Re:This shouldn't have happened: A vulnerability postmortem
by foobiekr on Wednesday December 01, 2021 @03:05PM
(#29408486)
Idiomatic go would have you using bounded readers though.
[ Parent
| on HN ]
Re:This shouldn't have happened: A vulnerability postmortem
by JulianMorrison on Wednesday December 01, 2021 @03:08PM
(#29408524)
Either you read data into a fixed byte[] and stop at its capacity, or you read data into an unbounded byte[] by using append, and Go looks after the capacity, either way, you can't go off the end.