1
0
mirror of https://github.com/golang/go synced 2024-11-23 04:00:03 -07:00
go/src
Daniel Martí 218f4572f5 text/template: make reflect.Value indirections more robust
Always shadow or modify the original parameter name. With code like:

	func index(item reflect.Value, ... {
		v := indirectInterface(item)

It was possible to incorrectly use 'item' and 'v' later in the function,
which could result in subtle bugs. This is precisely the kind of mistake
that led to #36199.

Instead, don't keep both the old and new reflect.Value variables in
scope. Always shadow or modify the original variable.

While at it, simplify the signature of 'length', to receive a
reflect.Value directly and save a few redundant lines.

Change-Id: I01416636a9d49f81246d28b91aca6413b1ba1aa5
Reviewed-on: https://go-review.googlesource.com/c/go/+/212117
Run-TryBot: Daniel Martí <mvdan@mvdan.cc>
TryBot-Result: Gobot Gobot <gobot@golang.org>
Reviewed-by: Roberto Clapis <robclap8@gmail.com>
Reviewed-by: Rob Pike <r@golang.org>
2020-02-24 09:16:18 +00:00
..
archive all: fix a number of misuses of the word "an" 2019-12-10 16:23:10 +00:00
bufio
builtin
bytes
cmd cmd/compile: consistently use OXXX for works relate to Op 2020-02-22 17:58:24 +00:00
compress all: base64-encode binaries that will cause Apple notarization to fail 2019-11-21 14:55:12 +00:00
container container/list: remove temporary variable n 2020-02-21 18:32:32 +00:00
context
crypto crypto/tls: update ExampleDial with a valid root 2020-02-21 23:20:22 +00:00
database/sql database/sql: add SetConnMaxIdleTime 2020-02-21 18:36:57 +00:00
debug all: base64-encode binaries that will cause Apple notarization to fail 2019-11-21 14:55:12 +00:00
encoding encoding/json: fix broken link to json.org 2020-02-22 17:39:09 +00:00
errors
expvar
flag
fmt
go go/types: report correct number of arguments for make() built-in calls 2020-02-24 02:36:05 +00:00
hash hash/maphash: add package-level example 2020-02-24 01:59:55 +00:00
html html: update URL in comment 2020-01-13 07:00:18 +00:00
image
index/suffixarray
internal internal/bytealg: fix riscv64 offset names 2020-02-04 23:15:01 +00:00
io io: check n in testReadAtLeast 2020-02-21 18:36:11 +00:00
log
math math/big: reintroduce pre-Go 1.14 mention in GCD docs 2020-02-05 20:54:27 +00:00
mime
net net/http/pprof: set content type for /debug/pprof 2020-02-21 19:28:40 +00:00
os Revert "os: handle long path in RemoveAll for windows" 2020-01-13 23:35:18 +00:00
path path: minor changes to improve documentation for Join 2019-11-20 20:51:13 +00:00
plugin
reflect reflect: correct riscv64 assembly 2020-01-19 15:28:32 +00:00
regexp
runtime time: add Ticker.Reset 2020-02-24 01:50:28 +00:00
sort
strconv strconv: stop describing Unicode graphic characters as non-ASCII 2020-01-26 20:38:34 +00:00
strings strings: update Join parameter name for clarity 2020-01-15 04:21:28 +00:00
sync sync: deflake TestWaitGroupMisuse3 2019-12-06 05:12:15 +00:00
syscall syscall: use dup3 in forkAndExecInChild1 if available 2020-02-24 08:31:48 +00:00
testdata
testing testing: change benchmark example function 2020-02-24 01:25:54 +00:00
text text/template: make reflect.Value indirections more robust 2020-02-24 09:16:18 +00:00
time time: add Ticker.Reset 2020-02-24 01:50:28 +00:00
unicode all: fix typo in RuneSelf, runeSelf comments 2020-01-06 02:46:02 +00:00
unsafe
vendor all: update module dependencies 2020-02-19 21:26:10 +00:00
all.bash
all.bat
all.rc
bootstrap.bash
buildall.bash
clean.bash
clean.bat
clean.rc
cmp.bash
go.mod all: update module dependencies 2020-02-19 21:26:10 +00:00
go.sum all: update module dependencies 2020-02-19 21:26:10 +00:00
iostest.bash
make.bash
make.bat
Make.dist
make.rc
race.bash
race.bat
README.vendor
run.bash
run.bat
run.rc

Vendoring in std and cmd
========================

The Go command maintains copies of external packages needed by the
standard library in the src/vendor and src/cmd/vendor directories.

In GOPATH mode, imports of vendored packages are resolved to these
directories following normal vendor directory logic
(see golang.org/s/go15vendor).

In module mode, std and cmd are modules (defined in src/go.mod and
src/cmd/go.mod). When a package outside std or cmd is imported
by a package inside std or cmd, the import path is interpreted
as if it had a "vendor/" prefix. For example, within "crypto/tls",
an import of "golang.org/x/crypto/cryptobyte" resolves to
"vendor/golang.org/x/crypto/cryptobyte". When a package with the
same path is imported from a package outside std or cmd, it will
be resolved normally. Consequently, a binary may be built with two
copies of a package at different versions if the package is
imported normally and vendored by the standard library.

Vendored packages are internally renamed with a "vendor/" prefix
to preserve the invariant that all packages have distinct paths.
This is necessary to avoid compiler and linker conflicts. Adding
a "vendor/" prefix also maintains the invariant that standard
library packages begin with a dotless path element.

The module requirements of std and cmd do not influence version
selection in other modules. They are only considered when running
module commands like 'go get' and 'go mod vendor' from a directory
in GOROOT/src.

Maintaining vendor directories
==============================

Before updating vendor directories, ensure that module mode is enabled.
Make sure GO111MODULE=off is not set ('on' or 'auto' should work).

Requirements may be added, updated, and removed with 'go get'.
The vendor directory may be updated with 'go mod vendor'.
A typical sequence might be:

    cd src
    go get -d golang.org/x/net@latest
    go mod tidy
    go mod vendor

Use caution when passing '-u' to 'go get'. The '-u' flag updates
modules providing all transitively imported packages, not only
the module providing the target package.

Note that 'go mod vendor' only copies packages that are transitively
imported by packages in the current module. If a new package is needed,
it should be imported before running 'go mod vendor'.