From e449b5705b4cffc29e9f24f6d24386d64dbd5dbb Mon Sep 17 00:00:00 2001 From: Rob Pike Date: Mon, 6 Apr 2015 11:39:36 -0700 Subject: encoding/gob: change panic into error for corrupt input decBuffer.Drop is called using data provided by the user, don't panic if it's bogus. Fixes #10272. Change-Id: I913ae9c3c45cef509f2b8eb02d1efa87fbd52afa Reviewed-on: https://go-review.googlesource.com/8496 Reviewed-by: Brad Fitzpatrick --- src/encoding/gob/encoder_test.go | 14 ++++++++++++++ 1 file changed, 14 insertions(+) (limited to 'src/encoding/gob/encoder_test.go') diff --git a/src/encoding/gob/encoder_test.go b/src/encoding/gob/encoder_test.go index 4af7195209..7607b17dee 100644 --- a/src/encoding/gob/encoder_test.go +++ b/src/encoding/gob/encoder_test.go @@ -954,3 +954,17 @@ func TestErrorForHugeSlice(t *testing.T) { t.Fatalf("decode: expected slice too big error, got %s", err.Error()) } } + +// Don't crash, just give error with corrupted length. +// Issue 10270. +func TestErrorBadDrop(t *testing.T) { + data := []byte{0x05, 0x10, 0x00, 0x28, 0x55, 0x7b, 0x02, 0x02, 0x7f, 0x83, 0x02} + d := NewDecoder(bytes.NewReader(data)) + err := d.Decode(nil) + if err == nil { + t.Fatal("decode: no error") + } + if !strings.Contains(err.Error(), "interface encoding") { + t.Fatalf("decode: expected interface encoding error, got %s", err.Error()) + } +} -- cgit v1.3