@ttsc/darwin-x64 0.33.0-next.1 → 0.33.0

package/bin/go/VERSION

@@ -1,2 +1,2 @@
-go1.26.8
-time 2026-08-28T16:20:06Z
+go1.26.9
+time 2026-10-02T20:28:03Z

package/bin/go/src/crypto/internal/fips140/mlkem/cast.go

@@ -8,45 +8,75 @@ import (
 	"bytes"
 	"crypto/internal/fips140"
 	_ "crypto/internal/fips140/check"
+	"crypto/internal/fips140/sha256"
 	"errors"
 	"sync"
 )
 
 var fipsSelfTest = sync.OnceFunc(func() {
-	fips140.CAST("ML-KEM-768", func() error {
-		var d = &[32]byte{
-			0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08,
-			0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f, 0x10,
-			0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17, 0x18,
-			0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f, 0x20,
-		}
-		var z = &[32]byte{
-			0x21, 0x22, 0x23, 0x24, 0x25, 0x26, 0x27, 0x28,
-			0x29, 0x2a, 0x2b, 0x2c, 0x2d, 0x2e, 0x2f, 0x30,
-			0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37, 0x38,
-			0x39, 0x3a, 0x3b, 0x3c, 0x3d, 0x3e, 0x3f, 0x40,
-		}
-		var m = &[32]byte{
-			0x41, 0x42, 0x43, 0x44, 0x45, 0x46, 0x47, 0x48,
-			0x49, 0x4a, 0x4b, 0x4c, 0x4d, 0x4e, 0x4f, 0x50,
-			0x51, 0x52, 0x53, 0x54, 0x55, 0x56, 0x57, 0x58,
-			0x59, 0x5a, 0x5b, 0x5c, 0x5d, 0x5e, 0x5f, 0x60,
-		}
-		var K = []byte{
-			0x55, 0x01, 0xfc, 0x52, 0x3b, 0x74, 0x5f, 0x41,
-			0x76, 0x2a, 0x18, 0x8d, 0xe4, 0x4a, 0x59, 0xb9,
-			0x20, 0xf4, 0x30, 0x14, 0x62, 0x04, 0xee, 0x4e,
-			0x79, 0x37, 0x32, 0x39, 0x6d, 0xf7, 0xaa, 0x48,
-		}
-		dk := &DecapsulationKey768{}
-		kemKeyGen(dk, d, z)
-		ek := dk.EncapsulationKey()
-		var cc [CiphertextSize768]byte
-		Ke, _ := kemEncaps(&cc, ek, m)
-		Kd := kemDecaps(dk, &cc)
-		if !bytes.Equal(Ke, K) || !bytes.Equal(Kd, K) {
-			return errors.New("unexpected result")
-		}
-		return nil
-	})
+	fips140.CAST("ML-KEM-768", fips140CAST)
 })
+
+// fips140CAST covers both the successful and the implicit rejection paths, as
+// required by IG 10.3.A, Resolution 14, and as tested by TestCASTRejectionPath.
+// It tests only one parameter set as allowed by Note22. It compares dk and not
+// ek, because ek is part of dk, as allowed by the same Resolution. It compares
+// dk with an expected hash to avoid embedding several kilobytes of test vectors
+// in every binary, as allowed by GeneralNote7.
+func fips140CAST() error {
+	var d = &[32]byte{
+		0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08,
+		0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f, 0x10,
+		0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17, 0x18,
+		0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f, 0x20,
+	}
+	var z = &[32]byte{
+		0x21, 0x22, 0x23, 0x24, 0x25, 0x26, 0x27, 0x28,
+		0x29, 0x2a, 0x2b, 0x2c, 0x2d, 0x2e, 0x2f, 0x30,
+		0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37, 0x38,
+		0x39, 0x3a, 0x3b, 0x3c, 0x3d, 0x3e, 0x3f, 0x40,
+	}
+	var dkHash = []byte{
+		0xa1, 0x32, 0x4a, 0x71, 0xf5, 0x7e, 0x26, 0x85,
+		0x37, 0x7e, 0x4f, 0x7d, 0xe2, 0xd1, 0xf0, 0x58,
+		0x53, 0x8e, 0x08, 0x7e, 0xe3, 0x9b, 0x48, 0x2b,
+		0x3d, 0xbf, 0x96, 0xf9, 0xf7, 0x69, 0xc7, 0x85,
+	}
+	var m = &[32]byte{
+		0x41, 0x42, 0x43, 0x44, 0x45, 0x46, 0x47, 0x48,
+		0x49, 0x4a, 0x4b, 0x4c, 0x4d, 0x4e, 0x4f, 0x50,
+		0x51, 0x52, 0x53, 0x54, 0x55, 0x56, 0x57, 0x58,
+		0x59, 0x5a, 0x5b, 0x5c, 0x5d, 0x5e, 0x5f, 0x60,
+	}
+	var K = []byte{
+		0x55, 0x01, 0xfc, 0x52, 0x3b, 0x74, 0x5f, 0x41,
+		0x76, 0x2a, 0x18, 0x8d, 0xe4, 0x4a, 0x59, 0xb9,
+		0x20, 0xf4, 0x30, 0x14, 0x62, 0x04, 0xee, 0x4e,
+		0x79, 0x37, 0x32, 0x39, 0x6d, 0xf7, 0xaa, 0x48,
+	}
+	var Kr = []byte{
+		0x01, 0xa1, 0x03, 0x3a, 0x2e, 0x68, 0x33, 0x80,
+		0x7f, 0xd3, 0x91, 0x80, 0xbe, 0x3b, 0x4f, 0x0a,
+		0x1f, 0x6f, 0x50, 0x51, 0x67, 0x56, 0x9d, 0x0e,
+		0x5e, 0x5e, 0x1f, 0xdb, 0x52, 0xa9, 0x10, 0xec,
+	}
+	dk := &DecapsulationKey768{}
+	kemKeyGen(dk, d, z)
+	ek := dk.EncapsulationKey()
+	H := sha256.New()
+	H.Write(TestingOnlyExpandedBytes768(dk))
+	if !bytes.Equal(H.Sum(nil), dkHash) {
+		return errors.New("unexpected private key hash")
+	}
+	var cc [CiphertextSize768]byte
+	Kd := kemDecaps(dk, &cc)
+	if !bytes.Equal(Kd, Kr) {
+		return errors.New("unexpected rejection result")
+	}
+	Ke, _ := kemEncaps(&cc, ek, m)
+	Kd = kemDecaps(dk, &cc)
+	if !bytes.Equal(Ke, K) || !bytes.Equal(Kd, K) {
+		return errors.New("unexpected result")
+	}
+	return nil
+}

package/bin/go/src/crypto/internal/fips140/mlkem/mlkem768.go

@@ -469,6 +469,8 @@ func (dk *DecapsulationKey768) Decapsulate(ciphertext []byte) (sharedKey []byte,
 	return kemDecaps(dk, c), nil
 }
 
+var testingOnlyRejectionOutcome func(int)
+
 // kemDecaps produces a shared key from a ciphertext.
 //
 // It implements ML-KEM.Decaps_internal according to FIPS 203, Algorithm 18.
@@ -488,6 +490,10 @@ func kemDecaps(dk *DecapsulationKey768, c *[CiphertextSize768]byte) (K []byte) {
 	var cc [CiphertextSize768]byte
 	c1 := pkeEncrypt(&cc, &dk.encryptionKey, (*[32]byte)(m), r)
 
+	if testingOnlyRejectionOutcome != nil {
+		testingOnlyRejectionOutcome(subtle.ConstantTimeCompare(c[:], c1))
+	}
+
 	subtle.ConstantTimeCopy(subtle.ConstantTimeCompare(c[:], c1), Kout, Kprime)
 	return Kout
 }

package/bin/go/src/crypto/tls/ech.go

@@ -308,6 +308,7 @@ func decodeInnerClientHello(outer *clientHelloMsg, encoded []byte) (*clientHello
 			recon.AddBytes(compressionMethods)
 		})
 		recon.AddUint16LengthPrefixed(func(recon *cryptobyte.Builder) {
+			var outerExtensionsSeen bool
 			for !extensions.Empty() {
 				var extension uint16
 				var extData cryptobyte.String
@@ -317,18 +318,30 @@ func decodeInnerClientHello(outer *clientHelloMsg, encoded []byte) (*clientHello
 					return
 				}
 				if extension == extensionECHOuterExtensions {
-					if !extData.ReadUint8LengthPrefixed(&extData) {
+					if outerExtensionsSeen {
+						recon.SetError(errors.New("tls: invalid outer extensions"))
+						return
+					}
+					outerExtensionsSeen = true
+					var outerExtensions cryptobyte.String
+					if !extData.ReadUint8LengthPrefixed(&outerExtensions) || !extData.Empty() ||
+						outerExtensions.Empty() {
 						recon.SetError(errors.New("tls: invalid inner client hello"))
 						return
 					}
+					// OuterExtensions reconstruction per RFC 9849, Appendix A.
+					// i scans the outer extensions in order and never rewinds,
+					// so a referenced type that is out of order or duplicated
+					// cannot be found again and is rejected.
 					var i int
-					for !extData.Empty() {
+					for !outerExtensions.Empty() {
 						var extType uint16
-						if !extData.ReadUint16(&extType) {
+						if !outerExtensions.ReadUint16(&extType) {
 							recon.SetError(errors.New("tls: invalid inner client hello"))
 							return
 						}
-						if extType == extensionEncryptedClientHello {
+						if extType == extensionEncryptedClientHello ||
+							extType == extensionECHOuterExtensions {
 							recon.SetError(errors.New("tls: invalid outer extensions"))
 							return
 						}
@@ -345,6 +358,7 @@ func decodeInnerClientHello(outer *clientHelloMsg, encoded []byte) (*clientHello
 						recon.AddUint16LengthPrefixed(func(recon *cryptobyte.Builder) {
 							recon.AddBytes(rawOuterExts[i].data)
 						})
+						i++
 					}
 				} else {
 					recon.AddUint16(extension)

package/bin/go/src/go.mod

@@ -4,7 +4,7 @@ go 1.26
 
 require (
 	golang.org/x/crypto v0.46.1-0.20251210140736-7dacc380ba00
-	golang.org/x/net v0.47.1-0.20260731170545-cb1d721f7fb3
+	golang.org/x/net v0.47.1-0.20260925170545-1431957440b7
 )
 
 require (

package/bin/go/src/go.sum

@@ -1,7 +1,7 @@
 golang.org/x/crypto v0.46.1-0.20251210140736-7dacc380ba00 h1:JgcPM1rzpSOZS8y69FQvnY0xN0ciHlpQqwTXJcuZIA4=
 golang.org/x/crypto v0.46.1-0.20251210140736-7dacc380ba00/go.mod h1:Evb/oLKmMraqjZ2iQTwDwvCtJkczlDuTmdJXoZVzqU0=
-golang.org/x/net v0.47.1-0.20260731170545-cb1d721f7fb3 h1:qbgM8pnaNGo8FUbT74e+whlrJGZ0RVX6xdN8ANEYj3Y=
-golang.org/x/net v0.47.1-0.20260731170545-cb1d721f7fb3/go.mod h1:/jNxtkgq5yWUGYkaZGqo27cfGZ1c5Nen03aYrrKpVRU=
+golang.org/x/net v0.47.1-0.20260925170545-1431957440b7 h1:5FtxsBBG4SLV2/Vvvf3+wW2NIHWR7CSbJfn9byVKwPk=
+golang.org/x/net v0.47.1-0.20260925170545-1431957440b7/go.mod h1:/jNxtkgq5yWUGYkaZGqo27cfGZ1c5Nen03aYrrKpVRU=
 golang.org/x/sys v0.39.0 h1:CvCKL8MeisomCi6qNZ+wbb0DN9E5AATixKsvNtMoMFk=
 golang.org/x/sys v0.39.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
 golang.org/x/text v0.32.0 h1:ZD01bjUt1FQ9WJ0ClOL5vxgxOI/sVCNgX1YtKwcY0mU=

package/bin/go/src/html/template/js.go

@@ -96,7 +96,10 @@ func nextJSCtx(s []byte, preceding jsCtx) jsCtx {
 		for j > 0 && isJSIdentPart(rune(s[j-1])) {
 			j--
 		}
-		if regexpPrecederKeywords[string(s[j:])] {
+		// An IdentifierName after a property-access dot is a property name,
+		// which precedes a div op.
+		if regexpPrecederKeywords[string(s[j:])] &&
+			!bytes.HasSuffix(bytes.TrimRight(s[:j], jsWhitespace), []byte(".")) {
 			return jsCtxRegexp
 		}
 	}
@@ -106,8 +109,9 @@ func nextJSCtx(s []byte, preceding jsCtx) jsCtx {
 	return jsCtxDivOp
 }
 
-// regexpPrecederKeywords is a set of reserved JS keywords that can precede a
-// regular expression in JS source.
+// regexpPrecederKeywords is a set of JS keywords that can precede a regular
+// expression in JS source. It deliberately treats the context-sensitive
+// keyword yield as a keyword.
 var regexpPrecederKeywords = map[string]bool{
 	"break":      true,
 	"case":       true,
@@ -123,6 +127,7 @@ var regexpPrecederKeywords = map[string]bool{
 	"try":        true,
 	"typeof":     true,
 	"void":       true,
+	"yield":      true,
 }
 
 var jsonMarshalType = reflect.TypeFor[json.Marshaler]()

package/bin/go/src/html/template/transition.go

@@ -331,7 +331,14 @@ func tJS(c context, s []byte) (context, int) {
 	case '#':
 		if i+1 < len(s) && s[i+1] == '!' {
 			c.state, i = stateJSLineCmt, i+1
+			break
+		}
+		// A private identifier such as #yield is never a keyword, and
+		// precedes a div op.
+		for i+1 < len(s) && isJSIdentPart(rune(s[i+1])) {
+			i++
 		}
+		c.jsCtx = jsCtxDivOp
 	case '{':
 		// We only care about tracking brace depth if we are inside of a
 		// template literal.
@@ -382,7 +389,7 @@ func tJSTmpl(c context, s []byte) (context, int) {
 		case '$':
 			if len(s) >= i+2 && s[i+1] == '{' {
 				c.jsBraceDepth = append(c.jsBraceDepth, 0)
-				c.state = stateJS
+				c.state, c.jsCtx = stateJS, jsCtxRegexp
 				return c, i + 2
 			}
 		case '`':

package/bin/go/src/internal/buildcfg/zbootstrap.go

@@ -15,7 +15,7 @@ const DefaultGORISCV64 = `rva20u64`
 const defaultGOEXPERIMENT = ``
 const defaultGO_EXTLINK_ENABLED = ``
 const defaultGO_LDSO = ``
-const version = `go1.26.8`
+const version = `go1.26.9`
 const defaultGOOS = runtime.GOOS
 const defaultGOARCH = runtime.GOARCH
 const DefaultGOFIPS140 = `off`

package/bin/go/src/internal/godebugs/table.go

@@ -49,6 +49,7 @@ var All = []Info{
 	{Name: "httplaxcontentlength", Package: "net/http", Changed: 22, Old: "1"},
 	{Name: "httpmuxgo121", Package: "net/http", Changed: 22, Old: "1"},
 	{Name: "httpservecontentkeepheaders", Package: "net/http", Changed: 23, Old: "1"},
+	{Name: "httpservecontentmaxranges", Package: "net/http", Changed: 26, Old: "1"},
 	{Name: "installgoroot", Package: "go/build"},
 	{Name: "jstmpllitinterp", Package: "html/template", Opaque: true}, // bug #66217: remove Opaque
 	//{Name: "multipartfiles", Package: "mime/multipart"},

package/bin/go/src/internal/poll/fd_windows.go

@@ -382,6 +382,10 @@ type FD struct {
 	// message based socket connection.
 	ZeroReadIsEOF bool
 
+	// KeepFileCompletionModes prevents Init from changing the file object's
+	// completion notification modes.
+	KeepFileCompletionModes bool
+
 	// Whether the handle is owned by os.File.
 	isFile bool
 
@@ -469,6 +473,22 @@ func (fd *FD) Init(net string, pollable bool) error {
 		return nil
 	}
 
+	if fd.KeepFileCompletionModes {
+		// Query the existing skip-success mode so we don't wait for a
+		// suppressed completion or skip waiting for an expected one.
+		var info windows.FILE_IO_COMPLETION_NOTIFICATION_INFORMATION
+		if err := windows.NtQueryInformationFile(fd.Sysfd, &windows.IO_STATUS_BLOCK{},
+			unsafe.Pointer(&info), uint32(unsafe.Sizeof(info)), windows.FileIoCompletionNotificationInformation); err != nil {
+			// Without knowing the modes, neither waiting for a completion
+			// packet on success nor skipping it is safe. Leave the handle
+			// unassociated and use explicit events for pending I/O instead.
+			// Inline success needs no wait, and deadlines are unavailable.
+			fd.skipSyncNotif = true
+			return nil
+		}
+		fd.skipSyncNotif = info.Flags&syscall.FILE_SKIP_COMPLETION_PORT_ON_SUCCESS != 0
+	}
+
 	// It is safe to add overlapped handles that also perform I/O
 	// outside of the runtime poller. The runtime poller will ignore
 	// I/O completion notifications not initiated by us.
@@ -476,7 +496,7 @@ func (fd *FD) Init(net string, pollable bool) error {
 	if err != nil {
 		return err
 	}
-	if fd.kind != kindNet || socketCanUseSetFileCompletionNotificationModes {
+	if !fd.KeepFileCompletionModes && (fd.kind != kindNet || socketCanUseSetFileCompletionNotificationModes) {
 		// Non-socket handles can use SetFileCompletionNotificationModes without problems.
 		err := syscall.SetFileCompletionNotificationModes(fd.Sysfd,
 			syscall.FILE_SKIP_SET_EVENT_ON_HANDLE|syscall.FILE_SKIP_COMPLETION_PORT_ON_SUCCESS,

package/bin/go/src/internal/runtime/syscall/linux/defs_linux_arm.go

@@ -25,7 +25,7 @@ const (
 )
 
 type EpollEvent struct {
-	Events uint32
-	_pad   uint32
-	Data   [8]byte // to match amd64
+	Events    uint32
+	pad_cgo_0 uint32
+	Data      uint64
 }

package/bin/go/src/internal/runtime/syscall/linux/defs_linux_arm64.go

@@ -25,7 +25,7 @@ const (
 )
 
 type EpollEvent struct {
-	Events uint32
-	_pad   uint32
-	Data   [8]byte // to match amd64
+	Events    uint32
+	pad_cgo_0 uint32
+	Data      uint64
 }

package/bin/go/src/internal/runtime/syscall/linux/defs_linux_loong64.go

@@ -26,6 +26,6 @@ const (
 
 type EpollEvent struct {
 	Events    uint32
-	pad_cgo_0 [4]byte
-	Data      [8]byte // unaligned uintptr
+	pad_cgo_0 uint32
+	Data      uint64
 }

package/bin/go/src/internal/runtime/syscall/linux/defs_linux_mips64x.go

@@ -28,6 +28,6 @@ const (
 
 type EpollEvent struct {
 	Events    uint32
-	pad_cgo_0 [4]byte
-	Data      [8]byte // unaligned uintptr
+	pad_cgo_0 uint32
+	Data      uint64
 }

package/bin/go/src/internal/runtime/syscall/linux/defs_linux_mipsx.go

@@ -28,6 +28,6 @@ const (
 
 type EpollEvent struct {
 	Events    uint32
-	pad_cgo_0 [4]byte
+	pad_cgo_0 uint32
 	Data      uint64
 }

package/bin/go/src/internal/runtime/syscall/linux/defs_linux_ppc64x.go

@@ -28,6 +28,6 @@ const (
 
 type EpollEvent struct {
 	Events    uint32
-	pad_cgo_0 [4]byte
-	Data      [8]byte // unaligned uintptr
+	pad_cgo_0 uint32
+	Data      uint64
 }

package/bin/go/src/internal/runtime/syscall/linux/defs_linux_riscv64.go

@@ -26,6 +26,6 @@ const (
 
 type EpollEvent struct {
 	Events    uint32
-	pad_cgo_0 [4]byte
-	Data      [8]byte // unaligned uintptr
+	pad_cgo_0 uint32
+	Data      uint64
 }

package/bin/go/src/internal/runtime/syscall/linux/defs_linux_s390x.go

@@ -26,6 +26,6 @@ const (
 
 type EpollEvent struct {
 	Events    uint32
-	pad_cgo_0 [4]byte
-	Data      [8]byte // unaligned uintptr
+	pad_cgo_0 uint32
+	Data      uint64
 }

package/bin/go/src/internal/syscall/windows/at_windows.go

@@ -6,6 +6,7 @@ package windows
 
 import (
 	"internal/oserror"
+	"internal/stringslite"
 	"runtime"
 	"structs"
 	"syscall"
@@ -141,19 +142,27 @@ func Openat(dirfd syscall.Handle, name string, flag uint64, perm uint32) (_ sysc
 	}
 
 	var h syscall.Handle
-	err := NtCreateFile(
-		&h,
-		SYNCHRONIZE|access,
-		objAttrs,
-		&IO_STATUS_BLOCK{},
-		nil,
-		fileAttrs,
-		FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE,
-		disposition,
-		FILE_OPEN_FOR_BACKUP_INTENT|options,
-		nil,
-		0,
-	)
+	var err error
+	if TestOpenatFallback && flag&O_NOFOLLOW_ANY != 0 {
+		err = STATUS_INVALID_PARAMETER
+	} else {
+		err = NtCreateFile(
+			&h,
+			SYNCHRONIZE|access,
+			objAttrs,
+			&IO_STATUS_BLOCK{},
+			nil,
+			fileAttrs,
+			FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE,
+			disposition,
+			FILE_OPEN_FOR_BACKUP_INTENT|options,
+			nil,
+			0,
+		)
+	}
+	if err == STATUS_INVALID_PARAMETER && flag&O_NOFOLLOW_ANY != 0 {
+		h, err = openatFallback(name, SYNCHRONIZE|access, *objAttrs, fileAttrs, disposition, FILE_OPEN_FOR_BACKUP_INTENT|options)
+	}
 	if err != nil {
 		return h, ntCreateFileError(err, flag)
 	}
@@ -177,11 +186,78 @@ func Openat(dirfd syscall.Handle, name string, flag uint64, perm uint32) (_ sysc
 	return h, nil
 }
 
+// TestOpenatFallback should only be used for testing purposes.
+// When set, Openat simulates a system that does not support OBJ_DONT_REPARSE.
+var TestOpenatFallback bool
+
+// openatFallback implements O_NOFOLLOW_ANY for a single path component on
+// Windows versions that do not support OBJ_DONT_REPARSE (including Windows 10
+// build 10240). See go.dev/issue/78131.
+func openatFallback(name string, access uint32, attrs OBJECT_ATTRIBUTES, fileAttrs, disposition, options uint32) (syscall.Handle, error) {
+	// FILE_OPEN_REPARSE_POINT only prevents following the final component.
+	// All current production callers that request O_NOFOLLOW_ANY pass a
+	// single component: os.Root splits paths (including symlink targets)
+	// before opening each component, and RemoveAll passes a basename or a
+	// directory entry name relative to an open parent directory. Thus this
+	// fallback also supports multi-component paths passed to those APIs.
+	// Reject other paths here rather than weaken O_NOFOLLOW_ANY: this is
+	// not a general replacement for OBJ_DONT_REPARSE.
+	if attrs.RootDirectory == 0 || name == ".." ||
+		stringslite.IndexByte(name, '\\') >= 0 || stringslite.IndexByte(name, '/') >= 0 || stringslite.IndexByte(name, ':') >= 0 {
+		return syscall.InvalidHandle, STATUS_INVALID_PARAMETER
+	}
+	attrs.Attributes &^= OBJ_DONT_REPARSE
+	var h syscall.Handle
+	err := NtCreateFile(
+		&h, access, &attrs, &IO_STATUS_BLOCK{}, nil, fileAttrs,
+		FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE, disposition,
+		(options|FILE_OPEN_REPARSE_POINT)&^FILE_DELETE_ON_CLOSE, nil, 0,
+	)
+	if err != nil {
+		return syscall.InvalidHandle, err
+	}
+	// Inspect the handle, not the path, before truncation or delete-on-close.
+	// Skip this check if opening the reparse point itself was requested,
+	// or if O_CREAT|O_EXCL requires creating a new file without following links.
+	if options&FILE_OPEN_REPARSE_POINT == 0 {
+		var info syscall.ByHandleFileInformation
+		err = syscall.GetFileInformationByHandle(h, &info)
+		if err == nil && info.FileAttributes&syscall.FILE_ATTRIBUTE_REPARSE_POINT != 0 {
+			err = STATUS_REPARSE_POINT_ENCOUNTERED
+		}
+		if err != nil {
+			syscall.CloseHandle(h)
+			return syscall.InvalidHandle, err
+		}
+	}
+	if options&FILE_DELETE_ON_CLOSE == 0 {
+		return h, nil
+	}
+	defer syscall.CloseHandle(h)
+
+	// Only enable deletion after checking for a reparse point. An empty
+	// name relative to h reopens the same file, even if it has been renamed
+	// or its directory entry has been replaced since the first open.
+	// The file already exists, including when created with O_EXCL.
+	attrs.RootDirectory = h
+	attrs.ObjectName = &NTUnicodeString{}
+	var dh syscall.Handle
+	err = NtOpenFile(
+		&dh, access, &attrs, &IO_STATUS_BLOCK{},
+		FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE,
+		options|FILE_OPEN_REPARSE_POINT,
+	)
+	if err != nil {
+		return syscall.InvalidHandle, err
+	}
+	return dh, nil
+}
+
 // ntCreateFileError maps error returns from NTCreateFile to user-visible errors.
 func ntCreateFileError(err error, flag uint64) error {
 	s, ok := err.(NTStatus)
 	if !ok {
-		// Shouldn't really be possible, NtCreateFile always returns NTStatus.
+		// The Openat fallback can also return Win32 errors.
 		return err
 	}
 	switch s {
@@ -222,7 +298,7 @@ func Mkdirat(dirfd syscall.Handle, name string, mode uint32) error {
 		syscall.FILE_ATTRIBUTE_NORMAL,
 		syscall.FILE_SHARE_READ|syscall.FILE_SHARE_WRITE|syscall.FILE_SHARE_DELETE,
 		FILE_CREATE,
-		FILE_DIRECTORY_FILE,
+		FILE_DIRECTORY_FILE|FILE_OPEN_REPARSE_POINT,
 		nil,
 		0,
 	)

package/bin/go/src/internal/syscall/windows/types_windows.go

@@ -272,7 +272,14 @@ type FILE_LINK_INFORMATION struct {
 	FileName        [syscall.MAX_PATH]uint16
 }
 
-const FileReplaceCompletionInformation = 61
+const (
+	FileIoCompletionNotificationInformation = 41
+	FileReplaceCompletionInformation        = 61
+)
+
+type FILE_IO_COMPLETION_NOTIFICATION_INFORMATION struct {
+	Flags uint32
+}
 
 // https://learn.microsoft.com/en-us/windows-hardware/drivers/ddi/ntifs/ns-ntifs-_file_completion_information
 type FILE_COMPLETION_INFORMATION struct {

package/bin/go/src/mime/multipart/formdata.go

@@ -93,17 +93,16 @@ func (r *Reader) readForm(maxMemory int64) (_ *Form, err error) {
 	// The relationship between these parameters, as well as the overly-large and
 	// unconfigurable 10 MB added on to maxMemory, is unfortunate but difficult to change
 	// within the constraints of the API as documented.
+	if maxMemory < 0 {
+		maxMemory = 0
+	}
 	maxFileMemoryBytes := maxMemory
 	if maxFileMemoryBytes == math.MaxInt64 {
 		maxFileMemoryBytes--
 	}
 	maxMemoryBytes := maxMemory + int64(10<<20)
 	if maxMemoryBytes <= 0 {
-		if maxMemory < 0 {
-			maxMemoryBytes = 0
-		} else {
-			maxMemoryBytes = math.MaxInt64
-		}
+		maxMemoryBytes = math.MaxInt64
 	}
 	var copyBuf []byte
 	for {

package/bin/go/src/net/http/fs.go

@@ -12,6 +12,7 @@ import (
 	"internal/godebug"
 	"io"
 	"io/fs"
+	"math"
 	"mime"
 	"mime/multipart"
 	"net/textproto"
@@ -1010,6 +1011,25 @@ func (r httpRange) mimeHeader(contentType string, size int64) textproto.MIMEHead
 	}
 }
 
+// GODEBUG=httpservecontentmaxranges=<limit> controls the maximum number of ranges that will
+// be processed in a Range header. Setting httpservecontentmaxranges=0 disables the limit.
+var httpservecontentmaxranges = godebug.New("httpservecontentmaxranges")
+
+const defaultMaxContentRanges = 200
+
+func maxContentRanges() int {
+	maxRanges := defaultMaxContentRanges
+	if v := httpservecontentmaxranges.Value(); v != "" {
+		if n, err := strconv.Atoi(v); err == nil && n >= 0 {
+			maxRanges = n
+			if maxRanges == 0 {
+				maxRanges = math.MaxInt
+			}
+		}
+	}
+	return maxRanges
+}
+
 // parseRange parses a Range header string as per RFC 7233.
 // errNoOverlap is returned if none of the ranges overlap.
 func parseRange(s string, size int64) ([]httpRange, error) {
@@ -1022,6 +1042,14 @@ func parseRange(s string, size int64) ([]httpRange, error) {
 	}
 	var ranges []httpRange
 	noOverlap := false
+	numRanges := strings.Count(s[len(b):], ",") + 1
+	maxRanges := maxContentRanges()
+	if (numRanges > maxRanges) != (numRanges > defaultMaxContentRanges) {
+		httpservecontentmaxranges.IncNonDefault()
+	}
+	if numRanges > maxRanges {
+		return nil, nil // ignore header with too many ranges
+	}
 	for ra := range strings.SplitSeq(s[len(b):], ",") {
 		ra = textproto.TrimString(ra)
 		if ra == "" {