]> Cypherpunks repositories - gostls13.git/commit
cmd/go: fix command injection in VCS path
authorArthur Khashaev <arthur@khashaev.ru>
Mon, 12 Feb 2018 00:28:12 +0000 (03:28 +0300)
committerIan Lance Taylor <iant@golang.org>
Sat, 17 Feb 2018 00:21:32 +0000 (00:21 +0000)
commit1102616c772c262175f5ba5f12d6b574d0ad9101
treed9b0c89503737a6dda1653eeaba11260bd21c31c
parentc941e27e70c3e06e1011d2dd71d72a7a06a9bcbc
cmd/go: fix command injection in VCS path

Fixes #23867, CVE-2018-7187

Change-Id: I5d0ba4923c9ed354ef76290e149c182447f9dfe2
Reviewed-on: https://go-review.googlesource.com/94656
Run-TryBot: Ian Lance Taylor <iant@golang.org>
TryBot-Result: Gobot Gobot <gobot@golang.org>
Reviewed-by: Ian Lance Taylor <iant@golang.org>
src/cmd/go/internal/get/vcs.go
src/cmd/go/internal/get/vcs_test.go