News for hackers. Stuff that matters.
Re:This shouldn't have happened: A vulnerability postmortem by foobiekr on Wednesday December 01, 2021 @03:05PM (#29408486)
Idiomatic go would have you using bounded readers though.
Re:This shouldn't have happened: A vulnerability postmortem by JulianMorrison on Wednesday December 01, 2021 @03:08PM (#29408524)
Either you read data into a fixed byte[] and stop at its capacity, or you read data into an unbounded byte[] by using append, and Go looks after the capacity, either way, you can't go off the end.