Amazon QDetector Library Sign in to Amazon Q

Q

Detector Library

Go detectors (45/45)

Useless if Body Channel Guarded With Mutex Improper Certificate Validation Unvalidated S3 Bucket Ownership Resource Leak Insecure Cookie Weak Random Number Generation Redundant Equality Check Insecure Ignore Host Key Unsafe Reflection Unchecked Batch Operation Failures Lambda Client Reuse Os Command Injection Useless if Conditional Log Injection Httptrace FileServer As Handler Pprof Endpoint Cross Site Scripting (XSS)Not Recommended API Usage Hidden Goroutine Channel Accessible By Non Endpoint Decompression Bomb Cross-Site Request Forgery (CSRF)Thread Safety Violation Insecure Connection SQL Injection Deprecated Key Generator Exported Loop Pointer Server Side Request Forgery (SSRF)Sensitive Information Leak Integer Overflow Missing Pagination Insecure Cryptography Protection Mechanism Failure Nil Pointer Dereference Temporary Files XML External Entity Insecure File Permissions Authentication Bypass By Alternate Name Code Injection Improper authentication Use Filepath Join Path Traversal Write Pprof Profile Output Hardcoded true or false

Integer Overflow High

Converting untrusted input strings directly to smaller integer types like int16 or int32 can cause integer overflow if the input represents a number outside the target type's range. Using strconv.Atoi on very large strings and type converting the result to a small integer type allows creating integers that wrap around the type's maximum value. This can result in data loss, unexpected behavior, and errors from the wrapped value. Input requires validation before such conversions to prevent overflow. Checks should ensure the input string can be converted and the resulting integer will fit into the target type's range. Adding input checks helps prevent overflow from large inputs.

Detector ID

go/integer-overflow@v1.0

Category

Common Weakness Enumeration (CWE)

Tags