- 필수 기능
- 앱 내
- 서비스 관리
- 인프라스트럭처
- 애플리케이션 성능
- 디지털 경험
- 소프트웨어 제공
- 보안
- 로그 관리
- 관리
- 인프라스트럭처
- ci
- containers
- csm
- ndm
- otel_guides
- overview
- slos
- synthetics
- tests
- 워크플로
ID: go-security/avoid-rat-setstring
Language: Go
Severity: Warning
Category: Security
Do not use the function SetString from big.Rat as it as a potential overflow in some Go versions. Even if your current Go runtime is not vulnerable to this issue, your code may be used by runtime that are. We recommend avoiding the function SetString from the math/big package for this reason.
package main
import (
"math/big"
"fmt"
)
func main() {
var r = big.Rat{}
r.SetString("13e-9223372036854775808")
fmt.Println(r)
}
package main
import (
"math/big"
"fmt"
)
func anotherFunction() {
r = big.Rat{}
fmt.Println(r)
r.SetString("13e-9223372036854775808")
fmt.Println(r)
}
func anotherFunction2() {
var r big.Rat
fmt.Println(r)
r.SetString("13e-9223372036854775808")
fmt.Println(r)
}
func main() {
var r = big.Rat{}
r.SetString("13e-9223372036854775808")
fmt.Println(r)
}
package main
import (
"math/big"
"fmt"
)
func main() {
r := big.Rat{}
r.SetString("13e-9223372036854775808")
fmt.Println(r)
}
package main
import (
"math/big"
"fmt"
)
func main() {
r := big.NewRat(10, 3)
fmt.Println(r)
}
| |
For more information, please read the Code Analysis documentation
Identify code vulnerabilities directly in yourVS Code editor
Identify code vulnerabilities directly inJetBrains products
