chains-project / GoSurf

Static analyzer to find locations to hide malicious code in Go
2 stars 1 forks source link

gosurface: Reflection parser #4

Closed vivi365 closed 3 months ago

vivi365 commented 3 months ago

This implements a simple parser that identifies imports of the reflect package.

Motivation Capslock only looks at imports of reflect as it is difficult to determine good/bad uses of reflect. This (allegedly) requires manual analysis.

WDYT?