[Go 1.15] h2-bundle: fix CVE-2023-39325 (#137)

* enable mainline gating * h2-bundle: fix CVE-2023-39325 Backport of golang/net@b225e7c --------- Co-authored-by: Derek Parker <[email protected]>
golang-fips · Oct 12, 2023 · c18fcd3 · c18fcd3
1 parent 58ecfba
commit c18fcd3
Show file tree

Hide file tree

Showing 2 changed files with 93 additions and 2 deletions.
diff --git a/.github/workflows/gating.yml b/.github/workflows/gating.yml
@@ -0,0 +1,33 @@
+name: "Test Pull Request"
+
+on:
+  pull_request:
+    branches:
+      - 'main'
+      - 'go1.*-fips-release'
+      - 'go1.*-openssl-fips'
+
+# https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions
+permissions:
+  actions: none
+  checks: read
+  contents: none
+  deployments: none
+  id-token: none
+  issues: read
+  discussions: read
+  packages: none
+  pages: none
+  pull-requests: read
+  repository-projects: none
+  security-events: none
+  statuses: none
+
+jobs:
+  test_pr:
+  # Look up the images for each selected compose
+    name: "Test Pull Request"
+    uses: golang-fips/release/.github/workflows/test-ubi-centos.yml@main
+    with:
+      go_fips_ref: ${{ github.event.pull_request.head.sha }}
+      composes: "ubi7,ubi8,ubi9,c8s,c9s"
diff --git a/src/net/http/h2_bundle.go b/src/net/http/h2_bundle.go