VDB
Sign up
—

GO-2020-0024

Infinite loop in github.com/btcsuite/go-socks

Quick fix

GO-2020-0024 — github.com/btcsuite/go-socks: upgrade to the fixed version with the command below.

go get github.com/btcsuite/go-socks@v0.0.0-20130808000456-233bccbb1abe

Details

The RemoteAddr and LocalAddr methods on the returned net.Conn may call themselves, leading to an infinite loop which will crash the program due to a stack overflow.

Are you affected?

Enter the version of the package you're using.

Affected packages

Go/github.com/btcsuite/go-socks
Introduced in: 0Fixed in: 0.0.0-20130808000456-233bccbb1abe
Fixgo get github.com/btcsuite/go-socks@v0.0.0-20130808000456-233bccbb1abe
Go/github.com/btcsuitereleases/go-socks
Introduced in: 0Fixed in: 0.0.0-20130808000456-233bccbb1abe
Fixgo get github.com/btcsuitereleases/go-socks@v0.0.0-20130808000456-233bccbb1abe

References