Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Potential security bug in custom varint code #18

Closed
dwlnetnl opened this issue Sep 22, 2020 · 2 comments
Closed

Potential security bug in custom varint code #18

dwlnetnl opened this issue Sep 22, 2020 · 2 comments
Labels
bug security
Milestone
v1.0

Comments

@dwlnetnl
Copy link

As preface: I am not a user nor had any knowledge of the existence of this project until I came across it in a blog post.

Recently there is a security related bug fixed in the standard library regarding varints. It seems that at this moment in time the version within this code base hasn't been updated. I am merely putting this issue down as a gentle nudge.

Commit that fixes the bug in the standard library: golang/go@027d724
@tsavola tsavola added this to the v1.0 milestone Sep 22, 2020
@tsavola
Copy link
Member

tsavola commented Sep 22, 2020

Thank you for reporting this, @dwlnetnl!

@tsavola tsavola mentioned this issue Sep 22, 2020
Closed
@dwlnetnl
Copy link
Author

No worries, I'm glad it's helpful, didn't want to come across like an arse.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
bug security
Milestone
v1.0
Development

No branches or pull requests
2 participants
@tsavola @dwlnetnl