Upgrading go from 1.15.7 to 1.15.8 doesn't use old installation path on Windows

[aegoroff]

What version of Go are you using (go version)?

go version go1.15.8 windows/amd64

Does this issue reproduce with the latest release?

Yes

What operating system and processor architecture are you using (go env)?

go env Output

$ go env
set GO111MODULE=
set GOARCH=amd64
set GOBIN=
set GOCACHE=C:\Users\egr\AppData\Local\go-build
set GOENV=C:\Users\egr\AppData\Roaming\go\env
set GOEXE=.exe
set GOFLAGS=
set GOHOSTARCH=amd64
set GOHOSTOS=windows
set GOINSECURE=
set GOMODCACHE=D:\code\golang\pkg\mod
set GONOPROXY=
set GONOSUMDB=
set GOOS=windows
set GOPATH=D:\code\golang
set GOPRIVATE=
set GOPROXY=https://proxy.golang.org,direct
set GOROOT=c:\go
set GOSUMDB=sum.golang.org
set GOTMPDIR=
set GOTOOLDIR=c:\go\pkg\tool\windows_amd64
set GCCGO=gccgo
set AR=ar
set CC=gcc
set CXX=g++
set CGO_ENABLED=1
set GOMOD=
set CGO_CFLAGS=-g -O2
set CGO_CPPFLAGS=
set CGO_CXXFLAGS=-g -O2
set CGO_FFLAGS=-g -O2
set CGO_LDFLAGS=-g -O2
set PKG_CONFIG=pkg-config
set GOGCCFLAGS=-m64 -mthreads -fmessage-length=0 -fdebug-prefix-map=C:\Users\egr\AppData\Local\Temp\go-build202219370=/tmp/go-build

What did you do?

Just upgraded golang from 1.15.7 to 1.15.8 under Windows using msi package. I didn't take into account setup path while doing upgrade first time. So to fix this i had to uninstall Golang and install again using old path (c:\Go)

What did you expect to see?

Go installed to my old path c:\Go

What did you see instead?

Go installed to c:\Program Files\Go

[tmthrgd]

The path change was an intentional result of #42070 as installing under C:\Go is a potential security vulnerability. You might want to take a look at the discussion there.

[aegoroff]

Thank you for the explanation. I see it's due to security reasons (Permissions on c:\go are too weak)

[iwdgo]

Installation documentation still mentions c:\Go. Issue is tagged Go 1.16 and was closed without mentioning a backport. No documentation update seems available.

[gopherbot]

Change https://golang.org/cl/290309 mentions this issue: content/static/doc: update windows install location doc