commit | 14936d407aba84b76ec77b14f4697b31f0ac05aa | [log] [tgz] |
---|---|---|
author | Roland Shoemaker <roland@golang.org> | Tue Jan 19 09:59:24 2021 -0800 |
committer | Roland Shoemaker <bracewell@google.com> | Tue Jan 19 18:35:07 2021 +0000 |
tree | 88910bb0f8e2496049ee1f6b9cd31e6139e66cb1 | |
parent | 07e3195293ec510171d7d43ec8ac2bcb9cf00df4 [diff] |
[release-branch.go1.15-security] cmd/go: overwrite program name with full path If the program path is resolved, replace the first argument of the exec.Cmd, which is the bare program name with the resolved path. Change-Id: I92cf5e6f4bb7c8fef9b59f5eab963f4e75b90d07 Reviewed-on: https://team-review.git.corp.google.com/c/golang/go-private/+/957908 Reviewed-by: Katie Hockman <katiehockman@google.com> Reviewed-by: Russ Cox <rsc@google.com> Reviewed-by: Jay Conrod <jayconrod@google.com> (cherry picked from commit a863cb56b33a24aad88f23f1d48629dc4b4b9539) Reviewed-on: https://team-review.git.corp.google.com/c/golang/go-private/+/958254 Reviewed-by: Dmitri Shuralyov <dmitshur@google.com>
diff --git a/src/cmd/go/internal/work/exec.go b/src/cmd/go/internal/work/exec.go index 072162a..f5f9951 100644 --- a/src/cmd/go/internal/work/exec.go +++ b/src/cmd/go/internal/work/exec.go
@@ -1953,6 +1953,9 @@ var buf bytes.Buffer cmd := exec.Command(cmdline[0], cmdline[1:]...) + if cmd.Path != "" { + cmd.Args[0] = cmd.Path + } cmd.Stdout = &buf cmd.Stderr = &buf cleanup := passLongArgsInResponseFiles(cmd)