SECURITY notice

Gioppoo · Aug 21, 2020 · 435368f · 435368f
1 parent 948d834
commit 435368f
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/nativetypes.go b/nativetypes.go
@@ -265,6 +265,10 @@ func (v *Varuint16) String() string {
 var shortVecOverflow = errors.New("short_vec: varint overflows a 16-bit integer")
 
 func readVaruint16(r io.ByteReader) (uint64, error) {
+	// This was identified https://groups.google.com/g/golang-announce/c/NyPIaucMgXo/m/GdsyQP6QAAAJ?pli=1
+	// after I copied it here.. and I think we're using the EXACT same construct.. and in our case,
+	// we don't want to read more than 3 bytes.
+	// FIXME!!!!
 	var x uint64
 	var s uint
 	for i := 0; ; i++ {