Lucene search

K
osvGoogleOSV:GO-2021-0347
HistoryMay 23, 2022 - 10:15 p.m.

Stack exhaustion when compiling deeply nested expressions in regexp

2022-05-2322:15:47
Google
osv.dev
15

7.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.1%

On 64-bit platforms, an extremely deeply nested expression can cause regexp.Compile to cause goroutine stack exhaustion, forcing the program to exit. Note this applies to very large expressions, on the order of 2MB.

CPENameOperatorVersion
stdlibge1.17.0-0
stdliblt1.16.15
stdliblt1.17.8