Launch Week Day 1: Announcing Security Design Review
UNKNOWN Go

Stack exhaustion in Parse in go/build/constraint

GO-2024-3107 · BIT-golang-2024-34158 · CVE-2024-34158

Published · Modified

Description

Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion.

Ready to move

Start Securing

Free, no credit card | First findings in minutes