Skip to content

io/fs: stack exhaustion in Glob #53415

Closed
Closed
io/fs: stack exhaustion in Glob#53415
Labels
FrozenDueToAgeNeedsFixThe path to resolution is known, but the work has not been done.Securityrelease-blocker
Milestone
Go1.19
@julieqiu

Description

@julieqiu
julieqiu
opened on Jun 16, 2022

Calling Glob on a path which contains a large number of path separators can cause a panic due to stack exhaustion.

This is CVE-2022-30630.

(This was a PRIVATE issue tracked in b/231318890 and fixed by http://tg/1497588.)

Metadata

Metadata

Assignees

No one assigned

    Labels

    FrozenDueToAgeNeedsFixThe path to resolution is known, but the work has not been done.Securityrelease-blocker

    Type

    No type

    Projects

    Release Blockers

    Status

    Done

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions