go, branch go1.21.0

[release-branch.go1.21] go1.21.0

2023-08-08T15:00:52Z

Change-Id: Iffac2ce43cd3a48ba420594adc3eab5aa9bcf113 Reviewed-on: https://go-review.googlesource.com/c/go/+/517055 Auto-Submit: Gopher Robot Reviewed-by: David Chase TryBot-Result: Gopher Robot Reviewed-by: Michael Knyszek Run-TryBot: Gopher Robot Run-TryBot: Michael Knyszek Auto-Submit: Michael Knyszek

[release-branch.go1.21] Revert "net/http: use Copy in ServeContent if CopyN not needed"

2023-08-04T16:24:02Z

This reverts CL 446276. Reason for revert: Causing surprising performance regression. Fixes #61530 Change-Id: Ic970f2e05d875b606ce274ea621f7e4c8c337481 Reviewed-on: https://go-review.googlesource.com/c/go/+/512615 Run-TryBot: Damien Neil Reviewed-by: Bryan Mills TryBot-Result: Gopher Robot (cherry picked from commit df0a1297899aff1c46b66523e75aa12b0ff5049f) Reviewed-on: https://go-review.googlesource.com/c/go/+/515795 Run-TryBot: Ian Lance Taylor Reviewed-by: David Chase Reviewed-by: Damien Neil

[release-branch.go1.21] spec: remove unnecessary sentence

2023-08-03T23:35:21Z

Change-Id: I06345199ff16c80be83c345d734caef1714ec089 Reviewed-on: https://go-review.googlesource.com/c/go/+/515338 TryBot-Bypass: Robert Griesemer Reviewed-by: Ian Lance Taylor Reviewed-by: Robert Griesemer Auto-Submit: Robert Griesemer Reviewed-on: https://go-review.googlesource.com/c/go/+/515715

[release-branch.go1.21] runtime/internal: switch GOWASIRUNTIME default

2023-08-03T22:16:40Z

CL 513235 switched the default wasip1 runtime in the misc/wasm executable script, but it missed this use of the GOWASIRUNTIME environment variable. Update this instance to make the default runtime choice consistent. Change-Id: Iff7f96231422747a38d65d13a940f6e9d04d835d Reviewed-on: https://go-review.googlesource.com/c/go/+/515116 Reviewed-by: David Chase Reviewed-by: Dmitri Shuralyov Auto-Submit: Johan Brandhorst-Satzkorn TryBot-Result: Gopher Robot Reviewed-by: Dmitri Shuralyov Run-TryBot: Johan Brandhorst-Satzkorn

[release-branch.go1.21] crypto/tls: change SendSessionTicket to take an options struct

2023-08-02T17:43:27Z

To allow for future evolution of the API, make QUICConn.SendSessionTicket take a QUICSessionTicketOptions rather than a single bool. For #60107 Change-Id: I798fd0feec5c7581e3c3574e2de99611c81df47f Reviewed-on: https://go-review.googlesource.com/c/go/+/514997 Reviewed-by: Roland Shoemaker Run-TryBot: Damien Neil TryBot-Result: Gopher Robot Reviewed-by: Marten Seemann (cherry picked from commit a915b999c915eb7827396013bcb334747863e66e) Reviewed-on: https://go-review.googlesource.com/c/go/+/515335 Auto-Submit: Damien Neil

[release-branch.go1.21] cmd/link: use symbol-targeted relocation for initializers on Mach-O

2023-08-02T17:38:41Z

Apple's new linker, ld-prime from Xcode 15 beta, when handling initializers in __mod_init_func, drops the offset in the data, resolving the relocation to the beginning of the section. The latest version of ld-prime rejects non-zero addend. We need to use symbol-targeted "external" relocations, so that it doesn't need an addend and can be resolved correctly. This also works fine with ld64. Fixes #60694. For #61229. Change-Id: Ida2be6aa4c91bfcd142b755e2ec63aabfbbd77a6 Reviewed-on: https://go-review.googlesource.com/c/go/+/502616 Run-TryBot: Cherry Mui Reviewed-by: Than McIntosh TryBot-Result: Gopher Robot (cherry picked from commit bad9ca8a612f6fae85cfc25e07e69ed30384fc84) Reviewed-on: https://go-review.googlesource.com/c/go/+/514535

[release-branch.go1.21] cmd/go: missing name in failed command error

2023-08-02T15:53:43Z

Fixed the error reporting for an unknown command to preserve the name when displaying the error message. Fixes #61604 Change-Id: I13defb84e61265ab48ab514e9d4f1626a4a3f758 GitHub-Last-Rev: 5d2889c60ceb3f43bb63b6641ecbcca08b7cd365 GitHub-Pull-Request: golang/go#61607 Reviewed-on: https://go-review.googlesource.com/c/go/+/513555 Run-TryBot: Russ Cox Reviewed-by: David Chase Auto-Submit: Russ Cox TryBot-Result: Gopher Robot Reviewed-by: Russ Cox Reviewed-on: https://go-review.googlesource.com/c/go/+/515278 Auto-Submit: David Chase

[release-branch.go1.21] go1.21rc4

2023-08-02T13:51:49Z

Change-Id: I4a166f3d04747703f2c0b3c3f245d9cde44f3068 Reviewed-on: https://go-review.googlesource.com/c/go/+/514777 Reviewed-by: David Chase Run-TryBot: Gopher Robot Auto-Submit: Gopher Robot TryBot-Result: Gopher Robot Reviewed-by: Russ Cox

[release-branch.go1.21] crypto/tls: restrict RSA keys in certificates to <= 8192 bits

2023-08-01T21:58:27Z

Extremely large RSA keys in certificate chains can cause a client/server to expend significant CPU time verifying signatures. Limit this by restricting the size of RSA keys transmitted during handshakes to <= 8192 bits. Based on a survey of publicly trusted RSA keys, there are currently only three certificates in circulation with keys larger than this, and all three appear to be test certificates that are not actively deployed. It is possible there are larger keys in use in private PKIs, but we target the web PKI, so causing breakage here in the interests of increasing the default safety of users of crypto/tls seems reasonable. Thanks to Mateusz Poliwczak for reporting this issue. Updates #61460 Fixes CVE-2023-29409 Change-Id: Ie35038515a649199a36a12fc2c5df3af855dca6c Reviewed-on: https://team-review.git.corp.google.com/c/golang/go-private/+/1912161 Reviewed-by: Damien Neil Reviewed-by: Tatiana Bradley Run-TryBot: Roland Shoemaker (cherry picked from commit d865c715d92887361e4bd5596e19e513f27781b7) Reviewed-on: https://go-review.googlesource.com/c/go/+/515056 Run-TryBot: David Chase TryBot-Result: Gopher Robot

[release-branch.go1.21] cmd/go: make go list -m -u all not complain about missing checksums

2023-08-01T18:40:48Z

This is a band-aid of a fix for Go 1.21, to create space to work on a real fix for Go 1.22, if in fact the real fix is different. It simply disables the go.sum update check during go list -m -u. I don't have a self-contained test for the breakage. See #61605. All existing tests continue to pass. For #61605. After merging into the Go 1.21 branch we can move #61605 to the Go 1.22 milestone. Change-Id: Ib155710092003f08d2a6ce0aefa8e0270cad5a5c Reviewed-on: https://go-review.googlesource.com/c/go/+/514899 Reviewed-by: Michael Matloob Run-TryBot: Russ Cox TryBot-Result: Gopher Robot Reviewed-by: Dmitri Shuralyov Reviewed-by: Dmitri Shuralyov