Skip to content

[Bug] Integer overflow: port int→int32 in builder — invalid ECS port mapping possible #7

Description

@YHQZ1

apps/builder/internal/queue/worker.go:132 casts a port number from int to int32 without bounds checking. gosec reports G115 (CWE-190). A crafted job payload with port > 65535 silently produces an invalid or negative ECS port mapping.

Metadata

Metadata

Assignees

No one assigned

    Labels

    P1High — fix this sprintbugSomething isn't workinggood first issueGood for newcomers

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions