Standard Library

GoPlugin

plugin package. Open() loads a shared library — code execution sink when the plugin path is user-controlled.

1 sink
Taint flow0 sources 1 sink
Sinks — dangerous call
.Open()

Sinks

.Open()Sink
#
Signature
Open(path string) (*Plugin, error)

Loads a shared object plugin. Code execution sink when path is user-controlled.

tracks:0

Fully-Qualified Names

FQNField
pluginfqns[0]

Wrong FQN → 0 findings. Verify with: change fqns to garbage → must produce 0 results.

Import

go.mod
// standard library — no go.mod entry required
rule.py
from codepathfinder.go_rule import GoPlugin