edwingeng / hotswap Goto Github PK
View Code? Open in Web Editor NEWA complete solution to reload your go code without restarting your server, interrupting or blocking any ongoing procedure.
License: BSD 3-Clause "New" or "Revised" License
hotswap's People
Contributors
Stargazers
Watchers
Forkers
huzhao37 imfe888 chenshungen qaison uneidel bighunter513 honshow vbirds liuguirong ifzz bxlkm awesomegolang chenbc0507 interfacekun kwinin lx-world rivers-dark wenmyn xjaksyt2008 kylinwoo sam-mix gismo-stack woshizilong djun zhang523501 bfwbbrj wangrenyi kisdex zhangxa spread0x cr-mao sandwich-gohotswap's Issues
同学，您这个项目引入了100个开源组件，存在4个漏洞，辛苦升级一下
检测到 edwingeng/hotswap 一共引入了100个开源组件，存在4个漏洞
漏洞标题：jwt-go 安全漏洞
漏洞编号：CVE-2020-26160
漏洞描述：jwt-go是个人开发者的一个Go语言的JWT实现。
jwt-go 4.0.0-preview1之前版本存在安全漏洞。攻击者可利用该漏洞在使用[]string{} for m[\"aud\"](规范允许)的情况下绕过预期的访问限制。
影响范围：(∞, 4.0.0-preview1)
最小修复版本：4.0.0-preview1
缺陷组件引入路径：github.com/edwingeng/hotswap@->github.com/spf13/[email protected]>github.com/spf13/[email protected]>github.com/dgrijalva/[email protected]+incompatible
另外还有4个漏洞，详细报告：https://mofeisec.com/jr?p=ne4626
请问有交流群吗？
作者也是做游戏开发的？
大佬介绍一下原理，以及cgo需要主程序开启吗，性能怎么优化
谢谢老板
Does not work on ARM
Hey. Today I gave it a try and it's failed.
mtrofimenko@Maksyms-MBP hello % ./run.sh
Building hello...
go: downloading github.com/edwingeng/slog v0.0.0-20221027170832-482f0dfb6247
go: downloading github.com/pierrec/xxHash v0.1.5
go: downloading golang.org/x/mod v0.8.0
go: downloading go.uber.org/zap v1.23.0
Building plugin "world"...
/Users/mtrofimenko/Work/Current/hotswap/demo/hello/bin/darwin/plugin/hello/world.so
Starting hello...
05|11:33:43 INFO hotswap/pluginManager.go:84 <hotswap> not reloadable: [], unchanged: [], to be loaded: [world]
panic: failed to load the plugin world. err: plugin.Open("/Users/mtrofimenko/Work/Current/hotswap/demo/hello/bin/darwin/plugin/hello/tmp/230405113343-27640/world-0x98fd8920.so"): dlopen(/Users/mtrofimenko/Work/Current/hotswap/demo/hello/bin/darwin/plugin/hello/tmp/230405113343-27640/world-0x98fd8920.so, 0x000A): tried: '/Users/mtrofimenko/Work/Current/hotswap/demo/hello/bin/darwin/plugin/hello/tmp/230405113343-27640/world-0x98fd8920.so' (mach-o file, but is an incompatible architecture (have 'arm64', need 'x86_64')), '/System/Volumes/Preboot/Cryptexes/OS/Users/mtrofimenko/Work/Current/hotswap/demo/hello/bin/darwin/plugin/hello/tmp/230405113343-27640/world-0x98fd8920.so' (no such file), '/Users/mtrofimenko/Work/Current/hotswap/demo/hello/bin/darwin/plugin/hello/tmp/230405113343-27640/world-0x98fd8920.so' (mach-o file, but is an incompatible architecture (have 'arm64', need 'x86_64'))
goroutine 1 [running]:
main.main()
github.com/edwingeng/hotswap/demo/hello/hello.go:53 +0x816Also would be really good to have some article which explains how does it work in a comparison to the go's plugin feature. Thanks
提问: 依赖问题
你好，我最近在看go-plugin的相关文档，发现它有需要限制。对我们来说最主要的是版本冲突的问题。
你的项目应该是解决go-plugin版本冲突的问题。
请问你是如何解决这个问题的？例如main程序和plugin程序依赖的第三方包版本不一致。
which platforms are supported?
can run on android arm64?
如何解决调试问题呢？
用goland附加之后不进断点，直接跑debug的话open要panic，请问如何调试呢？
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.