go/src
Joe Tsai 5ebb374f96 archive/tar: properly parse GNU base-256 encoding
Motivation:
* Previous implementation did not detect integer overflow when
parsing a base-256 encoded field.
* Previous implementation did not treat the integer as a two's
complement value as specified by GNU.

The relevant GNU specification says:
<<<
GNU format uses two's-complement base-256 notation to store values
that do not fit into standard ustar range.
>>>

Fixes #12435

Change-Id: I4639bcffac8d12e1cb040b76bd05c9d7bc6c23a8
Reviewed-on: https://go-review.googlesource.com/17424
Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org>
Run-TryBot: Brad Fitzpatrick <bradfitz@golang.org>
TryBot-Result: Gobot Gobot <gobot@golang.org>
2015-12-04 22:38:15 +00:00
..
archive archive/tar: properly parse GNU base-256 encoding 2015-12-04 22:38:15 +00:00
bufio bufio: clarify Read docs 2015-12-01 20:05:25 +00:00
builtin
bytes
cmd cmd/compile: fix live variable reuse in orderstmt 2015-12-03 21:29:22 +00:00
compress compress/bzip2/testdata: make Mark.Twain-Tom.Sawyer.txt free 2015-12-02 02:40:38 +00:00
container
crypto crypto/x509: introduce ErrInsecureAlgorithm for insecure algorithms 2015-12-03 20:02:09 +00:00
database/sql database/sql: Add DB.SetConnMaxLifetime 2015-12-02 17:38:31 +00:00
debug debug/elf: transparently decompress compressed sections 2015-12-03 20:53:11 +00:00
encoding encoding/json: streamline, unexport valid Number checking 2015-12-04 16:18:57 +00:00
errors
expvar
flag
fmt internal/race: add package 2015-11-26 16:50:31 +00:00
go go/ast: remove many blank lines in SortImports 2015-12-04 20:01:51 +00:00
hash hash/crc32: add noescape tags to assembly functions 2015-11-25 15:01:10 +00:00
html text/template,html/template: correct comment in DefinedTemplates 2015-11-24 21:52:36 +00:00
image
index/suffixarray
internal internal/race: add package 2015-11-26 16:50:31 +00:00
io io/ioutil: add examples to functions 2015-11-30 19:47:18 +00:00
log
math math/rand: add a comment for the i=0 iteration 2015-11-15 08:21:29 +00:00
mime mime: let FormatMediaType format slash-less media types, to mirror ParseMediaType. 2015-12-01 16:29:28 +00:00
net net/http: Connection:close test is h1 specific 2015-12-04 21:52:31 +00:00
os os: be more specific on what flags are used for 2015-12-03 16:27:11 +00:00
path path: fix typo 2015-11-28 05:54:25 +00:00
reflect reflect: mark mapassign as noescape 2015-11-19 21:35:58 +00:00
regexp regexp/syntax: fix handling of \Q...\E 2015-12-01 22:45:12 +00:00
runtime runtime: fix sanity check in stackBarrier 2015-12-03 03:53:35 +00:00
sort sort: improve average quicksort performance 2015-12-04 20:41:47 +00:00
strconv
strings
sync internal/race: add package 2015-11-26 16:50:31 +00:00
syscall internal/race: add package 2015-11-26 16:50:31 +00:00
testing testing: document that T and B are safe for concurrent calls 2015-12-01 22:01:26 +00:00
text text/template,html/template: correct comment in DefinedTemplates 2015-11-24 21:52:36 +00:00
time time: fix handling of -07, handle Z07 2015-12-02 01:35:09 +00:00
unicode unicode/utf8: add test for FullRune 2015-12-01 10:39:06 +00:00
unsafe
vendor/golang.org/x/net/http2/hpack
Make.dist
all.bash
all.bat
all.rc
androidtest.bash
bootstrap.bash
buildall.bash
clean.bash
clean.bat
clean.rc
iostest.bash
make.bash
make.bat
make.rc
nacltest.bash
race.bash
race.bat
run.bash
run.bat
run.rc