Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

crypto/cipher: NewGCMWithNonceSize allows zero-length nonce [1.12 backport] #37418

Closed
dmitshur opened this issue Feb 24, 2020 · 2 comments
Closed

Comments

@dmitshur
Copy link
Contributor

@networkimprov requested issue #37118 to be considered for backport to the next 1.12 minor release.

@gopherbot ple​ase open backport, at suggestion of @FiloSottile.

@dmitshur dmitshur added the CherryPickCandidate Used during the release process for point releases label Feb 24, 2020
@dmitshur dmitshur added this to the Go1.12.18 milestone Feb 24, 2020
@dmitshur dmitshur added CherryPickApproved Used during the release process for point releases and removed CherryPickCandidate Used during the release process for point releases labels Feb 24, 2020
@dmitshur
Copy link
Contributor Author

Approving this backport. It's a small security hardening fix.

@dmitshur
Copy link
Contributor Author

Go 1.14 has been released, so there will not be more Go 1.12.x releases per the release policy. I'll close this issue so that it doesn't get in the way when searching for other issues in CherryPickApproved state.

@dmitshur dmitshur removed the CherryPickApproved Used during the release process for point releases label Feb 26, 2020
@golang golang locked and limited conversation to collaborators Feb 25, 2021
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

2 participants