mirror of
https://github.com/opentofu/opentofu.git
synced 2024-12-30 10:47:14 -06:00
c23a7fce4e
Go 1.17 includes a breaking change to both net.ParseIP and net.ParseCIDR functions to reject IPv4 address octets written with leading zeros. Our use of these functions as part of the various CIDR functions in the Terraform language doesn't have the same security concerns that the Go team had in evaluating this change to the standard library, and so we can't justify an exception to our v1.0 compatibility promises on the same sort of security grounds that the Go team used to justify their compatibility exception. For that reason, we'll now use our own fork of the Go library functions which has the new check disabled in order to preserve the prior behavior. We're taking this path, rather than pre-normalizing the IP address before calling into the standard library, because an additional normalization layer would be entirely new code and additional complexity, whereas this fork is relatively minor in terms of code size and avoids any significant changes to our own calls to these functions. Thanks to the Kubernetes team for their prior work on carving out a subset of the "net" package for their similar backward-compatibility concern. Our "ipaddr" package here is a lightly-modified fork of their fork, with only the comments changed to talk about Terraform instead of Kubernetes. This fork is not intended for use in any other future feature implementations, because they wouldn't be subject to the same compatibility constraints as our existing functions. We will use these forked implementations for new callers only if consistency with the behavior of the existing functions is a key requirement.
23 lines
1.3 KiB
Plaintext
23 lines
1.3 KiB
Plaintext
Additional IP Rights Grant (Patents)
|
|
|
|
"This implementation" means the copyrightable works distributed by
|
|
Google as part of the Go project.
|
|
|
|
Google hereby grants to You a perpetual, worldwide, non-exclusive,
|
|
no-charge, royalty-free, irrevocable (except as stated in this section)
|
|
patent license to make, have made, use, offer to sell, sell, import,
|
|
transfer and otherwise run, modify and propagate the contents of this
|
|
implementation of Go, where such license applies only to those patent
|
|
claims, both currently owned or controlled by Google and acquired in
|
|
the future, licensable by Google that are necessarily infringed by this
|
|
implementation of Go. This grant does not include claims that would be
|
|
infringed only as a consequence of further modification of this
|
|
implementation. If you or your agent or exclusive licensee institute or
|
|
order or agree to the institution of patent litigation against any
|
|
entity (including a cross-claim or counterclaim in a lawsuit) alleging
|
|
that this implementation of Go or any code incorporated within this
|
|
implementation of Go constitutes direct or contributory patent
|
|
infringement, or inducement of patent infringement, then any patent
|
|
rights granted to you under this License for this implementation of Go
|
|
shall terminate as of the date such litigation is filed.
|