)]}'
{
  "commit": "02aa981a75cb366b39e71729b935c15a7b4e146a",
  "tree": "c9453326423a4c03e8ba8c20c03e205ded852408",
  "parents": [
    "724af9c35838492dcaacc1ac51a8a0187c994c54"
  ],
  "author": {
    "name": "Ian Alexander",
    "email": "jitsu@google.com",
    "time": "Mon Jun 22 23:05:39 2026 -0400"
  },
  "committer": {
    "name": "Mark Freeman",
    "email": "markfreeman@google.com",
    "time": "Wed Aug 05 13:15:38 2026 -0700"
  },
  "message": "secure/precis: fix short destination buffer handling in Nickname profile\n\nThe additional mapping rule for the Nickname profile (RFC 8266) requires\ncollapsing interior sequences of spaces. The Transform implementation\nwas writing an interior space to the destination buffer without first\nchecking if there was enough space for both the space and the next rune.\n\nThis change ensures that transform.ErrShortDst is returned if the\ndestination buffer is too small, preventing potential out-of-bounds\nwrites or incomplete copies.\n\nThanks to Omkhar Arasaratnam (GitHub: omkhar) for reporting this issue.\n\nFixes CVE-2026-56851\nFixes golang/go#80112\n\nChange-Id: I51c8dcc58a5b8fd1002f2cdd832698651db89a15\nReviewed-on: https://go-review.googlesource.com/c/text/+/793360\nLUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: Damien Neil \u003cdneil@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "e09185448fbc3a7f7170b247bcbd9c7780845ab4",
      "old_mode": 33188,
      "old_path": "secure/precis/enforce_test.go",
      "new_id": "ae742188f270a7524dd5449f7803f492aad031e6",
      "new_mode": 33188,
      "new_path": "secure/precis/enforce_test.go"
    },
    {
      "type": "modify",
      "old_id": "11e0ccbb19272a3c14ad4c67f29cd22adb3212f8",
      "old_mode": 33188,
      "old_path": "secure/precis/nickname.go",
      "new_id": "73b8f0e73c66b0a9faa2bad6baa6eac0ab5083ab",
      "new_mode": 33188,
      "new_path": "secure/precis/nickname.go"
    },
    {
      "type": "modify",
      "old_id": "bdd991bb974df1ab42a7d09e5b1d2905e97db07e",
      "old_mode": 33188,
      "old_path": "secure/precis/profile.go",
      "new_id": "e62e79ba83616ba21e4cf51010e7a3762ccb6a97",
      "new_mode": 33188,
      "new_path": "secure/precis/profile.go"
    }
  ]
}