Closed
Description
Calling any of the Parse functions on Go source code which contains deeply nested types or declarations can cause a panic due to stack exhaustion.
Thanks to Juho Nurminen of Mattermost for reporting this issue.
This is CVE-2022-1962.
(This was a PRIVATE issue tracked in http://b/236145171 and fixed by http://tg/1491025.)
/cc https://github.com/orgs/golang/teams/security and https://github.com/orgs/golang/teams/release
Metadata
Metadata
Assignees
Type
Projects
Status
Done