hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-01-30 06:42:57 +01:00
Code Issues Packages Projects Releases Wiki Activity

Move Incorrect Integer Conversion tests to InlineFlowTest

Browse Source
This commit is contained in:
Owen Mansel-Chan
2021-11-01 13:31:02 +00:00
parent 109e3660f8
commit be22373f3e
10 changed files with 188 additions and 424 deletions
Download Patch File Download Diff File Expand all files Collapse all files

247
ql/test/query-tests/Security/CWE-681/IncorrectIntegerConversion.expected
View File

@@ -1,247 +0,0 @@
edges
| IncorrectIntegerConversion.go:26:2:26:28 | ... := ...[0] : int | IncorrectIntegerConversion.go:35:41:35:50 | type conversion |
| IncorrectIntegerConversion.go:65:3:65:49 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:69:7:69:18 | type conversion |
| IncorrectIntegerConversion.go:65:3:65:49 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:70:7:70:19 | type conversion |
| IncorrectIntegerConversion.go:81:3:81:49 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:85:7:85:18 | type conversion |
| IncorrectIntegerConversion.go:81:3:81:49 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:86:7:86:19 | type conversion |
| IncorrectIntegerConversion.go:81:3:81:49 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:87:7:87:19 | type conversion |
| IncorrectIntegerConversion.go:81:3:81:49 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:88:7:88:20 | type conversion |
| IncorrectIntegerConversion.go:97:3:97:49 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:101:7:101:18 | type conversion |
| IncorrectIntegerConversion.go:97:3:97:49 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:102:7:102:19 | type conversion |
| IncorrectIntegerConversion.go:97:3:97:49 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:103:7:103:19 | type conversion |
| IncorrectIntegerConversion.go:97:3:97:49 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:104:7:104:20 | type conversion |
| IncorrectIntegerConversion.go:97:3:97:49 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:105:7:105:19 | type conversion |
| IncorrectIntegerConversion.go:97:3:97:49 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:106:7:106:20 | type conversion |
| IncorrectIntegerConversion.go:97:3:97:49 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:109:7:109:17 | type conversion |
| IncorrectIntegerConversion.go:97:3:97:49 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:110:7:110:18 | type conversion |
| IncorrectIntegerConversion.go:113:3:113:48 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:117:7:117:18 | type conversion |
| IncorrectIntegerConversion.go:113:3:113:48 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:118:7:118:19 | type conversion |
| IncorrectIntegerConversion.go:113:3:113:48 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:119:7:119:19 | type conversion |
| IncorrectIntegerConversion.go:113:3:113:48 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:120:7:120:20 | type conversion |
| IncorrectIntegerConversion.go:113:3:113:48 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:121:7:121:19 | type conversion |
| IncorrectIntegerConversion.go:113:3:113:48 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:122:7:122:20 | type conversion |
| IncorrectIntegerConversion.go:148:3:148:50 | ... := ...[0] : uint64 | IncorrectIntegerConversion.go:152:7:152:18 | type conversion |
| IncorrectIntegerConversion.go:148:3:148:50 | ... := ...[0] : uint64 | IncorrectIntegerConversion.go:153:7:153:19 | type conversion |
| IncorrectIntegerConversion.go:164:3:164:50 | ... := ...[0] : uint64 | IncorrectIntegerConversion.go:168:7:168:18 | type conversion |
| IncorrectIntegerConversion.go:164:3:164:50 | ... := ...[0] : uint64 | IncorrectIntegerConversion.go:169:7:169:19 | type conversion |
| IncorrectIntegerConversion.go:164:3:164:50 | ... := ...[0] : uint64 | IncorrectIntegerConversion.go:170:7:170:19 | type conversion |
| IncorrectIntegerConversion.go:164:3:164:50 | ... := ...[0] : uint64 | IncorrectIntegerConversion.go:171:7:171:20 | type conversion |
| IncorrectIntegerConversion.go:180:3:180:50 | ... := ...[0] : uint64 | IncorrectIntegerConversion.go:184:7:184:18 | type conversion |
| IncorrectIntegerConversion.go:180:3:180:50 | ... := ...[0] : uint64 | IncorrectIntegerConversion.go:185:7:185:19 | type conversion |
| IncorrectIntegerConversion.go:180:3:180:50 | ... := ...[0] : uint64 | IncorrectIntegerConversion.go:186:7:186:19 | type conversion |
| IncorrectIntegerConversion.go:180:3:180:50 | ... := ...[0] : uint64 | IncorrectIntegerConversion.go:187:7:187:20 | type conversion |
| IncorrectIntegerConversion.go:180:3:180:50 | ... := ...[0] : uint64 | IncorrectIntegerConversion.go:188:7:188:19 | type conversion |
| IncorrectIntegerConversion.go:180:3:180:50 | ... := ...[0] : uint64 | IncorrectIntegerConversion.go:189:7:189:20 | type conversion |
| IncorrectIntegerConversion.go:180:3:180:50 | ... := ...[0] : uint64 | IncorrectIntegerConversion.go:192:7:192:17 | type conversion |
| IncorrectIntegerConversion.go:180:3:180:50 | ... := ...[0] : uint64 | IncorrectIntegerConversion.go:193:7:193:18 | type conversion |
| IncorrectIntegerConversion.go:196:3:196:49 | ... := ...[0] : uint64 | IncorrectIntegerConversion.go:200:7:200:18 | type conversion |
| IncorrectIntegerConversion.go:196:3:196:49 | ... := ...[0] : uint64 | IncorrectIntegerConversion.go:201:7:201:19 | type conversion |
| IncorrectIntegerConversion.go:196:3:196:49 | ... := ...[0] : uint64 | IncorrectIntegerConversion.go:202:7:202:19 | type conversion |
| IncorrectIntegerConversion.go:196:3:196:49 | ... := ...[0] : uint64 | IncorrectIntegerConversion.go:203:7:203:20 | type conversion |
| IncorrectIntegerConversion.go:196:3:196:49 | ... := ...[0] : uint64 | IncorrectIntegerConversion.go:204:7:204:19 | type conversion |
| IncorrectIntegerConversion.go:196:3:196:49 | ... := ...[0] : uint64 | IncorrectIntegerConversion.go:205:7:205:20 | type conversion |
| IncorrectIntegerConversion.go:214:2:214:36 | ... := ...[0] : int | IncorrectIntegerConversion.go:218:6:218:17 | type conversion |
| IncorrectIntegerConversion.go:214:2:214:36 | ... := ...[0] : int | IncorrectIntegerConversion.go:219:6:219:18 | type conversion |
| IncorrectIntegerConversion.go:214:2:214:36 | ... := ...[0] : int | IncorrectIntegerConversion.go:220:6:220:18 | type conversion |
| IncorrectIntegerConversion.go:214:2:214:36 | ... := ...[0] : int | IncorrectIntegerConversion.go:221:6:221:19 | type conversion |
| IncorrectIntegerConversion.go:214:2:214:36 | ... := ...[0] : int | IncorrectIntegerConversion.go:222:6:222:18 | type conversion |
| IncorrectIntegerConversion.go:214:2:214:36 | ... := ...[0] : int | IncorrectIntegerConversion.go:223:6:223:19 | type conversion |
| IncorrectIntegerConversion.go:235:3:235:48 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:240:7:240:18 | type conversion |
| IncorrectIntegerConversion.go:235:3:235:48 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:241:7:241:23 | type conversion |
| IncorrectIntegerConversion.go:247:3:247:36 | ... := ...[0] : int | IncorrectIntegerConversion.go:261:8:261:19 | type conversion |
| IncorrectIntegerConversion.go:268:3:268:49 | ... := ...[0] : uint64 | IncorrectIntegerConversion.go:282:8:282:21 | type conversion |
| IncorrectIntegerConversion.go:319:3:319:48 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:323:7:323:18 | type conversion |
| IncorrectIntegerConversion.go:330:3:330:48 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:334:9:334:21 | type conversion |
| IncorrectIntegerConversion.go:338:3:338:48 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:342:8:342:20 | type conversion |
| IncorrectIntegerConversion.go:346:3:346:48 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:350:9:350:21 | type conversion : int64 |
| IncorrectIntegerConversion.go:350:9:350:21 | type conversion : int64 | IncorrectIntegerConversion.go:351:9:351:17 | type conversion |
| IncorrectIntegerConversion.go:355:3:355:48 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:359:9:359:21 | type conversion : int64 |
| IncorrectIntegerConversion.go:359:9:359:21 | type conversion : int64 | IncorrectIntegerConversion.go:360:9:360:17 | type conversion : int64 |
| IncorrectIntegerConversion.go:360:9:360:17 | type conversion : int64 | IncorrectIntegerConversion.go:361:9:361:17 | type conversion : int64 |
| IncorrectIntegerConversion.go:361:9:361:17 | type conversion : int64 | IncorrectIntegerConversion.go:362:7:362:14 | type conversion |
| IncorrectIntegerConversion.go:367:2:367:60 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:371:6:371:17 | type conversion |
| IncorrectIntegerConversion.go:367:2:367:60 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:372:6:372:18 | type conversion |
| IncorrectIntegerConversion.go:367:2:367:60 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:373:6:373:18 | type conversion |
| IncorrectIntegerConversion.go:367:2:367:60 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:374:6:374:19 | type conversion |
| IncorrectIntegerConversion.go:367:2:367:60 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:375:6:375:18 | type conversion |
| IncorrectIntegerConversion.go:367:2:367:60 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:376:6:376:19 | type conversion |
| TestNoArchitectureBuildConstraints.go:12:3:12:48 | ... := ...[0] : int64 | TestNoArchitectureBuildConstraints.go:16:7:16:19 | type conversion |
| TestNoArchitectureBuildConstraints.go:12:3:12:48 | ... := ...[0] : int64 | TestNoArchitectureBuildConstraints.go:17:7:17:20 | type conversion |
