Skip to content

test(analyzer): Reproduce unresolved Go func-field factory calls - #373

Open
Gr-i-niy wants to merge 1 commit into
seqra:mainfrom
Gr-i-niy:fix/go-dynamic-factory-call-resolution
Open

test(analyzer): Reproduce unresolved Go func-field factory calls#373
Gr-i-niy wants to merge 1 commit into
seqra:mainfrom
Gr-i-niy:fix/go-dynamic-factory-call-resolution

Conversation

@Gr-i-niy

Copy link
Copy Markdown
Contributor

Go dynamic calls through function-valued fields are resolved when the field assignment is visible locally. When the field belongs to an opaque receiver or is reached through a package-initialized global, the factory function is missing from the callee set. Taint therefore does not enter the returned object and the later sink is missed.

Tests added:

  • direct named factory and local function-field controls;
  • constructor-to-method and interface-dispatch controls;
  • opaque concrete and interface-return function-field cases;
  • package-initialized global case;
  • clean negative case.

@Gr-i-niy
Gr-i-niy requested a review from Saloed August 25, 2026 19:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant