]> Cypherpunks repositories - gostls13.git/commit
go/parser: track depth in nested element lists
authorRoland Shoemaker <bracewell@google.com>
Mon, 10 Jun 2024 22:34:12 +0000 (15:34 -0700)
committerGopher Robot <gobot@golang.org>
Thu, 5 Sep 2024 16:42:07 +0000 (16:42 +0000)
commitdd2019528b669908f8ccc0c327a64d0e07fc2a1b
treefdfbdce802660d3828e907fa6571a45731432cf5
parent73fa90e2908d525efb9f7ad0dbcfceb5f25c7251
go/parser: track depth in nested element lists

Prevents stack exhaustion with extremely deeply nested literal values,
i.e. field values in structs.

Fixes #69138
Fixes CVE-2024-34155

Change-Id: I2e8e33b44105cc169d7ed1ae83fb56df0c10f1ee
Reviewed-on: https://go-internal-review.googlesource.com/c/go/+/1520
Reviewed-by: Robert Griesemer <gri@google.com>
Reviewed-by: Damien Neil <dneil@google.com>
Reviewed-by: Russ Cox <rsc@google.com>
Reviewed-on: https://go-review.googlesource.com/c/go/+/611238
LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
Reviewed-by: Roland Shoemaker <roland@golang.org>
Reviewed-by: Dmitri Shuralyov <dmitshur@google.com>
Auto-Submit: Dmitri Shuralyov <dmitshur@golang.org>
src/go/parser/parser.go
src/go/parser/parser_test.go