Potential fix for code scanning alert no. 231: Incorrect conversion between integer types

joel-rieke · github-advanced-security[bot] · web-flow · commit e2e6825b2318 · 2025-07-15T15:23:24.000-07:00
Co-authored-by: Copilot Autofix powered by AI &lt;62310815+github-advanced-security[bot]@users.noreply.github.com&gt;
diff --git a/sql/timetype.go b/sql/timetype.go
@@ -164,6 +164,13 @@ func (t timespanType) ConvertToTimespan(v interface{}) (Timespan, error) {
 			}
 		}
 	case uint64:
+		if value > math.MaxInt64 {
+			return Timespan{}, fmt.Errorf("value %d exceeds int64 maximum limit", value)
+		}
+		// Explicit bounds check added to prevent overflow during conversion to int64.
+		if value > math.MaxInt64 {
+			return Timespan{}, fmt.Errorf("value %d exceeds int64 maximum limit", value)
+		}
 		return t.ConvertToTimespan(int64(value))
 	case float32:
 		return t.ConvertToTimespan(float64(value))

Original file line number	Diff line number	Diff line change
`@@ -164,6 +164,13 @@ func (t timespanType) ConvertToTimespan(v interface{}) (Timespan, error) {`
`164`	`164`	`}`
`165`	`165`	`}`
`166`	`166`	`case uint64:`
	`167`	`+ if value > math.MaxInt64 {`
	`168`	`+ return Timespan{}, fmt.Errorf("value %d exceeds int64 maximum limit", value)`
	`169`	`+ }`
	`170`	`+ // Explicit bounds check added to prevent overflow during conversion to int64.`
	`171`	`+ if value > math.MaxInt64 {`
	`172`	`+ return Timespan{}, fmt.Errorf("value %d exceeds int64 maximum limit", value)`
	`173`	`+ }`
`167`	`174`	`return t.ConvertToTimespan(int64(value))`
`168`	`175`	`case float32:`
`169`	`176`	`return t.ConvertToTimespan(float64(value))`