WS-2021-0119

Processes using tableflip may encounter hung goroutines in the parent process, after a failed upgrade. The problem has been fixed in v1.2.1 The Go runtime has annoying behaviour around setting and clearing ONONBLOCK: exec.Cmd.Start ends up calling os.File.Fd for any file in exec.Cmd.ExtraFiles...

Denial Of Service (DoS)

github.com/cloudflare/tableflip is vulnerable to denial of service. The vulnerability exists due to a hung goroutine in the parent process after a failed upgrade...

A failed upgrade may lead to hung goroutines

Impact Processes using tableflip may encounter hung goroutines in the parent process, after a failed upgrade. The Go runtime has annoying behaviour around setting and clearing ONONBLOCK: exec.Cmd.Start ends up calling os.File.Fd for any file in exec.Cmd.ExtraFiles. os.File.Fd disables both the us...

GHSA-GMQ2-39FF-F5QG A failed upgrade may lead to hung goroutines

Impact Processes using tableflip may encounter hung goroutines in the parent process, after a failed upgrade. The Go runtime has annoying behaviour around setting and clearing ONONBLOCK: exec.Cmd.Start ends up calling os.File.Fd for any file in exec.Cmd.ExtraFiles. os.File.Fd disables both the us...

PT-2021-24422

Name of the Vulnerable Software and Affected Versions: tableflip versions prior to 1.2.2 Description: The issue affects processes using tableflip, potentially causing hung goroutines in the parent process after a failed upgrade. This occurs due to the Go runtime's behavior with O NONBLOCK,...