go-base32 encoding is broken with no padding and an encoder to io.Writer #62
Labels
kind/bug
A bug in existing code (including security flaws)
need/author-input
Needs input from the original author
need/triage
Needs initial labeling and prioritization
For example with
b32.NewEncoder(b32.NewEncodingCI("abcdefghijklmnopqrstuvwxyz234567").WithPadding(b32.NoPadding), out)
, encodingDecentralize everything!!!
yieldbirswgzloorzgc3djpjssazlwmvzhs5dinfxgoijbeeswgzlo
instead ofbirswgzloorzgc3djpjssazlwmvzhs5dinfxgoijbee
.Note the
swgzlo
suffix, which is taken from the beginning of the encoding buffer, bytes 3 to 8.This has been fixed upstream (in the go stdlib) with golang/go@10529a0.
To be honest, I don't see the point why
go-base32
exist anymore, as the original reason for the fork was to "add option for raw encoding", which exist in the stdlib since golang/go@5f4f751Maybe
go-base32
should be retired entirely?The text was updated successfully, but these errors were encountered: