@@ -81,15 +81,15 @@ func raiseIssue(val *ssa.Value, funcsToTrack *map[string][]int, ssaFuncs []*ssa.
81
81
switch valType := (* val ).(type ) {
82
82
case * ssa.Slice :
83
83
issueDescription += " by passing hardcoded slice/array"
84
- tmp , hasErr := iterateThroughReferrers (val , funcsToTrack , pass .Analyzer .Name , issueDescription , pass .Fset , issue .High , issue . High )
84
+ tmp , hasErr := iterateThroughReferrers (val , funcsToTrack , pass .Analyzer .Name , issueDescription , pass .Fset , issue .High )
85
85
gosecIssue = append (gosecIssue , tmp ... )
86
86
err = hasErr
87
87
88
88
case * ssa.UnOp :
89
89
// Check if it's a dereference operation (a.k.a pointer)
90
90
if valType .Op == token .MUL {
91
91
issueDescription += " by passing pointer which points to hardcoded variable"
92
- tmp , hasErr := iterateThroughReferrers (val , funcsToTrack , pass .Analyzer .Name , issueDescription , pass .Fset , issue .High , issue . Low )
92
+ tmp , hasErr := iterateThroughReferrers (val , funcsToTrack , pass .Analyzer .Name , issueDescription , pass .Fset , issue .Low )
93
93
gosecIssue = append (gosecIssue , tmp ... )
94
94
err = hasErr
95
95
}
@@ -100,7 +100,7 @@ func raiseIssue(val *ssa.Value, funcsToTrack *map[string][]int, ssaFuncs []*ssa.
100
100
if calledFunction , ok := valType .Call .Value .(* ssa.Function ); ok {
101
101
if contains , funcErr := isFuncContainsCryptoRand (calledFunction ); ! contains && funcErr == nil {
102
102
issueDescription += " by passing a value from function which doesn't use crypto/rand"
103
- tmp , hasErr := iterateThroughReferrers (val , funcsToTrack , pass .Analyzer .Name , issueDescription , pass .Fset , issue .High , issue . Medium )
103
+ tmp , hasErr := iterateThroughReferrers (val , funcsToTrack , pass .Analyzer .Name , issueDescription , pass .Fset , issue .Medium )
104
104
gosecIssue = append (gosecIssue , tmp ... )
105
105
err = hasErr
106
106
} else if funcErr != nil {
@@ -113,7 +113,7 @@ func raiseIssue(val *ssa.Value, funcsToTrack *map[string][]int, ssaFuncs []*ssa.
113
113
case * ssa.Convert :
114
114
if valType .Type ().String () == "[]byte" && valType .X .Type ().String () == "string" {
115
115
issueDescription += " by passing converted string"
116
- tmp , hasErr := iterateThroughReferrers (val , funcsToTrack , pass .Analyzer .Name , issueDescription , pass .Fset , issue .High , issue . High )
116
+ tmp , hasErr := iterateThroughReferrers (val , funcsToTrack , pass .Analyzer .Name , issueDescription , pass .Fset , issue .High )
117
117
gosecIssue = append (gosecIssue , tmp ... )
118
118
err = hasErr
119
119
}
@@ -147,7 +147,7 @@ func raiseIssue(val *ssa.Value, funcsToTrack *map[string][]int, ssaFuncs []*ssa.
147
147
}
148
148
149
149
// Iterate through all places that use the `variable` argument and check if it's used in one of the tracked functions
150
- func iterateThroughReferrers (variable * ssa.Value , funcsToTrack * map [string ][]int , analyzerID string , issueDescription string , fileSet * token.FileSet , issueSeverity issue. Score , issueConfidence issue.Score ) ([]* issue.Issue , error ) {
150
+ func iterateThroughReferrers (variable * ssa.Value , funcsToTrack * map [string ][]int , analyzerID string , issueDescription string , fileSet * token.FileSet , issueConfidence issue.Score ) ([]* issue.Issue , error ) {
151
151
if funcsToTrack == nil || variable == nil || analyzerID == "" || issueDescription == "" || fileSet == nil {
152
152
return nil , errors .New ("received a nil object" )
153
153
}
@@ -162,7 +162,7 @@ func iterateThroughReferrers(variable *ssa.Value, funcsToTrack *map[string][]int
162
162
trackedFuncParts := strings .Split (trackedFunc , "." )
163
163
trackedFuncPartsName := trackedFuncParts [len (trackedFuncParts )- 1 ]
164
164
if strings .Contains (referrer .String (), trackedFuncPartsName ) {
165
- gosecIssues = append (gosecIssues , newIssue (analyzerID , issueDescription , fileSet , referrer .Pos (), issueSeverity , issueConfidence ))
165
+ gosecIssues = append (gosecIssues , newIssue (analyzerID , issueDescription , fileSet , referrer .Pos (), issue . High , issueConfidence ))
166
166
}
167
167
}
168
168
}
0 commit comments