Skip to content

regexp: stack overflow (process exit) handling deeply nested regexp [1.16 backport] #51117

New issue
New issue
Closed
Closed
regexp: stack overflow (process exit) handling deeply nested regexp [1.16 backport]#51117
Labels
CherryPickApprovedUsed during the release process for point releasesFrozenDueToAgeSecurity
Milestone
Go1.16.15

Description

@gopherbot
gopherbot
opened on Feb 9, 2022

@ianlancetaylor requested issue #51112 to be considered for backport to the next 1.16 minor release.

@gopherbot Please open backport issues.

Limit regexp recursion to avoid crashing on deeply nested regexp. Per issue description, this should be backported.

Activity

  1. gopherbot
    added
    CherryPickCandidateUsed during the release process for point releases
    on Feb 9, 2022
  2. gopherbot
    added this to the Go1.16.15 milestone on Feb 9, 2022

  3. gopherbot commented on Feb 10, 2022

    @gopherbot
    gopherbot
    on Feb 10, 2022
    ContributorAuthor

    Change https://go.dev/cl/384855 mentions this issue: [release-branch.go1.16] regexp/syntax: reject very deeply nested regexps in Parse

  4. FiloSottile
    added
    Security
    on Feb 10, 2022
  5. dmitshur
    added
    CherryPickApprovedUsed during the release process for point releases
    and removed
    CherryPickCandidateUsed during the release process for point releases
    on Feb 16, 2022

  6. gopherbot commented on Feb 17, 2022

    @gopherbot
    gopherbot
    on Feb 17, 2022
    ContributorAuthor

    Closed by merging 2b65cde to release-branch.go1.16.

  7. gopherbot
    closed this as completedon Feb 17, 2022
  8. gopherbot
    added a commit that references this issue on Feb 17, 2022

    [release-branch.go1.16] regexp/syntax: reject very deeply nested rege…

    2b65cde
  9. danbudris
    added a commit that references this issue on Sep 14, 2022

    [release-branch.go1.16] regexp/syntax: reject very deeply nested rege…

    e88851b
  10. rcrozean
    added 2 commits that reference this issue on Oct 5, 2022

    regexp/syntax: reject very deeply nested regexps in Parse

    e282c4a

    regexp/syntax: reject very deeply nested regexps in Parse

    a6d502f
  11. golang
    locked and limited conversation to collaborators on Feb 17, 2023
  12. gopherbot
    added
    FrozenDueToAge
    on Feb 17, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    CherryPickApprovedUsed during the release process for point releasesFrozenDueToAgeSecurity

    Type

    No type

    Projects

    No projects

      Milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions