diff options
| author | Damien Neil <dneil@google.com> | 2025-05-13 15:35:19 -0700 |
|---|---|---|
| committer | Gopher Robot <gobot@golang.org> | 2025-05-14 12:32:33 -0700 |
| commit | adcad7bea9f6933a219c7b05d8173cf8a4586092 (patch) | |
| tree | 01fdd799ed3f1ce3f38c5368b02f2e366e701b54 /src/internal/pkgbits | |
| parent | 14fc54fc5735163abf7694b4efa2b7998c6696e2 (diff) | |
| download | go-adcad7bea9f6933a219c7b05d8173cf8a4586092.tar.xz | |
os: don't follow symlinks on Windows when O_CREATE|O_EXCL
Match standard Unix behavior: Symlinks are not followed when
O_CREATE|O_EXCL is passed to open.
Thanks to Junyoung Park and Dong-uk Kim of KAIST Hacking Lab
for discovering this issue.
Fixes #73702
Fixes CVE-2025-0913
Change-Id: Ieb46a6780c5e9a6090b09cd34290f04a8e3b0ca5
Reviewed-on: https://go-review.googlesource.com/c/go/+/672396
Auto-Submit: Damien Neil <dneil@google.com>
LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
Reviewed-by: Alan Donovan <adonovan@google.com>
Diffstat (limited to 'src/internal/pkgbits')
0 files changed, 0 insertions, 0 deletions