1
0
mirror of https://github.com/golang/go synced 2024-11-17 08:24:43 -07:00
go/src
Damien Neil 217ed95588 path/filepath: detect Windows CONIN$ and CONOUT$ paths in IsLocal
CreateFile creates a handle to the console input or screen buffer
when opening a file named CONIN$ or CONOUT$:

https://learn.microsoft.com/en-us/windows/win32/api/fileapi/nf-fileapi-createfilea#consoles

Detect these paths as non-local.

For #56219.

Change-Id: Ib09e76a110d6ec09aef8038074b9bcbae09d00d7
Reviewed-on: https://go-review.googlesource.com/c/go/+/451657
Run-TryBot: Damien Neil <dneil@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Bryan Mills <bcmills@google.com>
2022-11-17 18:24:36 +00:00
..
archive archive/tar, archive/zip: return ErrInsecurePath for unsafe paths 2022-11-16 23:36:48 +00:00
arena
bufio
builtin
bytes
cmd go/types, types2: implement type checking of "clear" built-in 2022-11-17 17:24:51 +00:00
compress
container
context context: add APIs for writing and reading cancelation cause 2022-11-08 13:51:16 +00:00
crypto crypto/x509: reduce boring test key size 2022-11-17 17:38:47 +00:00
database/sql database/sql: add a missing period to end of sentence in Rows.Scan docs 2022-11-14 18:35:41 +00:00
debug all: fix comment typos 2022-11-05 21:02:45 +00:00
embed
encoding encoding/xml: error when more than one colon in qualified names 2022-11-09 22:56:44 +00:00
errors
expvar expvar: convert f to atomic type 2022-11-10 05:17:55 +00:00
flag
fmt
go go/types, types2: implement type checking of "clear" built-in 2022-11-17 17:24:51 +00:00
hash
html
image
index/suffixarray
internal go/types, types2: implement type checking of "clear" built-in 2022-11-17 17:24:51 +00:00
io
log
math math/rand: deprecate Seed 2022-11-16 21:21:22 +00:00
mime
net net: change resolverConfig.dnsConfig to an atomic.Pointer 2022-11-17 00:13:03 +00:00
os os: use testenv.Command instead of exec.Command in tests 2022-11-17 16:24:19 +00:00
path path/filepath: detect Windows CONIN$ and CONOUT$ paths in IsLocal 2022-11-17 18:24:36 +00:00
plugin
reflect all: add missing copyright header 2022-11-09 14:05:53 +00:00
regexp
runtime runtime/race: do not use cgo on macOS 2022-11-16 21:38:55 +00:00
sort
strconv
strings
sync sync/atomic: allow linked list of atomic pointers again 2022-11-15 18:14:39 +00:00
syscall os,syscall: File.Stat to use file handle for directories on Windows 2022-11-14 19:47:59 +00:00
testdata
testing testing: in TestRacyOutput, ensure that the Run calls complete before cleanup 2022-11-16 17:22:19 +00:00
text all: fix function names in comments 2022-11-04 22:36:12 +00:00
time time: avoid creating a parse error from the next chunk of the value 2022-11-17 15:49:25 +00:00
unicode
unsafe unsafe: add docs for SliceData, String, and StringData 2022-11-09 22:11:13 +00:00
vendor cmd: update vendored golang.org/x/tools for loopclosure improvements 2022-11-15 00:26:58 +00:00
all.bash
all.bat
all.rc
bootstrap.bash
buildall.bash
clean.bash
clean.bat
clean.rc
cmp.bash
go.mod cmd: update vendored golang.org/x/tools for loopclosure improvements 2022-11-15 00:26:58 +00:00
go.sum cmd: update vendored golang.org/x/tools for loopclosure improvements 2022-11-15 00:26:58 +00:00
make.bash
make.bat
Make.dist
make.rc
race.bash
race.bat
README.vendor
run.bash
run.bat
run.rc

Vendoring in std and cmd
========================

The Go command maintains copies of external packages needed by the
standard library in the src/vendor and src/cmd/vendor directories.

In GOPATH mode, imports of vendored packages are resolved to these
directories following normal vendor directory logic
(see golang.org/s/go15vendor).

In module mode, std and cmd are modules (defined in src/go.mod and
src/cmd/go.mod). When a package outside std or cmd is imported
by a package inside std or cmd, the import path is interpreted
as if it had a "vendor/" prefix. For example, within "crypto/tls",
an import of "golang.org/x/crypto/cryptobyte" resolves to
"vendor/golang.org/x/crypto/cryptobyte". When a package with the
same path is imported from a package outside std or cmd, it will
be resolved normally. Consequently, a binary may be built with two
copies of a package at different versions if the package is
imported normally and vendored by the standard library.

Vendored packages are internally renamed with a "vendor/" prefix
to preserve the invariant that all packages have distinct paths.
This is necessary to avoid compiler and linker conflicts. Adding
a "vendor/" prefix also maintains the invariant that standard
library packages begin with a dotless path element.

The module requirements of std and cmd do not influence version
selection in other modules. They are only considered when running
module commands like 'go get' and 'go mod vendor' from a directory
in GOROOT/src.

Maintaining vendor directories
==============================

Before updating vendor directories, ensure that module mode is enabled.
Make sure GO111MODULE=off is not set ('on' or 'auto' should work).

Requirements may be added, updated, and removed with 'go get'.
The vendor directory may be updated with 'go mod vendor'.
A typical sequence might be:

    cd src
    go get -d golang.org/x/net@latest
    go mod tidy
    go mod vendor

Use caution when passing '-u' to 'go get'. The '-u' flag updates
modules providing all transitively imported packages, not only
the module providing the target package.

Note that 'go mod vendor' only copies packages that are transitively
imported by packages in the current module. If a new package is needed,
it should be imported before running 'go mod vendor'.