)]}'
{
  "commit": "b13ce14c4a6aa59b7b041ad2b6eed2d23e15b574",
  "tree": "74d4ed6d478c2fc21a3ecab301aae55d6675defe",
  "parents": [
    "a858d15f11f87b53792a6afb156716b80f9634c7"
  ],
  "author": {
    "name": "Dmitri Shuralyov",
    "email": "dmitshur@golang.org",
    "time": "Tue Jan 28 13:20:57 2020 -0500"
  },
  "committer": {
    "name": "Dmitri Shuralyov",
    "email": "dmitshur@golang.org",
    "time": "Tue Jan 28 20:26:36 2020 +0000"
  },
  "message": "src/go.mod: import x/crypto/cryptobyte security fix for 32-bit archs\n\n\tcryptobyte: fix panic due to malformed ASN.1 inputs on 32-bit archs\n\n\tWhen int is 32 bits wide (on 32-bit architectures like 386 and arm), an\n\toverflow could occur, causing a panic, due to malformed ASN.1 being\n\tpassed to any of the ASN1 methods of String.\n\n\tTested on linux/386 and darwin/amd64.\n\n\tThis fixes CVE-2020-7919 and was found thanks to the Project Wycheproof\n\ttest vectors.\n\n\tChange-Id: I8c9696a8bfad1b40ec877cd740dba3467d66ab54\n\tReviewed-on: https://team-review.git.corp.google.com/c/golang/go-private/+/645211\n\tReviewed-by: Katie Hockman \u003ckatiehockman@google.com\u003e\n\tReviewed-by: Adam Langley \u003cagl@google.com\u003e\n\tReviewed-on: https://go-review.googlesource.com/c/crypto/+/216677\n\tRun-TryBot: Katie Hockman \u003ckatie@golang.org\u003e\n\tReviewed-by: Dmitri Shuralyov \u003cdmitshur@golang.org\u003e\n\tReviewed-by: Filippo Valsorda \u003cfilippo@golang.org\u003e\n\tTryBot-Result: Gobot Gobot \u003cgobot@golang.org\u003e\n\nx/crypto/cryptobyte is used in crypto/x509 for parsing certificates.\nMalformed certificates might cause a panic during parsing on 32-bit\narchitectures (like arm and 386).\n\nChange-Id: I840feb54eba880dbb96780ef7adcade073c4c4e3\nReviewed-on: https://team-review.git.corp.google.com/c/golang/go-private/+/647741\nReviewed-by: Katie Hockman \u003ckatiehockman@google.com\u003e\nReviewed-on: https://go-review.googlesource.com/c/go/+/216680\nReviewed-by: Katie Hockman \u003ckatie@golang.org\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "3ef0710745d25bc34eb3f6fd335966593a067866",
      "old_mode": 33188,
      "old_path": "src/go.mod",
      "new_id": "72114080ceb0ef20d6b11d28b30ef4a76084e989",
      "new_mode": 33188,
      "new_path": "src/go.mod"
    },
    {
      "type": "modify",
      "old_id": "697caf4ece9e7693141ec7cc0914218e96f2e689",
      "old_mode": 33188,
      "old_path": "src/go.sum",
      "new_id": "9f24502dc2a03d7e25e436ac7f7a3a59bf064592",
      "new_mode": 33188,
      "new_path": "src/go.sum"
    },
    {
      "type": "modify",
      "old_id": "528b9bff671e53a9c8b695064f7cebcffcd8469f",
      "old_mode": 33188,
      "old_path": "src/vendor/golang.org/x/crypto/cryptobyte/asn1.go",
      "new_id": "f930f7e5266c6cb31f241d7fc94bad603e562c22",
      "new_mode": 33188,
      "new_path": "src/vendor/golang.org/x/crypto/cryptobyte/asn1.go"
    },
    {
      "type": "modify",
      "old_id": "39bf98aeead8160094c007d8edb4066b5720283c",
      "old_mode": 33188,
      "old_path": "src/vendor/golang.org/x/crypto/cryptobyte/string.go",
      "new_id": "589d297e6be8f6d5f2a179a02f2216536263efb5",
      "new_mode": 33188,
      "new_path": "src/vendor/golang.org/x/crypto/cryptobyte/string.go"
    },
    {
      "type": "modify",
      "old_id": "ba6bd9845c0350bfa1dafe5419bc975b59cc9a62",
      "old_mode": 33188,
      "old_path": "src/vendor/modules.txt",
      "new_id": "0944c9a5330c61645a4903381c71442f9cd8051b",
      "new_mode": 33188,
      "new_path": "src/vendor/modules.txt"
    }
  ]
}