| TestNoArchitectureBuildConstraints.go:20:3:20:49 | ... := ...[0] : int64 | TestNoArchitectureBuildConstraints.go:24:7:24:17 | type conversion |
| TestNoArchitectureBuildConstraints.go:20:3:20:49 | ... := ...[0] : int64 | TestNoArchitectureBuildConstraints.go:25:7:25:18 | type conversion |
nodes
| IncorrectIntegerConversion.go:26:2:26:28 | ... := ...[0] : int | semmle.label | ... := ...[0] : int |
| IncorrectIntegerConversion.go:35:41:35:50 | type conversion | semmle.label | type conversion |
| IncorrectIntegerConversion.go:65:3:65:49 | ... := ...[0] : int64 | semmle.label | ... := ...[0] : int64 |
| IncorrectIntegerConversion.go:69:7:69:18 | type conversion | semmle.label | type conversion |
| IncorrectIntegerConversion.go:70:7:70:19 | type conversion | semmle.label | type conversion |
| IncorrectIntegerConversion.go:81:3:81:49 | ... := ...[0] : int64 | semmle.label | ... := ...[0] : int64 |
| IncorrectIntegerConversion.go:81:3:81:49 | ... := ...[0] : int64 | semmle.label | ... := ...[0] : int64 |
| IncorrectIntegerConversion.go:85:7:85:18 | type conversion | semmle.label | type conversion |
| IncorrectIntegerConversion.go:86:7:86:19 | type conversion | semmle.label | type conversion |
| IncorrectIntegerConversion.go:87:7:87:19 | type conversion | semmle.label | type conversion |
| IncorrectIntegerConversion.go:88:7:88:20 | type conversion | semmle.label | type conversion |
| IncorrectIntegerConversion.go:97:3:97:49 | ... := ...[0] : int64 | semmle.label | ... := ...[0] : int64 |
| IncorrectIntegerConversion.go:97:3:97:49 | ... := ...[0] : int64 | semmle.label | ... := ...[0] : int64 |
| IncorrectIntegerConversion.go:97:3:97:49 | ... := ...[0] : int64 | semmle.label | ... := ...[0] : int64 |
| IncorrectIntegerConversion.go:97:3:97:49 | ... := ...[0] : int64 | semmle.label | ... := ...[0] : int64 |
| IncorrectIntegerConversion.go:101:7:101:18 | type conversion | semmle.label | type conversion |
| IncorrectIntegerConversion.go:102:7:102:19 | type conversion | semmle.label | type conversion |
| IncorrectIntegerConversion.go:103:7:103:19 | type conversion | semmle.label | type conversion |
| IncorrectIntegerConversion.go:104:7:104:20 | type conversion | semmle.label | type conversion |
| IncorrectIntegerConversion.go:105:7:105:19 | type conversion | semmle.label | type conversion |
| IncorrectIntegerConversion.go:106:7:106:20 | type conversion | semmle.label | type conversion |
| IncorrectIntegerConversion.go:109:7:109:17 | type conversion | semmle.label | type conversion |
| IncorrectIntegerConversion.go:110:7:110:18 | type conversion | semmle.label | type conversion |
| IncorrectIntegerConversion.go:113:3:113:48 | ... := ...[0] : int64 | semmle.label | ... := ...[0] : int64 |
| IncorrectIntegerConversion.go:113:3:113:48 | ... := ...[0] : int64 | semmle.label | ... := ...[0] : int64 |
| IncorrectIntegerConversion.go:113:3:113:48 | ... := ...[0] : int64 | semmle.label | ... := ...[0] : int64 |
| IncorrectIntegerConversion.go:117:7:117:18 | type conversion | semmle.label | type conversion |
| IncorrectIntegerConversion.go:118:7:118:19 | type conversion | semmle.label | type conversion |
| IncorrectIntegerConversion.go:119:7:119:19 | type conversion | semmle.label | type conversion |
| IncorrectIntegerConversion.go:120:7:120:20 | type conversion | semmle.label | type conversion |
| IncorrectIntegerConversion.go:121:7:121:19 | type conversion | semmle.label | type conversion |
| IncorrectIntegerConversion.go:122:7:122:20 | type conversion | semmle.label | type conversion |
| IncorrectIntegerConversion.go:148:3:148:50 | ... := ...[0] : uint64 | semmle.label | ... := ...[0] : uint64 |
| IncorrectIntegerConversion.go:152:7:152:18 | type conversion | semmle.label | type conversion |
| IncorrectIntegerConversion.go:153:7:153:19 | type conversion | semmle.label | type conversion |
| IncorrectIntegerConversion.go:164:3:164:50 | ... := ...[0] : uint64 | semmle.label | ... := ...[0] : uint64 |
| IncorrectIntegerConversion.go:164:3:164:50 | ... := ...[0] : uint64 | semmle.label | ... := ...[0] : uint64 |
| IncorrectIntegerConversion.go:168:7:168:18 | type conversion | semmle.label | type conversion |
| IncorrectIntegerConversion.go:169:7:169:19 | type conversion | semmle.label | type conversion |
| IncorrectIntegerConversion.go:170:7:170:19 | type conversion | semmle.label | type conversion |
| IncorrectIntegerConversion.go:171:7:171:20 | type conversion | semmle.label | type conversion |
| IncorrectIntegerConversion.go:180:3:180:50 | ... := ...[0] : uint64 | semmle.label | ... := ...[0] : uint64 |
| IncorrectIntegerConversion.go:180:3:180:50 | ... := ...[0] : uint64 | semmle.label | ... := ...[0] : uint64 |
| IncorrectIntegerConversion.go:180:3:180:50 | ... := ...[0] : uint64 | semmle.label | ... := ...[0] : uint64 |
| IncorrectIntegerConversion.go:180:3:180:50 | ... := ...[0] : uint64 | semmle.label | ... := ...[0] : uint64 |
| IncorrectIntegerConversion.go:184:7:184:18 | type conversion | semmle.label | type conversion |
| IncorrectIntegerConversion.go:185:7:185:19 | type conversion | semmle.label | type conversion |
| IncorrectIntegerConversion.go:186:7:186:19 | type conversion | semmle.label | type conversion |
| IncorrectIntegerConversion.go:187:7:187:20 | type conversion | semmle.label | type conversion |
| IncorrectIntegerConversion.go:188:7:188:19 | type conversion | semmle.label | type conversion |
| IncorrectIntegerConversion.go:189:7:189:20 | type conversion | semmle.label | type conversion |
| IncorrectIntegerConversion.go:192:7:192:17 | type conversion | semmle.label | type conversion |
| IncorrectIntegerConversion.go:193:7:193:18 | type conversion | semmle.label | type conversion |
| IncorrectIntegerConversion.go:196:3:196:49 | ... := ...[0] : uint64 | semmle.label | ... := ...[0] : uint64 |
| IncorrectIntegerConversion.go:196:3:196:49 | ... := ...[0] : uint64 | semmle.label | ... := ...[0] : uint64 |
| IncorrectIntegerConversion.go:196:3:196:49 | ... := ...[0] : uint64 | semmle.label | ... := ...[0] : uint64 |
| IncorrectIntegerConversion.go:200:7:200:18 | type conversion | semmle.label | type conversion |
| IncorrectIntegerConversion.go:201:7:201:19 | type conversion | semmle.label | type conversion |
| IncorrectIntegerConversion.go:202:7:202:19 | type conversion | semmle.label | type conversion |
| IncorrectIntegerConversion.go:203:7:203:20 | type conversion | semmle.label | type conversion |
| IncorrectIntegerConversion.go:204:7:204:19 | type conversion | semmle.label | type conversion |
| IncorrectIntegerConversion.go:205:7:205:20 | type conversion | semmle.label | type conversion |
| IncorrectIntegerConversion.go:214:2:214:36 | ... := ...[0] : int | semmle.label | ... := ...[0] : int |
| IncorrectIntegerConversion.go:214:2:214:36 | ... := ...[0] : int | semmle.label | ... := ...[0] : int |
| IncorrectIntegerConversion.go:214:2:214:36 | ... := ...[0] : int | semmle.label | ... := ...[0] : int |
| IncorrectIntegerConversion.go:218:6:218:17 | type conversion | semmle.label | type conversion |
| IncorrectIntegerConversion.go:219:6:219:18 | type conversion | semmle.label | type conversion |
| IncorrectIntegerConversion.go:220:6:220:18 | type conversion | semmle.label | type conversion |
| IncorrectIntegerConversion.go:221:6:221:19 | type conversion | semmle.label | type conversion |
| IncorrectIntegerConversion.go:222:6:222:18 | type conversion | semmle.label | type conversion |
| IncorrectIntegerConversion.go:223:6:223:19 | type conversion | semmle.label | type conversion |
| IncorrectIntegerConversion.go:235:3:235:48 | ... := ...[0] : int64 | semmle.label | ... := ...[0] : int64 |
| IncorrectIntegerConversion.go:235:3:235:48 | ... := ...[0] : int64 | semmle.label | ... := ...[0] : int64 |
| IncorrectIntegerConversion.go:240:7:240:18 | type conversion | semmle.label | type conversion |
| IncorrectIntegerConversion.go:241:7:241:23 | type conversion | semmle.label | type conversion |
| IncorrectIntegerConversion.go:247:3:247:36 | ... := ...[0] : int | semmle.label | ... := ...[0] : int |
| IncorrectIntegerConversion.go:261:8:261:19 | type conversion | semmle.label | type conversion |
| IncorrectIntegerConversion.go:268:3:268:49 | ... := ...[0] : uint64 | semmle.label | ... := ...[0] : uint64 |
| IncorrectIntegerConversion.go:282:8:282:21 | type conversion | semmle.label | type conversion |
| IncorrectIntegerConversion.go:319:3:319:48 | ... := ...[0] : int64 | semmle.label | ... := ...[0] : int64 |
| IncorrectIntegerConversion.go:323:7:323:18 | type conversion | semmle.label | type conversion |
| IncorrectIntegerConversion.go:330:3:330:48 | ... := ...[0] : int64 | semmle.label | ... := ...[0] : int64 |
| IncorrectIntegerConversion.go:334:9:334:21 | type conversion | semmle.label | type conversion |
| IncorrectIntegerConversion.go:338:3:338:48 | ... := ...[0] : int64 | semmle.label | ... := ...[0] : int64 |
| IncorrectIntegerConversion.go:342:8:342:20 | type conversion | semmle.label | type conversion |
| IncorrectIntegerConversion.go:346:3:346:48 | ... := ...[0] : int64 | semmle.label | ... := ...[0] : int64 |
| IncorrectIntegerConversion.go:350:9:350:21 | type conversion : int64 | semmle.label | type conversion : int64 |
| IncorrectIntegerConversion.go:351:9:351:17 | type conversion | semmle.label | type conversion |
| IncorrectIntegerConversion.go:355:3:355:48 | ... := ...[0] : int64 | semmle.label | ... := ...[0] : int64 |
| IncorrectIntegerConversion.go:359:9:359:21 | type conversion : int64 | semmle.label | type conversion : int64 |
| IncorrectIntegerConversion.go:360:9:360:17 | type conversion : int64 | semmle.label | type conversion : int64 |
