Fix crash when parsing the TLS min version value (#724)

securego · Nov 9, 2021 · 55c6cea · 55c6cea
1 parent 40fa36d
commit 55c6cea
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/rules/tls.go b/rules/tls.go
@@ -88,7 +88,7 @@ func (t *insecureConfigTLS) processTLSConfVal(n *ast.KeyValueExpr, c *gosec.Cont
 
 		case "MinVersion":
 			if d, ok := n.Value.(*ast.Ident); ok {
-				if vs, ok := d.Obj.Decl.(*ast.ValueSpec); ok {
+				if vs, ok := d.Obj.Decl.(*ast.ValueSpec); ok && len(vs.Values) > 0 {
 					if s, ok := vs.Values[0].(*ast.SelectorExpr); ok {
 						x := s.X.(*ast.Ident).Name
 						sel := s.Sel.Name