)]}'
{
  "commit": "027d7241ce050d197e7fabea3d541ffbe3487258",
  "tree": "b7de81fbd93e9c43935443fa205f02cd338ba1df",
  "parents": [
    "6f08e89ec3280bf6577c2bdb01243cbeeb1a259d"
  ],
  "author": {
    "name": "Katie Hockman",
    "email": "katie@golang.org",
    "time": "Tue Aug 04 11:45:32 2020 -0400"
  },
  "committer": {
    "name": "Katie Hockman",
    "email": "katie@golang.org",
    "time": "Thu Aug 06 17:24:10 2020 +0000"
  },
  "message": "encoding/binary: read at most MaxVarintLen64 bytes in ReadUvarint\n\nThis CL ensures that ReadUvarint consumes only a limited\namount of input (instead of an unbounded amount).\n\nOn some inputs, ReadUvarint could read an arbitrary number\nof bytes before deciding to return an overflow error.\nAfter this CL, ReadUvarint returns that same overflow\nerror sooner, after reading at most MaxVarintLen64 bytes.\n\nFix authored by Robert Griesemer and Filippo Valsorda.\n\nThanks to Diederik Loerakker, Jonny Rhea, Raúl Kripalani,\nand Preston Van Loon for reporting this.\n\nFixes #40618\nFixes CVE-2020-16845\n\nChange-Id: Ie0cb15972f14c38b7cf7af84c45c4ce54909bb8f\nReviewed-on: https://team-review.git.corp.google.com/c/golang/go-private/+/812099\nReviewed-by: Filippo Valsorda \u003cvalsorda@google.com\u003e\nReviewed-on: https://go-review.googlesource.com/c/go/+/247120\nRun-TryBot: Katie Hockman \u003ckatie@golang.org\u003e\nTryBot-Result: Gobot Gobot \u003cgobot@golang.org\u003e\nReviewed-by: Alexander Rakoczy \u003calex@golang.org\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "bcb8ac9a459c5c20ceefe3e9ad9f69e5177b9c83",
      "old_mode": 33188,
      "old_path": "src/encoding/binary/varint.go",
      "new_id": "38af61075c860ef6b97b883bc6be2508a1c914f1",
      "new_mode": 33188,
      "new_path": "src/encoding/binary/varint.go"
    },
    {
      "type": "modify",
      "old_id": "ca411ecbd65e8180d2bfcb0c819a561328d66f06",
      "old_mode": 33188,
      "old_path": "src/encoding/binary/varint_test.go",
      "new_id": "6ef4c9950525a45c56eb7a11c5bb2ca443693b09",
      "new_mode": 33188,
      "new_path": "src/encoding/binary/varint_test.go"
    }
  ]
}