Update go117 to 1.17.2.

This minor release includes a security fix according to the new security policy.

When invoking functions from WASM modules, built using GOARCH=wasm GOOS=js,
passing very large arguments can cause portions of the module to be overwritten
with data from the arguments.

If using wasm_exec.js to execute WASM modules, users will need to replace their
copy (as described in https://golang.org/wiki/WebAssembly#getting-started)
after rebuilding any modules.

This is issue 48797 and CVE-2021-38297. Thanks to Ben Lubar for reporting this
issue.
This commit is contained in:
bsiegert 2021-10-08 14:47:44 +00:00
parent 3584b73efb
commit 6a1e80064c
2 changed files with 7 additions and 6 deletions

View file

@ -1,4 +1,4 @@
# $NetBSD: version.mk,v 1.130 2021/10/08 14:21:44 bsiegert Exp $
# $NetBSD: version.mk,v 1.131 2021/10/08 14:47:44 bsiegert Exp $
#
# If bsd.prefs.mk is included before go-package.mk in a package, then this
@ -6,7 +6,7 @@
#
.include "go-vars.mk"
GO117_VERSION= 1.17.1
GO117_VERSION= 1.17.2
GO116_VERSION= 1.16.9
GO110_VERSION= 1.10.8
GO19_VERSION= 1.9.7

View file

@ -1,8 +1,9 @@
$NetBSD: distinfo,v 1.6 2021/10/07 14:20:55 nia Exp $
$NetBSD: distinfo,v 1.7 2021/10/08 14:47:44 bsiegert Exp $
RMD160 (go1.17.1.src.tar.gz) = 6819b27b34bdf07ffe3334e4cdb6c80e504204d0
SHA512 (go1.17.1.src.tar.gz) = 23d4e003651204c5bcc5cf41437134e07a3fe3c188eb129f2d6366a7445a7919d6a7319c57483e91b3415fd28aa55df8d58eec398434f20ce6accd587925a14b
Size (go1.17.1.src.tar.gz) = 22181735 bytes
SHA1 (go1.17.2.src.tar.gz) = b78350fa6e4617c1eac66dff656eda8df0a13c1f
RMD160 (go1.17.2.src.tar.gz) = 746baea495791be0e9f4ed6a162cc4466d4ce4cd
SHA512 (go1.17.2.src.tar.gz) = 167220293e02d6994b5cdee5909cbdbe66f692619baeb6ff9ee0d56660eb39cfd9eac2ac510f113d5222dadd5858fd6276bd961365ca42b42c07af5d24d48107
Size (go1.17.2.src.tar.gz) = 22182111 bytes
SHA1 (patch-misc_ios_clangwrap.sh) = 0a06403609cb7bce2e6f65444fd322f486761afe
SHA1 (patch-src_cmd_dist_util.go) = 2d9c2f59e27672d56f5f1a0e3f9d5101a05546a7
SHA1 (patch-src_crypto_x509_root__bsd.go) = 27636e0d8c121ccec6c46a3a82cd0e0469473a6e