Merge pull request #101306 from joelsmith/master

Additional CVE-2021-3121 fix
This commit is contained in:
Kubernetes Prow Robot 2021-04-21 09:31:05 -07:00 committed by GitHub
commit b204b1ecdc
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -166,7 +166,7 @@ func (m *Quantity) Unmarshal(data []byte) error {
if err != nil {
return err
}
if skippy < 0 {
if (skippy < 0) || (iNdEx+skippy) < 0 {
return ErrInvalidLengthGenerated
}
if (iNdEx + skippy) > l {