Skip to content

Commit d6cd73b

Browse files
authored
[FIX] golang vulnerabilities in P2P store
Fix golang vulnerabilities in P2P store. Update the version of golang.org/x/net.
1 parent a532a01 commit d6cd73b

File tree

4 files changed

+10
-9
lines changed

4 files changed

+10
-9
lines changed

mooncake-p2p-store/build.sh

+1
Original file line numberDiff line numberDiff line change
@@ -39,6 +39,7 @@ EXT_LDFLAGS+=" -ltransfer_engine -lstdc++ -lnuma -lglog -libverbs -ljsoncpp -let
3939
# EXT_LDFLAGS+=" -lhiredis" // if USE_REDIS is enabled
4040
# EXT_LDFLAGS+=" -lcurl" // if USE_HTTP is enabled
4141

42+
go get
4243
go build -o "$TARGET/p2p-store-example" -ldflags="-extldflags '$EXT_LDFLAGS'" "../example/p2p-store-example.go"
4344
if [ $? -ne 0 ]; then
4445
echo "Error: Failed to build the example."

mooncake-p2p-store/src/p2pstore/go.mod

+5-5
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,8 @@
11
module github.com/kvcache-ai/Mooncake/mooncake-p2p-store/src/p2pstore
22

3-
go 1.21
3+
go 1.23.0
44

5-
toolchain go1.23.4
5+
toolchain go1.24.1
66

77
require go.etcd.io/etcd/client/v3 v3.5.15
88

@@ -16,9 +16,9 @@ require (
1616
go.uber.org/atomic v1.7.0 // indirect
1717
go.uber.org/multierr v1.6.0 // indirect
1818
go.uber.org/zap v1.17.0 // indirect
19-
golang.org/x/net v0.33.0 // indirect
20-
golang.org/x/sys v0.28.0 // indirect
21-
golang.org/x/text v0.21.0 // indirect
19+
golang.org/x/net v0.36.0 // indirect
20+
golang.org/x/sys v0.30.0 // indirect
21+
golang.org/x/text v0.22.0 // indirect
2222
google.golang.org/genproto v0.0.0-20230822172742-b8732ec3820d // indirect
2323
google.golang.org/genproto/googleapis/api v0.0.0-20230822172742-b8732ec3820d // indirect
2424
google.golang.org/genproto/googleapis/rpc v0.0.0-20230822172742-b8732ec3820d // indirect

mooncake-p2p-store/src/p2pstore/transfer_engine.go

+1-1
Original file line numberDiff line numberDiff line change
@@ -43,7 +43,7 @@ func NewTransferEngine(metadataConnString string,
4343
defer C.free(unsafe.Pointer(metadataConnStringCStr))
4444
defer C.free(unsafe.Pointer(localServerNameCStr))
4545
defer C.free(unsafe.Pointer(localIpAddressCStr))
46-
native_engine := C.createTransferEngine(metadataConnStringCStr, localServerNameCStr, localIpAddressCStr, C.uint64_t(rpcPort))
46+
native_engine := C.createTransferEngine(metadataConnStringCStr, localServerNameCStr, localIpAddressCStr, C.uint64_t(rpcPort), 0)
4747
if native_engine == nil {
4848
return nil, ErrTransferEngine
4949
}

mooncake-transfer-engine/example/http-metadata-server/go.mod

+3-3
Original file line numberDiff line numberDiff line change
@@ -26,9 +26,9 @@ require (
2626
github.com/ugorji/go/codec v1.2.12 // indirect
2727
golang.org/x/arch v0.8.0 // indirect
2828
golang.org/x/crypto v0.31.0 // indirect
29-
golang.org/x/net v0.33.0 // indirect
30-
golang.org/x/sys v0.28.0 // indirect
31-
golang.org/x/text v0.21.0 // indirect
29+
golang.org/x/net v0.36.0 // indirect
30+
golang.org/x/sys v0.30.0 // indirect
31+
golang.org/x/text v0.22.0 // indirect
3232
google.golang.org/protobuf v1.34.1 // indirect
3333
gopkg.in/yaml.v3 v3.0.1 // indirect
3434
)

0 commit comments

Comments
 (0)