]> Cypherpunks repositories - gostls13.git/commit
[release-branch.go1.16] math/big: check for excessive exponents in Rat.SetString
authorRobert Griesemer <gri@golang.org>
Sun, 2 May 2021 18:27:03 +0000 (11:27 -0700)
committerKatie Hockman <katie@golang.org>
Thu, 27 May 2021 19:50:37 +0000 (19:50 +0000)
commit9210eaf7dc704612a6eda97c482012f779fd833b
tree68dcc38609857ffa9d3c05aaf4519de636497f70
parent305fa952c23b67e03a21d30318b945fddb2f3916
[release-branch.go1.16] math/big: check for excessive exponents in Rat.SetString

Found by OSS-Fuzz https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33284

Thanks to Emmanuel Odeke for reporting this issue.

Updates #45910
Fixes #46306
Fixes CVE-2021-33198

Change-Id: I61e7b04dbd80343420b57eede439e361c0f7b79c
Reviewed-on: https://go-review.googlesource.com/c/go/+/316149
Trust: Robert Griesemer <gri@golang.org>
Trust: Katie Hockman <katie@golang.org>
Run-TryBot: Robert Griesemer <gri@golang.org>
TryBot-Result: Go Bot <gobot@golang.org>
Reviewed-by: Katie Hockman <katie@golang.org>
Reviewed-by: Emmanuel Odeke <emmanuel@orijtech.com>
(cherry picked from commit 6c591f79b0b5327549bd4e94970f7a279efb4ab0)
Reviewed-on: https://go-review.googlesource.com/c/go/+/321832
Run-TryBot: Katie Hockman <katie@golang.org>
Reviewed-by: Roland Shoemaker <roland@golang.org>
src/math/big/ratconv.go
src/math/big/ratconv_test.go