Code

Feature: G602 Slice Bound Checking#973

Code

Merged

ccojocar merged 12 commits intosecurego:mastersecurego/gosec:masterfrom morgenm:feature-sliceboundcheckmorgenm/gosec:feature-sliceboundcheckCopy head branch name to clipboardJun 21, 2023

+589

Commits

Commits on Jun 16, 2023

• Added slice bounds testing for slice expressions.

  morgenm

  committed
  b7d3dd7

  Copy full SHA for b7d3dd7

• Added checking slice index.

  morgenm

  committed
  e5f0e10

  Copy full SHA for e5f0e10

• Added test for reassigning slice.

  morgenm

  committed
  af7a2d9

  Copy full SHA for af7a2d9

Commits on Jun 17, 2023

• Store capacities on reslicing.

  morgenm

  committed
  a968dc3

  Copy full SHA for a968dc3

• Scope change clears map. Func name used to track slices.

  morgenm

  committed
  0d54b19

  Copy full SHA for 0d54b19

• Map CallExpr to check bounds when passing to functions.

  morgenm

  committed
  3491cdb

  Copy full SHA for 3491cdb

• Fixed linter errors.

  morgenm

  committed
  7915743

  Copy full SHA for 7915743

• Updated rulelist with CWE mapping.

  morgenm

  committed
  d3b0fa2

  Copy full SHA for d3b0fa2

• Added comment for NewSliceBoundCheck.

  morgenm

  committed
  7a3cc60

  Copy full SHA for 7a3cc60

Commits on Jun 20, 2023

• Addressed nil cap runtime error.

  morgenm

  committed
  0f74b06

  Copy full SHA for 0f74b06

• Replaced usage of nil in call arg map with dummy callexprs.

  morgenm

  committed
  6a86b77

  Copy full SHA for 6a86b77

• Updated comments, wrapped error return, addressed other review concerns.

  morgenm

  committed
  a7356c2

  Copy full SHA for a7356c2