go, branch go1.11.5

[release-branch.go1.11-security] go1.11.5

2019-01-23T19:49:15Z

Change-Id: Ib957fc19ae0633f77e2a5a9219f7a11ceda3f092 Reviewed-on: https://team-review.git.corp.google.com/c/400909 Reviewed-by: Filippo Valsorda

[release-branch.go1.11-security] net: pass if at least one matching entry in TestLookupGmailTXT

2019-01-23T19:06:01Z

Fixes #29698 Change-Id: I0531c0a274b120af8871aa2f5975744ff6c912a3 Reviewed-on: https://go-review.googlesource.com/c/157638 Run-TryBot: Ian Lance Taylor TryBot-Result: Gobot Gobot Reviewed-by: Brad Fitzpatrick Reviewed-on: https://team-review.git.corp.google.com/c/401203 Reviewed-by: Filippo Valsorda

[release-branch.go1.11-security] doc: document Go 1.11.5 and Go 1.10.8

2019-01-23T17:49:22Z

Change-Id: I97ce42e1e9a6d10bf1eeccc2763e043d8ebe5bab Reviewed-on: https://team-review.git.corp.google.com/c/400906 Reviewed-by: Filippo Valsorda (cherry picked from commit efe766c7c0918da96aa21e1ac03a9d3fa57ca156) Reviewed-on: https://team-review.git.corp.google.com/c/401144

[release-branch.go1.11-security] crypto/elliptic: reduce subtraction term to prevent long busy loop

2019-01-23T17:29:02Z

If beta8 is unusually large, the addition loop might take a very long time to bring x3-beta8 back positive. This would lead to a DoS vulnerability in the implementation of the P-521 and P-384 elliptic curves that may let an attacker craft inputs to ScalarMult that consume excessive amounts of CPU. This fixes CVE-2019-6486. Change-Id: Ia969e8b5bf5ac4071a00722de9d5e4d856d8071a Reviewed-on: https://team-review.git.corp.google.com/c/399777 Reviewed-by: Adam Langley Reviewed-by: Julie Qiu (cherry picked from commit 746d6abe2dfb9ce7609f8e1e1a8dcb7e221f423e) Reviewed-on: https://team-review.git.corp.google.com/c/401142 Reviewed-by: Filippo Valsorda

[release-branch.go1.11] go1.11.4

2018-12-14T23:34:32Z

Change-Id: Id4fe02a5b26da92e99d9817ecbf518682c4345b2 Reviewed-on: https://go-review.googlesource.com/c/154307 Run-TryBot: Filippo Valsorda TryBot-Result: Gobot Gobot Reviewed-by: Dmitri Shuralyov

[release-branch.go1.11] doc: document Go 1.11.4

2018-12-14T21:58:38Z

Change-Id: Ic098bd69fa9e3f7b2ed6c451a7a266167c0cde94 Reviewed-on: https://go-review.googlesource.com/c/154302 Reviewed-by: Dmitri Shuralyov (cherry picked from commit 47713567d9ec3784688d4e41ae16dca8466dcb84) Reviewed-on: https://go-review.googlesource.com/c/154306

[release-branch.go1.11] doc: document Go 1.10.7

2018-12-14T21:58:32Z

Change-Id: Id71aad4cf6149e0ba15f7fec0b74517827c37866 Reviewed-on: https://go-review.googlesource.com/c/154303 Reviewed-by: Dmitri Shuralyov (cherry picked from commit 84bf9ce1fbe7ae8424031550d9cf3fe6b27575e3) Reviewed-on: https://go-review.googlesource.com/c/154304

[release-branch.go1.11] net/http: update bundled x/net/http2

2018-12-14T20:32:28Z

This updates x/net/http2 to x/net on the latest commit of x/net on release-branch.go1.11 branch, golang/net@a4630153038d3cb8c57f, for: [release-branch.go1.11] http2: don't leak streams on broken body https://golang.org/cl/154237 Fixes #28673 Change-Id: I8f40c69502fa95d1d9dff1ab68444640444442aa Reviewed-on: https://go-review.googlesource.com/c/154298 Reviewed-by: Brad Fitzpatrick Run-TryBot: Brad Fitzpatrick TryBot-Result: Gobot Gobot

[release-branch.go1.11] cmd/cgo: don't cache bad pointer typedefs

2018-12-14T20:23:55Z

The set of bad pointer typedefs changes as we see more typedefs, so avoid looking in the cache when we find one. Updates #29175 Fixes #29272 Change-Id: Idd82289bdd8628d11a983fa5ec96517e3a5bcbf1 Reviewed-on: https://go-review.googlesource.com/c/153597 Run-TryBot: Ian Lance Taylor Reviewed-by: Keith Randall TryBot-Result: Gobot Gobot (cherry picked from commit 01e072db5d26c224dfbe7763a5b94ab23c163983) Reviewed-on: https://go-review.googlesource.com/c/154299 Run-TryBot: Filippo Valsorda Reviewed-by: Bryan C. Mills

[release-branch.go1.11] cmd/compile: use correct store types in softfloat

2018-12-14T19:54:21Z

When using softfloat, floating point ops are rewritten to integer ops. The types of store ops were not rewritten. This may lower to floating point stores, which are problematic. This CL fixes this by rewriting the store types as well. This fixes test/fixedbugs/issue28688.go on Wasm. Softfloat mode is not used by default on Wasm, and it is not needed as Wasm spec supports floating points. But it is nice to have the correct types. Change-Id: Ib5e19e19fa9491b15c2f60320f8724cace5cefb5 Reviewed-on: https://go-review.googlesource.com/c/149965 Run-TryBot: Cherry Zhang TryBot-Result: Gobot Gobot Reviewed-by: Keith Randall (cherry picked from commit 63a3993a336714f95400e3e614064d4ae72995de) Reviewed-on: https://go-review.googlesource.com/c/151344 Reviewed-by: Filippo Valsorda