753) 2022-01-03 18:11:35 +01:00
rules_test.go Add check for usage of Rat.SetString in math/big with an overflow error (#819) 2022-06-03 00:19:51 +02:00
slowloris.go Add new rule for Slowloris Attack 2022-04-30 12:38:50 +02:00
sql.go Add db.Exec and db.Prepare to the sql rule (#763) 2022-01-17 13:50:37 +01:00
ssh.go Handle properly the gosec module version v2 2020-04-06 09:06:23 -07:00
ssrf.go Handle properly the gosec module version v2 2020-04-06 09:06:23 -07:00
subproc.go Fix a panic in suproc rule when the declaration of the variable is not available in the AST (#728) 2021-11-16 21:41:26 +01:00
tempfiles.go Find G303 with filepath.Join'd temp dirs (#754) 2022-01-04 14:48:02 +01:00
templates.go Update the description message of template rule (#803) 2022-04-05 07:41:36 +02:00
tls.go Resolve the TLS min version when is declarted in the same package but in a different file 2022-01-26 19:27:26 +01:00
tls_config.go Update the tls configuration generate to handle also the NSS alternative names 2020-09-03 10:54:08 +02:00
unsafe.go Handle properly the gosec module version v2 2020-04-06 09:06:23 -07:00
weakcrypto.go Change naming rule from blacklist to blocklist 2020-06-29 13:45:44 +02:00