tree 17b4bddb9ec5c6d12fc31b7081766eb16bf55afc
parent 5381d12c6fe96256d91e462be3e5c3a7e1e505ac
author Jonathan Amsterdam <jba@google.com> 1647982594 -0400
committer Julie Qiu <julie@golang.org> 1648067539 +0000

cmd/govulncheck: fail in GOPATH mode

govulncheck requires module information to find vulnerabilities.
But in GOPATH mode, there is no module information.
Instead of silently succeeding in that case, govulncheck fails with an error.

Also, fix an off-by-one bug that could result in a panic if only the top
function in a call stack is in a top package.

Fixes golang/go#51591

Cherry-picked: https://go-review.googlesource.com/c/exp/+/394774

Change-Id: I9923c1f03aa0a101de86fe03daaeeefc1d1f5bdf
Reviewed-on: https://go-review.googlesource.com/c/vuln/+/395241
Trust: Julie Qiu <julie@golang.org>
Run-TryBot: Julie Qiu <julie@golang.org>
Reviewed-by: Jonathan Amsterdam <jba@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>