chains-project / GoSurface

Static analyzer to find locations to hide malicious code in Go
0 stars 0 forks source link

gosurface: Reflection parser #4

Closed vivi365 closed 4 weeks ago

vivi365 commented 1 month ago

This implements a simple parser that identifies imports of the reflect package.

Motivation Capslock only looks at imports of reflect as it is difficult to determine good/bad uses of reflect. This (allegedly) requires manual analysis.

WDYT?