质量优化

internal/apps/admin/db_manage/routers.go

@@ -118,7 +118,11 @@ func getSQLiteOverview(gormDB *gorm.DB) (DBOverviewResponse, error) {
 
 	var sizeStr string
 	if fi, err := os.Stat(name); err == nil {
-		sizeStr = formatBytes(uint64(fi.Size()))
+		size := fi.Size()
+		if size < 0 {
+			size = 0
+		}
+		sizeStr = formatBytes(uint64(size))
 	} else {
 		sizeStr = "0 B"
 	}
@@ -160,7 +164,11 @@ func getPostgresOverview(gormDB *gorm.DB) (DBOverviewResponse, error) {
 	var sizeStr string
 	var sizeBytes sql.NullInt64
 	if err := gormDB.Raw("SELECT pg_database_size(current_database())").Scan(&sizeBytes).Error; err == nil && sizeBytes.Valid {
-		sizeStr = formatBytes(uint64(sizeBytes.Int64))
+		size := sizeBytes.Int64
+		if size < 0 {
+			size = 0
+		}
+		sizeStr = formatBytes(uint64(size))
 	} else {
 		sizeStr = "0 B"
 	}

internal/apps/admin/status/routers.go

@@ -147,9 +147,12 @@ func GetSystemStatus(c *gin.Context) {
 	numGoroutine := runtime.NumGoroutine()
 
 	var lastGCTime string
-	if m.LastGC > 0 {
+	switch {
+	case m.LastGC > 0 && m.LastGC <= math.MaxInt64:
 		lastGCTime = formatDuration(time.Since(time.Unix(0, int64(m.LastGC))))
-	} else {
+	case m.LastGC > 0:
+		lastGCTime = "未知"
+	default:
 		lastGCTime = "无"
 	}
 
@@ -286,7 +289,7 @@ func exportSQLite(c *gin.Context) {
 		path = "./data/wavelet.db"
 	}
 
-	f, err := os.Open(path)
+	f, err := os.Open(path) //nolint:gosec // path is loaded from server startup configuration, not user input
 	if err != nil {
 		c.JSON(http.StatusInternalServerError, util.Err("无法打开数据库文件: "+err.Error()))
 		return
@@ -329,7 +332,7 @@ func exportPostgres(c *gin.Context) {
 		dbCfg.Database,
 	}
 
-	cmd := exec.CommandContext(c.Request.Context(), pgDumpPath, args...)
+	cmd := exec.CommandContext(c.Request.Context(), pgDumpPath, args...) //nolint:gosec // pgDumpPath is a looked up command path, args are from database configuration
 	if dbCfg.Password != "" {
 		cmd.Env = append(os.Environ(), "PGPASSWORD="+dbCfg.Password)
 	} else {

internal/apps/admin/system_config/routers.go

@@ -275,7 +275,7 @@ func TestSMTP(c *gin.Context) {
 <p>If you received this message, your SMTP configuration is correct and mail sending is working properly.</p>
 <p>Sent from Wavelet.</p>`
 
-	logs, err := mail.SendMailWithLog(cfg, req.To, subject, body)
+	logs, err := mail.SendMailWithLog(c.Request.Context(), cfg, req.To, subject, body)
 	resp := TestSMTPResponse{
 		Success: err == nil,
 		Log:     logs,

internal/apps/admin/user/errs.go

@@ -14,6 +14,6 @@ const (
 	deleteUserFailed = "删除用户失败"
 	usernameExists   = "用户名已存在"
 	usernameRequired = "用户名不能为空"
-	passwordTooShort = "密码长度不能少于 8 位"
+	passwordTooShort = "密码长度不能少于 8 位" //nolint:gosec // false positive: this is an error message, not hardcoded credentials
 	createUserFailed = "创建用户失败"
 )