-
Notifications
You must be signed in to change notification settings - Fork 2k
crypto/ssh/knownhosts: fix out-of-date documentation for checkAddr #71
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
We found a Contributor License Agreement for you (the sender of this pull request), but were unable to find agreements for all the commit author(s) or Co-authors. If you authored these, maybe you used a different email address in the git commits than was used to sign the CLA (login here to double check)? If these were authored by someone else, then they will need to sign a CLA as well, and confirm that they're okay with these being contributed to Google. |
ef200b4
to
ce92f04
Compare
ce92f04
to
9b42ada
Compare
9b42ada
to
fd7b92d
Compare
CLAs look good, thanks! |
This PR (HEAD: fd7b92d) has been imported to Gerrit for code review. Please visit https://go-review.googlesource.com/c/crypto/+/156878 to see it. Tip: You can toggle comments from me using the |
Message from Gobot Gobot: Patch Set 1: Congratulations on opening your first change. Thank you for your contribution! Next steps: Most changes in the Go project go through a few rounds of revision. This can be During May-July and Nov-Jan the Go project is in a code freeze, during which Please don’t reply on this GitHub thread. Visit golang.org/cl/156878. |
Message from Han-Wen Nienhuys: Patch Set 3: Run-TryBot+1 Code-Review+2 Please don’t reply on this GitHub thread. Visit golang.org/cl/156878. |
Message from Gobot Gobot: Patch Set 3: TryBots beginning. Status page: https://farmer.golang.org/try?commit=bc4ad573 Please don’t reply on this GitHub thread. Visit golang.org/cl/156878. |
Message from Gobot Gobot: Patch Set 3: TryBot-Result+1 TryBots are happy. Please don’t reply on this GitHub thread. Visit golang.org/cl/156878. |
Change-Id: I03e9cf1ee82b38f15232a48992bae0234bd51f1a GitHub-Last-Rev: fd7b92d GitHub-Pull-Request: #71 Reviewed-on: https://go-review.googlesource.com/c/156878 Reviewed-by: Han-Wen Nienhuys <hanwen@google.com> Run-TryBot: Han-Wen Nienhuys <hanwen@google.com> TryBot-Result: Gobot Gobot <gobot@golang.org>
This PR is being closed because golang.org/cl/156878 has been merged. |
Fix out-of-bands access panics in curve_impl.go file. Curve interface functions expected 32-byte big.Ints and panicked with buffers of different length. Because these functions are not expected to return errors, they were fixed by adding trunaction if passed arguments are bigger, and 0-filling if arguments are smaller. Same thing for MarshalType40 - if passed coordinate is of unexpected size, truncation might happen, returning bad data. Added a test trying to decrypt PGP message bundle with invalid cv25519 coordinate.
Change-Id: I03e9cf1ee82b38f15232a48992bae0234bd51f1a GitHub-Last-Rev: fd7b92d97c7b52ae00821bad099cf45ff9836cd1 GitHub-Pull-Request: golang/crypto#71 Reviewed-on: https://go-review.googlesource.com/c/156878 Reviewed-by: Han-Wen Nienhuys <hanwen@google.com> Run-TryBot: Han-Wen Nienhuys <hanwen@google.com> TryBot-Result: Gobot Gobot <gobot@golang.org>
Change-Id: I03e9cf1ee82b38f15232a48992bae0234bd51f1a GitHub-Last-Rev: fd7b92d97c7b52ae00821bad099cf45ff9836cd1 GitHub-Pull-Request: golang/crypto#71 Reviewed-on: https://go-review.googlesource.com/c/156878 Reviewed-by: Han-Wen Nienhuys <hanwen@google.com> Run-TryBot: Han-Wen Nienhuys <hanwen@google.com> TryBot-Result: Gobot Gobot <gobot@golang.org>
Change-Id: I03e9cf1ee82b38f15232a48992bae0234bd51f1a GitHub-Last-Rev: fd7b92d97c7b52ae00821bad099cf45ff9836cd1 GitHub-Pull-Request: golang/crypto#71 Reviewed-on: https://go-review.googlesource.com/c/156878 Reviewed-by: Han-Wen Nienhuys <hanwen@google.com> Run-TryBot: Han-Wen Nienhuys <hanwen@google.com> TryBot-Result: Gobot Gobot <gobot@golang.org>
…ion (golang#71) Remove quick check that detects key correctness after partial data decryption, as the check is known to expose a decryption oracle: https://eprint.iacr.org/2005/033.pdf.
Change-Id: I03e9cf1ee82b38f15232a48992bae0234bd51f1a GitHub-Last-Rev: fd7b92d97c7b52ae00821bad099cf45ff9836cd1 GitHub-Pull-Request: golang/crypto#71 Reviewed-on: https://go-review.googlesource.com/c/156878 Reviewed-by: Han-Wen Nienhuys <hanwen@google.com> Run-TryBot: Han-Wen Nienhuys <hanwen@google.com> TryBot-Result: Gobot Gobot <gobot@golang.org>
Change-Id: I03e9cf1ee82b38f15232a48992bae0234bd51f1a GitHub-Last-Rev: fd7b92d97c7b52ae00821bad099cf45ff9836cd1 GitHub-Pull-Request: golang/crypto#71 Reviewed-on: https://go-review.googlesource.com/c/156878 Reviewed-by: Han-Wen Nienhuys <hanwen@google.com> Run-TryBot: Han-Wen Nienhuys <hanwen@google.com> TryBot-Result: Gobot Gobot <gobot@golang.org>
Change-Id: I03e9cf1ee82b38f15232a48992bae0234bd51f1a GitHub-Last-Rev: fd7b92d97c7b52ae00821bad099cf45ff9836cd1 GitHub-Pull-Request: golang/crypto#71 Reviewed-on: https://go-review.googlesource.com/c/156878 Reviewed-by: Han-Wen Nienhuys <hanwen@google.com> Run-TryBot: Han-Wen Nienhuys <hanwen@google.com> TryBot-Result: Gobot Gobot <gobot@golang.org>
Change-Id: I03e9cf1ee82b38f15232a48992bae0234bd51f1a GitHub-Last-Rev: fd7b92d97c7b52ae00821bad099cf45ff9836cd1 GitHub-Pull-Request: golang/crypto#71 Reviewed-on: https://go-review.googlesource.com/c/156878 Reviewed-by: Han-Wen Nienhuys <hanwen@google.com> Run-TryBot: Han-Wen Nienhuys <hanwen@google.com> TryBot-Result: Gobot Gobot <gobot@golang.org>
Change-Id: I03e9cf1ee82b38f15232a48992bae0234bd51f1a GitHub-Last-Rev: fd7b92d GitHub-Pull-Request: golang#71 Reviewed-on: https://go-review.googlesource.com/c/156878 Reviewed-by: Han-Wen Nienhuys <hanwen@google.com> Run-TryBot: Han-Wen Nienhuys <hanwen@google.com> TryBot-Result: Gobot Gobot <gobot@golang.org>
Change-Id: I03e9cf1ee82b38f15232a48992bae0234bd51f1a GitHub-Last-Rev: fd7b92d97c7b52ae00821bad099cf45ff9836cd1 GitHub-Pull-Request: golang/crypto#71 Reviewed-on: https://go-review.googlesource.com/c/156878 Reviewed-by: Han-Wen Nienhuys <hanwen@google.com> Run-TryBot: Han-Wen Nienhuys <hanwen@google.com> TryBot-Result: Gobot Gobot <gobot@golang.org>
No description provided.