go/src/math/big
Katie Hockman 84150d0af1 [release-branch.go1.15-security] math/big: fix shift for recursive division
The previous s value could cause a crash
for certain inputs.

Will check in tests and documentation improvements later.

Thanks to the Go Ethereum team and the OSS-Fuzz project for reporting this.
Thanks to Rémy Oudompheng and Robert Griesemer for their help
developing and validating the fix.

Fixes CVE-2020-28362

Change-Id: Ibbf455c4436bcdb07c84a34fa6551fb3422356d3
Reviewed-on: https://team-review.git.corp.google.com/c/golang/go-private/+/899974
Reviewed-by: Roland Shoemaker <bracewell@google.com>
Reviewed-by: Filippo Valsorda <valsorda@google.com>
(cherry picked from commit 28015462c2a83239543dc2bef651e9a5f234b633)
Reviewed-on: https://team-review.git.corp.google.com/c/golang/go-private/+/901065
2020-11-11 23:35:42 +00:00
..
accuracy_string.go
arith.go math/big: simplify shlVU_g and shrVU_g 2019-04-04 00:26:24 +00:00
arith_386.s all: change the old assembly style AX:CX to CX, AX 2019-04-09 00:22:03 +00:00
arith_amd64.go
arith_amd64.s all: change the old assembly style AX:CX to CX, AX 2019-04-09 00:22:03 +00:00
arith_arm.s
arith_arm64.s math/big: fix the bug in assembly implementation of shlVU on arm64 2019-05-08 01:29:00 +00:00
arith_decl.go math/big: initial vector arithmetic in riscv64 assembly 2020-02-25 16:47:02 +00:00
arith_decl_pure.go math/big: initial vector arithmetic in riscv64 assembly 2020-02-25 16:47:02 +00:00
arith_decl_s390x.go math/big: simplify hasVX checking on s390x 2020-04-27 20:20:53 +00:00
arith_mips64x.s
arith_mipsx.s
arith_ppc64x.s
arith_riscv64.s math/big: initial vector arithmetic in riscv64 assembly 2020-02-25 16:47:02 +00:00
arith_s390x.s math/big: simplify hasVX checking on s390x 2020-04-27 20:20:53 +00:00
arith_s390x_test.go math/big: rewrite subVW to use fast path on s390x 2020-04-24 14:50:59 +00:00
arith_test.go math/big: fix the bug in assembly implementation of shlVU on arm64 2019-05-08 01:29:00 +00:00
arith_wasm.s
bits_test.go
calibrate_test.go
decimal.go
decimal_test.go
doc.go
example_rat_test.go
example_test.go
float.go math/big: document that Sqrt doesn't set Accuracy 2020-03-20 19:24:37 +00:00
float_test.go
floatconv.go math/big: don't use Float in init to help linker discard 162 KiB 2020-04-14 20:50:19 +00:00
floatconv_test.go math/big: avoid MinExp exponent wrap-around in 'x' Text format 2019-09-18 04:48:34 +00:00
floatexample_test.go
floatmarsh.go
floatmarsh_test.go all: shorten some tests 2019-05-22 12:54:00 +00:00
ftoa.go math/big: avoid MinExp exponent wrap-around in 'x' Text format 2019-09-18 04:48:34 +00:00
gcd_test.go
hilbert_test.go
int.go math/big: add (*Int).FillBytes 2020-05-05 00:36:44 +00:00
int_test.go math/big: add (*Int).FillBytes 2020-05-05 00:36:44 +00:00
intconv.go math/big: document Int.String 2019-05-03 03:25:26 +00:00
intconv_test.go math/big: add support for underscores '_' in numbers 2019-03-12 22:58:58 +00:00
intmarsh.go
intmarsh_test.go
link_test.go testing: clean up remaining TempDir issues from CL 231958 2020-05-19 19:55:14 +00:00
nat.go [release-branch.go1.15-security] math/big: fix shift for recursive division 2020-11-11 23:35:42 +00:00
nat_test.go math/big: correct off-by-one access in divBasic 2020-04-08 20:53:58 +00:00
natconv.go math/big: add support for underscores '_' in numbers 2019-03-12 22:58:58 +00:00
natconv_test.go all: shorten some tests 2019-05-22 12:54:00 +00:00
prime.go math/big: fix incorrect comment variable reference 2018-12-26 05:21:41 +00:00
prime_test.go all: shorten some tests 2019-05-22 12:54:00 +00:00
rat.go math/big: make Rat.Denom side-effect free 2019-10-24 03:34:24 +00:00
rat_test.go math/big: make Rat.Denom side-effect free 2019-10-24 03:34:24 +00:00
ratconv.go math/big: fix a duplicate "the" in a comment 2019-09-02 11:42:47 +00:00
ratconv_test.go math/big: don't clobber shared underlying array in pow5 computation 2019-04-15 17:48:21 +00:00
ratmarsh.go
ratmarsh_test.go
roundingmode_string.go
sqrt.go math/big: remove Direct Sqrt computation 2020-04-15 16:37:53 +00:00
sqrt_test.go all: shorten some tests 2019-05-22 12:54:00 +00:00