| IncorrectIntegerConversion.go:361:9:361:17 | type conversion : int64 | semmle.label | type conversion : int64 |
| IncorrectIntegerConversion.go:362:7:362:14 | type conversion | semmle.label | type conversion |
| IncorrectIntegerConversion.go:367:2:367:60 | ... := ...[0] : int64 | semmle.label | ... := ...[0] : int64 |
| IncorrectIntegerConversion.go:367:2:367:60 | ... := ...[0] : int64 | semmle.label | ... := ...[0] : int64 |
| IncorrectIntegerConversion.go:367:2:367:60 | ... := ...[0] : int64 | semmle.label | ... := ...[0] : int64 |
| IncorrectIntegerConversion.go:371:6:371:17 | type conversion | semmle.label | type conversion |
| IncorrectIntegerConversion.go:372:6:372:18 | type conversion | semmle.label | type conversion |
| IncorrectIntegerConversion.go:373:6:373:18 | type conversion | semmle.label | type conversion |
| IncorrectIntegerConversion.go:374:6:374:19 | type conversion | semmle.label | type conversion |
| IncorrectIntegerConversion.go:375:6:375:18 | type conversion | semmle.label | type conversion |
| IncorrectIntegerConversion.go:376:6:376:19 | type conversion | semmle.label | type conversion |
| TestNoArchitectureBuildConstraints.go:12:3:12:48 | ... := ...[0] : int64 | semmle.label | ... := ...[0] : int64 |
| TestNoArchitectureBuildConstraints.go:16:7:16:19 | type conversion | semmle.label | type conversion |
| TestNoArchitectureBuildConstraints.go:17:7:17:20 | type conversion | semmle.label | type conversion |
| TestNoArchitectureBuildConstraints.go:20:3:20:49 | ... := ...[0] : int64 | semmle.label | ... := ...[0] : int64 |
| TestNoArchitectureBuildConstraints.go:24:7:24:17 | type conversion | semmle.label | type conversion |
| TestNoArchitectureBuildConstraints.go:25:7:25:18 | type conversion | semmle.label | type conversion |
#select
| IncorrectIntegerConversion.go:35:41:35:50 | type conversion | IncorrectIntegerConversion.go:26:2:26:28 | ... := ...[0] : int | IncorrectIntegerConversion.go:35:41:35:50 | type conversion | Incorrect conversion of an integer with architecture-dependent bit size from $@ to a lower bit size type int32 without an upper bound check. | IncorrectIntegerConversion.go:26:2:26:28 | ... := ...[0] : int | strconv.Atoi |
| IncorrectIntegerConversion.go:69:7:69:18 | type conversion | IncorrectIntegerConversion.go:65:3:65:49 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:69:7:69:18 | type conversion | Incorrect conversion of a 16-bit integer from $@ to a lower bit size type int8 without an upper bound check. | IncorrectIntegerConversion.go:65:3:65:49 | ... := ...[0] : int64 | strconv.ParseInt |
| IncorrectIntegerConversion.go:70:7:70:19 | type conversion | IncorrectIntegerConversion.go:65:3:65:49 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:70:7:70:19 | type conversion | Incorrect conversion of a 16-bit integer from $@ to a lower bit size type uint8 without an upper bound check. | IncorrectIntegerConversion.go:65:3:65:49 | ... := ...[0] : int64 | strconv.ParseInt |
| IncorrectIntegerConversion.go:85:7:85:18 | type conversion | IncorrectIntegerConversion.go:81:3:81:49 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:85:7:85:18 | type conversion | Incorrect conversion of a 32-bit integer from $@ to a lower bit size type int8 without an upper bound check. | IncorrectIntegerConversion.go:81:3:81:49 | ... := ...[0] : int64 | strconv.ParseInt |
| IncorrectIntegerConversion.go:86:7:86:19 | type conversion | IncorrectIntegerConversion.go:81:3:81:49 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:86:7:86:19 | type conversion | Incorrect conversion of a 32-bit integer from $@ to a lower bit size type uint8 without an upper bound check. | IncorrectIntegerConversion.go:81:3:81:49 | ... := ...[0] : int64 | strconv.ParseInt |
| IncorrectIntegerConversion.go:87:7:87:19 | type conversion | IncorrectIntegerConversion.go:81:3:81:49 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:87:7:87:19 | type conversion | Incorrect conversion of a 32-bit integer from $@ to a lower bit size type int16 without an upper bound check. | IncorrectIntegerConversion.go:81:3:81:49 | ... := ...[0] : int64 | strconv.ParseInt |
| IncorrectIntegerConversion.go:88:7:88:20 | type conversion | IncorrectIntegerConversion.go:81:3:81:49 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:88:7:88:20 | type conversion | Incorrect conversion of a 32-bit integer from $@ to a lower bit size type uint16 without an upper bound check. | IncorrectIntegerConversion.go:81:3:81:49 | ... := ...[0] : int64 | strconv.ParseInt |
| IncorrectIntegerConversion.go:101:7:101:18 | type conversion | IncorrectIntegerConversion.go:97:3:97:49 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:101:7:101:18 | type conversion | Incorrect conversion of a 64-bit integer from $@ to a lower bit size type int8 without an upper bound check. | IncorrectIntegerConversion.go:97:3:97:49 | ... := ...[0] : int64 | strconv.ParseInt |
| IncorrectIntegerConversion.go:102:7:102:19 | type conversion | IncorrectIntegerConversion.go:97:3:97:49 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:102:7:102:19 | type conversion | Incorrect conversion of a 64-bit integer from $@ to a lower bit size type uint8 without an upper bound check. | IncorrectIntegerConversion.go:97:3:97:49 | ... := ...[0] : int64 | strconv.ParseInt |
| IncorrectIntegerConversion.go:103:7:103:19 | type conversion | IncorrectIntegerConversion.go:97:3:97:49 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:103:7:103:19 | type conversion | Incorrect conversion of a 64-bit integer from $@ to a lower bit size type int16 without an upper bound check. | IncorrectIntegerConversion.go:97:3:97:49 | ... := ...[0] : int64 | strconv.ParseInt |
| IncorrectIntegerConversion.go:104:7:104:20 | type conversion | IncorrectIntegerConversion.go:97:3:97:49 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:104:7:104:20 | type conversion | Incorrect conversion of a 64-bit integer from $@ to a lower bit size type uint16 without an upper bound check. | IncorrectIntegerConversion.go:97:3:97:49 | ... := ...[0] : int64 | strconv.ParseInt |
| IncorrectIntegerConversion.go:105:7:105:19 | type conversion | IncorrectIntegerConversion.go:97:3:97:49 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:105:7:105:19 | type conversion | Incorrect conversion of a 64-bit integer from $@ to a lower bit size type int32 without an upper bound check. | IncorrectIntegerConversion.go:97:3:97:49 | ... := ...[0] : int64 | strconv.ParseInt |
| IncorrectIntegerConversion.go:106:7:106:20 | type conversion | IncorrectIntegerConversion.go:97:3:97:49 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:106:7:106:20 | type conversion | Incorrect conversion of a 64-bit integer from $@ to a lower bit size type uint32 without an upper bound check. | IncorrectIntegerConversion.go:97:3:97:49 | ... := ...[0] : int64 | strconv.ParseInt |
| IncorrectIntegerConversion.go:109:7:109:17 | type conversion | IncorrectIntegerConversion.go:97:3:97:49 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:109:7:109:17 | type conversion | Incorrect conversion of a 64-bit integer from $@ to a lower bit size type int without an upper bound check. | IncorrectIntegerConversion.go:97:3:97:49 | ... := ...[0] : int64 | strconv.ParseInt |
| IncorrectIntegerConversion.go:110:7:110:18 | type conversion | IncorrectIntegerConversion.go:97:3:97:49 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:110:7:110:18 | type conversion | Incorrect conversion of a 64-bit integer from $@ to a lower bit size type uint without an upper bound check. | IncorrectIntegerConversion.go:97:3:97:49 | ... := ...[0] : int64 | strconv.ParseInt |
| IncorrectIntegerConversion.go:117:7:117:18 | type conversion | IncorrectIntegerConversion.go:113:3:113:48 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:117:7:117:18 | type conversion | Incorrect conversion of an integer with architecture-dependent bit size from $@ to a lower bit size type int8 without an upper bound check. | IncorrectIntegerConversion.go:113:3:113:48 | ... := ...[0] : int64 | strconv.ParseInt |
| IncorrectIntegerConversion.go:118:7:118:19 | type conversion | IncorrectIntegerConversion.go:113:3:113:48 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:118:7:118:19 | type conversion | Incorrect conversion of an integer with architecture-dependent bit size from $@ to a lower bit size type uint8 without an upper bound check. | IncorrectIntegerConversion.go:113:3:113:48 | ... := ...[0] : int64 | strconv.ParseInt |
| IncorrectIntegerConversion.go:119:7:119:19 | type conversion | IncorrectIntegerConversion.go:113:3:113:48 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:119:7:119:19 | type conversion | Incorrect conversion of an integer with architecture-dependent bit size from $@ to a lower bit size type int16 without an upper bound check. | IncorrectIntegerConversion.go:113:3:113:48 | ... := ...[0] : int64 | strconv.ParseInt |
| IncorrectIntegerConversion.go:120:7:120:20 | type conversion | IncorrectIntegerConversion.go:113:3:113:48 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:120:7:120:20 | type conversion | Incorrect conversion of an integer with architecture-dependent bit size from $@ to a lower bit size type uint16 without an upper bound check. | IncorrectIntegerConversion.go:113:3:113:48 | ... := ...[0] : int64 | strconv.ParseInt |
| IncorrectIntegerConversion.go:121:7:121:19 | type conversion | IncorrectIntegerConversion.go:113:3:113:48 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:121:7:121:19 | type conversion | Incorrect conversion of an integer with architecture-dependent bit size from $@ to a lower bit size type int32 without an upper bound check. | IncorrectIntegerConversion.go:113:3:113:48 | ... := ...[0] : int64 | strconv.ParseInt |
