|author||Katie Hockman <email@example.com>||Tue Nov 10 15:54:12 2020 -0500|
|committer||Katie Hockman <firstname.lastname@example.org>||Thu Nov 12 20:42:40 2020 +0000|
math/big: fix shift for recursive division The previous s value could cause a crash for certain inputs. Will check in tests and documentation improvements later. Thanks to the Go Ethereum team and the OSS-Fuzz project for reporting this. Thanks to Rémy Oudompheng and Robert Griesemer for their help developing and validating the fix. Fixes CVE-2020-28362 Change-Id: Ibbf455c4436bcdb07c84a34fa6551fb3422356d3 Reviewed-on: https://team-review.git.corp.google.com/c/golang/go-private/+/899974 Reviewed-by: Roland Shoemaker <email@example.com> Reviewed-by: Filippo Valsorda <firstname.lastname@example.org> Reviewed-on: https://go-review.googlesource.com/c/go/+/269657 Trust: Katie Hockman <email@example.com> Trust: Roland Shoemaker <firstname.lastname@example.org> Run-TryBot: Katie Hockman <email@example.com> Reviewed-by: Roland Shoemaker <firstname.lastname@example.org> TryBot-Result: Go Bot <email@example.com>
Go is an open source programming language that makes it easy to build simple, reliable, and efficient software.
Unless otherwise noted, the Go source files are distributed under the BSD-style license found in the LICENSE file.
Official binary distributions are available at https://golang.org/dl/.
If a binary distribution is not available for your combination of operating system and architecture, visit https://golang.org/doc/install/source or load doc/install-source.html in your web browser for source installation instructions.
Go is the work of thousands of contributors. We appreciate your help!
To contribute, please read the contribution guidelines: https://golang.org/doc/contribute.html
Note that the Go project uses the issue tracker for bug reports and proposals only. See https://golang.org/wiki/Questions for a list of places to ask questions about the Go language.