github / github/codeql

Missing Source - net.Listen

Open
#9,301 0 comments 0 reactions 0 assignees View on GitHub
Go
Dominant language
CodeQL
Stars
10.1k
Forks
2.1k
Avg merge
2d 15h
Merged PRs (30d)
141

Description

We are missing a source which certain developers might use for creating and communicating using raw sockets using [`net.Listen`](https://pkg.go.dev/net#Listen) or other socket related sources.

### Details

- Sources:
- [ ] https://pkg.go.dev/net#Listen
- [ ] https://pkg.go.dev/crypto/tls#Listen ?
- Sanitizers:
- [ ] Loopback address used
- Queries:
- All queries that rely on user controllable input

### Example(s) / Test Cases

- https://gist.github.com/GeekMasher/f21fd9a1de51e338f18c9693e36b9183

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.