)]}'
{
  "commit": "ea6b0bf4faa91ad43e255a8d480a9e2b0f70dfc1",
  "tree": "24769b336dc75f1d7c729810e74adcb295967e60",
  "parents": [
    "305fa952c23b67e03a21d30318b945fddb2f3916"
  ],
  "author": {
    "name": "Roland Shoemaker",
    "email": "roland@golang.org",
    "time": "Tue May 11 11:31:31 2021 -0700"
  },
  "committer": {
    "name": "Roland Shoemaker",
    "email": "roland@golang.org",
    "time": "Wed May 26 09:08:40 2021 -0700"
  },
  "message": "[release-branch.go1.16] archive/zip: only preallocate File slice if reasonably sized\n\nSince the number of files in the EOCD record isn\u0027t validated, it isn\u0027t\nsafe to preallocate Reader.Files using that field. A malformed archive\ncan indicate it contains up to 1 \u003c\u003c 128 - 1 files. We can still safely\npreallocate the slice by checking if the specified number of files in\nthe archive is reasonable, given the size of the archive.\n\nThanks to the OSS-Fuzz project for discovering this issue and to\nEmmanuel Odeke for reporting it.\n\nUpdates #46242\nFixes #46397\nFixes CVE-2021-33196\n\nChange-Id: I3c76d8eec178468b380d87fdb4a3f2cb06f0ee76\nReviewed-on: https://go-review.googlesource.com/c/go/+/318909\nTrust: Roland Shoemaker \u003croland@golang.org\u003e\nTrust: Katie Hockman \u003ckatie@golang.org\u003e\nTrust: Joe Tsai \u003cthebrokentoaster@gmail.com\u003e\nRun-TryBot: Roland Shoemaker \u003croland@golang.org\u003e\nTryBot-Result: Go Bot \u003cgobot@golang.org\u003e\nReviewed-by: Katie Hockman \u003ckatie@golang.org\u003e\nReviewed-by: Joe Tsai \u003cthebrokentoaster@gmail.com\u003e\n(cherry picked from commit 74242baa4136c7a9132a8ccd9881354442788c8c)\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "18f9833db0a08e3ad0040e8d69847e0060792e60",
      "old_mode": 33188,
      "old_path": "src/archive/zip/reader.go",
      "new_id": "ddef2b7b5a5176e1785c9e400407b85d4dfd1c0f",
      "new_mode": 33188,
      "new_path": "src/archive/zip/reader.go"
    },
    {
      "type": "modify",
      "old_id": "c6e8d215681604c4648370c017b5afa9d0e1d013",
      "old_mode": 33188,
      "old_path": "src/archive/zip/reader_test.go",
      "new_id": "471be27bb1004f698c071196f2d63da617377a34",
      "new_mode": 33188,
      "new_path": "src/archive/zip/reader_test.go"
    }
  ]
}