TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

GoKart: A static analysis tool for securing Go code

166 点作者 SnowflakeOnIce将近 4 年前

3 条评论

the-smug-one将近 4 年前
Go has some nice tooling which is quite easy to use w.r.t. static analysis. I started writing a nil pointer analysis tool which was going to take advantage of and provide some more advanced information*. I &quot;unfortunately&quot; had a lot more fun stuff to do during my vacation, but it was very easy to get started with! So kudos to the Go team for making this kind of stuff possible for a 1-man team.<p>* Just a forward-style abstract interpretation living on-top of Go&#x27;s type system as an additional layer so you get explanations for why the tool believes that a nil-pointer dereference may occur, etc.
评论 #28228170 未加载
brundolf将近 4 年前
I&#x27;ve wondered what it would be like to write a thin language that compiles to Go and mainly serves to introduce a reasonable type system on top, while benefitting from its performance and garbage-collection. Could prevent null dereferencing, among other things
评论 #28229685 未加载
评论 #28231110 未加载
评论 #28229366 未加载
评论 #28230439 未加载
评论 #28229025 未加载
评论 #28230170 未加载
评论 #28229268 未加载
shp0ngle将近 4 年前
That seems nice. I stopped using gosec (or whatever was the name) because of all that noise
评论 #28230117 未加载