| IncorrectIntegerConversion.go:122:7:122:20 | type conversion | IncorrectIntegerConversion.go:113:3:113:48 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:122:7:122:20 | type conversion | Incorrect conversion of an integer with architecture-dependent bit size from $@ to a lower bit size type uint32 without an upper bound check. | IncorrectIntegerConversion.go:113:3:113:48 | ... := ...[0] : int64 | strconv.ParseInt |
| IncorrectIntegerConversion.go:152:7:152:18 | type conversion | IncorrectIntegerConversion.go:148:3:148:50 | ... := ...[0] : uint64 | IncorrectIntegerConversion.go:152:7:152:18 | type conversion | Incorrect conversion of a 16-bit integer from $@ to a lower bit size type int8 without an upper bound check. | IncorrectIntegerConversion.go:148:3:148:50 | ... := ...[0] : uint64 | strconv.ParseUint |
| IncorrectIntegerConversion.go:153:7:153:19 | type conversion | IncorrectIntegerConversion.go:148:3:148:50 | ... := ...[0] : uint64 | IncorrectIntegerConversion.go:153:7:153:19 | type conversion | Incorrect conversion of a 16-bit integer from $@ to a lower bit size type uint8 without an upper bound check. | IncorrectIntegerConversion.go:148:3:148:50 | ... := ...[0] : uint64 | strconv.ParseUint |
| IncorrectIntegerConversion.go:168:7:168:18 | type conversion | IncorrectIntegerConversion.go:164:3:164:50 | ... := ...[0] : uint64 | IncorrectIntegerConversion.go:168:7:168:18 | type conversion | Incorrect conversion of a 32-bit integer from $@ to a lower bit size type int8 without an upper bound check. | IncorrectIntegerConversion.go:164:3:164:50 | ... := ...[0] : uint64 | strconv.ParseUint |
| IncorrectIntegerConversion.go:169:7:169:19 | type conversion | IncorrectIntegerConversion.go:164:3:164:50 | ... := ...[0] : uint64 | IncorrectIntegerConversion.go:169:7:169:19 | type conversion | Incorrect conversion of a 32-bit integer from $@ to a lower bit size type uint8 without an upper bound check. | IncorrectIntegerConversion.go:164:3:164:50 | ... := ...[0] : uint64 | strconv.ParseUint |
| IncorrectIntegerConversion.go:170:7:170:19 | type conversion | IncorrectIntegerConversion.go:164:3:164:50 | ... := ...[0] : uint64 | IncorrectIntegerConversion.go:170:7:170:19 | type conversion | Incorrect conversion of a 32-bit integer from $@ to a lower bit size type int16 without an upper bound check. | IncorrectIntegerConversion.go:164:3:164:50 | ... := ...[0] : uint64 | strconv.ParseUint |
| IncorrectIntegerConversion.go:171:7:171:20 | type conversion | IncorrectIntegerConversion.go:164:3:164:50 | ... := ...[0] : uint64 | IncorrectIntegerConversion.go:171:7:171:20 | type conversion | Incorrect conversion of a 32-bit integer from $@ to a lower bit size type uint16 without an upper bound check. | IncorrectIntegerConversion.go:164:3:164:50 | ... := ...[0] : uint64 | strconv.ParseUint |
| IncorrectIntegerConversion.go:184:7:184:18 | type conversion | IncorrectIntegerConversion.go:180:3:180:50 | ... := ...[0] : uint64 | IncorrectIntegerConversion.go:184:7:184:18 | type conversion | Incorrect conversion of a 64-bit integer from $@ to a lower bit size type int8 without an upper bound check. | IncorrectIntegerConversion.go:180:3:180:50 | ... := ...[0] : uint64 | strconv.ParseUint |
| IncorrectIntegerConversion.go:185:7:185:19 | type conversion | IncorrectIntegerConversion.go:180:3:180:50 | ... := ...[0] : uint64 | IncorrectIntegerConversion.go:185:7:185:19 | type conversion | Incorrect conversion of a 64-bit integer from $@ to a lower bit size type uint8 without an upper bound check. | IncorrectIntegerConversion.go:180:3:180:50 | ... := ...[0] : uint64 | strconv.ParseUint |
| IncorrectIntegerConversion.go:186:7:186:19 | type conversion | IncorrectIntegerConversion.go:180:3:180:50 | ... := ...[0] : uint64 | IncorrectIntegerConversion.go:186:7:186:19 | type conversion | Incorrect conversion of a 64-bit integer from $@ to a lower bit size type int16 without an upper bound check. | IncorrectIntegerConversion.go:180:3:180:50 | ... := ...[0] : uint64 | strconv.ParseUint |
| IncorrectIntegerConversion.go:187:7:187:20 | type conversion | IncorrectIntegerConversion.go:180:3:180:50 | ... := ...[0] : uint64 | IncorrectIntegerConversion.go:187:7:187:20 | type conversion | Incorrect conversion of a 64-bit integer from $@ to a lower bit size type uint16 without an upper bound check. | IncorrectIntegerConversion.go:180:3:180:50 | ... := ...[0] : uint64 | strconv.ParseUint |
| IncorrectIntegerConversion.go:188:7:188:19 | type conversion | IncorrectIntegerConversion.go:180:3:180:50 | ... := ...[0] : uint64 | IncorrectIntegerConversion.go:188:7:188:19 | type conversion | Incorrect conversion of a 64-bit integer from $@ to a lower bit size type int32 without an upper bound check. | IncorrectIntegerConversion.go:180:3:180:50 | ... := ...[0] : uint64 | strconv.ParseUint |
| IncorrectIntegerConversion.go:189:7:189:20 | type conversion | IncorrectIntegerConversion.go:180:3:180:50 | ... := ...[0] : uint64 | IncorrectIntegerConversion.go:189:7:189:20 | type conversion | Incorrect conversion of a 64-bit integer from $@ to a lower bit size type uint32 without an upper bound check. | IncorrectIntegerConversion.go:180:3:180:50 | ... := ...[0] : uint64 | strconv.ParseUint |
| IncorrectIntegerConversion.go:192:7:192:17 | type conversion | IncorrectIntegerConversion.go:180:3:180:50 | ... := ...[0] : uint64 | IncorrectIntegerConversion.go:192:7:192:17 | type conversion | Incorrect conversion of a 64-bit integer from $@ to a lower bit size type int without an upper bound check. | IncorrectIntegerConversion.go:180:3:180:50 | ... := ...[0] : uint64 | strconv.ParseUint |
| IncorrectIntegerConversion.go:193:7:193:18 | type conversion | IncorrectIntegerConversion.go:180:3:180:50 | ... := ...[0] : uint64 | IncorrectIntegerConversion.go:193:7:193:18 | type conversion | Incorrect conversion of a 64-bit integer from $@ to a lower bit size type uint without an upper bound check. | IncorrectIntegerConversion.go:180:3:180:50 | ... := ...[0] : uint64 | strconv.ParseUint |
| IncorrectIntegerConversion.go:200:7:200:18 | type conversion | IncorrectIntegerConversion.go:196:3:196:49 | ... := ...[0] : uint64 | IncorrectIntegerConversion.go:200:7:200:18 | type conversion | Incorrect conversion of an integer with architecture-dependent bit size from $@ to a lower bit size type int8 without an upper bound check. | IncorrectIntegerConversion.go:196:3:196:49 | ... := ...[0] : uint64 | strconv.ParseUint |
| IncorrectIntegerConversion.go:201:7:201:19 | type conversion | IncorrectIntegerConversion.go:196:3:196:49 | ... := ...[0] : uint64 | IncorrectIntegerConversion.go:201:7:201:19 | type conversion | Incorrect conversion of an integer with architecture-dependent bit size from $@ to a lower bit size type uint8 without an upper bound check. | IncorrectIntegerConversion.go:196:3:196:49 | ... := ...[0] : uint64 | strconv.ParseUint |
| IncorrectIntegerConversion.go:202:7:202:19 | type conversion | IncorrectIntegerConversion.go:196:3:196:49 | ... := ...[0] : uint64 | IncorrectIntegerConversion.go:202:7:202:19 | type conversion | Incorrect conversion of an integer with architecture-dependent bit size from $@ to a lower bit size type int16 without an upper bound check. | IncorrectIntegerConversion.go:196:3:196:49 | ... := ...[0] : uint64 | strconv.ParseUint |
| IncorrectIntegerConversion.go:203:7:203:20 | type conversion | IncorrectIntegerConversion.go:196:3:196:49 | ... := ...[0] : uint64 | IncorrectIntegerConversion.go:203:7:203:20 | type conversion | Incorrect conversion of an integer with architecture-dependent bit size from $@ to a lower bit size type uint16 without an upper bound check. | IncorrectIntegerConversion.go:196:3:196:49 | ... := ...[0] : uint64 | strconv.ParseUint |
| IncorrectIntegerConversion.go:204:7:204:19 | type conversion | IncorrectIntegerConversion.go:196:3:196:49 | ... := ...[0] : uint64 | IncorrectIntegerConversion.go:204:7:204:19 | type conversion | Incorrect conversion of an integer with architecture-dependent bit size from $@ to a lower bit size type int32 without an upper bound check. | IncorrectIntegerConversion.go:196:3:196:49 | ... := ...[0] : uint64 | strconv.ParseUint |
| IncorrectIntegerConversion.go:205:7:205:20 | type conversion | IncorrectIntegerConversion.go:196:3:196:49 | ... := ...[0] : uint64 | IncorrectIntegerConversion.go:205:7:205:20 | type conversion | Incorrect conversion of an integer with architecture-dependent bit size from $@ to a lower bit size type uint32 without an upper bound check. | IncorrectIntegerConversion.go:196:3:196:49 | ... := ...[0] : uint64 | strconv.ParseUint |
| IncorrectIntegerConversion.go:218:6:218:17 | type conversion | IncorrectIntegerConversion.go:214:2:214:36 | ... := ...[0] : int | IncorrectIntegerConversion.go:218:6:218:17 | type conversion | Incorrect conversion of an integer with architecture-dependent bit size from $@ to a lower bit size type int8 without an upper bound check. | IncorrectIntegerConversion.go:214:2:214:36 | ... := ...[0] : int | strconv.Atoi |
| IncorrectIntegerConversion.go:219:6:219:18 | type conversion | IncorrectIntegerConversion.go:214:2:214:36 | ... := ...[0] : int | IncorrectIntegerConversion.go:219:6:219:18 | type conversion | Incorrect conversion of an integer with architecture-dependent bit size from $@ to a lower bit size type uint8 without an upper bound check. | IncorrectIntegerConversion.go:214:2:214:36 | ... := ...[0] : int | strconv.Atoi |
