mirror of
https://github.com/golang/net.git
synced 2026-03-31 18:37:08 +09:00
dec6603c16
The existing implementation of the Name.unpack method does not check the length of the domain name until parsing is complete. This allows a malicious user to supply an unreasonably large name and wastle cycles parsing. This change moves an equivalent check into the loop during process to short-circuit if we've created too large of a name. For golang/go#77540 Change-Id: I4c4bf20c0342825a09cefd9b0b3c0bdce0c80137 Reviewed-on: https://go-review.googlesource.com/c/net/+/750260 Reviewed-by: Roland Shoemaker <roland@golang.org> Auto-Submit: Roland Shoemaker <roland@golang.org> LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com> Reviewed-by: Cherry Mui <cherryyz@google.com>
Go Networking
This repository holds supplementary Go networking packages.
Report Issues / Send Patches
This repository uses Gerrit for code changes. To learn how to submit changes to this repository, see https://go.dev/doc/contribute.
The git repository is https://go.googlesource.com/net.
The main issue tracker for the net repository is located at https://go.dev/issues. Prefix your issue with "x/net:" in the subject line, so it is easy to find.