kind: Deployment
metadata:
  name: traffic
spec:
  replicas: 7
  selector:
    matchLabels:
      app: traffic
  template:
    metadata:
      annotations:
        traffic.sidecar.istio.io/includeInboundPorts: "bad"
      labels:
        app: traffic
    spec:
      containers:
        - name: traffic
          image: "fake.docker.io/google-samples/traffic-go-gke:1.0"
          ports:
            - name: http

Peter Niederwieser <******@****.***> 1329340464 +0100

					if fn != nil {
						v := fn.varByOffset[off-localSize]
						if v != nil {
							badf("%s should be %s+%d(FP)", m[1], v.name, off-localSize)
							continue
						}
					}
					if off >= localSize+argSize {
						badf("use of %s points beyond argument frame", m[1])
						continue
					}
					badf("use of %s to access argument frame", m[1])
				}
			}

			if fn == nil {
				continue

-- .mod --
module example.com/retract

go 1.15

-- .info --
{"Version":"v1.0.0-bad"}

-- retract.go --

// license that can be found in the LICENSE file.

package a

// Note that the use of CGO here is solely to trigger external
// linking, since that is required to trigger that bad behavior
// in this bug.

// #include <stdlib.h>
import "C"

func Bad() {
	m := make(map[int64]A)
	a := m[0]
	if len(a.B.C1.D2.E2.F1) != 0 ||
		len(a.B.C1.D2.E2.F2) != 0 ||
		len(a.B.C1.D2.E2.F3) != 0 ||
		len(a.B.C1.D2.E2.F4) != 0 ||

kind: Deployment
metadata:
  name: traffic
spec:
  replicas: 7
  selector:
    matchLabels:
      app: traffic
  template:
    metadata:
      annotations:
        traffic.sidecar.istio.io/excludeOutboundPorts: "bad"
      labels:
        app: traffic
    spec:
      containers:
        - name: traffic
          image: "fake.docker.io/google-samples/traffic-go-gke:1.0"
          ports:
            - name: http

Module example.com/retract/rename is renamed in a later version.

This happens frequently when a repository is renamed or when a go.mod file
is added for the first time with a custom module path.
-- .info --
{"Version":"v1.0.0-bad"}
-- .mod --
module example.com/retract/rename

go 1.16
-- go.mod --
module example.com/retract/rename

go 1.16
-- rename.go --

Peter Niederwieser <******@****.***> 1329340464 +0100

cp go.sum.good go.sum
go mod verify
! exists $GOPATH/pkg/mod/cache/download/rsc.io/quote/@v/v1.1.0.zip

# With bad go.sum, verify succeeds by avoiding download.
cp go.sum.bad go.sum
go mod verify
! exists $GOPATH/pkg/mod/cache/download/rsc.io/quote/@v/v1.1.0.zip

# With bad go.sum, sync (which must download) fails.
rm go.sum
cp go.sum.bad go.sum
! go mod tidy
stderr 'checksum mismatch'

Michael Matloob <******@****.***> 1667414211 -0400