GoBufioScanner

bufio.Scanner reads tokens line-by-line. Text() and Bytes() are sources when the scanner wraps user-controlled input (stdin, HTTP body).

2 sources

Taint flow2 sources → 0 sinks

Sources — untrusted input

.Text()Returns current token as string

.Bytes()Returns current token as bytes

Sources

— user-controlled input enters here

.Text()Source

Signature

Text() string

Returns current token as string. Source when scanning user input.

tracks:return

.Bytes()Source

Signature

Bytes() []byte

Returns current token as bytes. Source when scanning user input.

tracks:return

FQN	Field
bufio.Scanner	fqns[0]

Wrong FQN → 0 findings. Verify with: change fqns to garbage → must produce 0 results.

go.mod

// standard library — no go.mod entry required

rule.py

from codepathfinder.go_rule import GoBufioScanner