| IncorrectIntegerConversion.go:220:6:220:18 | type conversion | IncorrectIntegerConversion.go:214:2:214:36 | ... := ...[0] : int | IncorrectIntegerConversion.go:220:6:220:18 | type conversion | Incorrect conversion of an integer with architecture-dependent bit size from $@ to a lower bit size type int16 without an upper bound check. | IncorrectIntegerConversion.go:214:2:214:36 | ... := ...[0] : int | strconv.Atoi |
| IncorrectIntegerConversion.go:221:6:221:19 | type conversion | IncorrectIntegerConversion.go:214:2:214:36 | ... := ...[0] : int | IncorrectIntegerConversion.go:221:6:221:19 | type conversion | Incorrect conversion of an integer with architecture-dependent bit size from $@ to a lower bit size type uint16 without an upper bound check. | IncorrectIntegerConversion.go:214:2:214:36 | ... := ...[0] : int | strconv.Atoi |
| IncorrectIntegerConversion.go:222:6:222:18 | type conversion | IncorrectIntegerConversion.go:214:2:214:36 | ... := ...[0] : int | IncorrectIntegerConversion.go:222:6:222:18 | type conversion | Incorrect conversion of an integer with architecture-dependent bit size from $@ to a lower bit size type int32 without an upper bound check. | IncorrectIntegerConversion.go:214:2:214:36 | ... := ...[0] : int | strconv.Atoi |
| IncorrectIntegerConversion.go:223:6:223:19 | type conversion | IncorrectIntegerConversion.go:214:2:214:36 | ... := ...[0] : int | IncorrectIntegerConversion.go:223:6:223:19 | type conversion | Incorrect conversion of an integer with architecture-dependent bit size from $@ to a lower bit size type uint32 without an upper bound check. | IncorrectIntegerConversion.go:214:2:214:36 | ... := ...[0] : int | strconv.Atoi |
| IncorrectIntegerConversion.go:240:7:240:18 | type conversion | IncorrectIntegerConversion.go:235:3:235:48 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:240:7:240:18 | type conversion | Incorrect conversion of a 32-bit integer from $@ to a lower bit size type uint8 without an upper bound check. | IncorrectIntegerConversion.go:235:3:235:48 | ... := ...[0] : int64 | strconv.ParseInt |
| IncorrectIntegerConversion.go:241:7:241:23 | type conversion | IncorrectIntegerConversion.go:235:3:235:48 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:241:7:241:23 | type conversion | Incorrect conversion of a 32-bit integer from $@ to a lower bit size type int16 without an upper bound check. | IncorrectIntegerConversion.go:235:3:235:48 | ... := ...[0] : int64 | strconv.ParseInt |
| IncorrectIntegerConversion.go:261:8:261:19 | type conversion | IncorrectIntegerConversion.go:247:3:247:36 | ... := ...[0] : int | IncorrectIntegerConversion.go:261:8:261:19 | type conversion | Incorrect conversion of an integer with architecture-dependent bit size from $@ to a lower bit size type int8 without an upper bound check. | IncorrectIntegerConversion.go:247:3:247:36 | ... := ...[0] : int | strconv.Atoi |
| IncorrectIntegerConversion.go:282:8:282:21 | type conversion | IncorrectIntegerConversion.go:268:3:268:49 | ... := ...[0] : uint64 | IncorrectIntegerConversion.go:282:8:282:21 | type conversion | Incorrect conversion of a 32-bit integer from $@ to a lower bit size type uint16 without an upper bound check. | IncorrectIntegerConversion.go:268:3:268:49 | ... := ...[0] : uint64 | strconv.ParseUint |
| IncorrectIntegerConversion.go:323:7:323:18 | type conversion | IncorrectIntegerConversion.go:319:3:319:48 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:323:7:323:18 | type conversion | Incorrect conversion of a 16-bit integer from $@ to a lower bit size type uint8 without an upper bound check. | IncorrectIntegerConversion.go:319:3:319:48 | ... := ...[0] : int64 | strconv.ParseInt |
| IncorrectIntegerConversion.go:334:9:334:21 | type conversion | IncorrectIntegerConversion.go:330:3:330:48 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:334:9:334:21 | type conversion | Incorrect conversion of a 32-bit integer from $@ to a lower bit size type int16 without an upper bound check. | IncorrectIntegerConversion.go:330:3:330:48 | ... := ...[0] : int64 | strconv.ParseInt |
| IncorrectIntegerConversion.go:342:8:342:20 | type conversion | IncorrectIntegerConversion.go:338:3:338:48 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:342:8:342:20 | type conversion | Incorrect conversion of a 32-bit integer from $@ to a lower bit size type int16 without an upper bound check. | IncorrectIntegerConversion.go:338:3:338:48 | ... := ...[0] : int64 | strconv.ParseInt |
| IncorrectIntegerConversion.go:351:9:351:17 | type conversion | IncorrectIntegerConversion.go:346:3:346:48 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:351:9:351:17 | type conversion | Incorrect conversion of a 32-bit integer from $@ to a lower bit size type int16 without an upper bound check. | IncorrectIntegerConversion.go:346:3:346:48 | ... := ...[0] : int64 | strconv.ParseInt |
| IncorrectIntegerConversion.go:362:7:362:14 | type conversion | IncorrectIntegerConversion.go:355:3:355:48 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:362:7:362:14 | type conversion | Incorrect conversion of a 16-bit integer from $@ to a lower bit size type int8 without an upper bound check. | IncorrectIntegerConversion.go:355:3:355:48 | ... := ...[0] : int64 | strconv.ParseInt |
| IncorrectIntegerConversion.go:371:6:371:17 | type conversion | IncorrectIntegerConversion.go:367:2:367:60 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:371:6:371:17 | type conversion | Incorrect conversion of an integer with architecture-dependent bit size from $@ to a lower bit size type int8 without an upper bound check. | IncorrectIntegerConversion.go:367:2:367:60 | ... := ...[0] : int64 | strconv.ParseInt |
| IncorrectIntegerConversion.go:372:6:372:18 | type conversion | IncorrectIntegerConversion.go:367:2:367:60 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:372:6:372:18 | type conversion | Incorrect conversion of an integer with architecture-dependent bit size from $@ to a lower bit size type uint8 without an upper bound check. | IncorrectIntegerConversion.go:367:2:367:60 | ... := ...[0] : int64 | strconv.ParseInt |
| IncorrectIntegerConversion.go:373:6:373:18 | type conversion | IncorrectIntegerConversion.go:367:2:367:60 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:373:6:373:18 | type conversion | Incorrect conversion of an integer with architecture-dependent bit size from $@ to a lower bit size type int16 without an upper bound check. | IncorrectIntegerConversion.go:367:2:367:60 | ... := ...[0] : int64 | strconv.ParseInt |
| IncorrectIntegerConversion.go:374:6:374:19 | type conversion | IncorrectIntegerConversion.go:367:2:367:60 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:374:6:374:19 | type conversion | Incorrect conversion of an integer with architecture-dependent bit size from $@ to a lower bit size type uint16 without an upper bound check. | IncorrectIntegerConversion.go:367:2:367:60 | ... := ...[0] : int64 | strconv.ParseInt |
| IncorrectIntegerConversion.go:375:6:375:18 | type conversion | IncorrectIntegerConversion.go:367:2:367:60 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:375:6:375:18 | type conversion | Incorrect conversion of an integer with architecture-dependent bit size from $@ to a lower bit size type int32 without an upper bound check. | IncorrectIntegerConversion.go:367:2:367:60 | ... := ...[0] : int64 | strconv.ParseInt |
| IncorrectIntegerConversion.go:376:6:376:19 | type conversion | IncorrectIntegerConversion.go:367:2:367:60 | ... := ...[0] : int64 | IncorrectIntegerConversion.go:376:6:376:19 | type conversion | Incorrect conversion of an integer with architecture-dependent bit size from $@ to a lower bit size type uint32 without an upper bound check. | IncorrectIntegerConversion.go:367:2:367:60 | ... := ...[0] : int64 | strconv.ParseInt |
| TestNoArchitectureBuildConstraints.go:16:7:16:19 | type conversion | TestNoArchitectureBuildConstraints.go:12:3:12:48 | ... := ...[0] : int64 | TestNoArchitectureBuildConstraints.go:16:7:16:19 | type conversion | Incorrect conversion of an integer with architecture-dependent bit size from $@ to a lower bit size type int32 without an upper bound check. | TestNoArchitectureBuildConstraints.go:12:3:12:48 | ... := ...[0] : int64 | strconv.ParseInt |
| TestNoArchitectureBuildConstraints.go:17:7:17:20 | type conversion | TestNoArchitectureBuildConstraints.go:12:3:12:48 | ... := ...[0] : int64 | TestNoArchitectureBuildConstraints.go:17:7:17:20 | type conversion | Incorrect conversion of an integer with architecture-dependent bit size from $@ to a lower bit size type uint32 without an upper bound check. | TestNoArchitectureBuildConstraints.go:12:3:12:48 | ... := ...[0] : int64 | strconv.ParseInt |
| TestNoArchitectureBuildConstraints.go:24:7:24:17 | type conversion | TestNoArchitectureBuildConstraints.go:20:3:20:49 | ... := ...[0] : int64 | TestNoArchitectureBuildConstraints.go:24:7:24:17 | type conversion | Incorrect conversion of a 64-bit integer from $@ to a lower bit size type int without an upper bound check. | TestNoArchitectureBuildConstraints.go:20:3:20:49 | ... := ...[0] : int64 | strconv.ParseInt |
| TestNoArchitectureBuildConstraints.go:25:7:25:18 | type conversion | TestNoArchitectureBuildConstraints.go:20:3:20:49 | ... := ...[0] : int64 | TestNoArchitectureBuildConstraints.go:25:7:25:18 | type conversion | Incorrect conversion of a 64-bit integer from $@ to a lower bit size type uint without an upper bound check. | TestNoArchitectureBuildConstraints.go:20:3:20:49 | ... := ...[0] : int64 | strconv.ParseInt |

