We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 65ac943 commit a47c702Copy full SHA for a47c702
2 files changed
go/ql/test/experimental/CWE-522-DecompressionBombs/DecompressionBombTest.expected
@@ -1,3 +1,2 @@
1
testFailures
2
-| test.go:637:31:637:57 | comment | Missing result:hasValueFlow="tarRead" |
3
failures
go/ql/test/experimental/CWE-522-DecompressionBombs/test.go
@@ -634,7 +634,7 @@ func TarDecompressorTN(tarRead *tar.Reader) {
634
var tarOut []byte = make([]byte, 70)
635
i := 1
636
for i > 0 {
637
- i, _ = tarRead.Read(tarOut) // $ hasValueFlow="tarRead"
+ i, _ = tarRead.Read(tarOut) // GOOD: the output size is being controlled
638
fmt.Println("do sth with output:", tarOut)
639
}
640
0 commit comments