mirror of https://github.com/grafana/loki
**What this PR does / why we need it**: Updates the `golang.org/x/crypto` dependency to its latest version `v0.18.0` **Which issue(s) this PR fixes**: Resolves [CVE-2023-48795](https://github.com/advisories/GHSA-45x7-px36-x8w8) Medium golang.org/x/crypto Go https://github.com/grafana/support-escalations/issues/8977 **Special notes for your reviewer**: **Checklist** - [x] Reviewed the [`CONTRIBUTING.md`](https://github.com/grafana/loki/blob/main/CONTRIBUTING.md) guide (**required**) - [ ] Documentation added - [ ] Tests updated - [x] `CHANGELOG.md` updated - [ ] If the change is worth mentioning in the release notes, add `add-to-release-notes` label - [ ] Changes that require user attention or interaction to upgrade are documented in `docs/sources/setup/upgrade/_index.md` - [ ] For Helm chart changes bump the Helm chart version in `production/helm/loki/Chart.yaml` and update `production/helm/loki/CHANGELOG.md` and `production/helm/loki/README.md`. [Example PR](pull/11760/headd10549e3ec) - [ ] If the change is deprecating or removing a configuration option, update the `deprecated-config.yaml` and `deleted-config.yaml` files respectively in the `tools/deprecated-config-checker` directory. [Example PR](0d4416a4b0)
Poyzan
2 years ago
committed by
GitHub
parent
94f97fb52d
commit
c9a0bd2be8
@ -1,25 +0,0 @@ |
||||
// Copyright 2016 The Go Authors. All rights reserved.
|
||||
// Use of this source code is governed by a BSD-style
|
||||
// license that can be found in the LICENSE file.
|
||||
|
||||
//go:build !go1.7 && amd64 && gc && !purego
|
||||
// +build !go1.7,amd64,gc,!purego
|
||||
|
||||
package blake2b |
||||
|
||||
import "golang.org/x/sys/cpu" |
||||
|
||||
func init() { |
||||
useSSE4 = cpu.X86.HasSSE41 |
||||
} |
||||
|
||||
//go:noescape
|
||||
func hashBlocksSSE4(h *[8]uint64, c *[2]uint64, flag uint64, blocks []byte) |
||||
|
||||
func hashBlocks(h *[8]uint64, c *[2]uint64, flag uint64, blocks []byte) { |
||||
if useSSE4 { |
||||
hashBlocksSSE4(h, c, flag, blocks) |
||||
} else { |
||||
hashBlocksGeneric(h, c, flag, blocks) |
||||
} |
||||
} |
||||
@ -1,40 +0,0 @@ |
||||
// Copyright 2019 The Go Authors. All rights reserved.
|
||||
// Use of this source code is governed by a BSD-style
|
||||
// license that can be found in the LICENSE file.
|
||||
|
||||
//go:build !go1.13
|
||||
// +build !go1.13
|
||||
|
||||
package poly1305 |
||||
|
||||
// Generic fallbacks for the math/bits intrinsics, copied from
|
||||
// src/math/bits/bits.go. They were added in Go 1.12, but Add64 and Sum64 had
|
||||
// variable time fallbacks until Go 1.13.
|
||||
|
||||
func bitsAdd64(x, y, carry uint64) (sum, carryOut uint64) { |
||||
sum = x + y + carry |
||||
carryOut = ((x & y) | ((x | y) &^ sum)) >> 63 |
||||
return |
||||
} |
||||
|
||||
func bitsSub64(x, y, borrow uint64) (diff, borrowOut uint64) { |
||||
diff = x - y - borrow |
||||
borrowOut = ((^x & y) | (^(x ^ y) & diff)) >> 63 |
||||
return |
||||
} |
||||
|
||||
func bitsMul64(x, y uint64) (hi, lo uint64) { |
||||
const mask32 = 1<<32 - 1 |
||||
x0 := x & mask32 |
||||
x1 := x >> 32 |
||||
y0 := y & mask32 |
||||
y1 := y >> 32 |
||||
w0 := x0 * y0 |
||||
t := x1*y0 + w0>>32 |
||||
w1 := t & mask32 |
||||
w2 := t >> 32 |
||||
w1 += x0 * y1 |
||||
hi = x1*y1 + w2 + w1>>32 |
||||
lo = x * y |
||||
return |
||||
} |
||||
@ -1,22 +0,0 @@ |
||||
// Copyright 2019 The Go Authors. All rights reserved.
|
||||
// Use of this source code is governed by a BSD-style
|
||||
// license that can be found in the LICENSE file.
|
||||
|
||||
//go:build go1.13
|
||||
// +build go1.13
|
||||
|
||||
package poly1305 |
||||
|
||||
import "math/bits" |
||||
|
||||
func bitsAdd64(x, y, carry uint64) (sum, carryOut uint64) { |
||||
return bits.Add64(x, y, carry) |
||||
} |
||||
|
||||
func bitsSub64(x, y, borrow uint64) (diff, borrowOut uint64) { |
||||
return bits.Sub64(x, y, borrow) |
||||
} |
||||
|
||||
func bitsMul64(x, y uint64) (hi, lo uint64) { |
||||
return bits.Mul64(x, y) |
||||
} |
||||
Some files were not shown because too many files have changed in this diff Show More
Loading…
Reference in new issue