Skip to content

cmd/go: allow flags in CGO_LDFLAGS environment variable not in security allowlist [1.14 backport] #42566

Closed

Description

@gopherbot

@ianlancetaylor requested issue #42565 to be considered for backport to the next 1.14 minor release.

@gopherbot Please open backport issues.

This is a usability regression introduced by the security fix for #42556. The security fix was applied to all release branches, and we should follow up with a fix for this usability regression.

Activity

  1. added this to the Go1.14.13 milestone on Nov 12, 2020
  2. gopherbot commented on Nov 14, 2020

    @gopherbot
    ContributorAuthor

    Change https://golang.org/cl/270080 mentions this issue: [release-branch.go1.14] cmd/go: permit CGO_LDFLAGS to appear in //go:ldflag

  3. gopherbot commented on Nov 16, 2020

    @gopherbot
    ContributorAuthor

    Closed by merging 7177852 to release-branch.go1.14.

  4. added a commit that references this issue on Nov 16, 2020
    7177852
  5. locked and limited conversation to collaborators on Dec 3, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

      Milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions