GoMimeMultipart

mime/multipart package. Reader.ReadForm() parses multipart form data including file uploads — source of user-controlled filenames and content.

2 sources

Taint flow2 sources → 0 sinks

Sources — untrusted input

.ReadForm()Parses entire multipart form including uploads

.NextPart()Returns next form part

Sources

— user-controlled input enters here

.ReadForm()Source

Signature

ReadForm(maxMemory int64) (*Form, error)

Parses entire multipart form including uploads. Source of user-controlled filenames.

tracks:return

.NextPart()Source

Signature

NextPart() (*Part, error)

Returns next form part. FileName() on the result is user-controlled.

tracks:return

FQN	Field
mime/multipart	fqns[0]

Wrong FQN → 0 findings. Verify with: change fqns to garbage → must produce 0 results.

go.mod

// standard library — no go.mod entry required

rule.py

from codepathfinder.go_rule import GoMimeMultipart