tree ab9384f09a59cce16c5242a6af3fb15075a99bfa
parent 3b8a5f69d17947abaab7e3723c42fc198ec32e55
author Jonathan Amsterdam <jba@google.com> 1649412533 -0400
committer Jonathan Amsterdam <jba@google.com> 1649764196 +0000

cmd/govulncheck: don't skip vulns with no CallSink for binaries

When we analyze a binary, we don't have call stacks. The code that
skipped vulns with CallSink==0 was skipping all vulns in binaries.
Now we filter out those vulns only when we run on source.

Fixes golang/go#51412.

Change-Id: If11b079fd771ccfb05360da4a1db64102e0db182
Reviewed-on: https://go-review.googlesource.com/c/vuln/+/399114
Run-TryBot: Jonathan Amsterdam <jba@google.com>
Reviewed-by: Zvonimir Pavlinovic <zpavlinovic@google.com>