)]}'
{
  "commit": "999d053994c9f2ececb2e85ab0bec72283539e33",
  "tree": "6aeba75df1f91a8a5b6bc44376906950bc448ab3",
  "parents": [
    "90f76b8ffe1453c472892d338785687e9727bcc0"
  ],
  "author": {
    "name": "Brad Fitzpatrick",
    "email": "bradfitz@golang.org",
    "time": "Mon Jul 20 18:10:20 2026 +0000"
  },
  "committer": {
    "name": "Brad Fitzpatrick",
    "email": "bradfitz@golang.org",
    "time": "Thu Jul 23 08:19:57 2026 -0700"
  },
  "message": "ssh: fix parsing of GSSAPI payloads offering multiple mechanisms\n\nparseGSSAPIPayload overwrote the remaining payload with the trailing\nbytes returned by asn1.Unmarshal after decoding each OID, so any\nrequest offering more than one mechanism failed to parse after the\nfirst one. Track the remaining payload across iterations instead, and\nbe strict: reject payloads with trailing bytes after an OID or after\nthe mechanism list.\n\nAdd a test with a two-mechanism payload (Kerberos V5 followed by\nSPNEGO) that failed before this change.\n\nChange-Id: If0984efcf103da76323d5d03ad7443d8ec9d3aed\nReviewed-on: https://go-review.googlesource.com/c/crypto/+/803180\nReviewed-by: Carlos Amedee \u003ccarlos@golang.org\u003e\nReviewed-by: Nicola Murino \u003cnicola.murino@gmail.com\u003e\nReviewed-by: David Chase \u003cdrchase@google.com\u003e\nLUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "a6249a1227b520ec7177b56fbd33c2c7ea302b47",
      "old_mode": 33188,
      "old_path": "ssh/ssh_gss.go",
      "new_id": "a7a099754f79c3159e94e5841ca702639319c44d",
      "new_mode": 33188,
      "new_path": "ssh/ssh_gss.go"
    },
    {
      "type": "modify",
      "old_id": "9e3ea8c22c6388e6071291a3a8e73e7f21b9d444",
      "old_mode": 33188,
      "old_path": "ssh/ssh_gss_test.go",
      "new_id": "94bb2fdde4306f8fd07509f2ffedc732a256e915",
      "new_mode": 33188,
      "new_path": "ssh/ssh_gss_test.go"
    }
  ]
}