[go] net/mail: fix quadratic consumePhrase behavior

0 views
Skip to first unread message

Neal Patel (Gerrit)

unread,
Apr 28, 2026, 8:51:57 PM (2 days ago) Apr 28
to goph...@pubsubhelper.golang.org, golang-...@googlegroups.com, Nicholas Husin, golang...@luci-project-accounts.iam.gserviceaccount.com, Nicholas Husin, Roland Shoemaker, golang-co...@googlegroups.com

Neal Patel submitted the change

Unreviewed changes

2 is the latest approved patch-set.
No files were changed between the latest approved patch-set and the submitted one.

Change information

Commit message:
net/mail: fix quadratic consumePhrase behavior

Updates #78987
Fixes CVE-2026-42499
Change-Id: I8438e5dee7e6433573d4161baf8fb2151e7fbc2f
Reviewed-by: Nicholas Husin <hu...@google.com>
Reviewed-by: Nicholas Husin <n...@golang.org>
Files:
  • M src/net/mail/message.go
  • M src/net/mail/message_test.go
Change size: S
Delta: 2 files changed, 28 insertions(+), 6 deletions(-)
Branch: refs/heads/master
Submit Requirements:
Open in Gerrit
Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. DiffyGerrit
Gerrit-MessageType: merged
Gerrit-Project: go
Gerrit-Branch: master
Gerrit-Change-Id: I8438e5dee7e6433573d4161baf8fb2151e7fbc2f
Gerrit-Change-Number: 771520
Gerrit-PatchSet: 4
Gerrit-Owner: Neal Patel <neal...@google.com>
Gerrit-Reviewer: Neal Patel <neal...@google.com>
Gerrit-Reviewer: Nicholas Husin <hu...@google.com>
Gerrit-Reviewer: Nicholas Husin <n...@golang.org>
Gerrit-CC: Roland Shoemaker <rol...@golang.org>
open
diffy
satisfied_requirement

Gopher Robot (Gerrit)

unread,
Apr 29, 2026, 6:04:17 PM (19 hours ago) Apr 29
to Neal Patel, goph...@pubsubhelper.golang.org, golang-...@googlegroups.com, golang...@luci-project-accounts.iam.gserviceaccount.com, Michael Pratt, Nicholas Husin, Nicholas Husin, golang-co...@googlegroups.com

Gopher Robot submitted the change

Change information

Commit message:
[release-branch.go1.26] net/mail: fix quadratic consumePhrase behavior

Updates #78987
Fixes #79004

Fixes CVE-2026-42499

Change-Id: I8438e5dee7e6433573d4161baf8fb2151e7fbc2f
Reviewed-on: https://go-review.googlesource.com/c/go/+/771520
Reviewed-by: Nicholas Husin <hu...@google.com>
Reviewed-by: Nicholas Husin <n...@golang.org>
LUCI-TryBot-Result: golang...@luci-project-accounts.iam.gserviceaccount.com <golang...@luci-project-accounts.iam.gserviceaccount.com>
(cherry picked from commit 2c59389fcc5194aeae742fb413e55b656c22343f)
Reviewed-on: https://go-review.googlesource.com/c/go/+/772121
Auto-Submit: Michael Pratt <mpr...@google.com>
Files:
  • M src/net/mail/message.go
  • M src/net/mail/message_test.go
Change size: S
Delta: 2 files changed, 28 insertions(+), 6 deletions(-)
Branch: refs/heads/release-branch.go1.26
Submit Requirements:
Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. DiffyGerrit
Gerrit-MessageType: merged
Gerrit-Project: go
Gerrit-Branch: release-branch.go1.26
Gerrit-Change-Id: I8438e5dee7e6433573d4161baf8fb2151e7fbc2f
Gerrit-Change-Number: 772121
Gerrit-PatchSet: 3
Gerrit-Owner: Neal Patel <neal...@google.com>
Gerrit-Reviewer: Gopher Robot <go...@golang.org>
Gerrit-Reviewer: Michael Pratt <mpr...@google.com>
open
diffy
satisfied_requirement

Gopher Robot (Gerrit)

unread,
Apr 29, 2026, 6:56:49 PM (18 hours ago) Apr 29
to Neal Patel, goph...@pubsubhelper.golang.org, golang-...@googlegroups.com, golang...@luci-project-accounts.iam.gserviceaccount.com, Michael Pratt, Nicholas Husin, Nicholas Husin, golang-co...@googlegroups.com

Gopher Robot submitted the change

Change information

Commit message:
[release-branch.go1.25] net/mail: fix quadratic consumePhrase behavior

Updates #78987
Fixes #79003

Fixes CVE-2026-42499

Change-Id: I8438e5dee7e6433573d4161baf8fb2151e7fbc2f
Reviewed-on: https://go-review.googlesource.com/c/go/+/771520
Reviewed-by: Nicholas Husin <hu...@google.com>
Reviewed-by: Nicholas Husin <n...@golang.org>
LUCI-TryBot-Result: golang...@luci-project-accounts.iam.gserviceaccount.com <golang...@luci-project-accounts.iam.gserviceaccount.com>
(cherry picked from commit 2c59389fcc5194aeae742fb413e55b656c22343f)
Files:
  • M src/net/mail/message.go
  • M src/net/mail/message_test.go
Change size: S
Delta: 2 files changed, 28 insertions(+), 6 deletions(-)
Branch: refs/heads/release-branch.go1.25
Submit Requirements:
Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. DiffyGerrit
Gerrit-MessageType: merged
Gerrit-Project: go
Gerrit-Branch: release-branch.go1.25
Gerrit-Change-Id: I8438e5dee7e6433573d4161baf8fb2151e7fbc2f
Gerrit-Change-Number: 772120
open
diffy
satisfied_requirement
Reply all
Reply to author
Forward
0 new messages