<p dir="auto">by <strong><a href="mailto:x41@freeshell.org">x41@freeshell.org</a></strong>:</p>
<pre class="notranslate">Exploiting #221 in a different way:
Fresh install of:

Last version of Golang
cb140bac9ab0 release.2009-11-12/release

Tested on Ubuntu 9.04 and Ubuntu 9.10
XXXX@XXXX:~/go_src/src$ uname -a
Linux XXXX 2.6.28-11-generic #42-Ubuntu SMP Fri Apr 17 01:57:59 UTC 2009
i686 GNU/Linux

Attached Valgrind report and GDB report.

Binary: 8a

go_src/src/lib9/main.c

Breakpoint 1, main (argc=0x2, argv=0xbfdd72d4) at
/home/dsdsds/go_src/src/lib9/main.c:35
35      p9main(argc, argv);
gdb&gt; list
30  extern void p9main(int, char**);
31  
32  int
33  main(int argc, char **argv)
34  {
35      p9main(argc, argv);
#######################################
              HERE
36      exits("main");
37      return 99;
              HERE
#######################################
38  }

Run it
r `python -c 'print "\x41"*99 + "\x42"'`
Just.. 99 + 1

Thanks guys!</pre>
<p dir="auto">Attachments:</p>
<ol dir="auto">
<li><a href="https://storage.googleapis.com/go-attachment/392/0/debuginfo1.tar.gz" rel="nofollow">debuginfo1.tar.gz</a> (2029 bytes)</li>
</ol>
<pre class="notranslate">Before filing a bug, please check whether it has been fixed since
the latest release: run "hg pull", "hg update default", rebuild, and
retry
what you did to
reproduce the problem.  Thanks.

What steps will reproduce the problem?
Attempt to use the http.Client using the default Transport when
hitting a server who's TLS cert hostname does not match the DNS name.

What is the expected output?
The transport will fail with an error.

What do you see instead?
Optionally allow such a connection to succeed.
(disable the check in http/transport.go:365)

Which compiler are you using (5g, 6g, 8g, gccgo)?
6g

Which operating system are you using?
Linux

Which revision are you using?  (hg identify)
99ea0887e633+ tip

Please provide any additional information below.
Suggest adding an field in either http.Transport or tls.Config like DisableHostnameCheck.</pre>