Bump Golang to 1.9.4 - #36243
Merged
Merged
Conversation
This fixes a vulnerability in `go get` (CVE-2018-6574, http://golang.org/issue/23672), but shouldn't really affect our code, but it's good to keep in sync. Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
Member
Author
|
ping @jhowardmsft @johnstep looks like the fix in Golang actually broke our Windows build (see the patch: golang/go@867fb18) |
Member
Author
|
Looks like this was added in fa82c0a (#22840) to work around an issue on Nano Server TP5 (see golang/go#15286) I see that fix was removed in Docker CLI (docker/cli#8), and looks like it's no longer needed, so I'll remove that code |
This workaround for golang/go#15286 was added for Nano server TP5 in fa82c0a, and should no longer be needed Due to a security fix in Go 1.9.4/1.8.7, loading the .dll is no longer allowed, and produces an error: .\docker_windows.go:9:3: //go:cgo_import_dynamic main.dummy CommandLineToArgvW%2 "shell32.dll" only allowed in cgo-generated code Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
thaJeztah
commented
Feb 8, 2018
| _ "github.com/docker/docker/autogen/winresources/dockerd" | ||
| ) | ||
|
|
||
| //go:cgo_import_dynamic main.dummy CommandLineToArgvW%2 "shell32.dll" |
AkihiroSuda
approved these changes
Feb 8, 2018
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This fixes a vulnerability in
go get(CVE-2018-6574, http://golang.org/issue/23672),but shouldn't really affect our code, but it's good to keep in sync.