]> Cypherpunks repositories - gostls13.git/commit
[release-branch.go1.22] net/netip: check if address is v6 mapped in Is methods
authorRoland Shoemaker <bracewell@google.com>
Tue, 28 May 2024 20:26:31 +0000 (13:26 -0700)
committerGopher Robot <gobot@golang.org>
Tue, 4 Jun 2024 17:17:27 +0000 (17:17 +0000)
commit12d5810cdb1f73cf23d7a86462143e9463317fca
tree66eb77a77eadd3393a54786ae4a411b185c76bd7
parent745657509e0598cc883f63900910ed847d84dfbb
[release-branch.go1.22] net/netip: check if address is v6 mapped in Is methods

In all of the Is* methods, check if the address is a v6 mapped v4
address, and unmap it if so.

Thanks to Enze Wang of Alioth (@zer0yu) and Jianjun Chen of Zhongguancun
Lab (@chenjj) for reporting this issue.

Fixes #67680
Fixes #67682
Fixes CVE-2024-24790

Change-Id: I6bd03ca1a5d93a0b59027d861c84060967b265b0
Reviewed-on: https://go-internal-review.googlesource.com/c/go/+/1460
Reviewed-by: Russ Cox <rsc@google.com>
Reviewed-by: Damien Neil <dneil@google.com>
(cherry picked from commit f7f270c1621fdc7ee48e0487b2fac0356947d19b)
Reviewed-on: https://go-internal-review.googlesource.com/c/go/+/1480
Reviewed-by: Tatiana Bradley <tatianabradley@google.com>
Reviewed-on: https://go-review.googlesource.com/c/go/+/590296
Auto-Submit: Michael Knyszek <mknyszek@google.com>
Reviewed-by: David Chase <drchase@google.com>
LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
src/net/netip/inlining_test.go
src/net/netip/netip.go
src/net/netip/netip_test.go