HIGH7.5

GO-2021-0263

Panic on invalid symbol tables in debug/macho

Quick fix

GO-2021-0263 — stdlib: upgrade to the fixed version with the command below.

go get stdlib@v1.16.10

Details

Calling File.ImportedSymbols on a loaded file which contains an invalid dynamic symbol table command can cause a panic, in particular if the encoded number of undefined symbols is larger than the number of symbols in the symbol table.

Are you affected?

Enter the version of the package you're using.

Affected packages

Go/stdlib

Introduced in: 0Fixed in: 1.16.10

Fixgo get stdlib@v1.16.10

References

https://go.dev/cl/367075[FIX]
https://go.googlesource.com/go/+/61536ec03063b4951163bd09609c86d82631fa27[FIX]
https://groups.google.com/g/golang-announce/c/0fM21h43arc[WEB]
https://go.dev/issue/48990[REPORT]