crypto/x509: Certificate.Verify crash on macOS with Go 1.18 (CVE-2022-27536) [1.18 backport]

[gopherbot]

@bradfitz requested issue #51759 to be considered for backport to the next 1.18 minor release.

@gopherbot please consider this for backport to 1.18, it's a regression

[bradfitz]

cc @rolandshoemaker @josharian

[gopherbot]

Change https://go.dev/cl/394655 mentions this issue: [release-branch.go1.18] crypto/x509: fix Certificate.Verify crash

[toothrot]

@rolandshoemaker @bradfitz @heschi Is this bug also present in 1.17, or is this breakage new in 1.18?

[heschi]

Looks to me like this code is new in https://go.dev/cl/353132 so I buy it's new, FWIW.

[rolandshoemaker]

It's just in 1.18.

[gopherbot]

Closed by merging 30d9077 to release-branch.go1.18.