]> Cypherpunks repositories - gostls13.git/commit
[release-branch.go1.18] encoding/xml: use iterative Skip, rather than recursive
authorRoland Shoemaker <roland@golang.org>
Tue, 29 Mar 2022 01:41:26 +0000 (18:41 -0700)
committerMichael Knyszek <mknyszek@google.com>
Tue, 12 Jul 2022 15:06:15 +0000 (15:06 +0000)
commit90f040ec510dd678b7860d70ca77e5682f4c7e96
treeefba0b00a7433f1711ab3600084fae42abb67ff8
parentebea1e3353fa766025aa5190b9c7cc05cf069187
[release-branch.go1.18] encoding/xml: use iterative Skip, rather than recursive

Prevents exhausting the stack limit in _incredibly_ deeply nested
structures.

Fixes #53712
Updates #53614
Fixes CVE-2022-28131

Change-Id: I47db4595ce10cecc29fbd06afce7b299868599e6
Reviewed-on: https://team-review.git.corp.google.com/c/golang/go-private/+/1419912
Reviewed-by: Julie Qiu <julieqiu@google.com>
Reviewed-by: Damien Neil <dneil@google.com>
(cherry picked from commit 9278cb78443d2b4deb24cbb5b61c9ba5ac688d49)
Reviewed-on: https://go-review.googlesource.com/c/go/+/417054
Reviewed-by: Heschi Kreinick <heschi@google.com>
Run-TryBot: Michael Knyszek <mknyszek@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
src/encoding/xml/read.go
src/encoding/xml/read_test.go