]> Cypherpunks repositories - gostls13.git/commit
crypto/tls: quote protocols in ALPN error message
authorRoland Shoemaker <roland@golang.org>
Mon, 29 Sep 2025 17:11:56 +0000 (10:11 -0700)
committerGopher Robot <gobot@golang.org>
Mon, 29 Sep 2025 18:28:17 +0000 (11:28 -0700)
commit4e9006a716533fe1c7ee08df02dfc73078f7dc19
tree3aeec3fca0bedfedccd4bb79e03cea9c4553fe51
parent047c2ab841e2d2233d0bef420d1b5ecb545a380a
crypto/tls: quote protocols in ALPN error message

Quote the protocols sent by the client when returning the ALPN
negotiation error message.

Fixes CVE-2025-58189
Fixes #75652

Change-Id: Ie7b3a1ed0b6efcc1705b71f0f1e8417126661330
Reviewed-on: https://go-review.googlesource.com/c/go/+/707776
Auto-Submit: Roland Shoemaker <roland@golang.org>
Reviewed-by: Neal Patel <nealpatel@google.com>
Reviewed-by: Nicholas Husin <nsh@golang.org>
Auto-Submit: Nicholas Husin <nsh@golang.org>
Reviewed-by: Nicholas Husin <husin@google.com>
TryBot-Bypass: Roland Shoemaker <roland@golang.org>
Reviewed-by: Daniel McCarney <daniel@binaryparadox.net>
src/crypto/tls/handshake_server.go