apiVersion: release-notes/v2
kind: bug-fix
area: installation
releaseNotes:
- |

// errorcheck

// Copyright 2018 The Go Authors. All rights reserved.
// Use of this source code is governed by a BSD-style
// license that can be found in the LICENSE file.

// Verify that the array is reported in correct notation.

package p

[CreateCertificateRequest] now correct supports RSA-PSS signature algorithms.

class CreateStringAttr<string values> : NativeCodeCall<
  "$_builder.getStringAttr("# values #")">;

// Get dense attr for a matrix that corrects the over counting of dividends when casting an average pool with ceil mode on in terms of average pool with it off.
def GetCorrectionMatrix: NativeCodeCall<"GetCorrectionMatrix($_builder, (*$0.begin()).getDefiningOp<mhlo::CompositeOp>())">;

	apiVersionTooOld  = "no kind \"KubeSchedulerConfiguration\" is registered for" +
		" version \"kubescheduler.config.k8s.io/v1alpha1\""

	// schedulerConfigMinimalCorrect is the minimal
	// correct scheduler config
	schedulerConfigMinimalCorrect = `
apiVersion: kubescheduler.config.k8s.io/v1
kind: KubeSchedulerConfiguration`

	// schedulerConfigDecodeErr is the scheduler config

// Trace represents an execution trace for testing.
//
// It does a little bit of work to ensure that the produced trace is valid,
// just for convenience. It mainly tracks batches and batch sizes (so they're
// trivially correct), tracks strings and stacks, and makes sure emitted string
// and stack batches are valid. That last part can be controlled by a few options.
//
// Otherwise, it performs no validation on the trace at all.
type Trace struct {

// calls UpdateNodeStatuses()
// check that asw.GetVolumesToReportAttached reports nothing left to attach
// checks that each node status.volumesAttached is of length 1 and contains the correct volume
func TestNodeStatusUpdater_UpdateNodeStatuses_TwoNodesUpdate(t *testing.T) {
	ctx := context.Background()
	logger := klog.FromContext(ctx)
	asw, fakeKubeClient, nsu := setupNodeStatusUpdate(logger, t)

    @Rule final TestNameTestDirectoryProvider temporaryFolder = new TestNameTestDirectoryProvider(getClass())

    def 'asJvmArg with default arguments assembles correct string'() {
        setup:
        agent.supportsJmx() >> true
        agent.supportsInclNoLocationClasses() >> true
        agent.jar >> temporaryFolder.file('fakeagent.jar')

Of course, the attackers would not try all this by hand, they would write a program to do it, possibly with thousands or millions of tests per second. And would get just one extra correct letter at a time.

But doing that, in some minutes or hours the attackers would have guessed the correct username and password, with the "help" of our application, just using the time taken to answer.

#### Fix it with `secrets.compare_digest()`

# Test that the correct default GOEXPERIMENT is used when cross
# building with GOENV (#46815).

# Unset variables set by the TestScript harness. Users typically won't
# explicitly configure these, and #46815 doesn't repro if they are.
env GOOS=
env GOARCH=
env GOEXPERIMENT=

env GOENV=windows-amd64
go build internal/abi

env GOENV=ios-arm64
go build internal/abi

env GOENV=linux-mips
go build internal/abi

-- windows-amd64 --