296
ql/test/query-tests/Security/CWE-681/IncorrectIntegerConversion.go
View File

@@ -32,7 +32,7 @@ func lab(s string) (*something, error) {
}
num = int(number)
}
target, err := lookupTarget(&config{}, int32(num)) // NOT OK
target, err := lookupTarget(&config{}, int32(num)) // $ hasValueFlow="type conversion"
if err != nil {
return nil, err
}
@@ -50,80 +50,80 @@ func testParseInt() {
if err != nil {
panic(err)
}
_ = int8(parsed) // OK
_ = uint8(parsed) // OK
_ = int16(parsed) // OK
_ = uint16(parsed) // OK
_ = int32(parsed) // OK
_ = uint32(parsed) // OK
_ = int64(parsed) // OK
_ = uint64(parsed) // OK
_ = int(parsed) // OK
_ = uint(parsed) // OK
_ = int8(parsed)
_ = uint8(parsed)
_ = int16(parsed)
_ = uint16(parsed)
_ = int32(parsed)
_ = uint32(parsed)
_ = int64(parsed)
_ = uint64(parsed)
_ = int(parsed)
_ = uint(parsed)
}
{
parsed, err := strconv.ParseInt("3456", 10, 16)
if err != nil {
panic(err)
}
_ = int8(parsed) // NOT OK
_ = uint8(parsed) // NOT OK
_ = int16(parsed) // OK
_ = uint16(parsed) // OK
_ = int32(parsed) // OK
_ = uint32(parsed) // OK
_ = int64(parsed) // OK
_ = uint64(parsed) // OK
_ = int(parsed) // OK
_ = uint(parsed) // OK
_ = int8(parsed) // $ hasValueFlow="type conversion"
_ = uint8(parsed) // $ hasValueFlow="type conversion"
_ = int16(parsed)
_ = uint16(parsed)
_ = int32(parsed)
_ = uint32(parsed)
_ = int64(parsed)
_ = uint64(parsed)
_ = int(parsed)
_ = uint(parsed)
}
{
parsed, err := strconv.ParseInt("3456", 10, 32)
if err != nil {
panic(err)
}
_ = int8(parsed) // NOT OK
_ = uint8(parsed) // NOT OK
_ = int16(parsed) // NOT OK
_ = uint16(parsed) // NOT OK
_ = int32(parsed) // OK
_ = uint32(parsed) // OK
_ = int64(parsed) // OK
_ = uint64(parsed) // OK
_ = int(parsed) // OK
_ = uint(parsed) // OK
_ = int8(parsed) // $ hasValueFlow="type conversion"
_ = uint8(parsed) // $ hasValueFlow="type conversion"
_ = int16(parsed) // $ hasValueFlow="type conversion"
_ = uint16(parsed) // $ hasValueFlow="type conversion"
_ = int32(parsed)
_ = uint32(parsed)
_ = int64(parsed)
_ = uint64(parsed)
_ = int(parsed)
_ = uint(parsed)
}
{
parsed, err := strconv.ParseInt("3456", 10, 64)
if err != nil {
panic(err)
}
_ = int8(parsed) // NOT OK
_ = uint8(parsed) // NOT OK
_ = int16(parsed) // NOT OK
_ = uint16(parsed) // NOT OK
_ = int32(parsed) // NOT OK
_ = uint32(parsed) // NOT OK
_ = int64(parsed) // OK
_ = uint64(parsed) // OK
_ = int(parsed) // NOT OK
_ = uint(parsed) // NOT OK
_ = int8(parsed) // $ hasValueFlow="type conversion"
_ = uint8(parsed) // $ hasValueFlow="type conversion"
_ = int16(parsed) // $ hasValueFlow="type conversion"
_ = uint16(parsed) // $ hasValueFlow="type conversion"
_ = int32(parsed) // $ hasValueFlow="type conversion"
_ = uint32(parsed) // $ hasValueFlow="type conversion"
_ = int64(parsed)
_ = uint64(parsed)
_ = int(parsed) // $ hasValueFlow="type conversion"
_ = uint(parsed) // $ hasValueFlow="type conversion"
}
{
parsed, err := strconv.ParseInt("3456", 10, 0)
if err != nil {
panic(err)
}
_ = int8(parsed) // NOT OK
_ = uint8(parsed) // NOT OK
_ = int16(parsed) // NOT OK
_ = uint16(parsed) // NOT OK
_ = int32(parsed) // NOT OK
_ = uint32(parsed) // NOT OK
_ = int64(parsed) // OK
_ = uint64(parsed) // OK
_ = int(parsed) // OK
_ = uint(parsed) // OK
_ = int8(parsed) // $ hasValueFlow="type conversion"
_ = uint8(parsed) // $ hasValueFlow="type conversion"
_ = int16(parsed) // $ hasValueFlow="type conversion"
_ = uint16(parsed) // $ hasValueFlow="type conversion"
_ = int32(parsed) // $ hasValueFlow="type conversion"
_ = uint32(parsed) // $ hasValueFlow="type conversion"
_ = int64(parsed)
_ = uint64(parsed)
_ = int(parsed)
_ = uint(parsed)
}
}
@@ -133,80 +133,80 @@ func testParseUint() {
if err != nil {
panic(err)
}
_ = int8(parsed) // OK
_ = uint8(parsed) // OK
_ = int16(parsed) // OK
_ = uint16(parsed) // OK
_ = int32(parsed) // OK
_ = uint32(parsed) // OK
_ = int64(parsed) // OK
_ = uint64(parsed) // OK
_ = int(parsed) // OK
_ = uint(parsed) // OK
_ = int8(parsed)
_ = uint8(parsed)
_ = int16(parsed)
_ = uint16(parsed)
_ = int32(parsed)
_ = uint32(parsed)
_ = int64(parsed)
_ = uint64(parsed)
_ = int(parsed)
_ = uint(parsed)
}
{
parsed, err := strconv.ParseUint("3456", 10, 16)
if err != nil {
panic(err)
}
_ = int8(parsed) // NOT OK
_ = uint8(parsed) // NOT OK
_ = int16(parsed) // OK
_ = uint16(parsed) // OK
_ = int32(parsed) // OK
_ = uint32(parsed) // OK
_ = int64(parsed) // OK
_ = uint64(parsed) // OK
_ = int(parsed) // OK
_ = uint(parsed) // OK
_ = int8(parsed) // $ hasValueFlow="type conversion"
_ = uint8(parsed) // $ hasValueFlow="type conversion"
_ = int16(parsed)
_ = uint16(parsed)
_ = int32(parsed)
_ = uint32(parsed)
_ = int64(parsed)
_ = uint64(parsed)
_ = int(parsed)
_ = uint(parsed)
}
{
parsed, err := strconv.ParseUint("3456", 10, 32)
if err != nil {
panic(err)
}
_ = int8(parsed) // NOT OK
_ = uint8(parsed) // NOT OK
_ = int16(parsed) // NOT OK
_ = uint16(parsed) // NOT OK
_ = int32(parsed) // OK
_ = uint32(parsed) // OK
_ = int64(parsed) // OK
_ = uint64(parsed) // OK
_ = int(parsed) // OK
_ = uint(parsed) // OK
_ = int8(parsed) // $ hasValueFlow="type conversion"
_ = uint8(parsed) // $ hasValueFlow="type conversion"
_ = int16(parsed) // $ hasValueFlow="type conversion"
_ = uint16(parsed) // $ hasValueFlow="type conversion"
_ = int32(parsed)
_ = uint32(parsed)
_ = int64(parsed)
_ = uint64(parsed)
_ = int(parsed)
_ = uint(parsed)
}
{
parsed, err := strconv.ParseUint("3456", 10, 64)
if err != nil {
panic(err)
}
_ = int8(parsed) // NOT OK
_ = uint8(parsed) // NOT OK
_ = int16(parsed) // NOT OK
_ = uint16(parsed) // NOT OK
_ = int32(parsed) // NOT OK
_ = uint32(parsed) // NOT OK
_ = int64(parsed) // OK
_ = uint64(parsed) // OK
_ = int(parsed) // NOT OK
_ = uint(parsed) // NOT OK
_ = int8(parsed) // $ hasValueFlow="type conversion"
_ = uint8(parsed) // $ hasValueFlow="type conversion"
_ = int16(parsed) // $ hasValueFlow="type conversion"
_ = uint16(parsed) // $ hasValueFlow="type conversion"
_ = int32(parsed) // $ hasValueFlow="type conversion"
_ = uint32(parsed) // $ hasValueFlow="type conversion"
_ = int64(parsed)
_ = uint64(parsed)
_ = int(parsed) // $ hasValueFlow="type conversion"
_ = uint(parsed) // $ hasValueFlow="type conversion"
}
{
parsed, err := strconv.ParseUint("3456", 10, 0)
if err != nil {
panic(err)
}
_ = int8(parsed) // NOT OK
_ = uint8(parsed) // NOT OK
_ = int16(parsed) // NOT OK
_ = uint16(parsed) // NOT OK
_ = int32(parsed) // NOT OK
_ = uint32(parsed) // NOT OK
_ = int64(parsed) // OK
_ = uint64(parsed) // OK
_ = int(parsed) // OK
_ = uint(parsed) // OK
_ = int8(parsed) // $ hasValueFlow="type conversion"
_ = uint8(parsed) // $ hasValueFlow="type conversion"
_ = int16(parsed) // $ hasValueFlow="type conversion"
_ = uint16(parsed) // $ hasValueFlow="type conversion"
_ = int32(parsed) // $ hasValueFlow="type conversion"
_ = uint32(parsed) // $ hasValueFlow="type conversion"
_ = int64(parsed)
_ = uint64(parsed)
_ = int(parsed)
_ = uint(parsed)
}
}
@@ -215,16 +215,16 @@ func testAtoi() {
if err != nil {
panic(err)
}
_ = int8(parsed) // NOT OK
_ = uint8(parsed) // NOT OK
_ = int16(parsed) // NOT OK
_ = uint16(parsed) // NOT OK
_ = int32(parsed) // NOT OK
_ = uint32(parsed) // NOT OK
_ = int64(parsed) // OK
_ = uint64(parsed) // OK
_ = int(parsed) // OK
_ = uint(parsed) // OK
_ = int8(parsed) // $ hasValueFlow="type conversion"
_ = uint8(parsed) // $ hasValueFlow="type conversion"
_ = int16(parsed) // $ hasValueFlow="type conversion"
_ = uint16(parsed) // $ hasValueFlow="type conversion"
_ = int32(parsed) // $ hasValueFlow="type conversion"
_ = uint32(parsed) // $ hasValueFlow="type conversion"
_ = int64(parsed)
_ = uint64(parsed)
_ = int(parsed)
_ = uint(parsed)
}
type customInt int16
@@ -237,8 +237,8 @@ func typeAliases(input string) {
panic(err)
}
// NOTE: byte is uint8
_ = byte(parsed) // NOT OK
_ = customInt(parsed) // NOT OK
_ = byte(parsed) // $ hasValueFlow="type conversion"
_ = customInt(parsed) // $ hasValueFlow="type conversion"
}
}
@@ -249,18 +249,18 @@ func testBoundsChecking(input string) {
panic(err)
}
if parsed <= math.MaxInt8 && parsed >= math.MinInt8 {
_ = int8(parsed) // OK
_ = int8(parsed)
}
if parsed < math.MaxInt8 {
_ = int8(parsed) // OK (because we only check for upper bounds)
_ = int8(parsed) // $ MISSING: hasValueFlow="type conversion" // Not found because we only check for upper bounds
if parsed >= 0 {
_ = int16(parsed) // OK
_ = int16(parsed)
}
}
if parsed >= math.MinInt8 {
_ = int8(parsed) // NOT OK
_ = int8(parsed) // $ hasValueFlow="type conversion"
if parsed <= 0 {
_ = int16(parsed) // OK
_ = int16(parsed)
}
}
}
@@ -270,21 +270,21 @@ func testBoundsChecking(input string) {
panic(err)
}
if parsed <= math.MaxInt8 {
_ = uint8(parsed) // OK
_ = uint8(parsed)
}
if parsed < 5 {
_ = uint16(parsed) // OK
_ = uint16(parsed)
}
if err == nil && 1 == 1 && parsed < math.MaxInt8 {
_ = int8(parsed) // OK
_ = int8(parsed)
}
if parsed > 42 {
_ = uint16(parsed) // NOT OK
_ = uint16(parsed) // $ hasValueFlow="type conversion"
}
if parsed > 5 {
return
}
_ = uint8(parsed) // OK
_ = uint8(parsed)
}
}
@@ -294,7 +294,7 @@ func testRightShifted(input string) {
if err != nil {
panic(err)
}
_ = byte(parsed) // OK
_ = byte(parsed)
_ = byte(parsed >> 8)
_ = byte(parsed >> 16)
_ = byte(parsed >> 24)
@@ -304,7 +304,7 @@ func testRightShifted(input string) {
if err != nil {
panic(err)
}
_ = byte(parsed) // OK
_ = byte(parsed)
_ = byte(parsed & 0xff00 >> 8)
}
{
@@ -312,7 +312,7 @@ func testRightShifted(input string) {
if err != nil {
panic(err)
}
_ = byte(parsed) // OK
_ = byte(parsed)
_ = byte(parsed >> 8 & 0xff)
}
{
@@ -320,7 +320,7 @@ func testRightShifted(input string) {
if err != nil {
panic(err)
}
_ = byte(parsed) // NOT OK
_ = byte(parsed) // $ hasValueFlow="type conversion"
_ = byte(parsed << 8)
}
}
@@ -331,35 +331,35 @@ func testPathWithMoreThanOneSink(input string) {
if err != nil {
panic(err)
}
v1 := int16(parsed) // NOT OK
_ = int16(v1) // OK
v1 := int16(parsed) // $ hasValueFlow="type conversion"
_ = int16(v1)
}
{
parsed, err := strconv.ParseInt(input, 10, 32)
if err != nil {
panic(err)
}
v := int16(parsed) // NOT OK
_ = int8(v) // OK
v := int16(parsed) // $ hasValueFlow="type conversion"
_ = int8(v)
}
{
parsed, err := strconv.ParseInt(input, 10, 32)
if err != nil {
panic(err)
}
v1 := int32(parsed) // OK
v2 := int16(v1) // NOT OK
_ = int8(v2) // OK
v1 := int32(parsed)
v2 := int16(v1) // $ hasValueFlow="type conversion"
_ = int8(v2)
}
{
parsed, err := strconv.ParseInt(input, 10, 16)
if err != nil {
panic(err)
}
v1 := int64(parsed) // OK
v2 := int32(v1) // OK
v3 := int16(v2) // OK
_ = int8(v3) // NOT OK
v1 := int64(parsed)
v2 := int32(v1)
v3 := int16(v2)
_ = int8(v3) // $ hasValueFlow="type conversion"
}
}
@@ -368,14 +368,14 @@ func testUsingStrConvIntSize(input string) {
if err != nil {
panic(err)
}
_ = int8(parsed) // NOT OK
_ = uint8(parsed) // NOT OK
_ = int16(parsed) // NOT OK
_ = uint16(parsed) // NOT OK
_ = int32(parsed) // NOT OK
_ = uint32(parsed) // NOT OK
_ = int64(parsed) // OK
_ = uint64(parsed) // OK
_ = int(parsed) // OK
_ = uint(parsed) // OK
_ = int8(parsed) // $ hasValueFlow="type conversion"
_ = uint8(parsed) // $ hasValueFlow="type conversion"
_ = int16(parsed) // $ hasValueFlow="type conversion"
_ = uint16(parsed) // $ hasValueFlow="type conversion"
_ = int32(parsed) // $ hasValueFlow="type conversion"
_ = uint32(parsed) // $ hasValueFlow="type conversion"
_ = int64(parsed)
_ = uint64(parsed)
_ = int(parsed)
_ = uint(parsed)
}

11
ql/test/query-tests/Security/CWE-681/IncorrectIntegerConversion.ql Normal file
View File

@@ -0,0 +1,11 @@
import go
import TestUtilities.InlineFlowTest
import semmle.go.security.IncorrectIntegerConversionLib
class IncorrectIntegerConversionTest extends InlineFlowTest {
override DataFlow::Configuration getValueFlowConfig() {
result = any(ConversionWithoutBoundsCheckConfig config)
}
override DataFlow::Configuration getTaintFlowConfig() { none() }
}

1
ql/test/query-tests/Security/CWE-681/IncorrectIntegerConversion.qlref
View File

@@ -1 +0,0 @@
Security/CWE-681/IncorrectIntegerConversionQuery.ql

12
ql/test/query-tests/Security/CWE-681/Test32BitArchitectureBuildConstraintInFileName_386.go
View File

@@ -12,23 +12,23 @@ func testIntSource386() {
if err != nil {
panic(err)
}
_ = int32(parsed) // OK
_ = uint32(parsed) // OK
_ = int32(parsed)
_ = uint32(parsed)
}
{
parsed, err := strconv.ParseUint("3456", 10, 0)
if err != nil {
panic(err)
}
_ = int32(parsed) // OK
_ = uint32(parsed) // OK
_ = int32(parsed)
_ = uint32(parsed)
}
{
parsed, err := strconv.Atoi("3456")
if err != nil {
panic(err)
}
_ = int32(parsed) // OK
_ = uint32(parsed) // OK
_ = int32(parsed)
_ = uint32(parsed)
}
}

12
ql/test/query-tests/Security/CWE-681/Test32BitArchitectureBuildConstraints.go
View File

@@ -15,23 +15,23 @@ func testIntSource32() {
if err != nil {
panic(err)
}
_ = int32(parsed) // OK
_ = uint32(parsed) // OK
_ = int32(parsed)
_ = uint32(parsed)
}
{
parsed, err := strconv.ParseUint("3456", 10, 0)
if err != nil {
panic(err)
}
_ = int32(parsed) // OK
_ = uint32(parsed) // OK
_ = int32(parsed)
_ = uint32(parsed)
}
{
parsed, err := strconv.Atoi("3456")
if err != nil {
panic(err)
}
_ = int32(parsed) // OK
_ = uint32(parsed) // OK
_ = int32(parsed)
_ = uint32(parsed)
}
}

8
ql/test/query-tests/Security/CWE-681/Test64BitArchitectureBuildConstraintInFileName_amd64.go
View File

@@ -12,15 +12,15 @@ func testIntSinkAmd64() {
if err != nil {
panic(err)
}
_ = int(parsed) // OK
_ = uint(parsed) // OK
_ = int(parsed)
_ = uint(parsed)
}
{
parsed, err := strconv.ParseUint("3456", 10, 64)
if err != nil {
panic(err)
}
_ = int(parsed) // OK
_ = uint(parsed) // OK
_ = int(parsed)
_ = uint(parsed)
}
}

8
ql/test/query-tests/Security/CWE-681/Test64BitArchitectureBuildConstraints.go
View File

@@ -15,15 +15,15 @@ func testIntSink64() {
if err != nil {
panic(err)
}
_ = int(parsed) // OK
_ = uint(parsed) // OK
_ = int(parsed)
_ = uint(parsed)
}
{
parsed, err := strconv.ParseUint("3456", 10, 64)
if err != nil {
panic(err)
}
_ = int(parsed) // OK
_ = uint(parsed) // OK
_ = int(parsed)
_ = uint(parsed)
}
}

8
ql/test/query-tests/Security/CWE-681/TestNoArchitectureBuildConstraints.go
View File

@@ -13,15 +13,15 @@ func testIntSizeIsArchicturallyDependent1() {
if err != nil {
panic(err)
}
_ = int32(parsed) // NOT OK
_ = uint32(parsed) // NOT OK
_ = int32(parsed) // $ hasValueFlow="type conversion"
_ = uint32(parsed) // $ hasValueFlow="type conversion"
}
{
parsed, err := strconv.ParseInt("3456", 10, 64)
if err != nil {
panic(err)
}
_ = int(parsed) // NOT OK
_ = uint(parsed) // NOT OK
_ = int(parsed) // $ hasValueFlow="type conversion"
_ = uint(parsed) // $ hasValueFlow="type conversion"
}
}

9
ql/test/query-tests/Security/CWE-681/TestOldBuildConstraints.go
View File

@@ -1,4 +1,5 @@
// autoformat-ignore (gofmt adds new style build constraints)
//go:build (amd64 || arm64 || arm64be || ppc64 || ppc64le || mips64 || mips64le || s390x || sparc64) && gc && go1.4
// +build amd64 arm64 arm64be ppc64 ppc64le mips64 mips64le s390x sparc64
// +build gc
// +build go1.4
@@ -15,15 +16,15 @@ func oldTestIntSink64() {
if err != nil {
panic(err)
}
_ = int(parsed) // OK
_ = uint(parsed) // OK
_ = int(parsed)
_ = uint(parsed)
}
{
parsed, err := strconv.ParseUint("3456", 10, 64)
if err != nil {
panic(err)
}
_ = int(parsed) // OK
_ = uint(parsed) // OK
_ = int(parsed)
_ = uint(parsed)
}
}