Updated go.bug.st/relaxed-semver from 634f2c8 to 0265409

Fix #110

Author: cmaglie

Gopkg.lock

@@ -0,0 +1,32 @@
+//
+// Copyright 2018 Cristian Maglie. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+//
+
+// +build gofuzz
+
+package semver
+
+// Fuzz is used for fuzzy testing the project
+func Fuzz(data []byte) int {
+	v, err := Parse(string(data))
+	if err != nil {
+		if v != nil {
+			panic("v != nil on error")
+		}
+		return 0
+	}
+	if v.String() != string(data) {
+		panic("reserialized string != deserialized string")
+	}
+	v.Normalize()
+	if v.CompareTo(v) != 0 {
+		panic("compare != 0 while comparing with self")
+	}
+	r := ParseRelaxed(string(data))
+	if r.String() != string(data) {
+		panic("reserialized relaxed string != deserialized string")
+	}
+	return 1
+}

vendor/go.bug.st/relaxed-semver/fuzzer.go

@@ -222,23 +222,26 @@ func Parse(inVersioin string) (*Version, error) {
 
 	// Builds parsing
 	buildIdx := currIdx + 1
-	for {
-		if hasNext := next(); !hasNext || curr == '.' {
-			if buildIdx == currIdx {
-				return nil, fmt.Errorf("empty build tag not allowed")
+	if curr == '+' {
+		for {
+			if hasNext := next(); !hasNext || curr == '.' {
+				if buildIdx == currIdx {
+					return nil, fmt.Errorf("empty build tag not allowed")
+				}
+				result.builds = append(result.builds, in[buildIdx:currIdx])
+				if !hasNext {
+					return result, nil
+				}
+
+				// Multiple builds
+				buildIdx = currIdx + 1
+				continue
 			}
-			result.builds = append(result.builds, in[buildIdx:currIdx])
-			if !hasNext {
-				return result, nil
+			if identifier[curr] {
+				continue
 			}
-
-			// Multiple builds
-			buildIdx = currIdx + 1
-			continue
-		}
-		if identifier[curr] {
-			continue
+			return nil, fmt.Errorf("invalid separator for builds: '%c'", curr)
 		}
-		return nil, fmt.Errorf("invalid separator for builds: '%c'", curr)
 	}
+	return nil, fmt.Errorf("invalid separator: '%c'", curr)
 }