Is Go vulnerable to heap inspection attacks?

[Brian]

I haven't read anything that confirms/denies the existence of this possibility.  Is it worth worrying about, and if so, what can be done to mitigate it?

[Ian Lance Taylor]

On Sun, May 7, 2023 at 3:35 AM Brian <brian...@gmail.com> wrote:
>
> I haven't read anything that confirms/denies the existence of this possibility. Is it worth worrying about, and if so, what can be done to mitigate it?

Go provides facilities that programs can use to avoid a heap
inspection attack, but in general a program that is not extremely
careful is subject to such an attack. There is an accepted proposal
to make these attacks easier to avoid, but the proposal has not been
implemented: https://go.dev/issue/21865.

Ian