)]}'
{
  "commit": "dc7f3af03ebbba4b0c90f8d95c682dba7d4c70f5",
  "tree": "affb8838d1cdb760aa3168988e1aa9850593ad57",
  "parents": [
    "d172538b2cfce0c13cee31e647d0367aa8cd2486"
  ],
  "author": {
    "name": "Adam Langley",
    "email": "agl@golang.org",
    "time": "Wed Oct 05 17:24:36 2016 -0700"
  },
  "committer": {
    "name": "Adam Langley",
    "email": "agl@golang.org",
    "time": "Mon Oct 10 21:14:46 2016 +0000"
  },
  "message": "ssh: bound DH public values to [2, p-2].\n\nPreviously this code bounded the values to [1, p-1]. This protects\nagainst invalid values that could take lots of CPU time to calculate\nwith. But the standard bounding is [2, p-2] so mirror that.\n\nSince the DH exchange is signed anyway, this is not a security fix.\n\nChange-Id: Ibef01805a596a433b0699d7a09c076344fa8c070\nReviewed-on: https://go-review.googlesource.com/30590\nReviewed-by: Brad Fitzpatrick \u003cbradfitz@golang.org\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "9285ee31deec3a3efc8f96b3568fcc4f7d96a1d9",
      "old_mode": 33188,
      "old_path": "ssh/kex.go",
      "new_id": "c87fbebfde88a2be08fdd9440241cb1a3c4c145a",
      "new_mode": 33188,
      "new_path": "ssh/kex.go"
    }
  ]
}
