Hacker News new | ask | show | jobs
by 0x696C6961 404 days ago
In Go, the symbol table contains enough information to figure this out. This is how https://pkg.go.dev/golang.org/x/vuln/cmd/govulncheck is able to limit vulnerabilities to those that are actually reachable in your code.
1 comments

The symbol table might contain reflection metadata, but it surely can't identify what part of it will be used.